cbd33 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how cbd33 ("cbd33", "We", "Us", "Our") collects, uses, stores, shares, and protects the personal data of individuals ("You", "Your", "Player", "User") who access or use the cbd33 platform at cbd33.io ("Platform"). This Policy is incorporated by reference into the cbd33 Terms & Conditions and should be read alongside that Agreement.

cbd33 is committed to maintaining the highest standards of data privacy and security for all players based in Bangladesh and elsewhere. We process personal data only for defined, legitimate purposes and take all reasonable technical and organisational measures to protect that data against unauthorised access, disclosure, alteration, or destruction.

This Policy applies to all personal data processed in connection with your use of the Platform, including data collected during registration, identity verification, deposits and withdrawals, gameplay, customer support interactions, and any marketing communications you have opted into.

2 Data We Collect

cbd33 collects personal data through several channels — directly from you when you register or contact support, automatically when you use the Platform, and from third-party service providers involved in payment processing or identity verification. The categories of personal data we collect are set out in the table below.

cbd33 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health data, except where required for responsible gaming self-exclusion assessments or as mandated by applicable law.

3 How We Use Your Data

Personal data collected by cbd33 is used exclusively for the following defined purposes. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected, and we will not sell your personal data to third-party advertisers or data brokers.

• Account Creation and Management: To register your account, verify your identity, maintain your player profile, and administer your relationship with cbd33.
• Payment Processing: To process deposits made via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other supported payment methods, and to facilitate withdrawals to your verified payment method.
• Identity Verification (KYC/AML): To fulfil our Know Your Customer and Anti-Money Laundering obligations by verifying your identity and the legitimacy of your financial transactions.
• Platform Delivery: To deliver the sports betting, live casino, slots, fishing games, and other features of the cbd33 Platform to you.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct described in the Terms & Conditions.
• Customer Support: To respond to your support enquiries, resolve disputes, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Personalisation: To tailor your Platform experience, including relevant bonus offers and game recommendations, based on your activity history where you have not opted out of personalisation.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and enforce our Terms & Conditions.

4 Legal Basis for Processing

cbd33 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing that is required to perform our contract with you — including account registration, payment processing, and Platform delivery — is carried out on the basis that it is necessary to fulfil the Terms & Conditions Agreement between you and cbd33.
• Legitimate Interests: We may process data where it is in our legitimate business interests to do so and where those interests are not overridden by your rights and freedoms. This includes fraud detection, security monitoring, analytics, and platform improvement activities.
• Legal Obligation: We process certain data to comply with applicable legal requirements, including AML regulations, identity verification mandates, and responses to lawful regulatory requests.
• Consent: Where processing is based on your consent — for example, to send you promotional communications or to personalise your experience — you may withdraw that consent at any time by contacting support or adjusting your account preferences.

5 Data Sharing

cbd33 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Processors: We share relevant financial data with payment service providers — including bKash, Nagad, Rocket, Upay, and banking partners — to process your deposits and withdrawals. These providers are contractually required to protect your data and use it only for payment processing purposes.
• Identity Verification Providers: We may share identity documents and personal details with third-party KYC verification services to fulfil our identity verification and AML compliance obligations.
• Game Providers: We share a player identifier (not your full name or contact details) with our game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver their games within the cbd33 Platform.
• Technology and Infrastructure Providers: We use third-party cloud hosting, analytics, and security services. These providers operate under strict data processing agreements and may only process your data on our behalf and under our instruction.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to regulatory bodies, law enforcement agencies, or other governmental authorities where we are legally required to do so, or where disclosure is necessary to protect the safety and security of the Platform or its users.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of cbd33's business assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

6 Data Retention

cbd33 retains your personal data for as long as your account is active and for a defined period following account closure, as required for legal, regulatory, and operational purposes. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised. Anonymised data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

7 Cookies & Tracking

The cbd33 Platform uses cookies and similar tracking technologies to operate core Platform functions, maintain your session security, and understand how the Platform is used. Below is a summary of the cookie categories employed on the Platform.

