ae33 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how ae33 ("the Company", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("you", "the Player", "the User") who access or use the ae33 online betting and gaming platform available at ae33.io, including any associated mobile applications and related services (collectively, "the Platform").

ae33 takes the privacy and security of your personal data seriously. This Policy has been written in plain, accessible English so that every ae33 player — regardless of technical background — can understand exactly how their information is handled. We encourage you to read this Policy carefully before creating an account or placing any bet on the Platform.

By registering an ae33 account, accessing the Platform, or continuing to use our services after this Policy's effective date, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the ae33 Platform.

02 Data Controller

For the purposes of applicable data protection law, ae33 is the data controller responsible for the personal data collected through the Platform. As data controller, ae33 determines the purposes and means by which your personal data is processed.

All enquiries relating to data protection, privacy rights, and this Policy should be directed to the ae33 data protection contact at [email protected]. ae33 will acknowledge all data-related enquiries within 5 business days and provide a substantive response within 30 calendar days.

03 Personal Data We Collect

ae33 collects the following categories of personal data about you, depending on how you interact with the Platform:

3.1 Identity & Contact Data

• Full legal name;
• Date of birth;
• Gender (where voluntarily provided);
• Residential address (district, city, country — e.g., Dhaka, Chittagong, Sylhet, Khulna);
• Email address and mobile phone number;
• Copies of government-issued identity documents submitted for KYC verification (National ID card, passport, driving licence).

3.2 Financial Data

• Mobile financial service account details used for deposits and withdrawals (bKash, Nagad, Rocket, Upay registered mobile numbers — not full wallet PINs or passwords);
• Transaction history, including deposit amounts, withdrawal amounts, and timestamps;
• Bonus and promotional activity records;
• Source of funds documentation where required by our compliance programme.

3.3 Account & Behavioural Data

• Username and encrypted password hash;
• Betting and gaming activity, including markets wagered on, game titles played, bet amounts, and outcomes;
• Session duration, frequency of visits, and time-zone data (Bangladesh Standard Time, UTC+6);
• Responsible gaming settings applied to your account, including deposit limits and self-exclusion status;
• Customer support communications (chat transcripts, email threads, complaint records).

3.4 Technical Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, browser type and version;
• Referral source (the URL or marketing channel through which you arrived at ae33.io);
• Cookie and tracking data as described in Section 10 of this Policy.

04 How We Collect Your Data

ae33 collects personal data through the following means:

• Direct collection: Information you provide when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or participate in a promotional offer;
• Automated collection: Technical data gathered automatically when you visit ae33.io or use the Platform, including through cookies, web beacons, and server log files;
• Third-party sources: Identity verification data from KYC service providers; fraud-screening data from anti-fraud partners; payment confirmation data from bKash, Nagad, Rocket, and Upay transaction systems; game round data from our certified game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.

ae33 does not purchase personal data from data brokers or acquire contact lists for unsolicited marketing. All data collected by ae33 arises directly from your interaction with the Platform or from service partners necessary for Platform operation.

05 Legal Basis for Processing

ae33 processes your personal data under one or more of the following legal bases:

• Contractual necessity: Processing required to create and manage your ae33 account, process deposits and withdrawals, settle bets, and deliver the services described in the ae33 Terms & Conditions;
• Legal obligation: Processing required to comply with anti-money-laundering obligations, age verification requirements, fraud prevention duties, and any applicable regulatory requirements;
• Legitimate interests: Processing necessary for ae33's legitimate business interests, including platform security, fraud detection, responsible gaming monitoring, and service improvement — provided such interests are not overridden by your privacy rights;
• Consent: Processing of optional data, such as sending you marketing communications about ae33 promotions, bonuses, and new features — where you have explicitly opted in and may withdraw consent at any time.

06 How We Use Your Personal Data

ae33 uses the personal data we collect for the following purposes:

• Account administration: Creating, verifying, and maintaining your ae33 account, including processing login requests and password resets;
• Payment processing: Handling deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and other supported payment channels, and maintaining accurate financial records;
• Identity verification (KYC): Confirming that you meet the minimum age requirement of 21 years and that your identity matches the account details provided at registration;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in the ae33 Terms & Conditions;
• Responsible gaming: Monitoring your betting and gaming behaviour to identify patterns that may indicate problem gambling, and delivering the self-exclusion, deposit limit, and session control tools available on the Platform;
• Customer support: Responding to your enquiries, complaints, and support requests, and maintaining a record of communications for quality assurance and dispute resolution purposes;
• Marketing communications: Sending you information about ae33 promotions, bonuses, and seasonal offers (e.g., BPL season, IPL, Eid, Pohela Boishakh specials) — only where you have consented to receive such communications and have not subsequently opted out;
• Platform improvement: Analysing aggregated usage data to improve the ae33 website, mobile experience, game library, and betting markets;
• Legal compliance: Meeting our obligations under applicable law, including responding to lawful requests from regulatory authorities and law enforcement agencies.

07 How We Share Your Data

ae33 does not sell your personal data to third parties. We share personal data only in the following limited circumstances and only to the extent necessary for the specific purpose:

• Payment service providers: Transaction data (mobile number, amount, timestamp) is shared with bKash, Nagad, Rocket, and Upay solely to process your deposit and withdrawal requests. These providers operate under their own privacy policies and data protection obligations;
• KYC and identity verification partners: Identity documents and verification data may be shared with certified KYC service providers engaged by ae33 to carry out age and identity checks. These partners process data only on ae33's instructions and are contractually bound to maintain confidentiality;
• Game providers: Your player ID and game session data are shared with game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to facilitate gameplay, settle game outcomes, and verify jackpot wins. Game providers do not receive your full identity or payment data;
• Fraud prevention and security services: Technical data including IP address and device fingerprint may be shared with fraud-screening partners to detect and prevent prohibited activity on the Platform;
• Legal and regulatory authorities: ae33 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by law or in response to a valid legal order. ae33 will, where permitted by law, notify you of such a disclosure;
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of ae33's business, your personal data may be transferred to the acquiring entity, subject to that entity assuming the same data protection obligations set out in this Policy.

