Privacy Policy — How cd33bat Collects, Uses, and Protects Your Data
This Privacy Policy explains what personal data cd33bat collects from players in Bangladesh, how that data is used to operate the platform and improve your experience, who it may be shared with, and what rights you hold over your own information.
By registering on, accessing, or using the cd33bat platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you must not use the cd33bat platform. This policy applies to all players based in Bangladesh and to all services accessible through cd33bat.net.
Data We Collect
cd33bat collects personal data through several channels: directly from you when you register or use the platform, automatically as you interact with our website, and — in limited circumstances — from trusted third-party sources such as payment processors and identity verification providers. The categories of data we collect are set out below.
1.1 Registration and Account Data
When you create a cd33bat account, you provide us with information that is necessary to establish and maintain your account and to verify your identity. This includes:
- Full legal name as it appears on your government-issued identification document.
- Date of birth (used for mandatory age verification — players must be 18 or older).
- Email address and, where provided, a contact phone number.
- The mobile wallet number (bKash, Nagad, Rocket, or Upay) registered in your name, used as your primary deposit and withdrawal channel.
- Username and encrypted password credentials.
- Your physical address in Bangladesh, where required for enhanced KYC verification.
1.2 Identity Verification (KYC) Documents
As part of our Know Your Customer (KYC) obligations, cd33bat may request copies of official identity documents to verify your name, age, and address. Acceptable documents include your National ID card (NID), passport, or a government-issued driving licence. Copies of these documents are stored securely and handled in accordance with Section 6 (Data Security) of this policy.
1.3 Transaction and Financial Data
Every deposit and withdrawal processed through your cd33bat account generates a transaction record. This record includes the transaction amount in BDT (৳), the mobile wallet provider used, the date and time of the transaction in Bangladesh Standard Time (BST, UTC+6), and the transaction reference number issued by the mobile wallet gateway. cd33bat does not store full mobile wallet PINs or any equivalent authentication credential. Transaction records are retained for compliance purposes as detailed in Section 5 (Data Retention).
1.4 Gameplay and Betting Activity Data
cd33bat logs all game sessions, bet placements, and betting market interactions conducted through your account. This includes the game title and provider, bet amount, outcome, session start and end times, and any bonus funds applied to a session. This data is used to generate your in-account transaction and betting history, to administer bonus wagering requirements, and to identify patterns of play that may indicate a need for responsible gaming intervention.
1.5 Technical and Device Data
When you access cd33bat.net, our servers automatically collect certain technical data about your connection and device. This includes:
- IP address and approximate geographic location derived from it.
- Browser type, version, and operating system.
- Device type (desktop, mobile, tablet) and screen resolution.
- Referring URL (the page you visited immediately before arriving at cd33bat.net).
- Pages visited, time on page, and click-path data within the cd33bat platform.
- Session timestamps and duration.
This technical data is used primarily for platform security, fraud detection, and performance optimisation. It is not used to build individual advertising profiles and is not sold to third-party advertisers.
1.6 Communications Data
When you contact the cd33bat support team — by email to [email protected] or through any in-platform support channel — the content of your communications, your email address, and any attachments you provide are stored as part of your support case record. This data is retained to allow the support team to manage ongoing cases, to maintain a record of commitments made to you, and to identify patterns of enquiry that can improve platform usability.
| Data Category | Primary Collection Source | Used For |
|---|---|---|
| Registration Data | Provided by you at sign-up | Account creation, identity verification, communications |
| KYC Documents | Uploaded by you on request | Age & identity verification, AML compliance |
| Transaction Data | Generated by platform on deposit/withdrawal | Payment processing, fraud detection, compliance records |
| Gameplay Data | Generated by platform during play | Betting history, bonus administration, responsible gaming |
| Technical Data | Automatically collected on site visit | Security, fraud detection, performance analytics |
| Communications Data | Provided by you in support interactions | Case management, service improvement |
How We Use Your Data
cd33bat processes your personal data only for purposes that are directly connected to delivering, operating, and improving the platform and its services to players in Bangladesh. We do not process your data for purposes unrelated to the operation of cd33bat, and we do not sell your personal data to third parties for their independent commercial use.
2.1 Core Platform Operations
The primary uses of your personal data in day-to-day platform operations include:
- Creating and maintaining your cd33bat account and verifying your identity and age before granting access to real-money features.
