agd33 Privacy Policy

1. Data Controller Information

For the purposes of this Privacy Policy, agd33 ("we", "us", "our") acts as the data controller in respect of all personal data collected from registered players and visitors to agd33.vip. As data controller, agd33 determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact our dedicated privacy team using the contact details provided in Section 12 of this document. We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

This Privacy Policy applies to all personal data collected through agd33.vip, any associated mobile applications or platforms operated under the agd33 brand, and any communications you exchange with agd33 including via live chat, email, or WhatsApp support channels.

2. Personal Data We Collect

agd33 collects personal data through several channels: directly from you during the registration and account management process, automatically through your interaction with the platform, and where appropriate from verified third-party sources. The categories of personal data we collect include the following:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for mandatory age verification — agd33 is an 18+ platform).
• Residential address, including city, district, and postal code.
• Email address (used as your primary account communication channel).
• Mobile telephone number (used for account security and support communications).
• Chosen username and encrypted password credentials.

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification, such as your Bangladesh National Identity Card (NID), passport, or driving licence.
• Proof of address documentation, such as a recent utility bill, bank statement, or mobile financial service statement issued in Bangladesh.
• Payment method ownership documentation, such as a screenshot of your bKash, Nagad, or Rocket account registered in your name.
• Selfie or live photograph where enhanced identity verification is required.

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts in Bangladeshi Taka (BDT), timestamps, and payment method identifiers.
• Mobile financial service account numbers associated with bKash, Nagad, Rocket, or Upay transactions.
• Bank account details where transactions are conducted via Dutch-Bangla Bank, City Bank, BRAC Bank, or other partner institutions.
• Bonus crediting and wagering activity records.

2.4 Gaming and Behavioural Data

• Game session records, including games played, stakes placed, outcomes, and session duration.
• Sports betting activity, including markets wagered on, bet amounts, and settlement outcomes.
• Platform navigation patterns and feature usage data.
• Responsible gaming tool usage, including deposit limits set, self-exclusion requests, and cooling-off periods.

2.5 Technical and Device Data

• IP address and approximate geolocation data derived from your IP address.
• Device type, operating system, and browser type and version.
• Cookies and similar tracking technologies — see Section 6 for full details.
• Login timestamps and session activity logs.

2.6 Communications Data

• Records of communications between you and agd33's customer support team via live chat, email, or WhatsApp.
• Survey responses, feedback submissions, and promotion participation records.
• Marketing preferences and consent records.

3. How We Use Your Data

agd33 uses the personal data it collects solely for the purposes described below. We do not use your data for any purpose that is incompatible with the original collection purpose without first obtaining your consent or establishing a separate lawful basis.

Purpose	Categories of Data Used
Account creation, verification, and ongoing management	Registration data, KYC data, communications data
Processing deposits and withdrawals in BDT	Financial and transaction data, KYC data
Delivering and improving gaming and betting services	Gaming and behavioural data, technical data
Responsible gaming monitoring, risk assessment, and self-exclusion enforcement	Gaming and behavioural data, registration data
Fraud detection, anti-money laundering (AML) compliance, and security	Financial data, technical data, KYC data
Customer support and complaint resolution	Registration data, communications data, transaction data
Sending service notifications, account alerts, and policy updates	Registration data, communications data
Sending promotional and marketing communications (where consent is given)	Registration data, gaming data, marketing preferences
Platform analytics and performance optimisation	Technical data, behavioural data (aggregated and anonymised where possible)
Legal and regulatory compliance obligations	All categories as required by applicable law

4. Legal Basis for Processing

agd33 relies on one or more of the following lawful bases when processing your personal data, depending on the specific purpose of processing:

• Contract Performance: Processing your registration data, KYC documents, and financial transaction data is necessary for agd33 to fulfil its contractual obligations to you as a registered player — including maintaining your account, accepting deposits, and paying out withdrawals.
• Legal Obligation: Certain processing activities — in particular KYC verification, AML record-keeping, and fraud reporting — are required by applicable laws and regulations. agd33 must perform this processing regardless of your consent.
• Legitimate Interests: agd33 processes certain technical, security, and gaming behavioural data on the basis of its legitimate interests in operating a secure, fair, and commercially viable gaming platform, provided those interests are not overridden by your rights and freedoms.
• Consent: Where agd33 sends you direct marketing communications via email, WhatsApp, or in-platform notifications, we rely on your freely given, specific, informed, and revocable consent. You may withdraw marketing consent at any time by contacting support or using the unsubscribe mechanism provided in any marketing communication.

