cg33 Privacy Policy

01
1. Introduction

cg33 ("we", "us", "the Company") operates the online sports betting and casino platform accessible at cg33.io (the "Platform"). In the course of providing our services to players across Bangladesh — including cricket betting on BPL, IPL and T20 World Cup fixtures, live casino games, slot titles, and financial transactions in Bangladeshi Taka (৳) — we collect and process certain personal data about you.

This Privacy Policy applies to all personal data collected through the cg33 website, mobile interface, customer support channels, and any related communications. It applies to all registered account holders, visitors who browse the Platform without registering, and any individual who contacts cg33 for support or information.

This policy should be read alongside the cg33 Terms & Conditions, which form the overarching agreement governing your use of the Platform. By using cg33 after this policy's Effective Date, you confirm your acceptance of its terms.

02
2. Personal Data We Collect

cg33 collects the following categories of personal data from players and prospective players. We collect only what is necessary for the purposes described in this policy.

2.1 Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify the minimum age requirement of 21 years)
• Gender (optional, provided voluntarily during registration)
• Copies of identity documents submitted during KYC verification (National ID card, passport, or driving licence)

2.2 Contact Data

• Primary email address
• Mobile phone number (including country code)
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), postal code, and Bangladesh as country of residence

2.3 Financial Data

• Payment method type (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard)
• Mobile wallet numbers registered in your name (bKash, Nagad, Rocket, Upay)
• Bank account details provided for withdrawal processing
• Transaction history, including deposit amounts, withdrawal amounts, and dates, all denominated in Bangladeshi Taka (৳)
• Source-of-funds declarations where requested for large transaction volumes

2.4 Technical Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session start and end timestamps (Bangladesh Standard Time, UTC+6)
• Pages visited, features used, and navigation paths within the Platform
• Cookie identifiers and similar tracking data (see Section 7)

2.5 Behavioural and Gaming Data

• Betting history across all sports markets (cricket, volleyball, football, kabaddi)
• Casino and slot game play history, including game titles, stake amounts, and outcomes
• Bonus and promotion redemption history
• Responsible gaming settings applied to your account (deposit limits, self-exclusion periods, session reminders)

2.6 Communications Data

• Records of customer support interactions, including emails and live chat transcripts
• Your preferences regarding marketing communications
• Complaint and dispute records

03
3. How We Collect Your Data

cg33 collects personal data through the following channels:

• Direct submission: Data you provide when registering a cg33 account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical data gathered automatically when you access the Platform, including through cookies, web beacons, and server logs. This data is collected regardless of whether you are a registered user.
• Third-party sources: Identity and fraud-check data received from KYC verification partners and payment processors when you initiate a transaction or verification request on cg33.
• Game providers: Aggregated gameplay data provided by third-party game studios (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe) relating to your activity on their games hosted within the cg33 Platform.

04
4. Legal Basis for Processing

cg33 processes your personal data on one or more of the following legal bases. The applicable basis depends on the specific processing activity in question:

Processing Activity	Legal Basis
Account registration and management	Performance of a contract between you and cg33
Age verification (21+ compliance)	Legal obligation and legitimate interest
KYC identity verification	Legal obligation
Processing deposits and withdrawals in ৳	Performance of a contract
Anti-money-laundering monitoring	Legal obligation
Fraud prevention and security	Legitimate interest
Responsible gaming tools and monitoring	Legal obligation and legitimate interest
Sending transactional communications	Performance of a contract
Sending promotional and marketing communications	Consent (opt-in at registration or subsequently)
Analytics and platform improvement	Legitimate interest
Resolving disputes and complaints	Legitimate interest and legal obligation

05
5. How We Use Your Data

cg33 uses the personal data we collect for the following clearly defined purposes. We do not use your data for any purpose not listed here without first updating this Privacy Policy and notifying you where required.

5.1 Platform Operations

To create and maintain your cg33 account, verify your identity and age, process deposits and withdrawals via bKash, Nagad, Rocket and other accepted payment methods, record your betting and gaming activity, and deliver the full range of sports betting and casino services offered on the Platform.

5.2 Security and Fraud Prevention

To detect and prevent fraudulent transactions, bonus abuse, account takeover attempts, and other security threats. cg33 uses automated and manual monitoring systems to identify suspicious patterns in account activity, login behaviour, and payment flows.

5.3 Regulatory Compliance

To meet our obligations under applicable anti-money-laundering regulations, age verification requirements, and responsible gaming obligations. This includes retaining transaction records, responding to lawful requests from competent authorities, and maintaining audit trails of account activity.

5.4 Responsible Gaming

To monitor your gambling behaviour for indicators of problem gambling, apply and enforce deposit limits and self-exclusion periods you have requested, deliver responsible gaming notifications and reality checks, and ensure compliance with our 21+ minimum age policy.

5.5 Customer Support

To respond to your support requests, resolve complaints and disputes, and communicate with you about your account status, verification requirements, or transaction queries.

5.6 Marketing Communications

Where you have given your explicit consent, to send you promotional communications about cg33 offers, bonuses tied to cricket tournaments (BPL, IPL, T20 World Cup), seasonal promotions (Eid, Pohela Boishakh), and new game launches. You may withdraw your marketing consent at any time by updating your notification preferences in your cg33 account settings or by contacting [email protected].

