cd33bd Privacy Policy

1. Introduction

cd33bd ("cd33bd", "we", "us", "our") operates the online gaming platform accessible at https://cd33bd.biz (the "Platform"). We are committed to protecting the privacy of all individuals who access or use our Platform, including registered players, visitors, and any other users ("you", "your").

This Privacy Policy describes how cd33bd collects, receives, uses, stores, shares, transfers, and otherwise processes personal data in connection with your use of the Platform. It also explains the choices and rights available to you regarding your personal data and how you may exercise those rights.

By creating a cd33bd account, accessing the Platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, you should discontinue your use of the Platform and contact us to request deletion of any data already collected.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the overall relationship between you and cd33bd.

2. Data Controller

For the purposes of applicable data protection legislation, cd33bd is the data controller of the personal information collected through the Platform. As data controller, cd33bd determines the purposes and means by which your personal data is processed.

All data protection enquiries, requests, and complaints should be addressed to the cd33bd Data Protection contact. Contact details are provided in Section 15 of this Policy.

3. Data We Collect

cd33bd collects personal data from you in the following categories, depending on how you use the Platform:

3.1 Registration & Account Data

• Full legal name as it appears on government-issued identification
• Date of birth (to verify age eligibility — 18+ only)
• Email address
• Mobile phone number
• Residential address (city, district, country)
• Username and encrypted password
• Preferred currency (BDT)

3.2 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued photo ID (National ID card, passport, or driving licence)
• Proof of address documents (utility bill, bank statement)
• Proof of payment method ownership (screenshot of bKash, Nagad, or bank account)
• Selfie photographs submitted for liveness verification where required

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method identifiers (mobile wallet account numbers, bank account references — partial only, never full account credentials)
• Transaction reference numbers issued by payment processors
• Bonus credits and wagering activity records

3.4 Gameplay & Betting Data

• Game session logs (game title, start/end time, stake, outcome)
• Sports betting slip history (event, market, odds, stake, settlement)
• Account balance history

3.5 Technical & Device Data

• IP address
• Browser type and version
• Operating system and device type
• Screen resolution and language settings
• Referring URL and exit page
• Session duration and page interaction data

3.6 Communications Data

• Records of correspondence with cd33bd support, including email content and timestamps
• Feedback, complaints, and dispute records
• Responses to surveys or promotional communications where you choose to participate

4. How We Use Your Data

cd33bd uses the personal data described above for the following specific purposes:

Purpose	Data Categories Used
Creating and managing your Account	Registration data, KYC data
Processing deposits and withdrawals	Financial data, KYC data
Verifying your identity and age (18+)	KYC data, registration data
Delivering games and betting services	Gameplay data, account data
Detecting and preventing fraud and money laundering	All categories
Complying with legal and regulatory obligations	All categories
Providing customer support	Registration data, communications data
Sending service notifications and security alerts	Registration data, technical data
Improving Platform performance and user experience	Technical data, gameplay data
Sending promotional communications (where consented)	Registration data, communications data
Responsible gaming monitoring and intervention	Gameplay data, financial data

cd33bd does not use your personal data for any purpose that is incompatible with those listed above. Where we intend to use your data for a new purpose, we will update this Privacy Policy and, where required, seek your consent before proceeding.

5. Legal Basis for Processing

cd33bd processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is required to perform the contract between you and cd33bd — for example, to create your Account, process your transactions, and deliver gaming services.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations and age verification requirements.
• Legitimate interests: Processing is necessary for cd33bd's legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and improving service quality, provided those interests are not overridden by your rights.
• Consent: Where processing is based on your consent — for example, sending you promotional emails or newsletters — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

6. Data Sharing & Disclosure

cd33bd does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your personal data with the following categories of recipients for the purposes described in Section 4:

• Payment processors and mobile wallet providers: Including bKash, Nagad, Rocket, Upay, and partner banks, solely for the purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC service providers engaged to assist with document verification and age confirmation.
• Game software providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data required to deliver gameplay and settle bets.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity vendors who process data on cd33bd's behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory instruction, cd33bd may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged to provide professional services to cd33bd, subject to appropriate confidentiality obligations.

All third parties with whom cd33bd shares personal data are required to handle that data in accordance with applicable data protection standards and are not permitted to use it for any purpose beyond what is strictly necessary.

