Privacy Policy for c33bd — How We Handle Your Personal Data

This Privacy Policy ("Policy") describes how c33bd ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects personal information about users ("you", "your") of the c33bd website at https://c33bd.pro and all associated services. By registering an account or using any feature of the c33bd platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside c33bd's Terms & Conditions and Responsible Gaming Policy. In the event of any inconsistency between this Policy and the Terms & Conditions regarding the handling of personal data, this Policy takes precedence. c33bd is committed to ensuring that your personal information is handled with care, stored securely, and never sold to third parties for commercial purposes.

c33bd operates as a platform serving users in Bangladesh and may be subject to applicable data protection legislation. We apply data minimisation principles throughout our operations, meaning we only collect and retain information that is genuinely necessary for the purposes described in this Policy. We review our data handling practices regularly and update this Policy whenever our practices change in a material way.

c33bd collects personal data in three primary ways: information you provide to us directly, information we collect automatically when you use the platform, and information we receive from third-party service providers acting on our behalf. The following categories of information are collected when you register an account and during the ongoing use of the c33bd platform:

• Registration data: full legal name, date of birth, residential address, mobile number, email address, and username chosen at the time of account creation.
• KYC verification documents: copies of government-issued identification (NID, passport, or driving licence), proof of address documents, and payment method ownership evidence submitted through the KYC process.
• Financial transaction data: deposit amounts, withdrawal requests, payment method identifiers (bKash wallet number, Nagad account number, bank account details where applicable), and a full record of all monetary transactions conducted through your c33bd account.
• Account activity data: game play history including titles played, bet amounts placed, winnings, session timestamps, sports betting wager history, bonus claims, and any responsible gaming tool activations on your account.

The following categories of information are collected automatically through the use of cookies, web beacons, and server logs when you access the c33bd platform:

• Technical data: your IP address, browser type and version, operating system, device type (smartphone, tablet), screen resolution, referring URL, and mobile network operator.
• Usage data: pages visited, time spent on each page, links clicked, features used, error logs, and navigation paths through the platform.
• Location data: approximate geographic location (country and city level) derived from your IP address. c33bd does not collect precise GPS-level location data.

In certain cases, c33bd may also receive personal data about you from third-party identity verification providers, payment processors, and fraud prevention services engaged to assist with KYC and AML compliance. This data is handled with the same level of care and protection as data collected directly from you.

c33bd processes your personal data for the following purposes, each of which has a clearly identified lawful basis as described in Section 4 of this Policy:

• Account creation and management: processing your registration data to create your account, maintaining account security, and enabling you to access all platform features including games, betting, deposits, and withdrawals.
• Identity verification and KYC compliance: verifying your identity and age (21+) as required under our anti-money laundering and responsible gaming obligations, processing KYC documents, and maintaining records of verification outcomes.
• Transaction processing: facilitating deposits and withdrawals through bKash, Nagad, Rocket, Upay, and card payment channels; processing refunds where applicable; and maintaining a complete audit trail of all financial activity on your account.
• Customer support: responding to your enquiries, complaints, and support requests; investigating account issues; and resolving disputes related to your c33bd account.
• Fraud prevention and security: monitoring account activity for signs of fraud, money laundering, bonus abuse, collusion, or other prohibited conduct; conducting risk assessments; and taking appropriate action where suspicious activity is identified.
• Marketing and promotions: where you have given consent or where our legitimate interests apply, sending you information about c33bd promotions, bonuses, seasonal offers, and platform updates that may be relevant to you as a Bangladesh player.

c33bd does not use your personal data for automated decision-making processes that produce legal or similarly significant effects on you without human review. Any automated screening conducted for fraud or AML purposes that results in account restriction is reviewed by a member of the c33bd compliance team before becoming a final determination.

c33bd processes your personal data only where it has a clear and documented lawful basis for doing so. The four bases that c33bd relies on are:

• Contractual necessity: processing that is required to fulfil c33bd's obligations under the Terms & Conditions you agreed to when registering your account. This covers account creation, transaction processing, customer support, and game access.
• Legal obligation: processing required to comply with applicable anti-money laundering laws, KYC regulations, and other legal requirements under which c33bd operates. This covers identity verification, record-keeping, and mandatory reporting obligations.
• Legitimate interests: processing conducted to protect the platform and its user community from fraud, collusion, and abuse; to improve the platform's features and performance; and to communicate relevant promotional information to users who have not opted out of marketing communications.
• Consent: where c33bd relies on your consent as the basis for processing — for example, for certain marketing communications or optional data collection beyond what is strictly necessary — you have the right to withdraw that consent at any time by contacting support or updating your account preferences, without affecting the lawfulness of processing carried out before the withdrawal.

c33bd may share your personal data with the following categories of third parties, strictly for the purposes described:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card processing partners receive the minimum financial data necessary to execute your deposit and withdrawal transactions. These providers are bound by their own privacy and security obligations and are not permitted to use your data for any other purpose.
• Identity verification and KYC service providers: third-party KYC platforms used to verify identity documents and conduct AML screening. These providers receive only the data necessary to complete the verification task and are contractually prohibited from retaining or using your data beyond that task.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game studios may receive session-level data (such as bet amounts and game outcomes) as part of the technical integration required to deliver their games. This data is used solely for game delivery, dispute resolution, and RTP auditing.
• Law enforcement and regulatory authorities: c33bd will disclose personal data to competent government authorities, law enforcement agencies, or courts when required to do so by applicable law, valid legal process, or lawful order. c33bd will endeavour to notify you of such a disclosure to the extent permitted by law, unless prohibited from doing so by the relevant authority.

