About This Policy
This Privacy Policy applies to all users of the cd33 platform, including the website at cd33.run and the cd33 mobile application. It explains how cd33 collects, uses, stores, and shares your personal data, and what rights you have in relation to that data. Please read it carefully alongside our Terms and Conditions.
1 Introduction
cd33 is committed to protecting the privacy of everyone who uses our platform. We understand that when you share your personal information with us, you are placing trust in cd33 to handle it responsibly. This Privacy Policy is our commitment to being transparent about how we do that.
When you register an account on cd33, make a deposit, play a game, or contact our support team, you share information with us. This policy explains what that information is, why we need it, and how we use it to deliver the cd33 experience to players across Bangladesh.
cd33 acts as the data controller for all personal data collected through the platform. This means we are responsible for deciding how and why your data is processed. If you have any questions about this policy or how your data is handled, you can contact us at [email protected] at any time.
2 Data We Collect
cd33 collects personal data in several ways — directly from you when you register or use the platform, automatically through your use of the site and app, and in some cases from third-party verification services. Here is a breakdown of the categories of data we collect:
| Category | Examples | How Collected |
|---|---|---|
| Identity Data | Full name, date of birth, gender, national ID number | Registration form, identity verification |
| Contact Data | Mobile number, email address, division/district | Registration form, account settings |
| Financial Data | bKash/Nagad/Rocket account numbers, transaction history | Deposit and withdrawal processing |
| Gaming Data | Games played, bets placed, session duration, win/loss history | Automatically via platform activity |
| Technical Data | IP address, device type, browser, operating system | Automatically via cookies and logs |
| Communications Data | Support chat logs, email correspondence | When you contact cd33 support |
cd33 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required for responsible gaming purposes and with your explicit consent.
3 How We Use Your Data
cd33 uses the personal data we collect for the following purposes:
- Account management: To create and maintain your cd33 account, verify your identity, and manage your profile settings.
- Transaction processing: To process deposits and withdrawals via bKash, Nagad, and Rocket, and to maintain accurate financial records.
- Platform delivery: To provide access to games, process bets, calculate results, and deliver the core cd33 gaming experience.
- Customer support: To respond to your queries, resolve disputes, and provide assistance when you contact the cd33 support team.
- Security and fraud prevention: To detect and prevent fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct.
- Responsible gaming: To monitor gaming patterns, identify potential problem gambling indicators, and apply responsible gaming tools where appropriate.
- Legal compliance: To meet our obligations under applicable laws and regulations, including anti-money laundering requirements and age verification rules.
- Platform improvement: To analyze how players use cd33 and make improvements to the platform, games, and user experience.
- Marketing communications: To send you relevant promotions and offers from cd33, where you have opted in to receive them. You can opt out at any time.
Marketing Opt-Out
If you no longer wish to receive promotional emails or SMS messages from cd33, you can unsubscribe at any time via the link in any marketing email, or by contacting [email protected]. Opting out of marketing does not affect transactional communications related to your account.
4 Legal Basis for Processing
cd33 processes your personal data on the following legal grounds:
- Contractual necessity: Processing required to fulfill our obligations to you under the Terms and Conditions — such as operating your account, processing payments, and delivering games.
- Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations.
- Legitimate interests: Processing carried out for cd33's legitimate business interests, such as fraud prevention, platform security, and improving our services — provided these interests are not overridden by your rights.
- Consent: Processing based on your explicit consent, such as sending marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5 Data Sharing
cd33 does not sell your personal data. We share data only in the following limited circumstances:
- Payment processors: We share financial data with bKash, Nagad, and Rocket as necessary to process your deposits and withdrawals. These providers are bound by their own privacy obligations.
- Identity verification services: We may share identity data with third-party verification providers to confirm your age and identity as required by our compliance obligations.
- Technology providers: We work with trusted technology partners who help us operate the platform, including hosting providers, analytics services, and customer support tools. These partners process data only on our instructions and are contractually bound to protect it.
- Regulatory and legal authorities: We may disclose data to government bodies, law enforcement agencies, or regulators where required by law or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other illegal activity.
- Business transfers: In the event of a merger, acquisition, or sale of cd33's business, your data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights will be preserved.
No Third-Party Marketing
cd33 never shares your personal data with third parties for their own marketing purposes. Any promotional communications you receive will come from cd33 directly, and only if you have opted in to receive them.