- Processing deposits received from your registered bKash, Nagad, Rocket, or Upay mobile wallet and crediting the corresponding amount to your account balance in real time.
- Processing withdrawal requests from your cd33bat balance to your registered mobile wallet, subject to applicable verification checks.
- Administering bonuses, promotions, and VIP program rewards, including tracking wagering requirement progress and validating eligibility.
- Providing customer support and resolving disputes relating to your account, payments, or game outcomes.
- Sending essential account communications, including transaction confirmations, security alerts, and updates to these policies where material changes have been made.
2.2 Compliance and Legal Obligations
cd33bat processes certain categories of personal data because it is required to do so under applicable legal and regulatory frameworks, including anti-money-laundering obligations and age verification requirements. Specifically:
- Age verification data is processed to ensure compliance with the strict 18+ requirement for all players on the platform.
- Transaction records and KYC data are retained to meet anti-money-laundering record-keeping obligations and to support any required cooperation with law enforcement or financial intelligence authorities.
- IP address and device data are processed to detect and prevent access from prohibited jurisdictions where cd33bat is not authorised to operate.
2.3 Security and Fraud Prevention
Your technical data, transaction data, and account activity data are analysed by cd33bat's internal risk systems to detect and prevent fraud, account takeover attempts, bonus abuse, collusion, and other forms of Prohibited Conduct as defined in the Terms & Conditions. Where suspicious activity is detected, the relevant data may be shared with third-party fraud prevention services or disclosed to the appropriate authorities.
2.4 Platform Improvement and Analytics
Aggregated and anonymised usage data — derived from technical data and gameplay data — is used to understand how players navigate and use the cd33bat platform, to identify features that require improvement, and to prioritise development roadmap decisions. This analytical processing operates on data sets in which individual players cannot be re-identified.
2.5 Responsible Gaming Monitoring
cd33bat uses gameplay and account activity data to monitor for indicators of problem gambling behaviour, such as rapid escalation in bet size, extended uninterrupted sessions, and repeated loss-chasing patterns. Where such patterns are detected, the platform may proactively present responsible gaming prompts, recommend the use of self-imposed limits, or escalate the matter to the support team for a player welfare review. This processing is conducted in the legitimate interest of player wellbeing and is a core commitment of the cd33bat platform.
cd33bat does not use your personal data to send unsolicited marketing communications to third parties, does not profile you for the purpose of selling advertising space, and does not share your personal data with social media platforms for re-targeting purposes. Any promotional communications sent by cd33bat are directly related to your account activity or opt-in preferences.
Data Sharing & Third Parties
cd33bat does not sell, rent, or trade your personal data. However, the operation of a fully functional online casino and sports betting platform requires cd33bat to share certain categories of data with specific categories of third-party service providers. Every third party with whom cd33bat shares personal data is bound by contractual data processing obligations consistent with this Privacy Policy.
3.1 Mobile Wallet Payment Processors
To process deposits and withdrawals, cd33bat shares the minimum necessary transaction data — including your mobile wallet number, transaction amount, and reference identifiers — with the relevant payment gateway for bKash, Nagad, Rocket, or Upay. These providers process your payment data under their own privacy policies, which govern their handling of your mobile financial service information independently of cd33bat.
3.2 Game Providers
Games hosted on the cd33bat platform are delivered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. When you launch a game, your account identifier and session token are passed to the relevant Game Provider's platform to authenticate your session and manage the game round. Game Providers do not receive your full name, mobile wallet number, or KYC documents — only the session-level identifiers required to operate the game.
3.3 Identity Verification Services
Where cd33bat uses a third-party KYC service provider to assist with identity document verification, your submitted identity documents and the personal data they contain may be processed by that provider's platform. All KYC service providers used by cd33bat are contractually required to process your data solely for the purpose of identity verification and to delete or return document copies once the verification process is complete.
3.4 Fraud Prevention and Risk Intelligence
cd33bat may share device fingerprint data, IP address information, and anonymised behavioural patterns with third-party fraud prevention and risk intelligence services. The purpose of this sharing is limited to detecting and preventing fraudulent activity on the platform. These services do not receive data that directly identifies you by name or mobile wallet number.
3.5 Legal Disclosure
cd33bat may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent public authorities where required to do so by applicable law, court order, or regulatory obligation. cd33bat will not notify you of such a disclosure where doing so would be prohibited by law or where notification could compromise an ongoing investigation.
cd33bat will never ask you to share your personal data — including your account password, mobile wallet PIN, or KYC documents — through an unsolicited email, SMS, or third-party messaging platform. Any such request should be treated as fraudulent and reported immediately to [email protected].
