na33 Privacy Policy — How We Handle Your Data

Information We Collect

na33 collects personal data through two primary channels: information you provide directly to us, and information collected automatically when you use the platform. The categories of data we collect are limited to what is reasonably necessary for the purposes described in this policy.

Information You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, or contact support, you may provide us with:

• Full legal name, date of birth, and gender (for age verification and account identity purposes).
• Bangladeshi mobile number and email address for account communication and two-factor authentication.
• National ID (NID), passport, or other government-issued documents submitted as part of KYC identity verification.
• Mobile wallet identifiers (such as your bKash or Nagad registered number) and bank account details used for deposits and withdrawals.

Information Collected Automatically

When you access and use the na33 platform, our systems automatically collect certain technical and usage data, including:

• Device type, operating system version, browser type, and unique device identifiers.
• IP address, approximate geographic location (country and city level), and internet service provider information.
• Gameplay data including games played, bet amounts, session duration, win/loss records, and bonus usage history.

Legal Basis for Processing

na33 processes personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity — processing is required to perform our obligations under the na33 Terms & Conditions, including account administration and transaction processing.
• Legal obligation — processing is necessary to comply with applicable laws and regulations, including anti-money laundering (AML) requirements and KYC obligations.
• Legitimate interests — processing serves na33's legitimate interests in fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights.
• Consent — where we process data for marketing communications or optional analytics, we rely on your explicit consent. You may withdraw consent at any time by contacting [email protected].

Payment and Financial Data

All financial transactions on na33 are conducted in Bangladeshi Taka (BDT). When you make a deposit via bKash, Nagad, Rocket, Upay, or a bank transfer, na33 records the transaction details including the amount, date, time, and the payment channel used. This information is retained as part of your account transaction history and is used to process future withdrawal requests, investigate transaction disputes, and comply with financial record-keeping obligations.

na33 does not store your full mobile wallet PIN, bank account password, or card CVV. Payment authentication is handled directly by the respective payment provider's secure systems. na33 only retains the reference data necessary to identify and reconcile transactions.

Your Rights Regarding Your Data

As a player on the na33 platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] and we will respond promptly:

• Right of access — you may request a copy of all personal data na33 holds about you, along with information about how it is being used.
• Right of rectification — if any personal data we hold about you is inaccurate or incomplete, you may request that we correct it.
• Right of erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal obligation to retain it exists.
• Right to object — you may object to processing of your data for direct marketing purposes or where processing is based on legitimate interests, subject to applicable overriding grounds.
• Right to restrict processing — in certain circumstances, you may request that we limit the way we use your data while a complaint or objection is being resolved.

na33 will respond to all data rights requests within a reasonable period. We may need to verify your identity before processing certain requests. Where a request cannot be fulfilled — for example, because a legal retention obligation applies — we will explain the reason in writing.

Data Security

na33 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and the na33 platform, secure server infrastructure with access controls, regular security assessments, and staff training on data handling procedures.

While na33 takes all reasonable steps to safeguard your data, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, na33 will notify affected players as soon as reasonably practicable and will take prompt remedial action.

Changes to This Privacy Policy

na33 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or an in-platform notice. We encourage you to review this policy periodically.

Your continued use of the na33 platform following any update to this policy constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you should discontinue use of na33 and contact our support team to close your account.