Privacy Policy — Your Data, Protected by ch33

1 Data Controller & Scope of This Policy

This Privacy Policy applies to all personal data processed by ch33 (the "Platform", "we", "us", or "our") in connection with the operation of the website at https://ch33.bet and all associated services, including sports betting, live casino, slots, crash games, virtual sports, account management, payment processing, and customer support.

ch33 acts as the data controller in respect of all personal data collected directly from players and visitors to the Platform. As data controller, ch33 determines the purposes and means of processing personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

This Policy applies to all registered players, prospective players who have begun but not completed registration, and any individual who visits the ch33 website regardless of whether they create an account. By accessing the Platform, you acknowledge that you have read and understood this Privacy Policy.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference into the overall agreement governing your use of ch33.

2 Information We Collect

ch33 collects personal data through several channels, including direct registration inputs, account activity on the platform, payment processing flows, and automated technical data collection. The categories of data we collect are described below.

2.1 Data You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, or contact our support team, you may provide us with the following categories of personal data:

2.2 Data Collected Automatically

When you access or use the ch33 platform, our systems automatically collect certain technical and behavioural data, including:

• Device & Browser Data: IP address, device type, operating system, browser type and version, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage Data: Pages visited, time spent on each page, navigation path through the site, search queries entered, and features interacted with.
• Betting & Gaming Activity: Bets placed, games played, stakes, outcomes, session duration, deposit and withdrawal history, bonus usage, and responsible gaming tool interactions.
• Session Data: Login timestamps, session duration, logout events, and concurrent session indicators.
• Geolocation Data: Country-level and region-level geolocation derived from your IP address, used solely to verify eligibility and enforce jurisdictional access controls.

2.3 Data From Third Parties

ch33 may receive limited personal data about you from trusted third-party sources, including:

• Payment Providers: Transaction references, payment confirmation codes, and payer identity confirmation from bKash, Nagad, Rocket, Upay, and partner banks. ch33 does not receive or store full payment account passwords.
• Game Providers: Session identifiers and round-level game data from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, solely for the purpose of dispute resolution and account integrity monitoring.
• Identity Verification Services: Confirmation responses from third-party document verification tools used to validate KYC submissions.

3 How We Use Your Data

ch33 processes your personal data for specific, explicit, and legitimate purposes. We do not use your data for purposes that are incompatible with those stated below. The primary legal bases on which we rely are: performance of a contract (operating your account), compliance with legal obligations, legitimate interests (platform security, fraud prevention), and, where required, your explicit consent.

3.1 Core Platform Operations

• Creating and managing your ch33 player account, including authentication and session management.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks, and maintaining accurate transaction records.
• Calculating and crediting bonuses, tracking wagering requirements, and administering promotional offers such as BPL season promotions, Eid bonuses, and Pohela Boishakh offers.
• Delivering and personalising the gaming and betting experience, including recommended games, relevant market suggestions, and in-play data for cricket and football.

3.2 Legal & Regulatory Compliance

• Verifying your age and identity to ensure compliance with our 18+ restriction and to prevent underage gambling.
• Conducting KYC checks and ongoing account monitoring in line with anti-money-laundering (AML) and counter-terrorism financing (CTF) best practice obligations.
• Retaining transaction records and account activity logs for the legally required retention periods.
• Responding to lawful requests from regulatory or law enforcement authorities where ch33 is legally obliged to do so.

3.3 Security & Fraud Prevention

• Detecting, investigating, and preventing fraudulent activity, bonus abuse, multi-accounting, and other prohibited conduct described in our Terms & Conditions.
• Monitoring login patterns, device fingerprints, and IP addresses to identify potential unauthorised account access.
• Maintaining audit logs of all significant account actions for dispute resolution purposes.

3.4 Responsible Gaming

• Tracking session duration, deposit frequency, and betting patterns to identify players who may be exhibiting signs of problem gambling.
• Processing and enforcing self-exclusion requests, deposit limits, time-out periods, and reality check settings.
• Communicating responsible gaming resources and support referrals where our monitoring tools indicate a potential concern.

3.5 Marketing Communications (Opt-In Only)

If you have explicitly opted in to marketing communications during registration or from your account settings, ch33 may use your email address or mobile number to send you information about promotions, new game launches, deposit bonus offers, and seasonal campaigns relevant to the Bangladesh market. You may withdraw your marketing consent at any time by updating your account preferences or by emailing [email protected] with the subject line "Unsubscribe". Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

3.6 Platform Improvement

Aggregated, anonymised usage data is used internally by ch33 to improve platform performance, optimise the user interface, identify technical issues, and develop new features. This data cannot be used to identify individual players and is not shared with third parties.

