dhk33 Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which dhk33 ("dhk33", "we", "us", "our") collects, stores, processes, and shares personal data obtained from individuals ("you", "user", "player") who access or use the dhk33 online casino and sports betting platform at dhk33.io, including all associated sub-domains and mobile applications. This Policy applies to all players based in Bangladesh and any other jurisdiction from which the platform is accessed.

dhk33 is committed to handling your personal information responsibly, transparently, and in a manner consistent with internationally recognised data protection principles. We apply data minimisation, purpose limitation, storage limitation, and accuracy principles across all data processing activities. Where we are required by law to obtain your explicit consent before processing certain categories of personal data, we will do so clearly and separately from other terms and conditions.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on a data-related matter, this Privacy Policy shall take precedence with respect to the processing of personal data.

This Policy is effective as of January 2026. We encourage you to review it periodically, as it may be updated from time to time in response to changes in our services, legal obligations, or best practices. The most current version will always be published at dhk33.io/privacy-policy with the date of the most recent revision clearly indicated.

For the purposes of this Privacy Policy, dhk33 acts as the data controller in respect of all personal data collected from players who access the platform. As data controller, dhk33 determines the purposes and means of processing personal data and is responsible for ensuring that such processing complies with applicable data protection standards.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact our designated data protection point of contact using the details provided in Section 15 of this Policy. We are committed to addressing all data-related enquiries promptly and in good faith.

dhk33 collects personal data across several categories depending on the nature of your interaction with the platform. The following table provides a structured overview of the personal data categories we collect, the specific data points within each category, and the primary purpose for which that data is used.

dhk33 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information as part of normal platform operations. In limited circumstances — such as processing a self-exclusion request related to problem gambling — we may record details that could be considered sensitive. Such data is processed only with your explicit consent and solely for the purpose of providing responsible gaming support.

dhk33 collects personal data through the following channels and mechanisms:

4.1 Direct Collection

The majority of the personal data we hold is provided directly by you when you: register a new account and complete the sign-up form; submit identity and address documents during KYC verification; make a deposit or withdrawal request via bKash, Nagad, Rocket, or Upay; contact our customer support team by email or live chat; respond to a promotional offer or voluntary survey; or update your account settings and preferences.

4.2 Automated Collection

When you access and interact with the dhk33 platform, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, device identifiers, browser fingerprint, session timestamps, pages visited, features interacted with, and game activity logs. This data is collected using server logs, session cookies, and first-party analytics tools. See Section 9 for full details on our use of cookies.

4.3 Third-Party Sources

In limited circumstances, dhk33 may receive or verify personal data from third-party sources, including: payment service providers (bKash, Nagad) who confirm transaction details; identity verification service providers used for KYC checks; and fraud prevention databases used to screen for known fraudulent actors. Any data received from third parties is processed in accordance with this Privacy Policy and is subject to the same security standards as data collected directly.

dhk33 processes your personal data only where we have a lawful basis for doing so. The following table sets out the primary purposes for which we process personal data, the categories of data used for each purpose, and the legal basis that justifies that processing.

Where we rely on legitimate interests as the legal basis for processing, we have conducted a balancing assessment to ensure that our interests do not override your fundamental rights and freedoms. Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

dhk33 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data only in the circumstances described below, and always subject to appropriate contractual safeguards.

6.1 Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary financial and identity data with our payment partners, including bKash, Nagad, Rocket, and Upay. These providers act as independent data controllers for transactions processed through their platforms and are subject to their own privacy policies and Bangladesh Bank regulatory requirements.

6.2 Game Content Providers

Game providers such as Pragmatic Play, PG Soft, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive anonymised or pseudonymised player session data necessary to deliver their game content, verify bet outcomes, and maintain their RNG audit trails. These providers do not receive your full identity data and are contractually prohibited from using session data for any purpose other than service delivery.

6.3 KYC and Fraud Prevention Services

dhk33 uses third-party identity verification and fraud screening services to fulfil KYC obligations and protect the platform from fraudulent activity. Where identity documents are submitted for verification, they may be processed by a specialist KYC provider acting as our data processor under a strict data processing agreement.

6.4 Legal and Regulatory Disclosure

dhk33 may disclose personal data to law enforcement, regulatory authorities, or other governmental bodies where required to do so by applicable law, court order, or regulatory instruction. In such circumstances, we will disclose only the minimum data necessary to comply with the legal obligation and will, where permitted, notify you of the disclosure.

6.5 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring involving dhk33, personal data held by dhk33 may be transferred to the relevant successor entity as part of that transaction. You will be notified via your registered email address prior to any such transfer, and the receiving entity will be required to honour the terms of this Privacy Policy.

Some of dhk33's technology infrastructure, service providers, and game content partners are located outside Bangladesh. As a result, your personal data may be transferred to, stored in, and processed in countries other than Bangladesh, including countries whose data protection laws may differ from those applicable in your jurisdiction.

Where such international transfers occur, dhk33 takes steps to ensure that appropriate safeguards are in place to protect your personal data. These safeguards may include contractual clauses that impose data protection obligations on the receiving party, use of service providers operating under internationally recognised security certifications, and restricting the data transferred to the minimum necessary for the relevant service.

