bm333 Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how bm333 ("bm333", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who visit, register on, or otherwise interact with the bm333 online betting and gaming platform, accessible at bm333.io ("Platform").

This Policy applies to all personal data collected through the Platform, including data provided directly by you during registration, data generated through your use of our services, and data collected automatically through cookies and similar technologies. It applies regardless of the device or method through which you access the Platform.

By creating an account on the bm333 Platform, making a deposit, placing a wager, or otherwise using our services, you confirm that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use the bm333 Platform.

2 Data Controller

For the purposes of applicable data protection law, bm333 is the data controller in respect of personal data collected and processed through the Platform. As data controller, bm333 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions about how bm333 processes your personal data, or if you wish to exercise any of the rights described in Section 11 of this Policy, please contact our dedicated privacy team using the contact details set out in Section 16 below.

3 Personal Data We Collect

3.1 Identity and Contact Data

When you register an account with bm333, we collect personal data that is necessary to create and verify your account and to identify you as a player. This includes:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (to verify that you meet the 21+ age requirement).
• Residential address, including city, district, and postcode.
• Mobile phone number and email address.
• Username chosen at registration.

3.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to prevent fraud and money laundering, bm333 may request and retain copies of identity documents including:

• National Identity Card (NID) or passport.
• Proof of residential address (such as a utility bill or bank statement dated within three months).
• Proof of payment method ownership (such as a screenshot of your bKash or Nagad account registration).
• Selfie photographs submitted for biometric identity verification where required.

3.3 Financial and Transaction Data

bm333 collects and processes financial data associated with your use of the Platform, including:

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers.
• Account balance history and bonus credit records.
• Betting and wagering history, including game selections, stake amounts, and outcomes.
• Payment method account references (such as your registered bKash or Nagad mobile number). We do not store full card numbers — only partial masked references.

3.4 Technical and Device Data

When you access the bm333 Platform, we automatically collect certain technical data about your device and browsing session, including:

• IP address and approximate geolocation derived from IP address.
• Device type, operating system, and browser type and version.
• Screen resolution and language settings.
• Pages visited, time spent on pages, clickstream data, and session duration.
• Referral source (the URL from which you arrived at the Platform, if applicable).

3.5 Communications Data

If you contact bm333 through our support channels, we will collect and retain a record of your communications, including the content of messages, the date and time of contact, and any information you voluntarily provide in the course of seeking support. This data is used to resolve your enquiry and to improve our customer service quality.

4 How We Collect Your Data

bm333 collects personal data through a number of different means, depending on the nature of your interaction with the Platform:

• Directly from you: When you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or respond to a survey or promotion.
• Automatically: Through cookies, web beacons, log files, and similar tracking technologies that record your interactions with the Platform when you access it via a web browser or mobile browser. See Section 10 for full details on our use of cookies.
• From third-party service providers: Identity verification data may be supplemented or cross-referenced using data obtained from licensed third-party KYC and fraud prevention service providers. Payment processors may share transaction confirmation data with us in the course of processing your deposits and withdrawals.
• From publicly available sources: In the context of fraud detection and responsible gaming obligations, bm333 may consult publicly available information or industry-shared databases relating to problem gambling self-exclusion schemes.

5 Legal Basis for Processing

bm333 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, please contact us at [email protected].

6 How We Use Your Personal Data

bm333 uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, verify, and administer your player account, including processing login authentication and account security functions.
• Service Delivery: To provide you with access to betting markets, casino games, crash titles, live dealer tables, and all other features of the bm333 Platform.
• Payment Processing: To process deposit and withdrawal transactions via your chosen payment method, including bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Identity Verification: To verify your identity, age, and residential address in compliance with applicable Know Your Customer requirements and to prevent underage gambling.
• Fraud and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, collusion, money laundering, match-fixing, and other forms of abuse on the Platform.
• Responsible Gaming: To monitor player behaviour for signs of problem gambling, to enforce player-set limits and self-exclusion requests, and to fulfil our duty of care obligations under applicable responsible gaming standards.
• Customer Support: To respond to your enquiries, complaints, and support requests, and to maintain a record of communications for quality assurance purposes.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse usage patterns and technical performance data in order to improve the functionality, reliability, and user experience of the Platform.
• Promotional Communications: To send you information about bonuses, promotions, and offers available on the Platform, where you have opted in to receiving such communications. You may opt out of marketing communications at any time.

