bmw33 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how bmw33 ("we", "us", "our") collects, uses, stores, and protects personal data submitted by players and visitors ("you", "your") on the bmw33 website located at https://bmw33.ws and any related mobile-optimised services (collectively, the "Platform").

bmw33 is committed to handling all personal data with care, integrity, and full transparency. This Policy is designed to give you a clear and complete picture of our data practices so that you can make informed decisions about using the Platform. We have written this document in plain English and structured it so that every section is easy to locate and understand.

This Policy should be read alongside the bmw33 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and those documents with respect to data handling, this Privacy Policy prevails.

bmw33 is operated for players in Bangladesh. All references to data protection obligations in this document reflect our commitment to responsible, player-first data governance as applied within the Bangladesh market context.

2 Data We Collect

bmw33 collects personal data through several means: directly from you when you register or use the Platform, automatically as you interact with the site, and occasionally from third-party service providers who assist us in operating the Platform.

2.1 Registration Data

When you create a bmw33 account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna)
• Email address
• Mobile phone number
• Preferred username and account password (stored in hashed form)

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to prevent fraud, underage gambling, and money laundering, bmw33 may request:

• Government-issued National Identity Card (NID) or passport scan
• Proof of residential address (utility bill or bank statement dated within 3 months)
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account registered in your name)
• A selfie photograph holding your identity document

2.3 Financial and Transaction Data

When you make deposits or request withdrawals, we record:

• Deposit and withdrawal amounts (in BDT / ৳)
• Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Mobile wallet numbers or partial card numbers associated with your account
• Transaction timestamps and reference identifiers
• Running account balance history

2.4 Gameplay and Betting Data

bmw33 automatically records all wagering activity on the Platform, including:

• Games played and bet amounts placed
• Sports events and markets wagered on (e.g., cricket BPL, T20 World Cup)
• Win and loss records
• Session start and end times
• Responsible gaming tool usage (deposit limits set, cool-off periods activated)

2.5 Technical and Device Data

When you visit bmw33.ws, our servers automatically collect:

• IP address and approximate geolocation (country/city level)
• Device type, operating system, and browser version
• Referring URL and on-site navigation path
• Session duration and page interaction data
• Device fingerprint (used solely for fraud detection and duplicate account prevention)

2.6 Communication Data

If you contact bmw33 support via live chat or email, we retain records of that correspondence — including the content of messages, attachments, and timestamps — for quality assurance, dispute resolution, and audit purposes.

3 How We Use Your Data

bmw33 uses the personal data described in Section 2 for the following specific purposes:

bmw33 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human review. Where automated tools are used to flag accounts for fraud or AML review, a trained compliance team member always performs the final assessment.

4 Legal Basis for Processing

bmw33 processes your personal data on one or more of the following legal bases:

• Contract Performance: Processing is necessary to deliver the service you signed up for — including account management, game access, and payment processing.
• Legal Obligation: Certain processing activities — particularly KYC verification, anti-money laundering record-keeping, and age verification — are required by applicable law or regulation.
• Legitimate Interests: bmw33 has a legitimate interest in protecting the Platform from fraud, abuse, and security threats, and in improving the quality of its services through anonymised analytics.
• Consent: Where we rely on your consent — for example, to send marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing and Disclosure

5.1 Service Providers

bmw33 shares personal data with a limited set of third-party service providers who process data on our behalf under strict data processing agreements. These providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateway operators who need your transaction data to process deposits and withdrawals.
• Identity verification providers: Third-party KYC platforms that assist with document verification and liveness checks.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe receive anonymised session identifiers to deliver games. They do not receive your full personal profile.
• Fraud and security tools: Third-party platforms that help us detect collusion, money laundering, and bot activity.
• Cloud infrastructure providers: bmw33's Platform is hosted on enterprise-grade cloud infrastructure. Our hosting provider has access to encrypted server data only.

5.2 Legal and Regulatory Disclosure

bmw33 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised governmental authorities in Bangladesh where we are legally required to do so — for example, in response to a court order, legal process, or an anti-money laundering investigation. We will always seek to notify affected players of such disclosures unless prohibited from doing so by law.

5.3 Business Transfers

In the event that bmw33 undergoes a merger, acquisition, or asset sale, player data may be transferred to the acquiring entity as part of the transaction. In such circumstances, bmw33 will notify affected players by email and on the Platform at least 30 days before the transfer takes effect, and players will have the option to request account deletion prior to the transfer.

5.4 No Sale of Data

bmw33 will never sell, rent, or trade your personal data to any third party for commercial or marketing purposes. This is an absolute commitment and is not subject to exceptions.

6 Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. bmw33 uses cookies and similar tracking technologies (such as local storage and session storage) to enable core Platform functionality and to improve your experience.

6.2 Types of Cookies We Use

6.3 Managing Cookies

You can control cookie placement through your browser settings. Please note that disabling strictly necessary cookies will impair core Platform functionality — including login, session management, and payment flows. Analytics and functional cookies can be disabled without affecting your ability to place bets or make transactions on bmw33.

