Privacy Policy

When you register an account, use the xk33 platform, or contact our support team, we may collect the following categories of personal data:

Sensitive Data: xk33 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If you voluntarily disclose sensitive information in the course of a support interaction, we will handle it with the highest level of care and will not retain it beyond the duration of the relevant interaction unless required by law.

Data from Third Parties: We may also receive limited personal data about you from third-party sources, including payment processors (for transaction verification), identity verification partners (for KYC checks), and fraud-prevention services. Any data received from these sources is handled in accordance with this Privacy Policy.

Children's Data: xk33 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that data belonging to an under-18 individual has been collected, we will delete it immediately and close the associated account without notice.

xk33 processes your personal data only where we have a lawful basis for doing so. The primary lawful bases we rely on are: (a) performance of a contract — processing necessary to provide you with the services you have requested; (b) legal obligation — processing required to comply with applicable law; (c) legitimate interests — processing that serves xk33's reasonable business interests without overriding your privacy rights; and (d) consent — where you have given us explicit permission for a specific purpose, such as receiving marketing communications.

We use your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your xk33 account, verifying your identity, and processing your registration information.
• Service delivery: Enabling you to participate in games, place bets, make deposits and withdrawals, and access all features of the xk33 platform.
• Payment processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, Mastercard, and other supported payment methods.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, account takeovers, money laundering, and other prohibited conduct using automated monitoring tools and manual review.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing access to self-exclusion, deposit limit, and cooling-off tools as described on our Responsible Gaming page.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and providing technical assistance.
• Legal compliance: Meeting our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and data protection laws.
• Marketing communications: Sending you promotional offers, bonus notifications, and news about upcoming tournaments and events — but only where you have opted in to receive such communications. You may withdraw consent at any time via your account settings or by contacting support.
• Platform improvement: Analysing aggregated usage data to understand how Players interact with xk33, identify areas for improvement, and develop new features.
• Personalisation: Tailoring your experience on xk33 — for example, displaying game recommendations based on your play history — to make the platform more relevant and enjoyable for you.

xk33 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform efficiently and to provide you with a seamless user experience. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What is a Cookie? A cookie is a small text file that is placed on your device when you visit a website. Cookies allow websites to recognise your device on subsequent visits, remember your preferences, and maintain your login session. Cookies cannot execute code or transmit viruses and do not give us access to your device beyond what you choose to share.

Third-Party Cookies: Our game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may set their own cookies within their game iframes to maintain game state and session integrity. These cookies are governed by the respective providers' own privacy policies and are strictly limited to in-game functionality. xk33 does not permit third-party advertising cookies on the platform.

Managing Cookies: You can manage or disable cookies at any time through your browser settings. Please note that disabling strictly necessary cookies may prevent you from logging in or using core platform features. Most modern browsers allow you to view, block, and delete cookies via the browser's Privacy or Security settings menu. For detailed guidance, refer to the help documentation for your specific browser.

There are limited circumstances in which xk33 may share your personal data with third parties. In all cases, we share only the minimum data necessary for the relevant purpose, and we require all recipients to maintain appropriate technical and organisational safeguards.

The categories of third parties with whom we may share your data include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard receive the transactional data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations.
• Identity verification (KYC) partners: Third-party KYC service providers may receive your identity documents and personal details to conduct age and identity verification checks. These providers are contractually prohibited from using your data for any purpose other than verification.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners receive limited technical data (such as your anonymised player ID and session token) to deliver their games within the xk33 platform.
• Fraud prevention and AML services: Specialist providers may receive transaction data and behavioural signals to assist in detecting and preventing money laundering, fraud, and other financial crimes.
• IT and hosting providers: Data centre and cloud hosting providers who store and process platform data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, a court order, or a regulatory investigation, xk33 may disclose personal data to competent authorities. We will notify you of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of xk33 assets, your personal data may be transferred to the relevant acquiring entity, subject to equivalent privacy protections remaining in place.