7. Cookies & Tracking Technologies

cd33bd uses cookies and similar tracking technologies on the Platform to support essential site functionality, enhance user experience, and gather analytical data. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function and cannot be switched off. They include session cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery.
• Functional cookies: These cookies remember your preferences, such as your language settings and display options, to personalise your experience on the Platform.
• Analytical cookies: These cookies collect aggregated, anonymised data about how visitors use the Platform, including which pages are visited most frequently and how long sessions last. This data helps cd33bd improve Platform performance.
• Session identification cookies: Used to maintain continuity of your gaming session across page loads and to associate gameplay events with the correct Account.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Platform, including your ability to log in or place bets. cd33bd does not use advertising or retargeting cookies.

8. Data Retention

cd33bd retains personal data for only as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and KYC data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in accordance with anti-money laundering regulations.
• Transaction and financial data: Retained for a minimum of five (5) years following each transaction, as required for financial record-keeping and regulatory compliance.
• Gameplay and betting history: Retained for a minimum of three (3) years following the relevant session or bet settlement, for dispute resolution and responsible gaming monitoring purposes.
• Communications data: Retained for two (2) years following the close of the relevant support ticket or correspondence thread, unless the matter relates to an ongoing dispute or legal proceeding.
• Technical and device data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes.

When personal data is no longer required, cd33bd will securely delete or irreversibly anonymise it so that it can no longer be associated with any individual.

9. Data Security

cd33bd implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the cd33bd Platform
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment references
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Multi-factor authentication requirements for all cd33bd staff accessing systems containing personal data
• Automated fraud detection systems monitoring for suspicious access patterns and transaction anomalies
• Incident response procedures ensuring that any data breach is identified, contained, and, where required by law, reported to relevant authorities without undue delay

While cd33bd takes all reasonable precautions to protect your data, no system is entirely immune to risk. You are also responsible for maintaining the security of your own Account credentials. If you suspect that your Account has been compromised, please contact [email protected] immediately.

10. International Data Transfers

cd33bd operates internationally and may transfer your personal data to countries outside of Bangladesh, including to our hosting providers, game software partners, and KYC service providers. Where such transfers occur, cd33bd takes steps to ensure that your data receives an equivalent level of protection to that provided under applicable Bangladeshi data protection requirements.

Transfers to third-party service providers are governed by data processing agreements that impose contractual obligations on the recipient to process data securely and only for the purposes specified by cd33bd. Where transfers are made to jurisdictions without an adequacy finding, appropriate safeguards such as standard contractual clauses are applied.

11. Your Rights

Subject to applicable law, you have the following rights in relation to the personal data that cd33bd holds about you:

• Right of access: You may request a copy of the personal data cd33bd holds about you, along with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to cd33bd's legal retention obligations.
• Right to restriction: You may request that cd33bd restricts the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or the performance of a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on cd33bd's legitimate interests, including profiling for responsible gaming purposes, subject to cd33bd's overriding legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please submit a written request to [email protected]. cd33bd will respond to all verified data subject requests within thirty (30) days. We may request proof of identity before processing any request to protect against unauthorised access to another person's data.

12. Children's Privacy

The cd33bd Platform is strictly intended for adults aged 18 years and above. cd33bd does not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not use the Platform or provide any personal information to cd33bd.

If cd33bd becomes aware that personal data has been collected from a person under the age of 18, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has provided personal data to cd33bd, please contact us immediately at [email protected].

13. Third-Party Links

The cd33bd Platform may contain references to third-party game providers and payment services. This Privacy Policy applies solely to data collected by cd33bd through the Platform. cd33bd is not responsible for the privacy practices of any third-party provider, and we encourage you to review the privacy policies of any external services you interact with in connection with your cd33bd account.

14. Updates to This Privacy Policy

cd33bd reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players by posting a notice on the Platform and, where appropriate, by email. The "Last Updated" date at the top of this document will be revised to reflect the date of the most recent changes.

Your continued use of the cd33bd Platform following the posting of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how cd33bd is protecting your data.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or cd33bd's data protection practices, please contact our team through the following channel:

• Email: [email protected]
• Subject line: Privacy Policy Enquiry / Data Subject Request
• Response time: Within 30 calendar days of receipt
• Support hours: 24 hours a day, 7 days a week

For complaints that cannot be resolved through direct contact with cd33bd, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.