cd333 Privacy Policy

1 Who We Are

cd333 is an online betting and casino platform operating at cd333.im, serving players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. For the purposes of this Privacy Policy, cd333 acts as the data controller in respect of all personal data collected from players registered on the platform.

As data controller, cd333 determines the purposes for which personal data is collected and the means by which it is processed. We are committed to handling player data responsibly, lawfully, and transparently at all times.

If you have any questions about how cd333 handles your personal data, you can contact our dedicated privacy team at any time using the contact details provided in Section 16 of this policy.

2 Data We Collect

cd333 collects the following categories of personal data from players. This data is collected only where it is necessary for the lawful operation of the platform and the delivery of services to you.

2.1 Identity Data

Full legal name, date of birth, gender, nationality, and copies of government-issued identity documents such as the Bangladesh National Identity Card (NID), passport, or driving licence. This data is collected as part of our Know Your Customer (KYC) and age verification obligations.

2.2 Contact Data

Email address, mobile phone number, and residential address (including city, division, and postcode within Bangladesh). This data is used for account communication, support correspondence, and identity verification.

2.3 Financial Data

Payment method details associated with deposits and withdrawals, including bKash wallet numbers, Nagad account numbers, Rocket account identifiers, Upay references, bank account details for BRAC Bank, Dutch-Bangla Bank, City Bank, Islami Bank, and Sonali Bank transfers, and masked card numbers for Visa and Mastercard transactions. Full card numbers are never stored on cd333 servers — they are processed directly by our certified payment processors.

2.4 Transaction Data

Records of all deposits, withdrawals, wagers placed, games played, bonus claims, and account balance changes. This data is retained for financial reconciliation, dispute resolution, and AML compliance purposes.

2.5 Technical Data

IP address, device type, operating system, browser type and version, screen resolution, session duration, pages visited, click-path data, and approximate geolocation derived from IP address. This data helps cd333 detect fraud, prevent multi-accounting, and optimise the platform experience.

2.6 Behavioural Data

Game preferences, betting patterns, wagering frequency, average stake size, session timing, and responsible gaming tool usage. This data is used to personalise the platform experience and to identify players who may benefit from responsible gaming interventions.

2.7 Communications Data

Records of all communications between you and cd333 support staff, including live chat transcripts, email correspondence, and any documents or screenshots submitted as part of a complaint or dispute resolution process.

3 How We Collect Your Data

cd333 collects personal data through the following channels:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated collection: Technical data collected automatically when you access the platform, including via cookies, web beacons, server logs, and similar tracking technologies (see Section 10).
• Third-party collection: Data received from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification service providers, fraud detection partners, and game software suppliers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) in connection with the delivery of their services on the platform.
• Publicly available sources: Where permitted, cd333 may supplement account data with information from publicly available sources to assist with fraud prevention or AML screening.

4 Why We Use Your Data

cd333 uses the personal data we collect for the following specific purposes:

5 Legal Basis for Processing

cd333 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to provide the services you have signed up for, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable AML regulations, age verification requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out to pursue cd333's legitimate business interests in fraud prevention, platform security, responsible gaming, and business analytics — where these interests are not overridden by your rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed consent — primarily for marketing communications and optional personalisation features. You may withdraw consent at any time by contacting us at [email protected].

6 Data Sharing & Disclosure

cd333 does not sell your personal data. We may share your personal data with the following categories of third parties, strictly for the purposes described in this policy:

6.1 Payment Processors

bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum data necessary to process your deposits and withdrawals. These parties operate under their own privacy policies and are independently responsible for the security of data they receive.

6.2 Game Software Providers

Licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised player identifiers and session data to deliver their games within the cd333 platform. No directly identifiable personal data (such as your full name or address) is transmitted to game providers unless required for dispute resolution.

6.3 Identity Verification Services

Third-party KYC and identity verification providers receive identity documents and biometric data solely for the purpose of verifying your identity and age. These providers are contractually bound to handle your data securely and to use it only for the purposes specified by cd333.

6.4 Fraud Prevention & AML Partners

cd333 works with specialist fraud detection and AML screening providers who process transaction and behavioural data to identify suspicious activity. These partners operate under strict data processing agreements and are prohibited from using your data for any purpose other than the specific services they provide to cd333.

6.5 Legal and Regulatory Disclosure

cd333 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory obligation. Where permitted, cd333 will notify you of any such disclosure.

6.6 Business Transfers

In the event that cd333 undergoes a merger, acquisition, restructuring, or sale of all or part of its business, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance of any such transfer and of any changes to this Privacy Policy that result from it.

7 International Data Transfers

cd333's primary server infrastructure is designed to keep player data processed within secure, commercially standard data centre environments. Where personal data is transferred to or processed by service providers located outside Bangladesh — for example, game software providers or fraud prevention services — cd333 ensures that appropriate safeguards are in place.

These safeguards include contractual data processing agreements that require receiving parties to maintain data security standards equivalent to those applied by cd333, and to process personal data only for the purposes explicitly authorised by cd333.

8 Data Retention

cd333 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulation. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised aggregated data (e.g., overall platform usage statistics) may be retained indefinitely for analytical purposes.

9 Your Data Rights

As a cd333 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected]. cd333 will respond to all valid requests within 30 calendar days.

10 Cookies & Tracking Technologies

cd333 uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used:

• Strictly Necessary Cookies: These are required for the platform to function and cannot be switched off. They include session authentication cookies, security tokens, and load-balancing cookies. No personal data is collected by these cookies beyond what is technically necessary.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players navigate the platform — which pages are visited most, where users drop off, and how long sessions last. This information is used solely to improve platform performance and user experience.
• Functional Cookies: These cookies remember your preferences such as language setting, preferred payment method display, and game category filters, so you do not have to re-enter them each session.
• Fraud Prevention Cookies: These cookies help cd333 detect and prevent fraudulent activity, multi-accounting, and automated bot traffic. They may persist across sessions and are essential to platform security.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary or fraud prevention cookies may impair your ability to use the platform correctly.

11 Security Measures

cd333 takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or alteration.

11.1 Technical Measures

• 256-bit SSL/TLS encryption for all data transmitted between your device and cd333 servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Multi-factor authentication options for player accounts.
• Continuous automated monitoring of network traffic for intrusion attempts and anomalous behaviour.
• Regular penetration testing and security audits conducted by independent security professionals.
• Strict access controls ensuring that cd333 staff can only access player data on a need-to-know basis.

11.2 Organisational Measures

• All cd333 staff who handle personal data receive regular data protection and security awareness training.
• Data processing agreements are in place with all third-party processors who access player data.
• Internal data protection policies govern how staff handle, store, transfer, and dispose of personal data.
• A documented incident response procedure is in place to manage and report any data security breach promptly.

12 Children & Minors

cd333 is strictly an adult platform. Players must be 21 years of age or older to register an account or engage in any wagering activity. cd333 does not knowingly collect personal data from individuals under the age of 21.

If cd333 discovers that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all personal data associated with it will be deleted, and any funds held in the account will be dealt with in accordance with our Terms & Conditions.

Parents and guardians are encouraged to make use of internet filtering and parental control software to prevent minors from accessing gambling platforms. If you believe a minor may have registered on cd333, please contact us immediately at [email protected].

13 Payment Data & Financial Privacy

cd333 recognises that financial data is among the most sensitive categories of personal information. The following specific protections apply to payment-related data collected on the platform:

• Full payment card numbers (Visa, Mastercard) are never stored on cd333 servers. Card data is tokenised and processed exclusively by PCI-DSS compliant payment processors.
• Mobile banking identifiers (bKash wallet numbers, Nagad account numbers, Rocket numbers, Upay references) are stored in encrypted form and are only accessible to authorised payment processing staff.
• Bank account details provided for bank transfer withdrawals are encrypted at rest and purged from active systems within 30 days of the relevant withdrawal being completed, unless retained for AML compliance purposes.
• Cryptocurrency wallet addresses associated with deposits or withdrawals are stored in encrypted form. cd333 does not store private keys or seed phrases on behalf of players.
• All payment-related communications between cd333 and third-party payment processors are transmitted over encrypted channels.

14 Marketing Communications

cd333 may send you promotional communications about bonuses, seasonal offers, new game launches, and betting opportunities — including promotions tied to BPL season, IPL, T20 World Cup, Eid, Pohela Boishakh, Victory Day (December 16), and Independence Day (March 26) — where you have given explicit consent to receive such communications.

14.1 Consent

Consent for marketing communications is obtained separately from the general account registration process. You can opt in to marketing communications via your account settings or by responding positively to a specific opt-in prompt. Consent is recorded electronically with a timestamp.

14.2 Opting Out

You may withdraw your consent for marketing communications at any time by updating your preferences in your account dashboard, clicking the unsubscribe link in any marketing email, or by emailing [email protected] with the subject line "Marketing Opt-Out". Opt-out requests are processed within 5 business days. Withdrawing marketing consent does not affect your ability to continue using the platform or receiving transactional communications (such as deposit confirmations and withdrawal notifications).

14.3 No Profiling for Third-Party Marketing

cd333 does not use your personal data to build profiles for sale to or use by third-party advertisers. Behavioural data collected on the platform is used only to personalise your cd333 experience and to send you relevant cd333 promotions where you have consented to receive them.

15 Policy Updates

cd333 reserves the right to update this Privacy Policy at any time. When a material change is made — for example, a new category of data is collected, a new third-party processor is engaged, or data retention periods change — cd333 will notify registered players via email and display a prominent notice on the platform at least 14 days before the updated policy takes effect.

Minor updates that do not materially affect your rights (such as clarification of existing language, correction of typographical errors, or reformatting of the document) may be made without advance notice. The "Last Updated" date shown at the top of this policy reflects the date of the most recent revision of any kind.

Your continued use of the cd333 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you should close your account before the change takes effect and contact [email protected] to request deletion of your personal data, subject to our legal retention obligations.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cd333 handles your personal data, please contact our privacy team using the details below. All privacy-related enquiries are handled with strict confidentiality.

When contacting cd333 about a data rights request, please include your registered email address and a clear description of your request so we can verify your identity and process your request efficiently. cd333 will never charge a fee for handling a data rights request unless the request is manifestly unfounded or excessive.