pg33 Privacy Policy – Your Data, Your Rights

01 Data We Collect

pg33 collects personal data from you in several ways: directly when you register an account or interact with the platform, automatically as you use the site, and from third parties where permitted. The categories of personal data we may collect include the following:

Identity & Contact Data

• Registration information: Your full name, date of birth, gender, username, and email address provided when you create a pg33 account.
• Contact details: Your residential address, city (for example Dhaka, Chittagong, Sylhet, or other locations across Bangladesh), and mobile number.
• Identity verification documents: National Identity Card (NID), passport, or other government-issued documents submitted during KYC (Know Your Customer) verification. These documents may include your photograph and identification number.

Financial & Transaction Data

• Payment method details: Mobile banking account numbers associated with bKash, Nagad, Rocket, or Upay; bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or other supported Bangladeshi banking institutions. pg33 does not store full card numbers.
• Transaction records: The date, time, amount (in ৳ BDT), payment method, and reference numbers for all deposits and withdrawals made through your pg33 account.
• Betting and gaming history: Records of all bets placed, games played, stakes wagered, and outcomes received on the pg33 platform.

Technical & Usage Data

• Device and connection information: IP address, browser type and version, operating system, device type, screen resolution, and time zone settings.
• Platform usage data: Pages visited, time spent on each section, game sessions launched, search queries within the platform, and navigation patterns.
• Log data: Server-side logs recording login events, session durations, errors encountered, and security-relevant events such as failed login attempts.

Communications Data

• Records of your communications with the pg33 customer support team via live chat, email to [email protected], or WhatsApp, including the content of those communications and timestamps.
• Survey responses, feedback submissions, and promotional opt-in records where you have voluntarily provided this information.

02 How We Use Your Data

pg33 uses the personal data it collects for specific, legitimate purposes. We do not use your data for purposes beyond those listed below without first informing you and, where required, obtaining your consent. The table below summarises how we use each category of data and the lawful basis on which we rely.

Where pg33 relies on your consent as the lawful basis for processing — for example, to send you promotional emails about new cricket betting markets, pg33 Casino offers, or Eid and Pohela Boishakh seasonal promotions — you may withdraw that consent at any time by contacting [email protected] or updating your communication preferences within your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

pg33 may use aggregated, anonymised usage data to analyse platform trends, understand which games and betting markets are most popular among Bangladeshi players, and improve the overall quality of the platform. This anonymised data cannot be used to identify any individual player and is not subject to the same retention restrictions as personal data.

03 Data Sharing & Disclosure

pg33 does not sell your personal data to any third party. We share data only in the limited circumstances described below, and only to the minimum extent necessary for the relevant purpose.

Service Providers and Technology Partners

pg33 works with a number of carefully selected third-party service providers to deliver elements of our platform. These include payment processing partners (such as bKash, Nagad, Rocket, and Upay gateway operators), identity verification and KYC providers, game studios (including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi), hosting and cloud infrastructure providers, fraud prevention and security monitoring services, and customer support platform providers. Each service provider is required to handle your data strictly in accordance with pg33's instructions and to maintain appropriate technical and organisational security measures. They are not permitted to use your data for their own marketing or any purpose unrelated to the service they provide to pg33.

Legal and Regulatory Disclosures

pg33 may disclose personal data to law enforcement authorities, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or regulatory requirement. We may also disclose data where we have a good-faith belief that disclosure is necessary to protect the safety of any person, investigate suspected fraud, or enforce our Terms & Conditions. Where permitted by law, pg33 will attempt to notify you of any such disclosure request before complying.

Business Transfers

In the event that pg33 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, player data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it, giving you the opportunity to close your account if you do not wish your data to be transferred.

04 Cookies & Tracking

pg33 uses cookies and similar technologies — including local storage, session storage, and pixel tags — to operate core platform functionality, remember your preferences, analyse platform performance, and detect fraudulent or anomalous activity. Below is a full breakdown of the cookie categories used on pg33.im.

Most web browsers allow you to control cookies through their settings. You can typically choose to block or delete cookies, or receive a notification before a cookie is placed. Please be aware that blocking strictly necessary or security cookies will impair your ability to use the pg33 platform — features such as account login, deposits, and game launches depend on these cookies being active.

pg33 does not use third-party advertising cookies or cross-site tracking technologies that follow your activity on websites outside of pg33.im.