6 Cookies and Tracking
cd33 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use the site. Here is what we use and why:
- Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
- Functional cookies: Remember your preferences such as language settings, display options, and game history to personalize your experience on cd33.
- Analytics cookies: Help us understand how players navigate the platform — which pages are visited most, where players drop off, and how features are used. This data is aggregated and anonymized.
- Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts on the cd33 platform.
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the cd33 platform. Essential cookies cannot be disabled as they are required for the site to operate.
7 Data Retention
cd33 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:
- Account data: Retained for the duration of your account and for a minimum of 5 years after account closure, as required by financial regulations.
- Transaction records: Retained for a minimum of 5 years to comply with anti-money laundering and financial record-keeping obligations.
- Gaming activity logs: Retained for 2 years from the date of activity for dispute resolution and responsible gaming monitoring purposes.
- Support communications: Retained for 2 years from the date of the last interaction to assist with ongoing or future queries.
- Marketing consent records: Retained for as long as you remain opted in, plus 1 year after opt-out to demonstrate compliance.
When data reaches the end of its retention period and there is no legal basis for continued storage, cd33 securely deletes or anonymizes it so it can no longer be linked to you as an individual.
8 Your Rights
As a cd33 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected]:
Right of Access
Request a copy of the personal data cd33 holds about you, along with information about how it is being used.
Right to Rectification
Ask cd33 to correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data where there is no longer a legitimate reason for cd33 to hold it.
Right to Restriction
Ask cd33 to restrict processing of your data in certain circumstances, such as while a dispute is being resolved.
Right to Portability
Receive a copy of your personal data in a structured, machine-readable format that you can transfer to another service.
Right to Object
Object to cd33 processing your data for direct marketing purposes or on the basis of legitimate interests.
cd33 will respond to all data rights requests within 30 days. In complex cases, we may extend this by a further 30 days and will notify you if this is necessary. There is no charge for making a data rights request.
9 Data Security
cd33 takes the security of your personal data seriously and has implemented a range of technical and organizational measures to protect it against unauthorized access, loss, destruction, or alteration:
- Encryption in transit: All data transmitted between your device and the cd33 platform is encrypted using TLS (Transport Layer Security) to prevent interception.
- Encryption at rest: Sensitive data stored on cd33 servers, including financial information and identity documents, is encrypted at rest.
- Access controls: Access to personal data is restricted to authorized cd33 personnel on a strict need-to-know basis. All access is logged and regularly reviewed.
- Regular security audits: cd33 conducts regular security assessments and penetration testing to identify and address vulnerabilities in the platform.
- Incident response: cd33 has a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you promptly and take immediate steps to contain and remediate the incident.
Your Role in Security
While cd33 takes every reasonable step to protect your data, you also play an important role. Use a strong, unique password for your cd33 account, never share your login credentials, and contact support immediately if you suspect unauthorized access to your account.
10 Minors
cd33 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory part of the cd33 registration process, and accounts that cannot verify they belong to an adult will be suspended.
If cd33 discovers that personal data has been collected from a person under 18, we will immediately delete that data and close the associated account. If you believe a minor has registered on cd33, please contact us at [email protected] so we can investigate and take appropriate action.
Parents and guardians are encouraged to use parental control tools to prevent minors from accessing online gaming platforms. cd33 supports responsible gaming at every level, starting with strict age verification at the point of registration.
11 Changes to This Policy
cd33 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify registered players via email or an in-platform notification, and update the "Last Updated" date at the top of this page.
We encourage you to review this Privacy Policy periodically to stay informed about how cd33 is protecting your data. Continued use of the platform after changes are published constitutes your acknowledgment of the updated policy.
If any changes significantly affect how we use your personal data in ways that require your consent, we will seek that consent before the changes take effect.
12 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or how cd33 handles your personal data, please get in touch with our team:
- Email: [email protected]
- Subject line: Privacy Request — [your registered email]
- Response time: Within 30 days for formal data rights requests; typically much faster for general privacy queries.
- Support hours: 24 hours a day, 7 days a week
For questions about responsible gaming tools and self-exclusion, please visit our Responsible Gaming page. For questions about account rules and platform policies, see our Terms and Conditions.
We Take Privacy Seriously
cd33 is committed to handling every privacy query with care and transparency. Whether you want to know what data we hold, request a correction, or simply ask a question about this policy — reach out and we will get back to you promptly.