Cookies & Tracking Technologies
cd33bat uses cookies and similar client-side tracking technologies to operate the platform reliably, maintain your session across page loads, and gather anonymised usage analytics that help improve the platform experience. This section explains what types of cookies are used and how you can manage your cookie preferences.
4.1 Types of Cookies Used
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session authentication, CSRF protection, load balancing. Without these cookies the platform cannot function. | Session / up to 24 hours |
| Functional | Remembering your language preference, display settings, and responsible gaming limit configurations between visits. | Up to 12 months |
| Analytics | Anonymised page-view and navigation data used to understand usage patterns and improve the platform. No personally identifiable information is included. | Up to 24 months |
| Security | Device fingerprinting tokens used to detect account takeover attempts and identify suspicious login activity from unrecognised devices. | Up to 6 months |
4.2 Managing Your Cookie Preferences
Strictly Necessary cookies cannot be disabled, as they are essential to the operation of the platform — disabling them would prevent you from logging in or using any real-money features. Functional and Analytics cookies can be disabled through your browser settings or through the cookie preference centre accessible from within your cd33bat account settings. Please note that disabling Functional cookies may result in the loss of your saved preferences between sessions. Disabling Analytics cookies has no impact on your ability to use the platform.
4.3 Third-Party Cookies
Game Provider iframes loaded within the cd33bat platform may set their own cookies in accordance with each provider's individual cookie and privacy policies. cd33bat does not control the cookie behaviour of Game Provider iframes. You may review the cookie policies of individual Game Providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — directly on those providers' websites.
Data Retention
cd33bat retains your personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal and regulatory obligations. The following retention periods apply to the principal categories of data held on the platform.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Registration Data | Duration of account plus 5 years after closure | Legal compliance, AML obligations |
| KYC Documents | Duration of account plus 5 years after closure | AML record-keeping requirement |
| Transaction Records | 7 years from transaction date | Financial record-keeping obligation |
| Gameplay & Betting History | Duration of account plus 2 years after closure | Dispute resolution, responsible gaming review |
| Technical & Device Data | 13 months from collection | Security and fraud detection cycle |
| Support Communications | 3 years from case closure | Dispute record-keeping |
| Analytics Data (anonymised) | 24 months | Platform improvement |
On expiry of the applicable retention period, your personal data will be securely deleted or irreversibly anonymised so that it can no longer be associated with your identity. Where data is anonymised rather than deleted, the resulting anonymised data set may be retained indefinitely for aggregated statistical purposes, as it no longer constitutes personal data.
Accounts closed under a permanent self-exclusion request are subject to the same retention schedules as voluntarily closed accounts. The self-exclusion record itself — including the date and reason for exclusion — is retained for the full post-closure period to prevent re-registration during the exclusion window and to support responsible gaming obligations.
Data Security
cd33bat implements layered technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, and alteration. No internet-based platform can guarantee absolute security, but cd33bat's approach to data security reflects industry best practice for online gambling platforms serving the Bangladesh market.
6.1 Encryption
All data transmitted between your browser or mobile device and cd33bat.net is encrypted using TLS (Transport Layer Security). Account passwords are stored using industry-standard one-way hashing algorithms — cd33bat personnel cannot read or retrieve your password. KYC document uploads are encrypted both in transit and at rest on cd33bat's storage infrastructure.
6.2 Access Controls
Access to personal data held in cd33bat's systems is restricted on a strict need-to-know basis. Internal access to player account data requires authenticated login to cd33bat's administration systems, and all access events are logged with timestamps and user identifiers for audit purposes. Support team members are trained in data handling obligations and are permitted to access only the data categories necessary to resolve a specific support case.
6.3 Fraud and Intrusion Detection
cd33bat operates automated monitoring systems that analyse login activity, transaction patterns, and API access behaviour in real time to detect indicators of account compromise, credential stuffing attacks, and payment fraud. Alerts generated by these systems trigger a review by the cd33bat security team. Where an account compromise is confirmed or strongly suspected, the affected account is locked immediately and the account holder is notified at their registered email address with instructions on how to regain secure access.
TLS Encryption End-to-End
Every data packet between your device and cd33bat servers travels over an encrypted TLS connection — your credentials and payment data are never exposed in transit.
