ch33 Privacy Policy

1. Introduction

ch33 is Bangladesh's trusted online casino and sports betting platform, operating at ch33.io. We take the privacy of every player seriously and are committed to processing personal data in a transparent, fair, and lawful manner. This Privacy Policy describes the categories of personal data we collect, the purposes for which that data is processed, the parties with whom it may be shared, and the rights you hold as a data subject.

This policy applies to all personal data collected through ch33.io, our mobile web interface, any related ch33 subdomains, and all communications between you and ch33 support staff. It does not apply to third-party websites or services that may be linked from our platform.

References to "personal data" in this policy mean any information that identifies or could reasonably be used to identify you as an individual, including your name, contact details, financial data, device identifiers, and usage records associated with your ch33 account.

2. Personal Data We Collect

ch33 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from authorised third-party service providers. The table below summarises the main categories of data we collect.

2.1 Data You Provide Voluntarily

When you register a ch33 account, make a deposit or withdrawal, contact support, or participate in a promotion, you provide us with personal data directly. You are not obligated to provide this data, but failure to provide information that is required for account verification or payment processing may prevent us from offering you certain services.

2.2 Data Collected Automatically

When you access ch33.io, our servers automatically collect technical and usage data including your IP address, browser information, and a record of the pages you visit and the games you play. This data is used for security monitoring, fraud prevention, platform performance optimisation, and responsible gaming analysis.

2.3 Data From Third Parties

We may receive personal data about you from authorised third parties, including identity verification service providers, payment processors (such as bKash, Nagad, and Rocket), and our licensed game studio partners (such as Pragmatic Play, Evolution Gaming, Ezugi, and Spribe). Data received from third parties is used solely in connection with your ch33 account and is subject to the same protections as data collected directly.

3. How We Use Your Personal Data

ch33 processes your personal data only for specific, legitimate purposes. We do not use personal data for any purpose that is incompatible with the purposes set out below.

• Account management: To create, maintain, verify, and administer your ch33 player account, including processing deposits and withdrawals in BDT.
• Service delivery: To provide access to casino games, live dealer tables, sports betting markets (including BPL, IPL, T20 World Cup, and other events), and platform features.
• Identity verification (KYC/AML): To verify your identity and age (21+), comply with anti-money laundering obligations, and prevent fraud and financial crime.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladeshi bank channels.
• Responsible gaming: To monitor betting patterns, identify potential problem gambling indicators, apply player-requested limits, and manage self-exclusion arrangements.
• Customer support: To respond to enquiries, complaints, and disputes, and to maintain records of support interactions.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, bonus abuse, and other prohibited conduct.
• Platform improvement: To analyse usage data, identify technical issues, and improve the performance and user experience of ch33.io.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications.
• Legal compliance: To meet our obligations under applicable laws and to respond to lawful requests from regulatory or law enforcement authorities.

4. Legal Basis for Processing

ch33 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to fulfil our obligations to you under the ch33 Terms & Conditions, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML requirements, age verification obligations, and responses to lawful authority requests.
• Legitimate interests: Processing carried out to pursue legitimate business interests — such as fraud prevention, security monitoring, and platform analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit, freely given consent — in particular, the sending of marketing and promotional communications. You may withdraw this consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

5. Data Sharing & Disclosure

ch33 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Authorised Service Providers

We share personal data with carefully selected third-party service providers who assist us in operating the ch33 platform. These include identity verification and KYC providers, payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe), IT infrastructure providers, and customer support tools. All service providers are contractually required to process data only on our instructions and to maintain appropriate security measures.

5.2 Legal and Regulatory Authorities

ch33 may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts of competent jurisdiction where we are required to do so by applicable law or pursuant to a valid legal process. Where permitted, we will notify you of such a disclosure request before complying.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the ch33 business, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it before the transfer takes effect.

5.4 Aggregated and Anonymised Data

ch33 may share aggregated, anonymised statistical data with partners or publish it publicly for analytical or research purposes. This data does not identify any individual player and does not constitute a disclosure of personal data.

6. Cookies & Tracking Technologies

ch33.io uses cookies and similar tracking technologies to ensure the platform functions correctly, to enhance your experience, and to collect analytics data that helps us improve our services. A cookie is a small text file stored on your device when you visit a website.

