c33 Privacy Policy

Last Updated: 1 July 2026

1. Introduction

This Privacy Policy ("Policy") describes how c33 ("c33", "we", "us", "our") collects, uses, stores, discloses, and protects personal data obtained from players and visitors who use the c33 website at https://c33.cam and all associated services ("Platform"). c33 is committed to handling personal data with transparency, integrity, and respect for the privacy rights of all individuals who interact with the Platform.

By registering for a c33 account or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the c33 Platform.

This Policy should be read alongside the c33 Terms & Conditions, which govern your use of the Platform in full. Defined terms used in this Policy have the same meaning as in the Terms & Conditions unless otherwise stated.

2. Data Controller

c33 acts as the data controller in respect of personal data collected through the Platform. As data controller, c33 determines the purposes and means by which personal data is processed. All data-related enquiries, access requests, and complaints should be directed to the c33 support team using the contact details provided in Section 14 of this Policy.

3. Data We Collect

c33 collects personal data in several ways — directly from you when you register or use the Platform, automatically through your use of the Platform, and in limited circumstances from third-party service providers. The categories of personal data c33 may collect include:

Category	Examples	Collection Method
Identity Data	Full legal name, date of birth, national ID number, passport number	Provided by you at registration or during KYC verification
Contact Data	Email address, mobile phone number, residential address	Provided by you at registration or in account settings
Financial Data	Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details, transaction history	Provided by you during deposits and withdrawal requests
Account & Activity Data	Login history, game session records, betting history, bonus usage, account balance history	Automatically generated by Platform use
Technical Data	IP address, device type, browser type and version, operating system, session duration, referring URL	Automatically collected via cookies and server logs
Communications Data	Live chat transcripts, support email correspondence, feedback submissions	Provided by you when contacting c33 support
Verification Documents	Scanned copies or photographs of government-issued ID, utility bills, proof of payment account ownership	Provided by you during KYC verification

c33 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data. If any such data is incidentally disclosed during a support interaction, c33 will not process it for any purpose beyond resolving the specific matter to which it relates.

4. How We Use Your Data

4.1 Account Registration & Management

c33 uses identity and contact data to create and maintain your c33 account, verify your eligibility to use the Platform, and communicate essential account-related notifications such as deposit confirmations, withdrawal processing updates, and security alerts.

4.2 Payment Processing

Financial data is used to process your deposits and withdrawals via your chosen payment method — including bKash, Nagad, Rocket, Upay, and linked bank accounts. c33 retains transaction records as required for financial record-keeping and fraud prevention purposes.

4.3 Identity Verification (KYC)

c33 uses identity data and verification documents to confirm that you meet the minimum age requirement of 18 years, to confirm the accuracy of your registration information, and to prevent fraudulent account activity. KYC verification may be required before withdrawals are processed or at any other point c33 deems necessary.

4.4 Platform Operation & Improvement

Technical data and account activity data are used to operate the Platform, diagnose technical issues, monitor for unusual or fraudulent activity, and improve the overall c33 player experience. This includes analysing which games and features are most used and identifying areas where Platform performance can be enhanced.

4.5 Responsible Gaming

c33 uses account activity data, including wagering frequency, deposit patterns, and session duration, to monitor for signs of problem gambling behaviour. Where such signs are identified, c33 may proactively contact you to offer responsible gaming tools or to apply protective account restrictions as appropriate.

4.6 Legal & Regulatory Compliance

c33 may process your personal data where required to comply with applicable legal obligations, including responding to lawful requests from competent authorities, fulfilling record-keeping requirements, and enforcing the c33 Terms & Conditions.

4.7 Marketing Communications

With your consent, c33 may use your contact data to send you promotional offers, bonus notifications, and news about new games and features available on the Platform. You may withdraw your consent to marketing communications at any time by contacting c33 support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Legal Basis for Processing

c33 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil c33's obligations to you under the Terms & Conditions — including account creation, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC and anti-fraud obligations.
• Legitimate interests: Processing carried out for c33's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, including marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing

6.1 Service Providers

c33 shares personal data with trusted third-party service providers who assist in operating the Platform. These include payment processors (bKash, Nagad, Rocket, Upay, and banking partners), game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others), identity verification service providers, and IT infrastructure and hosting providers. All third-party service providers are contractually required to process personal data only for the purposes specified by c33 and to maintain appropriate data security standards.

6.2 Legal Disclosures

c33 may disclose personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required to do so by applicable law, court order, or in connection with the investigation of suspected fraud, money laundering, or other unlawful activity.

