Privacy Policy – How cbd333 Protects Your Data

1. Introduction

This Privacy Policy ("Policy") describes how cbd333 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "User", "Player") who register for and use the cbd333 online casino and sports betting platform, accessible at https://cbd333.app.

cbd333 is committed to protecting your privacy and handling your personal data with transparency, integrity, and care. This Policy is written in plain, formal English and is the authoritative statement of cbd333's data practices. By creating an account on cbd333, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside the cbd333 Terms & Conditions, which govern the overall use of the platform. Definitions used in the Terms & Conditions apply equally in this Policy unless otherwise stated.

2. Data Controller

cbd333 acts as the data controller in respect of the personal data collected through the platform. As data controller, cbd333 determines the purposes and means by which personal data is processed. Where cbd333 engages third-party service providers to process data on its behalf (for example, payment processors or identity verification providers), those parties act as data processors under cbd333's instruction and are bound by appropriate data processing agreements.

For all privacy-related enquiries, requests, or complaints, you may contact cbd333's data team at the email address provided in Section 14 of this Policy.

3. Data We Collect

cbd333 collects the following categories of personal data from registered players and platform visitors:

3.1 Identity and Registration Data

• Full legal name
• Date of birth (for age verification)
• Gender (optional, where provided)
• Nationality and country of residence
• Username chosen at registration

3.2 Contact Data

• Mobile phone number (primary contact and payment verification)
• Email address (where provided for account communications)
• City or region within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna)

3.3 Financial and Payment Data

• Mobile banking account identifiers (bKash, Nagad, Rocket, Upay number — masked after verification)
• Card details where Visa or Mastercard is used (processed and held by the payment gateway; cbd333 does not store full card numbers)
• Transaction history: deposit amounts, withdrawal requests, dates, and statuses
• Account balance information

3.4 Identity Verification Documents (KYC)

• National Identity Card (NID) number or image
• Passport or driver's licence image (where submitted)
• Proof of address documentation (e.g., utility bill, bank statement)

3.5 Technical and Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session timestamps (login time, logout time, session duration)
• Pages visited, games played, bets placed, and betting history
• Referral source (how you arrived at cbd333)

3.6 Communications Data

• Records of support conversations via email or live chat
• Feedback, complaints, or dispute correspondence submitted to cbd333
• Responses to optional surveys or promotions

4. How We Collect Data

cbd333 collects personal data through the following channels and mechanisms:

• Registration form: Data you provide directly when creating your cbd333 account.
• Account activity: Data generated automatically as you use the platform — bets placed, games launched, deposits made, and withdrawals requested.
• KYC submissions: Documents you upload in response to identity verification requests.
• Payment processing: Data shared by your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard) to confirm transaction completion.
• Device and browser data: Technical data collected automatically via server logs and cookies when you visit the cbd333 website.
• Customer support interactions: Data you share when you contact cbd333 support via email at [email protected].
• Third-party identity verification providers: Where cbd333 uses an external KYC/AML service to verify your identity, that provider may share verification results and flagged data points with cbd333.

5. How We Use Your Data

cbd333 uses your personal data only for the purposes described below. We do not use your data for any purpose incompatible with these stated purposes without your prior consent.

6. Legal Basis for Processing

cbd333 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the agreement between cbd333 and the player — including account management, payment processing, and game access.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) laws, Know Your Customer (KYC) regulations, and any lawful requests from competent authorities.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and business analytics where cbd333's interests do not override your fundamental rights.
• Consent: Processing for marketing communications and optional data uses, where you have given explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Sharing and Disclosure

cbd333 does not sell your personal data. We share personal data only in the following circumstances and only to the extent necessary:

7.1 Payment Processors

To complete deposit and withdrawal transactions, cbd333 shares relevant account and payment data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard). These providers process data under their own privacy policies and are contractually required to handle data securely.

7.2 Identity Verification Providers

Where cbd333 uses a third-party KYC/AML service to verify player identities, identity documents and verification results are shared with that provider. Such providers are bound by confidentiality obligations and process data solely for verification purposes.

7.3 Game Providers

Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive anonymised session and stake data necessary to operate their games within the cbd333 platform. These providers do not receive your full identity or payment data.

