We are committed to protecting your personal information. This privacy policy explains in detail how 33aya collects, uses, and safeguards your data.
We collect various types of information to make your experience on the 33aya platform secure and personalized. Your privacy is our highest priority, and we only collect the information necessary for service delivery, identity verification, and legal compliance. Data collection takes place at three main stages — registration, verification, and platform use. At each stage, we clearly communicate what information is being collected and why.
At registration, you are required to provide basic personal information, including your full name, date of birth, gender, nationality, and ID number. This is needed to verify your age and confirm that you are legally eligible to participate in betting. We only accept government-issued identification — national ID card, passport, driving license, or birth certificate. This information is stored in encrypted format and can only be accessed by authorized staff for specific purposes. Your identity information is never shared with third parties or used for marketing.
We collect your email address, mobile number, home address, and postal code. This contact information is essential for communication — including account notifications, payment confirmations, promotional updates, and customer support. Your email and phone number are verified to ensure security and prevent unauthorized access. Address information is required for KYC compliance and assists with identity verification. We do not share your address with external marketing partners — it is used solely for our internal records.
To process payments, we collect your bank account details, mobile banking number, and transaction history. This information is handled in accordance with PCI-DSS standards, the highest security benchmark in the payments industry. Sensitive payment data such as card numbers or PIN codes is never stored on our servers — it is processed directly with the payment provider through a secure channel. Transaction records are retained for up to five years for anti-money laundering purposes and financial auditing, as required by law.
Whenever we collect new information, we clearly explain why it is needed and how it will be used. We never collect additional information without your consent.
We collect device information to maintain platform security and prevent fraud. This includes IP address, browser type and version, operating system, device ID, and screen resolution. This data helps us detect suspicious activity — such as multiple accounts being accessed from the same device or geographic anomalies. IP logs serve as evidence in security investigations and legal disputes. While this information is collected, it is kept separate from your other personal data and automatically deleted after a set period.
We track your betting history, game preferences, win/loss records, and platform usage patterns. This information is used for multiple purposes — to enhance your experience, provide personalised recommendations, determine bonus eligibility, and monitor responsible gaming. If we notice your betting patterns moving in a concerning direction, our support team will reach out and offer assistance. Gaming data analysis also helps us detect fraud and misuse. This information is kept strictly confidential and is only used in aggregate, anonymised form for business analytics.
| Data Type | Purpose of Collection | Retention Period |
|---|---|---|
| Identity Information | Age and Identity Verification | 5 years after account closure |
| Contact Information | Notifications and Support | For as long as the account is active |
| Financial Information | Payment Processing | 5 years after the transaction |
| Device Information | Security and Fraud Prevention | 90 days |
| Betting History | Experience Improvement and Abuse Prevention | 2 years after account closure |
The primary use of your personal data is to deliver services on the 33aya platform. This includes creating and managing your account, verifying login and security, processing bet placements, recording wins and losses, managing your balance, and keeping track of your account history. Your identity information is used to confirm that you are a real person and legally eligible to participate in betting. Your contact details keep you informed — for account updates, payment notifications, and important security alerts. Financial information is used to process deposits and withdrawals. In all cases, we use only the minimum data necessary for each specific purpose.
Online gaming is a regulated industry, and 33aya is required to comply with applicable laws and regulations. We use your information to meet KYC and AML requirements, prevent financial crime, verify user age, and fulfill reporting obligations to licensing authorities. If law enforcement or regulatory bodies request information through a valid legal process, we are required to comply. However, we always verify that such requests are legitimate and necessary, and we only provide the specific information requested. We never voluntarily disclose your information to governments or third parties.
To keep both you and our platform safe, we analyze your data to detect suspicious activity. This includes identifying multiple account creation, tracking bonus abuse, flagging money laundering patterns, and blocking unauthorized access attempts. We use advanced algorithms and machine learning to detect unusual behavior. When the system raises a red flag, human experts review the case and make the final decision. Our fraud prevention measures protect honest players and maintain the integrity of the platform.
We analyse your betting patterns to identify signs of problematic gambling. If we notice excessive betting, mounting losses, or unusually frequent play, we will intervene proactively. This may include sending warning messages, recommending responsible gaming tools, or, where necessary, temporarily suspending your account for your protection. This use of data is in your best interest and is part of our social responsibility. You can always use self-exclusion and limit-setting tools to stay in control.
