Privacy Policy —
How tg33 Protects Your Data

01 Information We Collect

tg33 collects personal information in three principal ways: information you provide directly when you register or use our services, information generated automatically by your use of the platform, and information received from trusted third-party partners such as payment processors and identity verification providers.

Information you provide directly:

• Registration data: Full legal name, date of birth, residential address, Bangladeshi mobile number, and a chosen password.
• Identity verification documents: National ID Card (NID) scan or photograph, where required for KYC compliance prior to withdrawal processing.
• Payment information: bKash account number, Nagad account number, Rocket or Upay number, bank account details, or card details (Visa/Mastercard) as provided at the point of deposit or withdrawal.
• Support communications: Messages, chat transcripts, and email correspondence you send to the tg33 support team.
• Responsible gaming data: Self-exclusion requests, deposit limit settings, and session time preferences you set via the account panel.

Information collected automatically:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, bets placed, session duration, click patterns, and navigation paths within the tg33 platform.
• Transaction logs: Full records of all deposits, withdrawals, bonus claims, wagers placed, and game outcomes associated with your account.
• Cookie and tracking data: See the Cookies & Tracking section for full details.

02 How We Use Your Data

tg33 processes your personal data only for legitimate, clearly defined purposes. The table below sets out each purpose, the category of data used, and the legal basis on which we rely for that processing activity.

tg33 will never use your personal data for any purpose not listed in this table without first updating this Privacy Policy and, where required, obtaining your consent. You may withdraw consent for promotional communications at any time by contacting [email protected] or updating your notification preferences in the account settings panel.

03 Cookies & Tracking Technologies

tg33 uses cookies, web beacons, pixel tags, and similar technologies to operate the platform reliably, remember your preferences, analyse usage patterns, and detect fraudulent activity. This section explains what these technologies are, which types tg33 uses, and how you can manage them.

What is a cookie? A cookie is a small text file placed on your device by a website you visit. Cookies allow the website to remember information about your visit — such as your preferred language or login status — so that your next visit is smoother and the site is more useful to you.

Types of cookies used by tg33:

• Strictly necessary cookies: Essential for the tg33 platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, currency display (BDT/INR), and responsible gaming limits you have set. Disabling these cookies will not prevent access to the platform but may reduce the quality of your experience.
• Analytical cookies: Used by tg33's internal analytics system to understand how users navigate the platform, which games are most popular, and where users encounter difficulties. This data is aggregated and anonymised. These cookies are placed only with your consent.
• Security and fraud-detection cookies: Help our risk management team identify unusual account activity, detect bot traffic, and prevent account takeover attacks. These are placed on the basis of tg33's legitimate interest in protecting users and the platform.

04 Data Sharing & Disclosure

tg33 does not sell or rent your personal data to any third party. We share data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose. All third-party partners with whom we share data are contractually required to handle it in accordance with applicable data protection standards.

Circumstances in which tg33 may share your data:

• Payment processors: When you initiate a deposit or withdrawal, your payment details are shared with the relevant payment provider — bKash, Nagad, Rocket, Upay, or the relevant card processor — solely to execute the transaction you have requested. tg33 does not store full card numbers.
• Identity verification providers: For KYC compliance, your National ID Card details may be shared with an approved identity verification service to confirm your identity and age before withdrawal processing.
• Game software providers: Games on the tg33 platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session data required to deliver and audit their games. They do not receive your name, contact details, or payment information.
• Legal and regulatory authorities: Where tg33 is required by applicable law, court order, or a lawful directive from a competent authority to disclose personal data, we will comply with that requirement. Where permitted by law, tg33 will notify affected users of such disclosure.
• Fraud prevention and security services: tg33 may share device identifiers and behavioural data with specialist fraud-detection platforms to protect users and the platform from account takeover, payment fraud, and collusion. Data shared for this purpose is used solely for security screening.

05 Data Security Measures

tg33 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, and disclosure. Our key technical and organisational security measures include the following:

• Transport Layer Security (TLS): All data transmitted between your browser or app and the tg33 servers is encrypted using TLS 1.2 or higher. No unencrypted HTTP connections are permitted on any page of the platform.
• Data encryption at rest: Sensitive personal data — including identity documents and financial account details — is encrypted in the tg33 database using industry-standard AES-256 encryption.
• Access controls: Access to personal data held in tg33 systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to background checks and confidentiality obligations.
• Two-factor authentication (2FA): tg33 supports optional 2FA for user accounts via OTP to the registered mobile number, and requires 2FA for all internal staff accessing production systems.
• Vulnerability management: tg33 conducts regular security assessments of its platform, including penetration testing and automated vulnerability scanning, to identify and remediate security weaknesses before they can be exploited.
• Incident response: In the event of a data breach that poses a risk to users, tg33 will notify affected users promptly via their registered contact details, describing the nature of the breach and the steps taken to address it.

While tg33 takes every reasonable technical and organisational precaution to protect your data, no system connected to the internet can be guaranteed to be completely secure. You are responsible for keeping your tg33 password confidential and for ensuring that your registered mobile number remains under your sole control.

06 Data Retention & Deletion

tg33 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required to comply with applicable legal and regulatory obligations. The following retention periods apply to the principal categories of data we hold:

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where anonymisation is not technically feasible, the data is securely destroyed. You may also request early deletion of your data — subject to our legal retention obligations — as described in the Your Privacy Rights section below.

07 Your Privacy Rights

As a tg33 user, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request". tg33 will respond to all valid requests within 30 days of receipt. There is no charge for a first request in any 12-month period; subsequent requests for the same data within 12 months may be subject to a reasonable administrative fee.

• Right of access: You may request a copy of all personal data tg33 holds about you, along with details of how it is used, where it came from, and with whom it has been shared.
• Right to rectification: If any personal data tg33 holds about you is inaccurate or incomplete, you may request that it be corrected. For contact details (mobile number, address), you may update these directly via the account settings panel.
• Right to erasure: You may request that tg33 delete your personal data. We will action this request subject to our legal retention obligations — for example, we are required to retain transaction records for 7 years and cannot delete these on request.
• Right to restrict processing: You may ask tg33 to pause processing of your personal data in specific circumstances — for example, while a data accuracy dispute is being resolved.
• Right to data portability: You may request that tg33 provide your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider.
• Right to withdraw consent: Where tg33 processes your data on the basis of your consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to tg33 processing your data on the basis of legitimate interest — for example, using behavioural data for platform analytics. tg33 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

08 Contact & Complaints

If you have any questions about this Privacy Policy, the personal data tg33 holds about you, or the way in which we process it, please contact the tg33 Data Protection team using the details below. All privacy-related enquiries are handled by a dedicated team with a target response time of 2 business days.

• Email: [email protected] (use subject line "Privacy Enquiry")
• Live Chat: Available 24/7 via the tg33 platform — ask to be connected to the Data Protection team
• Response Time: Within 2 business days for privacy enquiries; within 30 days for formal rights requests
• Operating Hours: Bangladesh Standard Time (BST, UTC+6)

Complaints: If you are dissatisfied with the way tg33 has handled your personal data or responded to a privacy rights request, you have the right to raise a formal complaint. Please first contact tg33 directly so that we have the opportunity to resolve the matter internally. If you remain dissatisfied after receiving our response, you may escalate your complaint to the appropriate data protection authority in your jurisdiction.

tg33 takes all privacy complaints seriously and will investigate each complaint thoroughly. We will acknowledge receipt of your complaint within 48 hours and provide a substantive response within 30 days. Where a complaint reveals a systemic issue with our data handling practices, we will take corrective action and update this Privacy Policy accordingly.