7.4 Legal and Regulatory Disclosure

cbd333 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or legal process. cbd333 will notify you of such disclosures where permitted by law.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of cbd333's business, personal data held about players may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

8. Data Retention

cbd333 retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. The following indicative retention periods apply:

• Active account data: Retained for the duration of your active cbd333 account relationship.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with standard AML/financial record-keeping requirements.
• KYC identity documents: Retained for a minimum of five (5) years from account closure or from the date the document was submitted, whichever is later.
• Customer support records: Retained for three (3) years from the date of the interaction, unless the matter relates to an ongoing dispute or legal proceeding.
• Marketing consent records: Retained for three (3) years from the date of consent, or until consent is withdrawn, whichever is earlier.
• Technical log data: Retained for twelve (12) months from the date of collection, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

9. Data Security

cbd333 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the cbd333 platform is encrypted in transit using current SSL/TLS protocols.
• Password hashing: Account passwords are stored as one-way cryptographic hashes; cbd333 staff cannot read your password in plain text.
• Access controls: Access to systems holding personal data is restricted to authorised personnel, authenticated by secure credentials, and logged for audit purposes.
• Regular security reviews: cbd333 conducts periodic internal reviews of data handling practices and infrastructure security to identify and address vulnerabilities.
• Incident response: cbd333 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, affected players will be notified without undue delay.

While cbd333 takes all reasonable precautions, no online platform can guarantee absolute security. You play an important role in protecting your own data by keeping your cbd333 login credentials confidential and logging out of your account when using shared devices.

10. Your Privacy Rights

As a registered player on cbd333, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at the email address provided in Section 14.

• Right of access: You may request a copy of the personal data cbd333 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to restriction of processing: You may request that cbd333 limits how it uses your data in certain circumstances, for example while a correction request is being assessed.
• Right to data portability: You may request a copy of your personal data in a structured, machine-readable format, where technically feasible.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes.

cbd333 will respond to all privacy rights requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days, with written notice provided to you.

11. Cookies and Tracking Technologies

cbd333 uses cookies and similar tracking technologies on its website to provide a functional, personalised, and secure platform experience. The categories of cookies used are as follows:

• Strictly necessary cookies: Essential for the platform to function. These cookies maintain your login session, remember your language preference, and enable secure navigation. They cannot be disabled without affecting platform functionality.
• Performance and analytics cookies: Collect anonymised data about how visitors use the cbd333 platform — which pages are visited most frequently, where errors occur, and how users navigate between sections. This data is used to improve the platform experience.
• Functionality cookies: Remember your preferences (such as preferred deposit method or last game played) to provide a more personalised experience on return visits.
• Marketing and attribution cookies: Used to understand which referral channels bring players to cbd333, so that promotional spend can be measured. These cookies do not track you across unrelated third-party websites.

You may manage cookie preferences through your browser settings. Disabling certain categories of cookies may limit some platform features. For full cookie details and management options, please refer to your browser's help documentation.

12. Children's Privacy

The cbd333 platform is strictly for adults aged 18 years and above. cbd333 does not knowingly collect personal data from individuals under the age of 18. If cbd333 becomes aware that a player is under 18, the account will be immediately suspended, all bonus funds forfeited, and deposit funds returned to the verified source payment method. If you are a parent or guardian and believe that a minor has registered on cbd333, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

13. Changes to This Privacy Policy

cbd333 reserves the right to update this Privacy Policy at any time. When material changes are made, the "Last Updated" date at the top of this document will be revised. Where changes are significant, cbd333 will notify registered players via their registered contact details before the changes take effect. Your continued use of the cbd333 platform following notification of changes constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you may request account closure before the changes take effect.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or cbd333's data handling practices, please contact us using the following details:

• Privacy Enquiries Email: [email protected]
• Subject Line for Privacy Requests: Please use "Privacy Request – [Your Username]" to ensure your message is directed to the correct team.
• Response Time: cbd333 aims to respond to all privacy-related correspondence within 5 business days, Bangladesh Standard Time (BST, UTC+6).

For questions about your account, deposits, withdrawals, or gameplay, please visit the FAQ page or contact general support at the same email address. For information about your rights under these Terms and this Policy, see also the Terms & Conditions page.