4 Data Sharing & Third Parties

ch33 does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

4.1 Payment Processing Partners

When you make a deposit or request a withdrawal, ch33 shares the minimum necessary transactional data (your registered name, account identifier, and transaction amount) with the relevant payment processor — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, or City Bank — to facilitate the transaction. These partners process data only as instructed by ch33 and under binding data processing agreements that prohibit any secondary use of your data.

4.2 Game Content Providers

To enable real-money gameplay, ch33 shares a unique session token and anonymised player identifier with third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). These providers do not receive your full name, contact details, or payment information. Game providers are contractually prohibited from using session data for any purpose other than delivering and auditing the game experience.

4.3 Identity Verification Services

To complete KYC verification, ch33 may share copies of identity documents you submit (national ID, passport, utility bills) with a contracted document verification service provider. These providers process data solely to return a verification result to ch33 and are bound by strict data processing and confidentiality agreements.

4.4 Legal & Regulatory Authorities

ch33 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are required to do so by applicable law, a valid legal order, or where disclosure is necessary to protect the safety of any person or the integrity of the platform.

4.5 Business Transfers

In the event that ch33 undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified by email before your data is transferred and becomes subject to a different privacy policy.

5 Cookies & Tracking Technologies

ch33 uses cookies and similar technologies (collectively "cookies") to operate the platform, remember your preferences, maintain your login session, and analyse aggregate usage patterns. This section explains what cookies we use and how you can manage them.

5.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits, store preferences, and maintain session state. ch33 uses both first-party cookies (set directly by ch33) and third-party cookies (set by our game content providers and analytics partners).

5.2 Types of Cookies We Use

5.3 Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential to the operation of the platform — disabling them would prevent you from logging in or completing transactions. All other cookie categories may be managed through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. Please note that disabling functional or analytical cookies may affect your experience on the platform.

For instructions on managing cookies in your specific browser, consult the help documentation of your browser provider. ch33 does not currently respond to browser "Do Not Track" signals, as there is no universally accepted standard for their interpretation.

6 Data Retention

ch33 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following retention periods apply to the main categories of personal data we hold:

When the applicable retention period expires, ch33 will securely delete or anonymise your personal data so that it can no longer be associated with you. Anonymised, aggregate data may be retained indefinitely for statistical and platform improvement purposes.

If you request deletion of your account before the expiry of any legally mandated retention period, ch33 will close your account and cease all marketing communications immediately, but will retain the minimum data required to meet our legal and regulatory obligations until the relevant period expires.

7 Your Privacy Rights

As a ch33 player, you have a number of rights regarding the personal data we hold about you. ch33 is committed to honouring these rights promptly and without unnecessary obstruction. To exercise any of the rights described below, please contact [email protected] with the subject line "Privacy Request" and include your registered username or email address to help us locate your account.

8 Security Measures

ch33 implements a layered, defence-in-depth approach to the security of personal data. The following technical and organisational measures are maintained across all systems that process player data:

8.1 Technical Safeguards

• Transport Encryption: All data in transit between player devices and ch33 servers is encrypted using TLS 1.3. Connections over earlier, weaker protocols are rejected.
• Data at Rest: Sensitive data fields (including KYC document images and financial identifiers) are encrypted at rest using AES-256 encryption.
• Password Security: Player passwords are processed through a computationally intensive one-way hashing algorithm with per-user salting. ch33 staff cannot access or recover player passwords.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control and multi-factor authentication.
• Intrusion Detection: Automated monitoring systems scan for anomalous access patterns, brute-force attempts, and indicators of compromise on a continuous basis (24/7, BST).

8.2 Organisational Safeguards

• All ch33 staff with access to personal data are bound by confidentiality obligations and receive regular data protection training.
• Third-party data processors are subject to rigorous due diligence review and are contractually bound to maintain equivalent security standards.
• ch33 conducts periodic internal security reviews of systems, processes, and access logs.

8.3 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to affected players, ch33 will notify impacted players by email without undue delay and in any case within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures ch33 has taken or proposes to take to address the breach, including mitigation steps.

8.4 Your Role in Account Security

The security of your ch33 account depends in part on the strength and confidentiality of your login credentials. You are responsible for keeping your password secure and for logging out of the platform when using shared or public devices. If you suspect your account has been compromised, contact [email protected] immediately. ch33 will never ask for your password via any communication channel.