One-Way Password Hashing
cd33bat stores passwords using strong cryptographic hashing. Even if our database were ever compromised, your plaintext password would remain unknown to any attacker.
Minimum Data Access
Internal access to your account data is granted only to the specific team member handling your case — logged, time-stamped, and audited on every access event.
Real-Time Intrusion Monitoring
Automated systems monitor login behaviour and API activity around the clock. Anomalous access patterns trigger an immediate security review and, where necessary, account lock.
Encrypted Data at Rest
KYC documents and sensitive account data stored on cd33bat infrastructure are encrypted at rest — the data is unreadable without authenticated decryption keys held securely by the operations team.
Breach Notification
In the unlikely event of a data breach affecting your personal data, cd33bat will notify affected players at their registered email address promptly and without undue delay, with guidance on protective steps to take.
Your Privacy Rights
As a player on the cd33bat platform, you hold a number of rights in relation to the personal data we hold about you. cd33bat is committed to honouring these rights promptly and transparently. All privacy rights requests should be submitted to [email protected] with the subject line "Privacy Rights Request" and sufficient information to verify your identity as the account holder. cd33bat targets a response within 10 business days of receipt of a complete and verifiable request.
7.1 Right of Access
You have the right to request a copy of the personal data that cd33bat holds about you. On receipt of a verified access request, cd33bat will provide a structured summary of the personal data categories held on your account, the purposes for which each category is processed, and — where applicable — the third parties with whom that data has been shared. A copy of your transaction history and betting history is already accessible at any time from within your account dashboard without the need to submit a formal request.
7.2 Right to Rectification
If any personal data held by cd33bat about you is inaccurate or incomplete, you have the right to request correction. For straightforward contact information updates, you may make the change directly through your account settings. For corrections to identity data — such as a legal name correction following a statutory name change — a formal rectification request to [email protected] is required, along with supporting documentary evidence.
7.3 Right to Erasure
You may request that cd33bat delete personal data held about you. However, this right is subject to important limitations in the gambling platform context. cd33bat is required by applicable compliance obligations to retain transaction records, KYC data, and account registration data for defined periods after account closure (see Section 5 — Data Retention). Erasure requests will be fulfilled in respect of data categories that are not subject to these mandatory retention obligations. cd33bat will communicate clearly which data can be erased immediately and which must be retained, along with the applicable retention end date.
7.4 Right to Object to Processing
Where cd33bat processes your personal data on the basis of its legitimate interests — such as fraud detection analytics or responsible gaming monitoring — you have the right to object to that processing. cd33bat will review any such objection and cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
7.5 Right to Withdraw Consent
Where cd33bat processes your personal data on the basis of your consent — such as for optional promotional email communications — you may withdraw that consent at any time without affecting the lawfulness of any processing carried out before the withdrawal. Consent withdrawal can be actioned through your account notification settings or by contacting [email protected].
7.6 Contact for Privacy Enquiries
All privacy-related enquiries, rights requests, and data protection concerns should be directed to the cd33bat support team at [email protected]. Please include your registered account email address in your message to allow the support team to locate your account record. cd33bat does not accept privacy rights requests submitted through social media channels or third-party messaging platforms.
Updates to This Policy
cd33bat reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in platform operations, applicable legal requirements, or data processing practices. When material changes are made to this policy, cd33bat will notify registered players by email to the address associated with their account and will display a prominent notice on cd33bat.net prior to the revised policy taking effect.
The "Last Updated" date displayed at the top of this page reflects the date on which the current version of the Privacy Policy was published. You are encouraged to review this page periodically to stay informed of how cd33bat protects and manages your personal data. Continued use of the cd33bat platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.
If you have any questions about the current Privacy Policy or about any changes communicated to you, please contact [email protected]. The support team is available 24 hours a day in English and will direct privacy-specific enquiries to the appropriate internal team within one business day of receipt.
This Privacy Policy applies exclusively to the cd33bat.net platform and the services operated under the cd33bat brand for players in Bangladesh. It does not apply to third-party websites, Game Provider platforms, or mobile wallet services linked to or accessible from cd33bat — those services are governed by their own privacy policies, which you should review independently.
Continue Your cd33bat Experience
You've reviewed our Privacy Policy. cd33bat is Bangladesh's trusted platform for cricket betting, live casino, and 500+ slot games — all secured with SSL encryption and instant bKash & Nagad deposits. 18+ only. Play responsibly.