All third-party service providers engaged by c33bd are contractually required to implement appropriate technical and organisational security measures to protect any personal data they process on c33bd's behalf, and are prohibited from using that data for any purpose beyond the specific service they are contracted to deliver.

c33bd retains your personal data for as long as your account is active and for a period thereafter as required by our legal and regulatory obligations. For most account holders, the baseline retention period for identity, financial, and transaction data is five years from the date of account closure, in accordance with standard AML record-keeping requirements. Communications data (support tickets, chat logs) is retained for three years from the date of the last interaction. Device and usage data collected through cookies and server logs is retained for a maximum of thirteen months from the date of collection.

Where c33bd no longer has a legal or operational need to retain your personal data, it is securely deleted or anonymised so that it can no longer be linked back to you. If you request account closure and there are no outstanding legal holds or pending investigations on your account, c33bd will initiate the deletion process for non-legally-mandated data within thirty days of closure. Data subject to statutory retention requirements will be held for the legally mandated period and then deleted.

c33bd employs the following technical and organisational security measures to protect your personal data:

• Encryption in transit: all communications between your device and the c33bd platform are encrypted using SSL/TLS protocols. This prevents interception of your login credentials, personal data, and financial transaction details while they are in transit over the internet.
• Access controls: access to personal data within c33bd's internal systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data undergo privacy and security training and are bound by confidentiality obligations.
• Secure storage: personal data and KYC documents are stored on encrypted servers with firewall protection and regular security patching. Physical access to server infrastructure is restricted and monitored.
• Incident response: c33bd maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to the rights and freedoms of affected users, c33bd will notify affected users without undue delay and will take immediate remedial steps to contain and mitigate the breach.

Despite these measures, no method of electronic transmission or storage is completely secure. c33bd cannot guarantee the absolute security of your data, and you use the platform at your own risk in this regard. You are responsible for keeping your own login credentials confidential — do not share your password with anyone. c33bd will never ask for your password via email, live chat, or any other channel.

To exercise any of the rights listed above, please contact the c33bd data team by email at [email protected], clearly stating the right you wish to exercise and providing sufficient information to verify your identity. c33bd will respond to all data rights requests within thirty days. Complex or high-volume requests may take up to sixty days; in such cases c33bd will notify you of the extension within the initial thirty-day period.

c33bd uses cookies and similar tracking technologies (such as web beacons and pixel tags) to operate the platform, remember your preferences, and improve your experience. Cookies are small text files placed on your device by the platform. The platform uses four categories of cookies:

You may manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent the platform from functioning correctly. For detailed guidance on managing cookies in your specific browser, consult your browser's help documentation. Continued use of the c33bd platform after reviewing this Policy constitutes acceptance of our use of cookies as described above.

The c33bd platform integrates with third-party services including game content providers, payment processors, and KYC verification platforms to deliver its full range of services. When you interact with features powered by these third parties — for example, launching a live casino game from Evolution Gaming or completing a bKash payment — some technical data may be shared with those providers as described in Section 5. Those providers' own privacy policies govern how they handle that data, and c33bd recommends that you review the privacy policies of any third-party provider whose services you use through the platform.

c33bd is not responsible for the privacy practices of any third-party provider, and this Policy does not extend to any website, application, or service not directly operated by c33bd. Links or integrations to third-party services on the platform are provided for functionality only and do not constitute an endorsement of those providers' privacy practices.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to c33bd or has accessed the platform, please contact us immediately at [email protected]. We will investigate and take prompt action to remove the data and close any associated account. c33bd employs age verification checks at registration and during KYC as a primary safeguard against underage access.

c33bd reserves the right to update or amend this Privacy Policy at any time. The most current version of the Policy will always be available on this page, with the effective date shown at the top. Where c33bd makes a material change to the Policy — for example, a change to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — c33bd will notify registered users via a platform notification or email to the address on their account prior to the change taking effect.

Your continued use of the c33bd platform after a revised Policy has been posted constitutes your acceptance of the updated terms. If you do not agree with the changes, you should stop using the platform and may request account closure by contacting support. We recommend checking this page periodically to stay informed about how c33bd handles your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how c33bd handles your personal information, please contact us by email at: [email protected]

Our data team aims to acknowledge all privacy-related enquiries within two business days and to provide a substantive response within thirty days. For urgent matters — including suspected unauthorised access to your account or a request to immediately suspend data processing — please mark your message as urgent and our team will prioritise your case. All privacy enquiries are handled in strict confidence.