ccd33 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Introduction

ccd33 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits or registers on the ccd33 platform at https://ccd33.io. This Privacy Policy sets out, in clear and formal terms, how we collect, store, use, and safeguard your personal information when you use any part of the ccd33 website or related services.

This policy applies to all registered players, account applicants, and visitors to the ccd33 platform from Bangladesh and any other jurisdiction in which ccd33 operates. By creating a ccd33 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Privacy Policy should be read alongside the ccd33 Terms & Conditions, which together form the complete agreement governing your relationship with ccd33. In the event of any conflict between this policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy shall take precedence.

This policy is written in English. All privacy-related communications from ccd33 to registered players will be conducted in English.

2 Data We Collect

ccd33 collects personal data that is necessary and proportionate to providing a safe, compliant, and functional online gaming service. The categories of personal data we may collect include:

2.1 Identity Data

• Full legal name as it appears on a government-issued identity document.
• Date of birth (used for mandatory age verification — all players must be 21 or older).
• National ID number or passport number (collected during enhanced verification).
• Photograph of identity document, where required for Know Your Customer (KYC) verification.

2.2 Contact Data

• Registered email address.
• Mobile phone number (used for account security and payment processing via bKash, Nagad, and Rocket).
• Residential address in Bangladesh, including division, district, and postal code.

2.3 Financial Data

• bKash, Nagad, Rocket, and Upay mobile wallet identifiers linked to your account for deposit and withdrawal processing.
• Masked card numbers (last four digits only) for Visa and Mastercard transactions.
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used.

2.4 Technical & Usage Data

• IP address and approximate geographic location at the time of login and account activity.
• Device type, operating system, and browser version.
• Session duration, pages visited, games played, and betting activity within the ccd33 platform.
• Login timestamps and access logs retained for security and fraud prevention purposes.

2.5 Communications Data

• Records of live chat conversations and email correspondence with ccd33 support.
• Feedback, complaints, and dispute records.
• Marketing preference settings — whether you have opted in or out of promotional communications.

The table below summarises the primary data categories and the lawful basis under which ccd33 processes them:

3 How We Collect Data

ccd33 collects personal data through the following channels:

• Direct submission: Information you provide when completing the account registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting ccd33 support.
• Automated collection: Technical data collected automatically when you access the ccd33 platform, including IP address, device fingerprint, browser data, and session logs. This is collected via server logs, cookies, and similar tracking technologies.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a deposit or withdrawal. ccd33 does not store full card numbers; this data is handled directly by the respective payment service providers.
• Identity verification providers: Confirmation data returned by third-party KYC and identity verification services used to validate documents submitted during account verification.
• Responsible gaming tools: Data generated when you interact with self-exclusion, deposit limit, or session limit features within your ccd33 account settings.

4 How We Use Your Data

ccd33 uses the personal data we collect for the following specific purposes only:

• Account management: Creating, maintaining, and securing your ccd33 player account, including login authentication and account recovery.
• Age and identity verification: Confirming that all registered players are 21 years of age or older and that identity details match those provided at registration. This is a non-negotiable legal and ethical obligation.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard in Bangladeshi Taka (BDT).
• Fraud prevention and security: Detecting and preventing unauthorised access, duplicate accounts, bonus abuse, money laundering, and other fraudulent activity on the platform.
• Responsible gaming: Monitoring gaming behaviour to identify patterns that may indicate problem gambling, and enforcing self-exclusion or deposit limits set by the player.
• Customer support: Responding to queries, resolving disputes, and providing assistance via live chat and email.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the ccd33 platform, fix bugs, and develop new features.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — but only if you have explicitly opted in to receive such communications. You may opt out at any time by contacting [email protected].
• Legal compliance: Meeting obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection regulations.

5 Data Sharing & Disclosure

ccd33 does not sell, rent, or disclose your personal data to third parties for commercial gain. We may share your personal data with the following categories of recipients only where strictly necessary:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard, solely to process deposits and withdrawals associated with your account.
• Identity verification providers: Third-party KYC service providers who validate identity documents submitted by players during the account verification process.
• Fraud prevention and security partners: Specialist third-party services used to detect fraudulent access patterns, duplicate accounts, and suspicious financial transactions.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised gameplay data necessary to deliver their games on the ccd33 platform. These providers do not receive your identity or financial data.
• Legal and regulatory authorities: Where ccd33 is required by law, court order, or regulatory directive to disclose personal data, we will comply. We will notify you of such disclosure where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets involving ccd33, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights will be preserved.

All third-party service providers engaged by ccd33 are contractually required to handle your personal data securely, use it only for the purposes for which it was shared, and comply with applicable data protection standards.