xk33 does not share your personal data with social media companies, advertising networks, data brokers, or any organisation whose primary business involves the commercial exploitation of personal information. We do not permit any third-party recipient to use your data for their own marketing purposes.

xk33 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following controls:

• 256-bit SSL/TLS encryption on all data transmissions between your device and xk33 servers;
• Encryption at rest for sensitive data fields including passwords (stored as salted hashes), financial account numbers, and identity document data;
• Role-based access control ensuring that only authorised personnel with a documented operational need may access personal data, with all access events logged and auditable;
• Multi-factor authentication for all internal administrative systems that handle personal data;
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals;
• Intrusion detection systems monitoring for anomalous access patterns and potential data exfiltration attempts in real time;
• Segregated network architecture isolating the player database from public-facing systems to reduce attack surface;
• Regular data backups stored in encrypted form to ensure business continuity in the event of a system failure.

Security Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, xk33 will notify affected Players without undue delay via the email address registered to their account. Our incident response team is on call 24/7 to investigate and contain any security incidents. xk33 maintains a documented incident response plan that is reviewed and tested at least annually.

Your Responsibilities: The security of your account also depends on the strength and confidentiality of your login credentials. You are responsible for choosing a strong, unique password for your xk33 account and for keeping it confidential. xk33 will never ask you for your password via email, live chat, WhatsApp, or any other communication channel. If you suspect your account has been compromised, contact our support team immediately via live chat or at [email protected].

As a Player on xk33, you have meaningful rights over your personal data. We are committed to honoring these rights promptly and transparently. The following rights are available to all registered Players:

To exercise any of the above rights, please contact the xk33 data team at [email protected] with the subject line "Data Rights Request" and a clear description of your request. We will acknowledge your request within 5 business days and provide a full response within 30 calendar days. In some cases, we may need to verify your identity before processing your request.

Limitations: Some rights are not absolute. For example, we may be unable to delete personal data that we are required by law to retain (such as transaction records for AML compliance) or data that is necessary to resolve an open dispute relating to your account. Where we are unable to fulfil a request in full, we will explain the reasons clearly.

Marketing Opt-Out: If you no longer wish to receive promotional emails, SMS messages, or push notifications from xk33, you may opt out at any time by updating your notification preferences in your account settings, or by contacting support. Opting out of marketing communications will not affect your ability to use the xk33 platform or receive service-related communications such as account security alerts and payment confirmations.

xk33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

When the applicable retention period expires and there is no longer a legitimate reason to retain your data, xk33 will securely delete or anonymise it in accordance with our internal data disposal procedures. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and research purposes.

If you request account closure, we will initiate the deletion process for data that we are not legally required to retain. Data subject to mandatory retention periods will be held in a restricted, non-operational state and will not be used for any active purpose until the retention period expires.

xk33 takes privacy complaints seriously. If you believe that we have handled your personal data in a manner that is inconsistent with this Privacy Policy, or that your privacy rights have been infringed, we encourage you to contact us directly in the first instance so that we can work to resolve your concern promptly.

How to Submit a Privacy Complaint:

1. Send an email to [email protected] with the subject line "Privacy Complaint";
2. Provide a clear description of your concern, including the specific data processing activity you believe was improper and the outcome you are seeking;
3. Include your full name and the email address associated with your xk33 account so that we can identify your records;
4. Our data team will acknowledge your complaint within 5 business days and provide a substantive response within 30 calendar days;
5. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction.

Policy Updates: xk33 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered Players via the email address associated with their account. The effective date at the top of this document will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Continued use of xk33 following notification of a material update constitutes your acceptance of the revised Policy.

Governing Law: This Privacy Policy is governed by applicable data protection and privacy law. Any dispute arising from this Policy that cannot be resolved through direct engagement with xk33 shall be subject to the dispute resolution process described in our Terms & Conditions. For further information about how your data is handled in specific contexts, please refer to our Terms & Conditions and our Responsible Gaming page.