6.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged into your account and security cookies that detect fraudulent use. These cookies cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming limits you have set on your account.
• Analytics cookies: Collect anonymised data about how players navigate and use ch33.io, which helps us identify areas for improvement. We use analytics data in aggregate form only.
• Performance cookies: Monitor platform performance, load times, and error rates to ensure a smooth gaming experience across all devices and connection speeds common in Bangladesh.

6.2 Managing Cookies

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of ch33.io — for example, you may be required to log in again on each visit if session cookies are blocked. Instructions for managing cookies are available in the help documentation of all major browsers.

7. Data Retention

ch33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations.

• Active account data: Retained for the full duration of your active account relationship with ch33 plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless the communication relates to an open dispute or legal matter, in which case it is retained until the matter is resolved.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following its withdrawal, to demonstrate compliance.
• Technical and usage logs: Retained for twelve (12) months from the date of collection, unless required for an ongoing security investigation.

When personal data is no longer required and the applicable retention period has expired, it is securely deleted or permanently anonymised in accordance with our internal data destruction procedures.

8. Data Security

ch33 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ch33.io.
• Hashing of all account passwords using industry-standard cryptographic algorithms. Passwords are never stored in plain text.
• Role-based access controls ensuring that ch33 staff can only access personal data to the extent necessary for their specific job function.
• Regular security audits and penetration testing of platform infrastructure.
• Automated fraud detection and real-time monitoring of suspicious login and transaction activity.
• Secure, encrypted storage of all KYC documentation with restricted access.
• Two-factor authentication (2FA) available to all registered players and required for all ch33 administrative accounts.

While ch33 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying ch33 immediately if you suspect any unauthorised access to your account.

9. Your Data Rights

As a player on ch33, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond to all valid requests within thirty (30) days.

• Right of access: You have the right to request a copy of the personal data we hold about you, together with information about how it is being processed.
• Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure: In certain circumstances, you have the right to request that we delete your personal data. This right is subject to our legal obligations to retain certain data for AML and regulatory compliance purposes.
• Right to restrict processing: You have the right to request that we temporarily suspend processing of your personal data where you contest its accuracy, or where the processing is unlawful but you do not want the data deleted.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

ch33 will not charge a fee for processing data rights requests in ordinary circumstances. We reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive, or to decline such requests.

10. Children's Privacy

ch33 is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 21. If you are under 21 years of age, you must not register an account or attempt to use any ch33 service.

If ch33 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will immediately suspend the relevant account, void any associated balances, return any deposited funds to the original payment source, and permanently delete all personal data associated with that account.

Parents and guardians who believe that a minor has registered on ch33 should contact us immediately at [email protected] so that appropriate action can be taken without delay.

11. Third-Party Links

ch33.io may contain references to third-party game providers, payment services, or informational resources. This Privacy Policy applies solely to data processed by ch33 in connection with your use of ch33.io. ch33 is not responsible for the privacy practices of any third-party website or service, and we encourage you to review the privacy policies of any external services you access independently of ch33.

12. Marketing Communications

With your consent, ch33 may send you promotional communications including bonus offers, seasonal promotions (such as Eid, Pohela Boishakh, and BPL season campaigns), new game announcements, and platform updates. These communications may be delivered by email or in-platform notification.

You may opt out of marketing communications at any time by:

• Updating your notification preferences within your ch33 account settings.
• Clicking the unsubscribe link included in any marketing email from ch33.
• Contacting our support team at [email protected] with your opt-out request.

Opting out of marketing communications will not affect the delivery of transactional messages that are necessary for your account, such as deposit confirmations, withdrawal notifications, security alerts, and KYC verification requests.

13. Changes to This Privacy Policy

ch33 reserves the right to update or amend this Privacy Policy at any time. When changes are material — meaning they significantly affect how your personal data is processed or your rights as a data subject — we will provide advance notice via email to your registered address and by displaying a prominent notice on ch33.io before the revised policy takes effect.

Non-material changes, such as corrections of typographical errors or clarifications that do not alter the substance of the policy, may be made without prior notice. The effective date at the top of this document will be updated to reflect any revision.

Your continued use of ch33 following the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised policy, you must cease using the platform and close your account prior to the effective date of the change.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ch33 processes your personal data, please contact our dedicated privacy support team using the details below. All privacy-related communications are handled in English and treated with strict confidentiality.

Email: [email protected] (plain text — not a clickable link)

Subject line (recommended): "Privacy Request – [Your Registered Username]"

Response time: We aim to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within thirty (30) calendar days of receipt.