6 Data Retention

ccd33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Active account data: Retained for the duration of your account relationship with ccd33, plus a minimum of 5 years following account closure, in accordance with AML and financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the date of collection, or longer if required by applicable law or ongoing regulatory investigation.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Live chat and email records retained for 2 years from the date of the last communication.
• Technical and access logs: Retained for 12 months from the date of generation, used for security audit and fraud investigation purposes.
• Marketing preference records: Retained for the duration of your account and for 2 years following account closure, to demonstrate compliance with opt-in and opt-out requests.

When personal data is no longer required and no legal retention obligation applies, ccd33 will securely delete or anonymise that data in a manner that prevents recovery or reconstruction.

7 Cookies & Tracking Technologies

ccd33 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The cookies used by ccd33 fall into the following categories:

• Strictly necessary cookies: Required for the ccd33 platform to function. These include session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Performance cookies: Collect anonymised data about how players interact with the platform — such as which game categories are most visited and where errors occur — so that ccd33 can improve the user experience. No personal identity data is stored in these cookies.
• Preference cookies: Remember your display settings, language preferences, and other platform customisations so that you do not need to re-enter them on each visit.

ccd33 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. Your browsing activity on the ccd33 platform is not shared with advertising networks.

You can manage or delete cookies through your browser settings. Disabling strictly necessary cookies may impair the functionality of the ccd33 platform, including the ability to log in and maintain a session.

8 Data Security

ccd33 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ccd33 servers.
• Encryption of sensitive data fields (including identity document data and financial identifiers) at rest in ccd33 databases.
• Role-based access controls ensuring that only authorised ccd33 personnel can access personal data, and only to the extent necessary for their role.
• Regular security audits and vulnerability assessments of the ccd33 platform infrastructure.
• Multi-factor authentication available to all registered players for account login protection.
• Secure deletion procedures for data that has reached the end of its retention period.

While ccd33 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ccd33 will notify affected players without undue delay in accordance with applicable notification requirements.

9 Your Rights

As a registered ccd33 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact ccd33 support at [email protected]:

• Right of access: You may request a copy of the personal data that ccd33 holds about you. We will respond within 30 days of receiving a verified request.
• Right to rectification: If any personal data held by ccd33 is inaccurate or incomplete, you may request that it be corrected. Identity-related corrections will require supporting documentation.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to legal retention obligations — for example, financial transaction records must be retained for 5 years regardless of deletion requests.
• Right to restrict processing: You may request that ccd33 temporarily suspend processing of your personal data in specific circumstances, such as while the accuracy of data is being contested.
• Right to data portability: You may request a copy of the personal data you provided to ccd33 in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where data processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing of your personal data where ccd33 relies on legitimate interest as the legal basis, unless ccd33 can demonstrate compelling legitimate grounds that override your interests.

ccd33 will not charge a fee to process a data rights request unless the request is manifestly unfounded or excessive. In such cases, a reasonable administrative fee may apply and will be communicated before any work is undertaken.

10 Minors & Age Policy

The ccd33 platform is strictly intended for adults aged 21 years and above. ccd33 does not knowingly collect personal data from individuals under the age of 21. If ccd33 becomes aware that personal data has been collected from a person under the minimum age, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that a minor has created a ccd33 account or submitted personal data to the platform, please contact us immediately at [email protected]. We will investigate and take prompt remedial action.

11 Third-Party Services

The ccd33 platform integrates with third-party service providers — including payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), and identity verification tools — to deliver a complete gaming experience. Each of these providers operates under its own privacy policy and data protection practices.

ccd33 carefully vets all third-party integrations to ensure they meet acceptable data security and privacy standards before any player data is shared. However, ccd33 is not responsible for the privacy practices of external third-party services. Where you interact directly with a third-party service (for example, completing a bKash payment via the bKash app), that interaction is governed by bKash's own privacy policy.

The ccd33 platform does not contain links to external third-party websites for advertising or affiliate purposes.

12 Changes to This Policy

ccd33 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection or a new sharing arrangement — we will notify registered players by email at least 7 days before the revised policy takes effect.

The most current version of the ccd33 Privacy Policy is always available at https://ccd33.io/privacy-policy. The effective date shown at the top of this document reflects when the current version was last updated. Continued use of the ccd33 platform after the effective date of a revised policy constitutes acceptance of the updated terms.

13 Contact Us

If you have any question, concern, or request relating to this Privacy Policy or the personal data that ccd33 holds about you, please contact the ccd33 data support team through any of the following channels:

• Email: [email protected] — responses within 2–4 hours during operational hours.
• Live Chat: Available 24/7 via the ccd33 platform. Average response time under 5 minutes.

Please include "Privacy Request" in the subject line of any email relating to a data rights request so that it can be directed to the appropriate team without delay. We may ask you to verify your identity before processing any access, rectification, or erasure request to ensure that we are dealing with the correct account holder.