7 Sharing Your Personal Data

bm333 does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

7.1 Service Providers

bm333 engages carefully selected third-party service providers who assist us in operating the Platform and delivering our services. These include identity verification and KYC service providers, payment processing partners (including the operators of bKash, Nagad, Rocket, Upay, Visa, and Mastercard integrations), cloud hosting and infrastructure providers, fraud detection and cybersecurity service providers, and customer support platform providers. All service providers are bound by data processing agreements that require them to handle your data securely and in accordance with this Policy, and prohibit them from using your data for any purpose other than the specified service.

7.2 Legal and Regulatory Disclosure

bm333 may disclose your personal data to government authorities, law enforcement agencies, courts, or regulatory bodies where we are required to do so by applicable law, court order, or lawful regulatory demand. We may also proactively share data where we reasonably believe disclosure is necessary to prevent criminal activity, protect the safety of individuals, or protect the legal rights of bm333.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bm333's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any material changes to data processing terms prior to the transfer taking effect.

7.4 Industry Shared Databases

Where required by responsible gaming obligations, bm333 may share relevant data with industry-shared self-exclusion registers or problem gambling prevention databases, for the purpose of enforcing player-requested exclusions across multiple operators.

8 International Data Transfers

The bm333 Platform serves players primarily based in Bangladesh. Some of our third-party service providers may be located in countries outside Bangladesh. Where personal data is transferred internationally, bm333 takes reasonable steps to ensure that appropriate safeguards are in place to protect your data at a level consistent with the standards applied within Bangladesh, including relying on contractual data transfer mechanisms and requiring service providers to maintain equivalent levels of data protection.

By using the bm333 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside your country of residence. In all cases, bm333 maintains its responsibility for ensuring that your data is protected in accordance with this Policy regardless of where it is processed.

9 Data Retention

bm333 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable legal or regulatory obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the full duration of your account relationship with bm333 plus five years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction and Betting Records: Retained for a minimum of five years from the date of each transaction or wager, in accordance with financial record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of five years following the termination of the account relationship, or longer if required by applicable law.
• Customer Support Records: Retained for two years from the date of the last interaction, unless the matter relates to a formal complaint or legal claim, in which case records are retained for the duration of that matter plus two years.
• Technical and Usage Logs: Retained for up to 12 months from the date of collection, unless retained for longer in connection with a security investigation or legal matter.
• Marketing Preferences: Retained for as long as your account is active. If you opt out of marketing communications, a record of your opt-out is retained indefinitely to ensure we honour your preference.

Where data is no longer required for any of the above purposes, bm333 will securely delete or anonymise it in accordance with our data disposal procedures.

10 Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, maintain session state, and collect certain usage data. bm333 uses cookies and similar technologies such as web beacons and local storage on the Platform.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential to the functioning of the Platform. They enable you to log in, navigate between pages, and use core features. Without these cookies, the Platform cannot function correctly. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies collect anonymised data about how visitors use the Platform, including which pages are visited most frequently and whether error messages are received. This information helps us improve Platform performance and user experience.
• Functionality Cookies: These cookies remember your preferences and settings, such as your preferred language or display options, so that you do not have to re-enter them on each visit.
• Session Cookies: These are temporary cookies that exist only for the duration of your browser session and are deleted when you close your browser. They maintain your logged-in state during a session.