We personalise your experience based on your preferences and betting history. This means relevant game recommendations, customised promotional offers, and highlights of events that match your interests. If you enjoy cricket betting, we will show new cricket markets and special odds on your dashboard. We send promotional communications by email and SMS, but you can unsubscribe at any time. We never send excessive marketing messages and do not share your information with third-party marketers. All marketing communications are opt-in based and easy to opt out of.
33aya uses industry-standard encryption to protect all your data. We apply TLS 1.3 protocol to encrypt all data transmitted between your device and our servers. This means no third party can intercept your data, even on public Wi-Fi. Your password is never stored in plain text — it is encrypted using an advanced hashing algorithm, and even our staff cannot see your actual password. Sensitive information stored in our databases, such as ID numbers and financial details, is also encrypted. We regularly update our encryption systems to maintain the latest security standards.
Our servers are hosted in secure data centers with 24/7 physical security, biometric access controls, and CCTV surveillance. At the network level, we use multiple firewall layers, DDoS protection, and intrusion detection systems to block unauthorized access attempts. Your data is backed up across multiple geographic locations to prevent data loss. We conduct regular security audits and penetration tests carried out by independent cybersecurity experts. Any vulnerabilities identified are patched immediately.
Access to your personal data is strictly limited and controlled. Only authorised employees who require it for their role can access specific data. We operate a role-based access control system — the customer support team can only view contact information, the payments team only sees transaction data, and the compliance team only accesses identity verification records. All access is logged and reviewed regularly. Employees are bound by strict confidentiality agreements and receive data protection training. Any policy violation will result in serious disciplinary action and potential legal consequences.
While we provide a high level of security, you also have a responsibility to keep your account safe. Use a strong password, never share it with anyone, and always remember to log out when using a public computer.
In the event of a data breach or security incident, 33aya has an established incident response plan. We will investigate the incident immediately, assess the extent of any damage, and notify affected users. If your sensitive data has been compromised, we will inform you within 72 hours and advise you on the necessary steps to protect yourself. We will also report to the relevant regulatory authorities and cooperate with law enforcement. Following any incident, we will conduct a thorough review of what went wrong, how it can be prevented in future, and implement changes to strengthen our systems.
Cookies are small text files stored on your device when you visit our website. They improve your browsing experience, remember your preferences, and help analyze platform performance. 33aya uses several types of cookies — essential cookies required for the site to function, functionality cookies that remember your settings, performance cookies that track site usage, and targeting cookies that display relevant ads. You can manage cookies through your browser settings, but please note that disabling certain cookies may prevent some site features from working properly.
Session Cookies: These are temporary and are deleted when you close your browser. They maintain your login status and track page navigation during your session. Persistent Cookies: These persist for an extended period and remember your preferences, such as language selection, odds format, and layout settings. Third-Party Cookies: We allow cookies from select third-party services, including analytics providers and payment processors. These cookies help us measure site performance and ensure secure payment processing.
You have full control over cookies. On your first visit, we display a cookie banner where you can choose which types of cookies to accept. You can change your preferences at any time via the cookie settings link in the site footer. Your browser also has options to block or delete cookies. Chrome, Firefox, Safari, and other modern browsers come with built-in cookie management tools. Please note that disabling all cookies will prevent certain features such as auto-login and your customised dashboard from working.
33aya takes your privacy seriously and only shares information with third parties in specific circumstances. First, when it is necessary to deliver our services — for example, with payment processors, game providers, and identity verification services. Second, when legally required — such as in response to court orders, subpoenas, or regulatory investigations. Third, with your consent — if you opt into third-party services or promotions. We never sell your data to advertisers or data brokers. All third-party partners are bound by strict confidentiality agreements and may only use data for the specified purpose.
We work with a number of third-party service providers to deliver our services. Payment Processors: We share your payment information with bKash, Nagad, Rocket, and other mobile banking services to process deposits and withdrawals. Game Provider: We work with third-party providers for Live Casino and slots games who process your betting data. Analytics Services: We use Google Analytics and similar tools to analyze traffic and improve our site. All such partners comply with GDPR and other applicable data protection regulations.
In some cases, your data may be processed outside Bangladesh where our servers or third-party service providers are located. In such instances, we ensure that adequate data protection measures are in place. We only transfer data to countries with sufficient privacy laws or those that adhere to standard contractual clauses. Regardless of where your data is processed, the same high level of protection and privacy standards applies.
You have the right to know what personal information we hold about you. You can request a copy of your data at any time. Through the Download Data option in your account settings, you can access your account information, betting history, and transaction records. If you need more detailed or specific data, write to our support team and we will provide a full report within 30 days. The right to data portability means you can receive your data in a machine-readable format and transfer it to another service. We support data exports in CSV or JSON format.