7 Data Retention

bmw33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedule applies:

After the applicable retention period expires, personal data is either securely deleted or fully anonymised so that it can no longer be associated with any individual.

8 Your Data Rights

As a bmw33 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request — [Your Username]".

• Right of Access: You may request a copy of all personal data bmw33 holds about you. We will provide this in a structured, commonly used format within 30 calendar days.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it. We will action rectification requests within 5 business days.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. Note that deletion requests may be declined where retention is required by law — for example, AML transaction records must be retained for 7 years.
• Right to Restriction: You may request that we restrict processing of your data while a correction or objection request is being assessed.
• Right to Data Portability: You may request that we provide your personal data in a machine-readable format (JSON or CSV) so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests — for example, the use of your anonymised gameplay data in aggregate analytics. We will assess and respond to objections within 10 business days.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time with no effect on prior processing. Withdrawal can be actioned immediately via your account settings or by emailing [email protected].

9 Data Security

bmw33 employs a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and bmw33's servers is encrypted using industry-standard TLS 1.3 protocols.
• AES-256 Encryption at Rest: Sensitive data fields — including identity documents, payment method details, and account credentials — are encrypted at rest using AES-256 before being stored in our databases.
• Password Hashing: Account passwords are never stored in plaintext. bmw33 uses bcrypt hashing with a cost factor of 12 or higher to protect password data.
• Access Controls: Access to player data within bmw33's internal systems is restricted to staff members who require it to perform their roles. All internal access is logged and audited.
• Intrusion Detection: bmw33's infrastructure is monitored 24/7 by automated intrusion detection systems that alert our security team to any unusual access patterns.
• Regular Security Audits: bmw33 conducts periodic security assessments and penetration testing of its Platform infrastructure.
• Incident Response: In the event of a data breach that is likely to result in risk to your rights and freedoms, bmw33 will notify affected players within 72 hours of becoming aware of the breach.

While bmw33 takes all reasonable technical and organisational precautions to safeguard your data, no system is entirely immune to security risks. You are responsible for maintaining the security of your own account by using a strong, unique password and not sharing your credentials with any third party.

10 Children and Minors

The bmw33 Platform is strictly for individuals who are 21 years of age or older. bmw33 does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will delete that data immediately and close the associated account.

If you are a parent or guardian and believe that your child has submitted personal data to bmw33, please contact us immediately at [email protected]. We will investigate and take appropriate action within 2 business days of receiving such a report.

Age verification is a core component of our KYC programme. bmw33 reserves the right to request documentary proof of age from any player at any point during the account lifecycle.

11 Third-Party Links and Game Providers

The bmw33 Platform may contain references to game software and content provided by third parties such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. While bmw33 carefully vets all game providers for security and fairness standards, each provider operates under its own privacy policies with respect to any data they collect directly through their game interfaces.

bmw33 does not control and is not responsible for the privacy practices of third-party game providers. We recommend reviewing the privacy documentation of any third-party service whose content you access via the bmw33 Platform. bmw33 passes only anonymised session tokens to game providers — your full personal profile is never shared with game software companies.

12 Marketing Communications

12.1 Opt-In Basis

bmw33 will only send you promotional emails, SMS messages, or in-platform notifications if you have explicitly opted in to receive them — either during registration or via your account settings. Opting in to marketing communications is entirely voluntary and is not a condition of account registration or service access.

12.2 What We May Send

If you opt in, bmw33 may contact you about:

• New bonus offers and promotional campaigns
• Seasonal promotions aligned with events such as IPL, T20 World Cup, BPL, Pohela Boishakh , Eid, and Durga Puja
• New game launches from providers such as Pragmatic Play, Evolution Gaming, and Spribe
• Important account notifications and Platform updates

12.3 Opting Out

You may withdraw your marketing consent at any time by:

• Updating your communication preferences in your bmw33 account settings
• Clicking the unsubscribe link included in every promotional email
• Emailing [email protected] with the subject line "Marketing Opt-Out — [Your Username]"

Opt-out requests are processed within 48 hours. Please note that withdrawing marketing consent does not affect essential account communications such as deposit confirmations, withdrawal notifications, KYC requests, or security alerts — these are sent as part of the contracted service and cannot be disabled.

13 Changes to This Privacy Policy

bmw33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will:

• Update the "Effective Date" displayed at the top of this page
• Display a notice on the bmw33 Platform homepage for a minimum of 14 days following the change
• Send an email notification to all registered players at the email address associated with their account

Your continued use of the bmw33 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you have the right to close your account and request deletion of your data in accordance with Section 8 of this Policy.

We encourage you to review this Privacy Policy periodically so that you remain informed about how bmw33 handles your personal data. The most current version of this Policy is always available at https://bmw33.ws/privacy-policy.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bmw33 handles your personal data, please contact our Data Support team using the details below:

We take every privacy enquiry seriously and are committed to providing a prompt, clear, and complete response to every request we receive.