cp33 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by cp33 ("the Company", "we", "us", "our") and applies to all personal data collected in connection with your use of the cp33 online gaming platform, accessible at https://cp33.pro ("the Platform"). This Policy covers all services offered through the Platform, including casino games, sports betting, account registration, payment processing, customer support, and promotional communications.

By registering an account with cp33, accessing the Platform, or submitting personal data to us through any channel, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not use the Platform or submit personal data to us.

2. Data Controller

For the purposes of applicable data protection law, the data controller responsible for the personal data described in this Policy is the cp33 operating entity that holds the gaming licence under which the Platform operates. Questions regarding data controllership, including requests for information about the specific legal entity responsible for processing your data, may be directed to our support team at [email protected].

Where cp33 engages third-party service providers to process personal data on its behalf — for example, payment processors, KYC verification platforms, and analytics providers — those parties act as data processors under written agreements that require them to process data only on cp33's documented instructions and to maintain appropriate security measures.

3. Data We Collect

cp33 collects the following categories of personal data in connection with the operation of the Platform:

3.1 Identity and Registration Data

• Full legal name as it appears on official identity documents
• Date of birth (used to verify the 21+ age requirement)
• Gender (where voluntarily provided)
• Nationality and country of residence
• Username chosen at registration
• Copy of government-issued identity documents (NID, passport) submitted during KYC verification

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address, city, and postal code (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)

3.3 Financial and Payment Data

• Payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Transaction records including deposit amounts, withdrawal amounts, dates, and references
• Account balance history
• Proof of payment method ownership documents submitted during verification

3.4 Gaming and Activity Data

• Game sessions, bet history, wager amounts, game results, and win/loss records
• Sports betting selections, odds accepted, and market preferences
• Login timestamps, session durations, and platform navigation patterns
• Bonus redemption history and promotional participation records
• Responsible gaming tool settings (deposit limits, time-out periods, self-exclusion status)

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• Unique device identifiers
• Referring URL and entry page data
• Cookie identifiers and similar tracking data (see Section 7)

3.6 Communications Data

• Records of correspondence with cp33 customer support, including live chat transcripts, email threads, and any documents submitted in connection with a support query
• Survey responses and feedback submitted voluntarily through the Platform

4. How We Collect Your Data

cp33 collects personal data through the following channels:

• Directly from you — when you complete the registration form, submit KYC verification documents, make deposits or withdrawals, contact our support team, or participate in surveys and promotions
• Automatically — through cookies, server logs, and analytics tools that record your interactions with the Platform as you browse, play games, or place bets
• From third parties — from KYC and identity verification service providers who help us confirm the authenticity of identity documents; from payment processors who confirm transaction status; and from fraud detection services that flag suspicious activity patterns

5. Legal Basis for Processing

cp33 processes your personal data on the following legal bases, depending on the specific purpose for which the data is used:

6. How We Use Your Data

The personal data collected by cp33 is used for the following specific purposes:

• To create, maintain, and administer your cp33 account and provide you with access to all Platform services
• To verify your identity and age in accordance with the 21+ requirement and our KYC obligations
• To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to maintain accurate transaction records
• To detect and prevent fraud, money laundering, bonus abuse, multi-accounting, and other prohibited activities described in our Terms and Conditions
• To monitor your gaming patterns in connection with our responsible gaming commitments, including the automatic flagging of activity that may indicate problem gambling behaviour
• To respond to your customer support enquiries and to resolve disputes fairly and efficiently
• To send you account-related notifications — such as deposit confirmations, withdrawal updates, security alerts, and policy change notices — via email or SMS
• To send you promotional communications, bonus offers, and personalised game recommendations, where you have opted in to receive such communications
• To improve the Platform's design, performance, and game offering through analysis of aggregated and anonymised usage data
• To comply with legal and regulatory obligations applicable to gaming platform operators

7. Cookies and Tracking Technologies

cp33 uses cookies and similar tracking technologies to operate the Platform effectively and to improve your experience as a player. A cookie is a small text file placed on your device by the Platform's servers when you visit the site. The following categories of cookies are used by cp33:

Strictly necessary cookies are placed automatically as they are essential to the operation of the Platform. Functional, analytics, and marketing cookies are placed only where you have given consent through the Platform's cookie preference controls. You may withdraw consent for non-essential cookies at any time by adjusting your browser settings or contacting our support team. Note that disabling strictly necessary cookies may prevent the Platform from functioning correctly.