08 Data Retention

ae33 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

When the applicable retention period expires, ae33 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

09 Security Measures

ae33 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or mobile app and ae33's servers is encrypted using 256-bit SSL/TLS protocols;
• Password hashing: Account passwords are never stored in plain text. ae33 uses industry-standard cryptographic hashing algorithms to store password data securely;
• Access controls: Access to personal data within ae33's internal systems is restricted to authorised personnel on a strict need-to-know basis. Access is governed by role-based permissions and is subject to regular review;
• Infrastructure security: ae33's servers are hosted in secure data centre facilities with physical access controls, redundant power supply, and continuous intrusion monitoring;
• Regular security assessments: ae33 conducts periodic security assessments and vulnerability testing to identify and address potential weaknesses in the Platform's security posture;
• Incident response: ae33 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, ae33 will notify affected users without undue delay.

While ae33 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your ae33 account credentials confidential and for logging out of your account when using shared or public devices.

10 Cookies & Tracking Technologies

ae33 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse how players interact with ae33.io. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting the functionality of the Platform;
• Functional cookies: Remember your preferences such as language settings, preferred currency display (BDT/৳), and responsible gaming configurations you have applied to your account;
• Analytics cookies: Collect anonymised data about how players navigate ae33.io, which pages are most visited, and where users encounter errors. This data helps ae33 improve the Platform experience;
• Marketing cookies: Track whether you arrived at ae33.io via a specific promotional channel, enabling ae33 to measure the effectiveness of campaigns. These cookies do not build profiles for third-party advertising.

You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the performance of the ae33 Platform. ae33 does not use third-party advertising network cookies or cross-site tracking technologies that build profiles of your browsing behaviour across unrelated websites.

11 Your Privacy Rights

As an ae33 account holder, you have the following rights in respect of the personal data ae33 holds about you. To exercise any of these rights, please contact ae33 at [email protected]:

• Right of access: You may request a copy of the personal data ae33 holds about you. ae33 will provide this in a structured, commonly used format within 30 calendar days of receiving your verified request;
• Right to rectification: You may request that ae33 correct any inaccurate or incomplete personal data held about you. Certain data fields (e.g., date of birth verified by KYC) cannot be amended without re-verification;
• Right to erasure: You may request that ae33 delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where ae33 has no other lawful basis to retain it. This right is subject to ae33's legal retention obligations described in Section 8;
• Right to restrict processing: You may request that ae33 temporarily suspend the processing of your data while a rectification or erasure request is being assessed;
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a machine-readable copy of your data to transfer to another service provider;
• Right to object: You may object to processing based on ae33's legitimate interests. ae33 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests;
• Right to withdraw consent: Where ae33 processes your data based on consent (e.g., marketing communications), you may withdraw your consent at any time by contacting support or using the unsubscribe option in any marketing communication. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

12 International Data Transfers

ae33 primarily processes and stores personal data on servers located within secure data centre facilities. Some of ae33's third-party service providers — including certain game providers and KYC partners — may process data in jurisdictions outside Bangladesh. Where such transfers occur, ae33 ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements that impose data protection obligations equivalent to those described in this Policy;
• Transfer only to providers that maintain recognised security certifications and standards;
• Processing the minimum amount of data necessary for the specific service being provided by the third party.

By using the ae33 Platform, you acknowledge that your data may be processed in jurisdictions outside Bangladesh in accordance with the safeguards described above. ae33 will not transfer personal data to a third country without ensuring an adequate level of protection is in place.

13 Minors & Age Policy

The ae33 Platform is strictly intended for adults aged 21 years and above. ae33 does not knowingly collect personal data from any individual under the age of 21. If ae33 discovers or is notified that an account has been registered by a person under the age of 21, the account will be closed immediately, all funds will be returned to the source payment method, and all associated personal data will be deleted (subject to any legal retention requirements).

If you are a parent or guardian and believe that a person under the age of 21 has created an ae33 account using your payment details or contact information, please contact us immediately at [email protected]. ae33 will investigate and take appropriate action as quickly as possible.

ae33 strongly recommends that parents and guardians in Bangladesh use device-level parental control tools to prevent minors from accessing online gambling platforms. Organisations such as GamCare and Gambling Therapy provide free resources and support for families affected by underage gambling.

14 Amendments to This Policy

ae33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, ae33 will:

• Update the "Last Updated" date at the top of this Policy;
• Display a prominent notice on the ae33 Platform informing players that the Privacy Policy has been updated;
• Where practicable, send a notification to the email address or mobile number registered on your account.

Your continued use of the ae33 Platform after the effective date of any updated Policy constitutes your acknowledgement of the revised terms. If you do not agree with the changes, you must stop using the Platform and may request account closure by contacting ae33 support. ae33 recommends that you revisit this Policy periodically to stay informed.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ae33 holds about you, please contact the ae33 data protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Policy Enquiry" or "Data Rights Request" in your email subject line to ensure prompt routing to the correct team;
• Response Time: ae33 acknowledges all privacy enquiries within 5 business days and aims to provide a full response within 30 calendar days;
• Operating Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

ae33 is committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with ae33's response to a privacy enquiry, you may escalate your concern in writing to ae33's compliance team. ae33's decision on escalated privacy complaints is final, subject to any rights you may have under applicable law.