5.7 Platform Analytics and Improvement

To analyse aggregate usage patterns, identify technical issues, improve the user experience, and develop new features for Bangladeshi players. Where possible, analytics data is aggregated and anonymised before analysis.

06
6. Data Sharing and Disclosure

cg33 does not sell or rent personal data to third parties. We share personal data only in the following limited and controlled circumstances:

6.1 Payment Processors

We share the minimum necessary financial data with payment service providers (including mobile wallet operators such as bKash, Nagad, and Rocket, and banking partners) to facilitate the processing of your deposits and withdrawals. These providers process data solely on our instructions and are not permitted to use it for their own marketing purposes.

6.2 KYC and Identity Verification Partners

To fulfil our age verification and anti-money-laundering obligations, we may share identity documents and related data with specialist KYC verification service providers. All such providers are bound by strict data processing agreements.

6.3 Game Technology Providers

Game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Spribe, and others) whose games are hosted within the cg33 Platform may receive account identifiers and session data necessary to operate their games and verify the integrity of outcomes. They do not receive full player identity data.

6.4 Legal and Regulatory Disclosure

cg33 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or court order. We will notify affected players of such disclosure where we are legally permitted to do so.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of cg33's business, personal data held by cg33 may be transferred to the acquiring entity as part of the transaction. Affected players will be notified prior to their data being transferred and will be informed of any changes to this Privacy Policy that result from such a transfer.

07
7. Cookies and Tracking Technologies

cg33 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and collect analytics data. The following categories of cookies are used on the cg33 Platform:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies that maintain your cg33 Login state and security tokens that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional Cookies: Store your preferences such as language settings and display options to improve your experience on return visits.
• Analytics Cookies: Collect anonymised data about how users navigate the Platform — which pages are visited most, how long sessions last, and which features are used — to help us improve the site.
• Marketing Cookies: Used only where you have provided consent to receive personalised promotional communications. These cookies help us show relevant cg33 promotions based on your interests and betting activity.

You can control cookie settings through your browser preferences. Please note that disabling strictly necessary cookies will impair your ability to use core features of the cg33 Platform, including placing bets and accessing your account.

08
8. Data Security

cg33 implements a multi-layered security framework to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the cg33 servers
• Encrypted storage of passwords using industry-standard one-way hashing algorithms
• Access controls limiting personal data access to authorised cg33 personnel on a strict need-to-know basis
• Regular security audits and vulnerability assessments of the Platform infrastructure
• Intrusion detection systems and real-time monitoring for anomalous access patterns
• Secure, geographically redundant data storage facilities

09
9. Data Retention

cg33 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

Data Category	Retention Period
Active account data (identity, contact, financial)	Duration of the account relationship plus 5 years after closure
Transaction records (deposits and withdrawals in ৳)	7 years from the date of the transaction
KYC documents (ID copies, address proof)	5 years from account closure
Customer support communications	3 years from the date of the last interaction
Betting and gaming history	5 years from account closure
Marketing preferences and consent records	Until withdrawal of consent plus 1 year
Technical and server logs	13 months on a rolling basis

Where data is no longer required and no legal retention obligation applies, cg33 will securely delete or anonymise that data in a manner that makes re-identification impossible.

10
10. Your Privacy Rights

As a cg33 player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request" and your registered cg33 account username.

• Right of Access: You may request a copy of all personal data cg33 holds about you. We will provide this within 30 days of receiving your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to our legal retention obligations — we cannot erase data we are required by law to retain.
• Right to Restrict Processing: You may request that cg33 restricts the processing of your data while a correction or erasure request is being evaluated.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for marketing purposes. cg33 will cease such processing unless we can demonstrate compelling grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

cg33 will respond to all privacy rights requests within 30 calendar days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

11
11. Children's Privacy

The cg33 Platform is strictly intended for adults aged 21 years and above. cg33 does not knowingly collect, process, or store personal data from any individual under the age of 21. If cg33 becomes aware that personal data has been submitted by a person under this age, we will immediately close the relevant account, void any activity on it, and securely delete the personal data in question.

If you are a parent or guardian and believe that your child has submitted personal data to cg33, please contact us immediately at [email protected] so that we can take appropriate action without delay.

12
12. Third-Party Links and Services

The cg33 Platform may contain references to third-party game providers and payment partners. While cg33 takes reasonable steps to ensure these partners meet appropriate data protection standards, we are not responsible for the privacy practices of third-party services. This Privacy Policy applies solely to data processed by cg33 directly. We encourage you to review the privacy policies of any third-party services you interact with through the Platform.

13
13. Updates to This Privacy Policy

cg33 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this policy, we will update the Effective Date at the top of this page and, where required, notify registered players via the email address on file or through a prominent notice on the Platform.

We encourage you to review this Privacy Policy periodically. Your continued use of the cg33 Platform following the publication of any updated policy constitutes your acceptance of the revised terms.

14
14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cg33 handles your personal data, please contact our privacy team using the details below. All privacy-related correspondence must be sent in writing and should include your registered account username to allow us to locate your records efficiently.

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Policy Query" or "Privacy Rights Request"
• Response time: Within 30 calendar days for formal rights requests; within 2 business days for general queries
• Support hours: 24 hours a day, 7 days a week, including Bangladesh public holidays