8. Sharing Your Data

cp33 does not sell or rent your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment networks — to facilitate deposits and withdrawals from your account
• KYC and identity verification providers: third-party services that assist cp33 in verifying identity documents and confirming the age eligibility of players
• Fraud detection and anti-money-laundering services: specialist providers that analyse transaction patterns and flag suspicious activity on behalf of cp33
• IT and infrastructure service providers: cloud hosting and data storage providers that maintain the technical infrastructure on which the Platform operates, under strict data processing agreements
• Game software studios: providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data necessary to operate their games within the cp33 environment, but do not receive your full personal profile
• Legal and regulatory authorities: where cp33 is legally required to disclose personal data to a competent authority — for example, in connection with an anti-money-laundering investigation or a court order — we will comply with that obligation and, where legally permitted, will notify you of such disclosure
• Professional advisers: lawyers, accountants, and auditors who provide advisory services to cp33 may have access to personal data in the course of those engagements, subject to professional confidentiality obligations

9. International Data Transfers

cp33 operates as an international platform and some of the third-party service providers described in Section 8 may process your personal data in countries outside Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection, cp33 takes steps to ensure that appropriate safeguards are in place. These safeguards may include standard contractual clauses, binding corporate rules, or other transfer mechanisms recognised under applicable data protection frameworks.

By using the cp33 Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to other countries for the purposes described in this Policy, subject to the safeguards described above.

10. Data Retention

cp33 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Account and identity data: Retained for the duration of your account's existence plus a minimum of 5 years following account closure, in line with standard anti-money-laundering record-keeping requirements
• Transaction and financial records: Retained for a minimum of 5 years from the date of the relevant transaction
• Customer support correspondence: Retained for 3 years from the date the relevant support case was closed
• Gaming and betting history: Retained for the duration of your account plus 2 years following account closure
• Marketing consent records: Retained for the duration of your consent or until you withdraw consent, whichever is earlier
• Technical and device data (logs): Typically retained for 12 months and then deleted or anonymised

Upon expiry of the applicable retention period, personal data is either securely deleted from cp33's systems or rendered permanently anonymous such that it can no longer be associated with any individual player. Where data cannot be immediately deleted due to technical constraints, it is isolated from active processing until deletion is possible.

11. Your Privacy Rights

As a cp33 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. cp33 will respond within a reasonable timeframe and in any event within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data that cp33 holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: If you believe that any personal data held by cp33 is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to cp33's legal and regulatory retention obligations, which may require us to retain certain data even following an erasure request.
• Right to Restriction of Processing: You have the right to request that cp33 restrict its processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data or where you have objected to processing pending verification of whether cp33's legitimate grounds override your interests.
• Right to Data Portability: Where processing is based on consent or on the performance of a contract, and is carried out by automated means, you have the right to receive the personal data you have provided to cp33 in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object at any time to the processing of your personal data on the basis of cp33's legitimate interests. cp33 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent — for example, for the receipt of marketing communications — you have the right to withdraw that consent at any time by contacting support or using the unsubscribe mechanism in any marketing email. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

12. Security Measures

cp33 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and cp33's servers
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access
• Role-based access controls limiting internal staff access to personal data to those with a documented operational need
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure
• Incident response procedures that include notification protocols in the event of a data breach that materially affects player data
• Staff training on data protection obligations and security best practices

While cp33 takes all reasonable precautions to safeguard your personal data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your cp33 account and to notify support immediately at [email protected] if you suspect that your account credentials have been compromised.

13. Children and Minors

The cp33 Platform is strictly intended for adults aged 21 years and older. 21+ cp33 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a minor, we will take immediate steps to delete that data and to close the associated account. If you believe that a minor has submitted personal data to cp33, please contact us immediately at [email protected] so that we can take appropriate action.

cp33 employs age verification procedures during registration and reserves the right to request additional age-confirming documentation at any point during a player's use of the Platform. Any account found to belong to a person under 21 years of age will be closed without notice and any balance forfeited.

14. Changes to This Policy

cp33 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will post the revised Policy on the Platform with an updated effective date and, where the changes significantly affect the way we process your personal data, we will notify you by email at the address associated with your registered account.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and may request account closure in accordance with our Terms and Conditions.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cp33 handles your personal data, please contact our data protection team using the details below. All privacy-related queries are handled with priority and in strict confidence:

• Support Email: [email protected] (plain text — not a clickable link)
• Subject Line: For privacy-specific requests, please use the subject line "Privacy Request — [Your Username]" to ensure your query is routed to the appropriate team member
• Response Time: cp33 aims to acknowledge all privacy requests within 48 hours and to provide a full response within 30 days, in line with standard data protection response timeframes (Bangladesh Standard Time, UTC+6)

This Privacy Policy was last reviewed and published with an effective date of 1 January 2026. We recommend that all registered cp33 players review this Policy at regular intervals to stay informed of how their data is being used and protected.