10.3 No Third-Party Advertising Cookies

bm333 does not deploy third-party advertising cookies, social media tracking pixels, or cross-site behavioural tracking technologies on the Platform. We do not participate in advertising networks that track your activity across websites other than bm333.io.

10.4 Managing Cookie Preferences

You can manage or disable non-essential cookies at any time through your web browser's settings. Please note that disabling certain cookies may affect the functionality of the Platform. Instructions for managing cookies in common browsers are available through the browser's help documentation.

11 Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to the personal data bm333 holds about you:

• Right of Access: You have the right to request a copy of the personal data bm333 holds about you, along with information about how we use it. We will respond to access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain account details directly through your account settings.
• Right to Erasure: You may request that bm333 delete your personal data. This right is subject to certain limitations — for example, we may be required to retain certain data for legal or regulatory compliance purposes even after your account is closed.
• Right to Restriction: You may request that bm333 restrict the processing of your personal data in certain circumstances, for example while a correction request is being investigated.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where bm333 relies on legitimate interests as the legal basis for processing. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of the above rights, please contact our privacy team at [email protected]. Please clearly describe your request and include sufficient information to allow us to verify your identity before responding. We will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.

12 Children's Privacy

The bm333 Platform is strictly intended for adults aged 21 years and above. bm333 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, access the Platform, or submit any personal data to bm333.

If bm333 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are the parent or guardian of a minor and you believe your child has submitted personal data to bm333, please contact us immediately at [email protected] so that we can take the appropriate action.

13 Security Measures

bm333 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the bm333 Platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using the Platform.
• Encryption at Rest: Sensitive personal data stored in our databases is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data within bm333 is granted on a strict need-to-know basis. Staff members are permitted to access only the personal data necessary to perform their specific job function.
• Two-Factor Authentication: Where available, bm333 offers two-factor authentication for player accounts to provide an additional layer of security beyond username and password credentials.
• Regular Security Reviews: bm333 conducts regular internal and third-party security assessments, vulnerability scans, and penetration testing to identify and remediate potential weaknesses in our systems.
• Staff Training: All bm333 personnel who handle personal data receive regular training on data protection obligations, information security best practices, and the requirements of this Privacy Policy.
• Incident Response: bm333 maintains a documented data breach incident response procedure. In the event of a security incident that results in a breach of personal data, we will notify affected players and relevant authorities as required by applicable law.

Despite these measures, no internet-based platform can guarantee absolute security. You play an important role in protecting your own data by keeping your account credentials secure, using a strong and unique password, and logging out of your bm333 account when using shared or public devices.

14 Third-Party Links

The bm333 Platform may contain references to third-party services such as payment processors. While bm333 takes care to work only with reputable partners, we have no control over the data practices, content, or privacy policies of third-party websites or services. This Privacy Policy applies exclusively to the bm333 Platform and does not govern any third-party website or service.

We encourage you to review the privacy policy of any third-party service before providing them with your personal data. bm333 accepts no responsibility or liability for the privacy practices of third-party services.

15 Changes to This Privacy Policy

bm333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and services available on the Platform. When material changes are made to this Policy, we will notify registered players by email and by displaying a prominent notice on the Platform prior to the changes taking effect.

The updated Policy will be published on this page with a revised effective date. Your continued use of the bm333 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should stop using the Platform and contact us to close your account.

We recommend that you revisit this page periodically to ensure you remain informed about how bm333 protects your personal data. The version number and effective date displayed at the top of this page allow you to identify the most current version of the Policy at any time.

16 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bm333 processes your personal data, please contact our privacy team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

You may reach our privacy and data protection team at:

• Email: [email protected]
• Platform: bm333.io
• Response Time: Within 30 calendar days of receipt of your request.

When contacting us, please include your registered account username or the email address associated with your bm333 account so that we can locate your records and respond to your request accurately and efficiently.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. bm333 takes all privacy complaints seriously and will cooperate fully with any regulatory investigation.