By using the dhk33 platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to countries outside Bangladesh where necessary for the operation of our services. If you have concerns about international data transfers, please contact us at the details provided in Section 15.

dhk33 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes, but is not limited to, the following controls:

• Transport Layer Security: All data transmitted between your browser or mobile device and dhk33's servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to login sessions, payment flows, and all API communications.
• Data Encryption at Rest: Sensitive personal data stored in dhk33's databases is encrypted at rest using AES-256 encryption. This includes identity documents, financial transaction records, and KYC verification data.
• Access Controls: Access to systems holding personal data is restricted on a strict need-to-know basis. All internal access is authenticated via multi-factor authentication and is subject to comprehensive audit logging.
• Penetration Testing: dhk33's platform undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate potential security weaknesses before they can be exploited.
• Incident Response: dhk33 maintains a documented data breach response procedure. In the event of a data security incident that poses a risk to your rights, we will notify affected players promptly via their registered email address and take immediate remedial action.
• Staff Training: All dhk33 staff members with access to personal data receive mandatory data protection training on an annual basis and are contractually bound by confidentiality obligations.

While dhk33 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You also have a role to play in protecting your account: use a strong and unique password, enable any available two-factor authentication, and never share your login credentials with any other person.

dhk33 uses cookies and similar technologies (such as web beacons and local storage) to ensure the platform functions correctly and to improve the user experience. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

9.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store information about your preferences and actions. Cookies may be "session cookies" (deleted when you close your browser) or "persistent cookies" (retained on your device for a set period or until manually deleted).

9.2 Cookies We Use

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Please note that blocking essential cookies will impair the functionality of the dhk33 platform — for example, you will be unable to maintain a logged-in session. Analytics and functional cookies can be blocked without affecting your ability to access core platform features.

dhk33 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. The following retention guidelines apply:

• Account Data: Retained for the duration of your active account relationship with dhk33, plus a period of five years following verified account closure to comply with anti-money laundering and fraud prevention obligations.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five years from the date of verification, or longer if required by a specific legal or regulatory instruction.
• Gameplay and Betting Records: Retained for a minimum of three years to support dispute resolution and responsible gaming monitoring obligations.
• Customer Support Communications: Retained for a period of two years from the date of the last interaction, unless the communication relates to an ongoing dispute or legal matter.
• Analytics and Usage Data: Retained in anonymised or aggregated form for up to 13 months, after which it is permanently deleted or further anonymised so that it can no longer be linked to an individual.

When personal data is no longer required and the applicable retention period has expired, dhk33 will securely delete or permanently anonymise that data using industry-standard data destruction methods. You may request early deletion of your personal data in accordance with the rights described in Section 11, subject to any overriding legal retention obligations.

As a player on the dhk33 platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receiving your request.

• Right of Access: You have the right to request a copy of all personal data dhk33 holds about you, together with information about how that data is being processed. We will provide this in a structured, commonly used format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may also update some of your account information directly through your account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and we are assessing whether our legitimate interests override your rights.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transferred to another service provider where technically feasible.
• Right to Object: You have the right to object at any time to the processing of your personal data where we rely on legitimate interests as the legal basis. You also have an unconditional right to object to the use of your personal data for direct marketing purposes, including profiling related to direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

The dhk33 platform is strictly intended for adults aged 21 years and over. dhk33 does not knowingly collect, process, or store personal data from any person under the age of 21. Age verification is a mandatory step in the account registration process, and dhk33 reserves the right to request additional proof of age at any time.

If dhk33 becomes aware — through any means, including a parental or guardian notification — that a person under the age of 21 has registered an account or provided personal data, dhk33 will immediately suspend that account, delete all associated personal data, and reverse any financial transactions to the extent possible. Any winnings generated during such a period will be forfeited.

Parents or guardians who believe that a minor may have accessed or registered on the dhk33 platform are strongly encouraged to contact us immediately at [email protected] with the subject line "Underage Account Report". We treat such reports with the highest priority and will act swiftly to investigate and resolve the matter. We also encourage the use of parental control software to restrict access to online gambling platforms.

The dhk33 platform may contain references to or integrations with third-party services, including game content providers, payment processors, and responsible gaming support organisations. Where links or integrations to third-party platforms exist, those third parties operate under their own independent privacy policies. dhk33 has no control over the data practices of third-party platforms and is not responsible for the content or privacy practices of any third-party site or service.

We recommend that you review the privacy policy of any third-party service before providing personal information to that service. The inclusion of a third-party provider within the dhk33 platform does not constitute an endorsement of that provider's data practices.

dhk33 reserves the right to update or modify this Privacy Policy at any time. Changes may be made in response to: updates in applicable data protection law or regulatory guidance; changes to the services or features offered on the platform; feedback from players or supervisory authorities; or internal reviews of our data practices.

When we make material changes to this Policy — that is, changes that meaningfully affect how your personal data is processed or your rights in relation to that data — we will notify you by email to your registered address at least 14 days before the changes take effect. For minor or non-material changes, we will update the "Last Updated" date at the top of this Policy and post the revised version at dhk33.io/privacy-policy.

Your continued use of the dhk33 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dhk33 processes your personal data, please contact us through any of the following channels. We are committed to handling all data-related enquiries professionally, confidentially, and within the timeframes stated in this Policy.

When contacting us about a data rights request or privacy concern, please include your registered username or email address, a clear description of your request or concern, and any relevant reference numbers if you are following up on an existing matter. This will help us locate your records promptly and respond to you accurately.