• Strictly Necessary Cookies: These cookies are required for the Platform to function and cannot be disabled. They include session authentication tokens, security cookies, and load-balancing cookies. No consent is required for these cookies.
• Performance and Analytics Cookies: These cookies help us understand how players navigate and use the Platform by collecting aggregated, anonymous data about page visits and interaction patterns. This enables us to improve Platform performance and usability.
• Functional Cookies: These cookies remember your preferences — such as language settings, display preferences, and recently played games — to provide a more personalised experience.
• Security Cookies: We use cookies to detect and prevent fraudulent activity, including bot detection, duplicate session identification, and multi-account detection.

cbd33 does not use cookies to track your activity on third-party websites or to build advertising profiles for sale to external parties.

8 Security Measures

cbd33 takes the security of your personal data seriously. We implement a layered set of technical and organisational controls designed to protect your data against unauthorised access, loss, alteration, or disclosure.

• SSL/TLS Encryption: All data transmitted between your device and the cbd33 Platform is encrypted using Secure Sockets Layer (SSL) / Transport Layer Security (TLS) protocols. You will see the padlock icon in your browser address bar when using the Platform.
• Secure Data Storage: Personal data is stored on secured servers with restricted access. Physical and digital access controls limit who can view or process your data to authorised cbd33 personnel on a need-to-know basis.
• Password Security: Account passwords are stored in hashed form and are never stored in plain text. We encourage players to use strong, unique passwords and to change them regularly.
• Fraud Detection Systems: cbd33 operates real-time fraud and anomaly detection systems that monitor account activity for signs of unauthorised access, unusual transaction patterns, and prohibited conduct.
• Third-Party Security Audits: Our Platform and its infrastructure are subject to periodic security reviews to identify and remediate potential vulnerabilities.
• Staff Training: All cbd33 staff who handle personal data receive data protection training and are bound by confidentiality obligations.

9 Your Rights

As a user of the cbd33 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to our support team at support @ cbd33.io. We will respond within a reasonable timeframe and, where identity verification is required before processing your request, we will inform you promptly.

• Right of Access: You have the right to request a copy of the personal data cbd33 holds about you, along with information about how it is processed and the purposes for which it is used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held on your account. For minor details (such as contact information), you may update these directly within your account settings.
• Right to Erasure: In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies — you may request that cbd33 delete your personal data. Note that legal retention obligations (see Section 6) may limit our ability to action deletion requests in full.
• Right to Restriction of Processing: You may request that cbd33 restrict processing of your personal data in certain defined circumstances, such as while the accuracy of the data is contested or while an objection to processing is being assessed.
• Right to Object: You have the right to object to processing of your personal data that is carried out on the basis of legitimate interests, including where data is used for personalisation or direct marketing purposes. Upon receipt of a valid objection, cbd33 will cease that processing unless compelling legitimate grounds for continuation can be demonstrated.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting support. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

10 Minors & Age Restriction

The cbd33 Platform is strictly for individuals aged 21 years and above. cbd33 does not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

Parents and guardians are encouraged to make use of parental control tools and internet filtering software to prevent underage individuals from accessing gambling platforms. If you believe that a minor has registered on the cbd33 Platform or is using an adult's account, please contact us immediately at support @ cbd33.io.

11 Changes to This Policy

cbd33 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — such as a significant change to the purposes for which we process your data or to the parties with whom we share it — we will provide reasonable notice via the Platform before the changes take effect.

The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how cbd33 is protecting your data. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of those changes.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by cbd33, please contact our support team. All privacy-related enquiries will be handled in English within a reasonable timeframe.

• Email: support @ cbd33.io (plain text — not a clickable link)
• Live Chat: Available 24/7 via the Platform
• Response Time: We aim to acknowledge all privacy-related requests within 5 business days and to provide a full response within 30 days (Bangladesh Standard Time, UTC+6)
• Coverage: Serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar