Your Privacy Matters at ce33

1 Introduction

ce33 operates Bangladesh's online casino and sports betting platform at ce33.io. As the data controller for all personal information collected through the Platform, ce33 is responsible for ensuring that your data is processed lawfully, fairly, and transparently.

This Privacy Policy applies to all individuals who visit, register on, or interact with the ce33 Platform, including players located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and all other areas of Bangladesh. It covers personal data collected through the website, account registration process, payment interactions, customer support communications, and any other means by which you provide information to ce33.

This policy should be read alongside the ce33 Terms & Conditions, which govern the overall use of the Platform. Where the Terms & Conditions address data-related matters, this Privacy Policy provides the more detailed and specific treatment of those topics.

2 Data We Collect

ce33 collects the following categories of personal data, depending on how you interact with the Platform:

2.1 Identity Data

Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents (such as your National Identity Card, passport, or driving licence) provided during the Know Your Customer (KYC) verification process.

2.2 Contact Data

Mobile phone number, email address, and residential address (including district, division, and postal code within Bangladesh). This information is collected at registration and may be updated by you at any time by contacting support.

2.3 Financial Data

Payment method details necessary to process deposits and withdrawals, including bKash account numbers, Nagad account numbers, Rocket account numbers, Upay account numbers, and masked card details for Visa and Mastercard transactions. ce33 does not store full card numbers; payment card data is handled by PCI-DSS-compliant payment processors.

2.4 Transaction Data

Records of all deposits, withdrawals, wagers placed, games played, bonus claims, and account balance movements associated with your ce33 account. Transaction records are maintained in BDT and are linked to your account identifier.

2.5 Technical Data

IP address, browser type and version, device type (desktop, mobile, tablet), operating system, screen resolution, session duration, pages visited, and referral source. This data is collected automatically when you access the Platform.

2.6 Behavioural Data

Game preferences, betting patterns, frequency of play, session start and end times, and responsible gaming tool usage (such as deposit limit settings and self-exclusion requests). This data is used to personalise your experience and to support our responsible gaming obligations.

2.7 Communications Data

Records of your communications with the ce33 support team, including chat transcripts, email correspondence, and any formal complaint submissions. These records are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

3 How We Collect Data

3.1 Directly From You

The majority of personal data ce33 holds is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion. You are under no obligation to provide this data, but without it, certain Platform features — including account registration, deposit processing, and withdrawal requests — cannot be fulfilled.

3.2 Automatically

Technical and behavioural data is collected automatically as you browse and use the Platform. This is achieved through server logs, browser cookies, pixel tags, and session recording tools. The specific categories of data collected automatically, and the cookies used to collect them, are described in Section 7 of this policy.

3.3 From Third Parties

In certain circumstances, ce33 may receive data about you from third parties, including: payment processors (such as bKash, Nagad, and Rocket) who confirm transaction statuses; identity verification service providers engaged to assist with KYC; and fraud prevention partners who provide risk signals associated with specific IP addresses or device fingerprints. Data received from third parties is used only for the purposes described in Section 4 of this policy.

4 Purposes of Processing

ce33 processes your personal data for the following specific purposes:

• Account Management: To create, maintain, and administer your ce33 account, including processing login authentication and account updates.
• Identity Verification (KYC): To verify your identity and age (21+) in order to comply with ce33's internal compliance requirements and to prevent fraudulent account creation.
• Payment Processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records associated with your account.
• Platform Personalisation: To tailor the games, promotions, and content displayed to you based on your preferences and gameplay history.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised account access.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling and to administer self-exclusion requests, deposit limits, loss limits, and session reminders.
• Customer Support: To respond to your queries, complaints, and requests in a timely and accurate manner, and to maintain records of support interactions.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS — but only where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].
• Legal Compliance: To fulfil ce33's obligations under applicable law, to respond to lawful requests from regulatory authorities, and to maintain records as required by applicable retention obligations.
• Platform Improvement: To analyse aggregated and anonymised usage data in order to identify areas for technical improvement and to enhance the overall player experience on ce33.

5 Legal Basis for Processing

ce33 processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is required to fulfil our obligations to you under the ce33 Terms & Conditions — including account administration, payment processing, and KYC verification — is carried out on the basis of contractual necessity.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and Platform improvement is carried out on the basis of ce33's legitimate interests in operating a safe, secure, and compliant gaming platform, provided those interests are not overridden by your privacy rights.
• Legal Obligation: Processing carried out to comply with applicable law — including anti-money laundering requirements and record-keeping obligations — is carried out on the basis of legal obligation.
• Consent: Processing for direct marketing communications is carried out on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Data

6.1 Service Providers

ce33 shares personal data with carefully selected third-party service providers who assist in operating the Platform. These include payment processing partners (bKash, Nagad, Rocket, Upay, and card payment processors), identity verification providers, fraud prevention services, cloud infrastructure providers, and customer support software vendors. All service providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to ce33.

