bo333 Privacy Policy — Your Data, Your Rights

1. Introduction

This Privacy Policy ("Policy") describes how bo333, operating the website at https://bo333.io ("the Platform", "we", "us", or "our"), collects, uses, stores, shares, and protects the personal information of users who access or register an account on the bo333 platform ("you", "the Player", or "User").

bo333 operates primarily for players based in Bangladesh and handles all personal data with care, discretion, and in accordance with widely recognised data protection principles. By registering an Account on bo333, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside the bo333 Terms and Conditions, which govern your overall use of the platform. Terms not defined in this Policy carry the meaning assigned to them in the Terms and Conditions.

2. Personal Data We Collect

2.1 Registration and Account Data

When you register a bo333 Account, we collect the following information directly from you:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (used for mandatory age verification — players must be 21 or older)
• Residential address in Bangladesh (city, district, full address)
• Valid mobile phone number (used for account verification and transactional notifications)
• Email address (used for account communications and password recovery)
• Username and encrypted password (password is never stored in plain text)
• Preferred payment method (bKash, Nagad, Rocket, Upay, or bank transfer account details)

2.2 KYC Verification Documents

Before processing any withdrawal, bo333 requires identity verification through our Know Your Customer (KYC) process. During KYC, we may collect copies of the following documents:

• Bangladesh National Identity Card (NID) — front and back
• Valid Bangladesh Passport — photo identification page
• Bangladesh Birth Registration Certificate (where NID or passport is unavailable)
• Proof of registered mobile wallet ownership (bKash, Nagad, Rocket, or Upay account screenshot)
• Proof of residential address (utility bill, bank statement, or similar document dated within 90 days)

KYC documents are stored securely with access restricted to authorised compliance personnel only. Documents are not used for any purpose other than identity and age verification.

2.3 Transactional Data

bo333 records all financial transactions associated with your Account, including deposit amounts, withdrawal requests, bet placement history, game results, bonus credits and usage, and account balance adjustments. This data is retained for financial audit, fraud detection, and regulatory compliance purposes.

2.4 Technical and Usage Data

When you access the bo333 platform, we automatically collect certain technical information including:

• IP address and approximate geographic location (city/district level)
• Device type, operating system, and browser version
• Session duration, pages visited, and features accessed
• Login timestamps and access frequency
• Referral source (how you arrived at the bo333 website)

This technical data is used for platform security monitoring, fraud detection, and improving the bo333 user experience. It is not used to build individual behavioural profiles for advertising purposes.

2.5 Communications Data

If you contact bo333 support via email, we retain a record of that correspondence, including your name, contact details, the subject of your query, and the content of the exchange. This is necessary to provide continuity of service and to resolve disputes if they arise.

3. How We Use Your Personal Data

bo333 uses the personal data it collects for the following specific purposes:

Purpose	Data Used
Account creation and management	Name, email, mobile number, username, password
Age and identity verification (KYC)	NID / passport copy, date of birth, address documents
Processing deposits and withdrawals	Payment method details, transaction history, KYC status
Fraud prevention and platform security	IP address, login history, device fingerprint, transaction patterns
Customer support and dispute resolution	Support correspondence, account history, transaction records
Responsible gaming monitoring	Session data, deposit frequency, self-exclusion status
Platform analytics and improvement	Anonymised usage data, session behaviour, feature interaction
Marketing communications (opt-in only)	Email address, game preferences, promotional eligibility

4. Legal Basis for Processing Personal Data

bo333 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations under the bo333 Terms and Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable financial crime prevention, anti-money laundering, and age verification obligations, including KYC procedures.
• Legitimate interests: Processing carried out for fraud prevention, platform security monitoring, and improving the overall quality of the bo333 service, where these interests do not override your fundamental privacy rights.
• Consent: Processing for optional purposes such as marketing communications, where we have obtained your explicit consent at the point of data collection. You may withdraw this consent at any time.

5. Data Sharing and Disclosure

5.1 Service Providers

bo333 may share your personal data with carefully selected third-party service providers who assist in operating the platform. These include payment processing partners (such as the technical operators of bKash, Nagad, Rocket, and Upay integrations), identity verification service providers, game software providers (such as Pragmatic Play, Evolution Gaming, and Spribe), and cloud infrastructure and hosting providers. All service providers are bound by confidentiality agreements and are prohibited from using your data for any purpose beyond the specific service they provide to bo333.

5.2 Legal and Regulatory Disclosure

bo333 may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies where required to do so by applicable law, court order, or where we reasonably believe disclosure is necessary to prevent fraud, financial crime, or harm to any person. In such cases, bo333 will disclose only the minimum data necessary to satisfy the legal requirement.

5.3 Business Transfers

In the event that bo333 undergoes a corporate restructure, merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. In such circumstances, bo333 will notify affected players by email prior to any transfer and will ensure the successor entity honours the commitments set out in this Privacy Policy.