If your personal details change — a new address, phone number, or anything else — you can update them directly from your account settings. For certain details such as your name and date of birth, you will need to contact our support team and provide supporting documents. This is to prevent fraud and maintain identity verification. If you find that we hold incorrect information about you, let us know right away so we can correct it. Keeping your details accurate matters for both of us — incorrect information can lead to payment delays or account issues.
If you wish to have your account and data deleted, you have the right to request this. However, certain limitations apply. We are legally required to retain specific data for defined periods — for example, financial transaction records must be kept for 5 years. If your account has any pending transactions, disputes, or active legal investigations, we cannot delete all data immediately. Data that is no longer needed and has passed its legal retention period will be permanently deleted. To submit a deletion request, email our support team and we will guide you through the process. Please note that deleted data cannot be recovered, so make sure you are certain before proceeding.
You have full control over how we communicate with you. If you no longer wish to receive promotional emails or SMS messages, you can easily unsubscribe. Every marketing email includes an unsubscribe link at the bottom. For SMS, you can opt out by replying with a specific keyword. Your account settings also include an option to manage your communication preferences. Please note that even if you opt out of marketing communications, we will still send important account notifications such as password resets, payment confirmations, and security alerts — these are service-related and cannot be opted out of.
33aya is strictly prohibited for anyone under 18. Online gaming and betting are for adults only and are not safe for children. We verify that all users have reached the legal age through our age verification process. Date of birth is checked at registration and confirmed via KYC documentation. If we have any doubts or find inconsistencies, we may request additional verification. If a minor's account is detected, it will be suspended immediately, all funds will be forfeited, and the guardians will be notified.
We do not knowingly or intentionally collect personal information from anyone under the age of 18. Our systems are designed to prevent minors from registering. If we discover that a child's data has been collected inadvertently, we will delete it immediately. If you are a parent or guardian and believe your child has provided us with their information, please contact us right away. We will act promptly and permanently delete all related data. Child protection is our highest priority, and we make no exceptions when it comes to enforcing this policy.
While we take every possible step to prevent minors from accessing the platform, parents and guardians also have a responsibility to monitor their children's online activity. We recommend using parental control software and limiting children's device access. Parents can secure their payment methods and devices to prevent unauthorized registrations or payments by minors. We provide educational resources on responsible gaming and child protection. Parents and educators can use these materials to inform children about the risks of gambling.
33aya may update this Privacy Policy from time to time. Changes may occur for various reasons — to comply with new laws or regulations, to introduce new features or services, to reflect technology updates, or to improve clarity based on user feedback. We only make changes that are necessary and reasonable, and we never reduce your rights. All updates are made with the aim of protecting your privacy and improving transparency. We believe users have the right to be fully informed about how their data is used.
Whenever we update the privacy policy, we note the effective date at the top of this page. For minor changes — such as typo fixes or clarifications — we simply update the page. For significant changes — such as updates to data collection or usage practices — we will notify you proactively. Notifications are sent via email, a banner on the site, or an in-app notification. We give you adequate time to review the changes — typically 30 days. If you do not agree with the updated policy, you may close your account within that period.
Continuing to use the platform after a privacy policy update means you have agreed to the revised terms. If you do not agree with any changes, you should stop using the service and close your account immediately. We encourage users to check this page regularly for updates. If you have any questions or concerns about the privacy policy or how your data is used, please contact our Data Protection Officer. We take all inquiries seriously and will respond within 7 business days.
This Privacy Policy was last updated on 15 January 2026. We review it regularly and update it as needed to ensure your privacy remains protected.
Data Protection
We follow the highest security standards and transparent policies to keep your personal information safe.
All data is encrypted using TLS 1.3 protocol. Information transmitted between your device and our servers is fully secure and cannot be intercepted by third parties.
Passwords and sensitive data are stored using hashing and encryption. Even our own staff cannot view your actual password. Multiple backup systems are in place.
Only authorized personnel can access data for specific job functions. Role-based permissions are enforced and all access is logged.
Regular penetration testing and vulnerability assessments are conducted by independent cybersecurity experts. Any identified risks are addressed immediately.
Our rigorous verification process ensures every account is genuine and age-appropriate. Fake accounts and fraudulent activity are actively prevented.
We are fully transparent about what data is collected, why, and how it is used. No hidden data collection. GDPR compliant.
We comply with the following standards and regulations:
FAQ
Bet safely on 33aya and have peace of mind knowing your personal information is protected by the highest security standards.