6.2 Legal Disclosures

ce33 may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities if required to do so by applicable law, court order, or lawful regulatory request. In such cases, ce33 will disclose only the minimum data required to satisfy the legal obligation and, where permitted by law, will notify you of the disclosure.

6.3 Business Transfers

In the event that ce33 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any change to the privacy arrangements that govern your data as a result.

6.4 No Sale of Data

ce33 does not sell, rent, lease, or otherwise transfer your personal data to third-party advertisers, data brokers, or marketing companies for their own independent commercial use. Any data sharing is strictly limited to the categories described in this Section 6.

7 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. ce33 uses cookies and similar tracking technologies (including pixel tags and session storage) to ensure the Platform functions correctly, to remember your preferences, and to understand how players interact with the site.

7.2 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as login session management, security token validation, and language preference storage. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember choices you make — such as your preferred game category or deposit method — to provide a more personalised experience across sessions.
• Analytical Cookies: These cookies collect anonymised data about how players use the Platform, including which pages are visited most frequently and how long sessions last. This data is used exclusively for Platform improvement purposes.
• Security Cookies: These cookies are used to detect and prevent fraudulent activity, including bot traffic, account takeover attempts, and suspicious login patterns.

7.3 Managing Cookies

You may control cookie settings through your browser's privacy or settings menu. Blocking strictly necessary cookies will impair your ability to use the ce33 Platform, including the ability to log in or complete transactions. Blocking functional or analytical cookies will not prevent you from using the Platform but may reduce the personalisation of your experience.

8 Data Retention

ce33 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted from ce33's systems or, where full deletion is not technically feasible, irreversibly anonymised so that it can no longer be linked to you as an individual.

9 Data Security

ce33 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the ce33 Platform.
• Encrypted data storage for sensitive fields including identity documents and payment method references held at rest.
• Password hashing — ce33 account passwords are stored using a one-way cryptographic hash function; plain-text passwords are never stored or accessible to staff.
• Role-based access controls ensuring that ce33 staff can access only the personal data necessary for their specific job function.
• Regular security assessments and vulnerability reviews of the Platform's infrastructure and application code.
• Incident response procedures to detect, contain, and report data security incidents in accordance with applicable obligations.

While ce33 applies robust security measures, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ce33 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

10 Your Privacy Rights

As a ce33 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact ce33 at [email protected] with the subject line "Privacy Request". ce33 will respond to verified requests within 10 business days.

11 Minors

The ce33 Platform is strictly for adults aged 21 years and older. ce33 does not knowingly collect personal data from any individual under the age of 21. Age verification is carried out as part of the KYC process for all accounts prior to the processing of any withdrawal request.

If ce33 discovers that personal data has been collected from an individual who is under 21 years of age, the account will be immediately suspended, all associated balances will be forfeited, and the personal data will be deleted from ce33's systems as soon as is practicable. If you believe that a minor has registered an account on the ce33 Platform, please notify us immediately at [email protected].

12 Changes to This Privacy Policy

ce33 may update this Privacy Policy from time to time to reflect changes in the way we operate, changes in applicable law, or improvements to our data handling practices. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify you by email to your registered address and display a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this policy will be updated each time a new version is published. We encourage you to review this Privacy Policy periodically to stay informed about how ce33 protects your personal data. Your continued use of the Platform after the effective date of a revised policy constitutes your acknowledgement of the updated terms.

Previous versions of this Privacy Policy are available on request by contacting [email protected] with the subject line "Previous Privacy Policy".

13 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or to the personal data ce33 holds about you, please contact us using the details below. All privacy-related correspondence is handled by the ce33 compliance team.

• Email: [email protected]
• Subject Line for Privacy Requests: "Privacy Request"
• Subject Line for Data Breach Reports: "Data Security Report"
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Acknowledged within 48 hours; substantive response within 10 business days

For questions about responsible gaming tools available on the ce33 Platform — including self-exclusion, deposit limits, and loss limits — please visit the Responsible Gaming page or include "Responsible Gaming" in the subject line of your email.

For the full terms governing your use of the ce33 Platform, please review our Terms & Conditions.