5.4 No Sale of Personal Data

bo333 does not sell, rent, lease, or otherwise commercially exploit your personal data to unaffiliated third parties for advertising, profiling, or any other commercial purpose. This commitment applies regardless of the commercial value of the data.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device by the bo333 website when you visit. They allow the platform to recognise your device across sessions, maintain your logged-in state, and remember your preferences. bo333 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

6.2 How bo333 Uses Cookies

bo333 uses cookies for the following purposes:

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged into your bo333 Account and security tokens that protect against cross-site request forgery.
• Functional cookies: Store your platform preferences such as language settings, preferred game categories, and display options so you do not need to re-configure them on each visit.
• Analytics cookies: Collect anonymised data about how players navigate the bo333 platform — which pages are most visited, where users encounter difficulties, and how platform features are used. This data is used to improve the bo333 experience and is not linked to individual identities.

6.3 Managing Cookies

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling essential cookies will prevent you from logging into your bo333 Account and using core platform features. Disabling functional or analytics cookies will not affect your ability to play but may reduce the personalisation of your experience.

7. Data Security

bo333 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the bo333 servers
• AES-256 encryption for personal data stored in bo333 databases
• Password hashing using industry-standard bcrypt or equivalent algorithms — bo333 never stores passwords in plain text
• Restricted access controls limiting internal access to personal data on a strict need-to-know basis, with all access logged and audited
• Regular security assessments including penetration testing and vulnerability scanning conducted by independent security specialists
• Multi-factor authentication required for all bo333 administrative personnel accessing player data systems
• Intrusion detection systems monitoring platform traffic for anomalous activity patterns indicative of data breaches or cyberattacks

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to player rights, bo333 will notify affected players as promptly as possible and will take all reasonable steps to contain and remediate the breach.

8. Data Retention

bo333 retains personal data for different periods depending on the category of data and the purpose for which it was collected:

• Active account data (registration details, KYC documents, transaction history): retained for the duration of your active account plus a minimum of five (5) years following account closure, as required for financial compliance and anti-money laundering audit obligations.
• Support correspondence: retained for a period of three (3) years from the date of the most recent interaction in each support thread.
• Technical and usage data (IP logs, session records): retained for a rolling period of twelve (12) months for security monitoring purposes, then anonymised or deleted.
• Marketing consent records: retained for the duration of your active marketing opt-in, plus two (2) years following withdrawal of consent as evidence of the original consent and its revocation.

Upon the expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised so that it can no longer be linked to your identity.

9. Your Privacy Rights

As a bo333 player, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request — [Your Username]". bo333 will acknowledge your request within 48 hours and respond substantively within fourteen (14) business days.

• Right of Access: You may request a copy of the personal data bo333 holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your bo333 Account. Minor corrections (such as address updates) can also be made directly through your Account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that may require bo333 to retain certain data for a defined minimum period.
• Right to Restrict Processing: You may request that bo333 restrict the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: You may request a copy of the personal data you have provided to bo333 in a structured, machine-readable format (such as CSV), enabling you to transfer it to another service if you choose.
• Right to Withdraw Consent: Where bo333 processes your data on the basis of consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: You may object to bo333's processing of your personal data where that processing is based on legitimate interests, including profiling for responsible gaming monitoring. bo333 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

10. Marketing Communications

bo333 may send you promotional communications about bonuses, seasonal offers (such as those timed around BPL season, Eid, or Pohela Boishakh), new game launches, and platform features. These communications are sent only where you have explicitly opted in to receive them during account registration or subsequently through your Account notification settings.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in every marketing email
• Updating your notification preferences in your bo333 Account settings
• Contacting the support team at [email protected] with the subject line "Unsubscribe from Marketing"

Opting out of marketing communications does not affect transactional notifications, which include deposit confirmations, withdrawal status updates, security alerts, and mandatory responsible gaming notifications. These are considered essential communications and cannot be disabled while your Account is active.

11. Children and Minors

The bo333 platform is strictly intended for persons aged 21 years and older. bo333 does not knowingly collect personal data from any person under the age of 21. If you believe that a minor has registered a bo333 Account or that we have inadvertently collected personal data relating to a minor, please contact us immediately at [email protected]. Upon confirmation, bo333 will close the Account, refund any deposits made, and permanently delete all personal data associated with that Account as promptly as possible.

bo333's mandatory KYC age verification process is specifically designed to prevent the creation of accounts by individuals under the minimum age requirement.

12. Changes to This Privacy Policy

bo333 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — such as the introduction of a new category of data collection, a new sharing arrangement with third parties, or a change to the data retention schedule — bo333 will notify registered players by email at least fourteen (14) days before the updated Policy takes effect. The revised Policy will be published on this page with an updated "Last Updated" date at the top.

Your continued use of the bo333 platform following the effective date of any revised Privacy Policy constitutes your acceptance of those changes. If you do not agree to a revised Policy, you must cease using the platform and may request account closure and data deletion as described in Section 9.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by bo333, please contact our support team using the details below. All privacy-related correspondence must be submitted in writing.

• Email: [email protected]
• Subject line for data requests: "Privacy Rights Request — [Your Username]"
• Subject line for data breach reports: "Security Concern — [Your Username]"
• Support hours: 24 hours a day, 7 days a week
• Response time for privacy requests: Acknowledged within 48 hours, substantive response within 14 business days
• Time zone: Bangladesh Standard Time (BST, UTC+6)

Please note that the email address above is displayed as plain text and is not a clickable link. bo333 does not provide telephone support for privacy or data-related matters. All communications must be directed to the email address listed above.