5. Data Sharing & Third Parties

agd33 does not sell your personal data to third parties. We may, however, share personal data with the following categories of trusted third parties where necessary to deliver the services described in this Privacy Policy:

5.1 Game Content Providers

To deliver live casino, slots, and instant game content, agd33 integrates with licensed game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical session data (such as player session tokens and game outcome logs) to facilitate gameplay. They are contractually prohibited from using this data for any purpose other than delivering their licensed game content.

5.2 Payment Processing Partners

To process deposits and withdrawals in BDT, agd33 works with payment service providers including bKash, Nagad, Rocket, Upay, and partner banks. These providers receive only the transaction data strictly necessary to execute the requested payment. Payment processing partners operate under their own privacy policies and applicable Bangladesh Bank regulations.

5.3 Identity Verification and KYC Service Providers

agd33 may use specialist third-party KYC and identity verification service providers to assist with document verification and fraud detection. These providers process your identity documents under strict data processing agreements and are not permitted to use your data for any independent purpose.

5.4 Analytics and Platform Infrastructure Providers

agd33 uses technical infrastructure providers for hosting, platform analytics, and security monitoring. These providers act as data processors on agd33's behalf and are bound by contractual data processing obligations consistent with applicable privacy standards.

5.5 Legal and Regulatory Disclosure

agd33 may disclose personal data to competent authorities, law enforcement bodies, or regulatory agencies where required to do so by applicable law, court order, or regulatory directive. In such cases, agd33 will disclose only the minimum data necessary to satisfy the legal obligation.

6. Cookies & Tracking Technologies

agd33 uses cookies and similar tracking technologies on agd33.vip to enhance platform functionality, maintain your login session, and gather anonymised analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the agd33 platform to function correctly. They include session authentication cookies, security tokens, and load-balancing identifiers. Without these cookies, core platform functionality — including account login, game loading, and payment processing — cannot operate. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences, such as your preferred game category, language settings, and responsible gaming tool configurations. Disabling functional cookies may degrade certain non-essential platform features.
• Analytics Cookies: agd33 uses analytics tools to measure aggregate platform usage, page performance, and feature engagement. Analytics data is processed in anonymised or pseudonymised form wherever practicable. You may opt out of analytics cookies without affecting your ability to use the platform.
• Marketing and Retargeting Cookies: Where you have provided consent, agd33 may use cookies to deliver personalised promotional content and measure the effectiveness of marketing campaigns. You may withdraw consent for marketing cookies at any time.

You may manage your cookie preferences through your browser settings. Note that blocking strictly necessary cookies will prevent the agd33 platform from functioning. For full details on the specific cookies deployed on agd33.vip, please contact our privacy team using the details in Section 12.

7. Data Retention

agd33 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention guidelines apply:

• Active Account Data: Personal data associated with an active agd33 account is retained for the duration of the account relationship and for a period of at least 5 years following account closure, in order to satisfy AML record-keeping obligations and potential dispute resolution requirements.
• KYC and Identity Verification Documents: Identity verification documents are retained for a minimum of 5 years following the last transaction associated with your account, in accordance with applicable financial regulations.
• Transaction Records: Financial transaction records, including deposit and withdrawal logs in BDT, are retained for a minimum of 5 years from the date of the transaction.
• Game Session Logs: Gaming activity records are retained for a minimum of 3 years from the date of the session, or longer where required by a dispute, investigation, or regulatory request.
• Marketing Consent Records: Records of your marketing consent or withdrawal of consent are retained for the duration of your account and for 2 years following account closure.
• Support Communications: Customer support interaction records are retained for 2 years from the date of the interaction.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