6.3 No Sale of Data

c33 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. Your data is not a product — it is a responsibility.

7. Data Retention

c33 retains personal data for as long as your c33 account remains active and for a reasonable period thereafter to fulfil the purposes described in this Policy. Specifically:

• Account and identity data is retained for the duration of the account relationship and for a minimum of five (5) years after account closure, in line with standard financial record-keeping practice.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• KYC verification documents are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support correspondence is retained for a period of two (2) years from the date of the last interaction.
• Technical and log data is retained for a period of twelve (12) months from collection.

Where c33 has no ongoing legitimate basis to retain personal data, it will be securely deleted or anonymised.

8. Data Security

c33 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the c33 Platform.
• Cryptographic hashing of account passwords — passwords are never stored in recoverable plain text.
• Role-based access controls limiting data access to authorised c33 personnel with a legitimate need.
• Regular internal security reviews and vulnerability assessments of the Platform infrastructure.
• Secure server environments with firewalls, intrusion detection, and monitoring systems.

While c33 takes all reasonable precautions to protect your data, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, c33 will notify affected players and take all appropriate remedial action without undue delay.

9. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by c33:

• Right of Access: You may request a copy of the personal data c33 holds about you at any time.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to Erasure: You may request the deletion of your personal data where c33 no longer has a lawful basis to retain it. Note that certain data may be retained where required by law or for legitimate business purposes.
• Right to Restriction: You may request that c33 restricts the processing of your personal data in certain circumstances, for example while a rectification request is pending.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing based on c33's legitimate interests or for direct marketing purposes. c33 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

To exercise any of these rights, please contact c33 support at [email protected]. c33 will respond to all valid requests within a reasonable timeframe. c33 may request proof of identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised person.

10. Cookies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function correctly, work more efficiently, and to provide information to the site operator about how the site is being used.

10.2 How c33 Uses Cookies

c33 uses the following categories of cookies on the Platform:

• Essential cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state while you navigate the site. The Platform cannot operate correctly without these cookies and they cannot be disabled.
• Analytical cookies: Used to collect anonymised information about how players use the Platform — for example, which pages are visited most frequently and whether error messages are encountered. This data helps c33 improve the Platform experience. These cookies do not identify you personally.
• Preference cookies: Used to remember your Platform settings and preferences, such as language selection and display options, so that they are maintained across sessions.

10.3 Third-Party Cookies

c33 does not permit third-party advertising networks to place tracking cookies on the Platform. Game content provided by third-party studios such as Pragmatic Play, Evolution Gaming, or Spribe may load within iframes and those studios may set their own functional cookies in accordance with their own privacy policies. c33 has no control over third-party studio cookies.

10.4 Managing Cookies

You can manage and delete cookies through your browser settings. Disabling essential cookies may impair the functionality of the c33 Platform and prevent you from logging in or accessing certain features. Please refer to your browser's help documentation for instructions on managing cookies.

11. Children's Privacy

The c33 Platform is strictly intended for adults aged 18 years and above. c33 does not knowingly collect personal data from any person under 18 years of age. If c33 discovers or is notified that personal data has been collected from a person under 18, that account will be immediately suspended and the associated personal data will be deleted as soon as practicable. If you believe a person under 18 has registered on c33, please notify c33 support immediately at [email protected].

12. International Data Transfers

c33 primarily serves players in Bangladesh and operates with data infrastructure located in Asia. In certain circumstances, personal data may be transferred to or accessed from locations outside Bangladesh — for example, where c33 uses cloud-based service providers with infrastructure in other countries, or where game content is served by studios based abroad.

Where such transfers occur, c33 takes appropriate steps to ensure that your personal data continues to receive a standard of protection consistent with this Policy. This may include entering into data processing agreements with relevant service providers that incorporate appropriate data protection safeguards.

13. Changes to This Policy

c33 reserves the right to update this Privacy Policy at any time. When material changes are made, c33 will notify registered players by email to the address on file or via a prominent notice on the Platform. The updated Policy will take effect on the date stated in the notice. Your continued use of the c33 Platform after the effective date of any update constitutes your acceptance of the revised Policy.

c33 encourages you to review this Policy periodically to stay informed about how your personal data is being handled. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way c33 handles your personal data, please contact the c33 support team using the details below:

• Support Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Response Time: c33 aims to acknowledge all written enquiries within 24 hours and to resolve data-related requests within a reasonable timeframe consistent with the nature of the request.

For data access or deletion requests, please include your registered email address and a brief description of your request. c33 may request proof of identity before processing your request to protect the security of your personal data.