05 Data Security

pg33 employs a layered approach to data security, combining technical, administrative, and physical safeguards to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Key security measures in place include:

• SSL/TLS encryption: All data in transit between your device and pg33 servers is encrypted using TLS 1.2 or higher. This includes account login sessions, payment data, and personal information submissions.
• Encrypted data storage: Sensitive personal data stored on pg33 servers — including identity documents and payment method references — is encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to personal data within pg33's systems is restricted on a strict need-to-know basis. Staff who handle player data are subject to confidentiality obligations and access is logged and audited.
• Intrusion detection and monitoring: pg33's infrastructure is monitored continuously for signs of unauthorised access, anomalous activity, and potential security incidents. Automated alerts trigger immediate investigation of any suspicious event.
• Penetration testing: pg33 conducts periodic security assessments, including penetration testing, to identify and remediate potential vulnerabilities in our platform and data infrastructure.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their pg33 accounts as an additional layer of login security. Instructions for enabling 2FA are available in your account security settings.

While pg33 takes reasonable and appropriate measures to secure your data, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that poses a risk to your rights or interests, pg33 will notify affected players and relevant authorities in a timely manner and take immediate steps to contain and remediate the incident.

06 Data Retention

pg33 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following general retention periods apply:

• Active account data: Personal data associated with an active pg33 account is retained for the duration of the account relationship and for a period of up to 5 years following account closure. This retention period supports our ability to respond to disputes, regulatory enquiries, and legal proceedings arising from the account relationship.
• Transaction records: Records of financial transactions — including deposit and withdrawal history — are retained for a minimum of 5 years from the date of the transaction in accordance with anti-money laundering and financial compliance requirements.
• KYC identity documents: Identity verification documents submitted during the KYC process are retained for 5 years following account closure, or longer if required by a specific legal or regulatory obligation applicable at the time.
• Customer support communications: Records of communications with the pg33 support team are retained for 3 years from the date of the final communication in a given case, to support dispute resolution and quality assurance.
• Analytics data: Anonymised, aggregated usage and analytics data may be retained indefinitely as it cannot be used to identify any individual.
• Marketing consent records: Records of your marketing consent or opt-out preference are retained for the duration of your account and for 3 years following account closure as evidence of your expressed preferences.

Upon the expiry of the applicable retention period and in the absence of any outstanding legal obligation, pg33 will securely delete or irreversibly anonymise your personal data. If you request deletion of your data before the applicable retention period has expired, we will assess your request and inform you of any data that must be retained for legal compliance reasons, along with the expected retention period for that data.

07 Your Privacy Rights

As a pg33 account holder and data subject, you hold a number of rights in relation to the personal data we hold about you. pg33 is committed to upholding these rights and will respond to valid requests within a reasonable timeframe — typically within 30 days of receipt of a complete request.

• Right of access: You have the right to request confirmation of whether pg33 processes personal data about you, and if so, to receive a copy of that data along with information about how it is used. Submit access requests to [email protected] with the subject line "Data Access Request".
• Right to rectification: If any personal data pg33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections (such as updating your contact number or address) can be made directly through your account profile settings.
• Right to erasure ("right to be forgotten"): You may request that pg33 delete your personal data. We will comply with such requests where there is no overriding legal, regulatory, or contractual obligation to retain the data. Where we are required to retain certain data — for example, KYC records or transaction history — we will explain this clearly in our response.
• Right to restriction of processing: In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that pg33 restrict the processing of your personal data to storage only.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that pg33 provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where pg33 relies on legitimate interest as the lawful basis for that processing. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where pg33 processes your data based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

pg33 does not charge a fee for processing data rights requests in ordinary circumstances. If a request is manifestly unfounded or excessive — in particular if it is repetitive — pg33 may charge a reasonable administrative fee or decline to act on the request, and will provide written reasons for either course of action.

08 Contact & Privacy Requests

All privacy-related enquiries, data access requests, erasure requests, and other correspondence relating to this Privacy Policy should be directed to the pg33 data team using the contact details below. Please include your registered account username and a clear description of your request to allow us to assist you as efficiently as possible.

• Email: [email protected] — use the subject line "Privacy Request" for all data-related enquiries.
• Live Chat: Available 24/7 directly on the pg33 platform. For formal data rights requests, email is preferred as it creates a written record.
• Support Hours: 9am – 11pm Bangladesh Standard Time (BST, UTC+6), seven days a week.

pg33 aims to acknowledge all privacy requests within 3 business days and to provide a substantive response within 30 calendar days. In cases of particular complexity, this period may be extended by a further 30 days, in which case we will inform you of the extension and the reasons for it within the initial 30-day period.

Changes to This Privacy Policy

pg33 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where the changes are significant, we will notify registered account holders via their registered email address. Your continued use of the pg33 platform after any update constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of how we protect your personal data.