8. Data Security

agd33 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and agd33's servers, including all payment transactions processed via bKash, Nagad, Rocket, and Upay.
• Encryption at rest for sensitive data categories including identity documents and payment account identifiers.
• Cryptographic hashing of password credentials using industry-standard algorithms. agd33 employees cannot access or retrieve your plaintext password under any circumstances.
• Strict role-based access controls limiting agd33 personnel access to personal data on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of the agd33 platform infrastructure.
• Intrusion detection and anomaly monitoring systems that flag unusual account activity in real time.
• Formal data breach response procedures, including player notification protocols where a breach is likely to result in a high risk to your rights and freedoms.

While agd33 takes every reasonable precaution to protect your personal data, no digital platform can guarantee absolute security. You are also responsible for protecting your own agd33 account credentials — please refer to Section 3 of the agd33 Terms & Conditions for your security obligations as a registered player.

9. Your Privacy Rights

As a registered agd33 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our privacy team as described in Section 12. agd33 will respond to verified privacy rights requests within 30 calendar days of receipt.

• Right of Access: You have the right to request a copy of all personal data agd33 holds about you, along with information about how it is being used. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification: If any personal data agd33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: In certain circumstances — such as where data is no longer necessary for the purpose for which it was collected, or where you withdraw consent — you may request that agd33 delete your personal data. This right is subject to overriding legal retention obligations.
• Right to Restrict Processing: You may request that agd33 temporarily restrict the processing of your personal data in certain circumstances, such as while a rectification request is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where agd33 relies on legitimate interests as its lawful basis. You also have an unconditional right to object to the processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Please note that exercising certain rights — for example, requesting deletion of KYC documents prior to the expiry of mandatory retention periods — may not be possible where agd33 is subject to a conflicting legal obligation. In such cases, agd33 will explain the basis for any refusal clearly and promptly.

10. Minors & Age Verification

The agd33 platform is strictly intended for adults aged 18 years and above. agd33 does not knowingly collect, process, or retain the personal data of any person under the age of 18. Age verification is a mandatory component of the agd33 account registration and KYC process.

Where agd33 discovers or has reasonable grounds to believe that personal data belonging to a person under 18 years of age has been collected — whether through a false date of birth declaration or any other means — agd33 will take the following steps without undue delay:

• Immediately suspend the account in question pending investigation.
• Permanently close the account upon confirmation that the registered player is under 18.
• Delete or securely destroy all personal data associated with the underage account, except where retention is required by applicable law or for the purposes of preventing a recurrence.
• Refund any real-money balance remaining in the account to the deposit source, minus any amounts that may be withheld in accordance with agd33's Terms & Conditions and applicable law.

If you are a parent or guardian and believe that a minor in your care has registered an agd33 account, please contact our support team immediately at [email protected] so that we may take prompt action.

11. Policy Updates

agd33 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or the services we offer. Where changes are material — meaning they meaningfully affect your rights or the way in which we use your personal data — agd33 will provide advance notice via a platform notification sent to your registered email address or displayed prominently on agd33.vip before the updated policy takes effect.

The effective date of the current version of this Privacy Policy is stated at the top of this document. We encourage you to review this Privacy Policy regularly to stay informed about how agd33 protects your personal information. For non-material updates — such as typographical corrections or clarifications that do not change the substance of the policy — agd33 may update the policy without advance notice, though the effective date will be revised accordingly.

Your continued use of the agd33 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms.

12. Contact Our Privacy Team

If you have any questions about this Privacy Policy, wish to exercise any of the rights described in Section 9, or wish to raise a concern about how agd33 has handled your personal data, please contact our privacy team using the following details:

• Email: [email protected] — please include "Privacy Request" in your subject line so that your enquiry is directed to the correct team.
• Live Chat: Available 24 hours a day, 7 days a week via the agd33 platform.
• WhatsApp: +880 1700 000000 — available between 08:00 and 24:00 Bangladesh Standard Time (UTC+6).

agd33 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 30 calendar days of receiving a verified request. Where a request is particularly complex or we receive a high volume of requests simultaneously, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.