cgt33 Privacy Policy — Your Data, Your Rights
This Privacy Policy explains how cgt33 collects, uses, stores, and protects the personal information of players across Bangladesh. We are committed to handling your data responsibly and transparently.
Introduction
cgt33 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users who access or use the cgt33 website and mobile platform. This Privacy Policy ("Policy") describes the types of personal information we collect, the purposes for which we use it, the circumstances under which we may share it, and the rights you have in relation to your personal data.
By registering an account with cgt33, making a deposit, or otherwise using the Services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, you should not use the cgt33 platform. This Policy should be read alongside the cgt33 Terms and Conditions, which together govern your relationship with the platform.
Personal Data We Collect
cgt33 collects personal data only to the extent necessary to provide the Services, meet our legal obligations, and maintain the security and integrity of the platform. The categories of personal data we collect include:
Identity Data
Full name, date of birth, national ID or passport number collected during KYC verification.
Contact Data
Registered mobile number, email address (if provided), and communication preferences for your account.
Financial Data
Transaction records including deposit and withdrawal amounts, payment method identifiers (bKash number, Nagad number), and transaction timestamps.
Usage Data
Session logs, game history, bet records, login timestamps, device type, browser, and IP address collected automatically.
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where such data is voluntarily provided by you in a support request or is required to meet a responsible gaming obligation (for example, data provided when activating self-exclusion tools). We collect only what is necessary and limit access to personal data strictly on a need-to-know basis within the cgt33 organisation.
How We Use Your Personal Data
cgt33 uses your personal data for the following purposes. All processing is conducted on a lawful basis as described in Section 4 of this Policy.
Account Management and Service Delivery
To create and maintain your cgt33 account, verify your identity, process your deposits and withdrawals via bKash, Nagad, and Rocket, and deliver the gaming and sports betting services you have requested.
Security and Fraud Prevention
To detect and prevent fraud, unauthorised access, money laundering, bonus abuse, and other activities that violate the cgt33 Terms and Conditions or applicable law. This includes analysis of betting patterns, IP address monitoring, and device fingerprinting.
Payment Processing
To process financial transactions accurately, reconcile account balances, investigate disputed transactions, and comply with anti-money laundering record-keeping requirements applicable to payment processing in Bangladesh.
Marketing and Promotions
To send you promotional offers, bonus announcements, seasonal promotions (such as BPL season offers, Eid promotions, and Pohela Boishakh specials), and platform updates — but only where you have not opted out of marketing communications. You may withdraw marketing consent at any time through your account settings.
Legal and Regulatory Compliance
To comply with applicable legal obligations, respond to lawful requests from regulatory authorities or law enforcement agencies, enforce our Terms and Conditions, and exercise or defend legal claims arising from your use of the platform.
Legal Basis for Processing
cgt33 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:
- Contractual necessity — processing required to fulfil the obligations in the cgt33 Terms and Conditions, including account creation, payment processing, game delivery, and withdrawal handling.
- Legal obligation — processing necessary to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and responses to lawful regulatory requests.
- Legitimate interests — processing necessary for fraud detection, platform security, responsible gaming monitoring, and improvement of our services, where these interests are not overridden by your fundamental rights and freedoms.
- Consent — processing for marketing communications and certain non-essential cookies, where you have provided clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Data Sharing and Third Parties
cgt33 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
Payment Service Providers
Transaction data is shared with bKash, Nagad, Rocket, Upay, and other payment partners to the extent required to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable data protection obligations.
Game Software Providers
cgt33 integrates games from third-party providers including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming. These providers may receive session data (such as player ID and game session identifiers) required to operate their games within the cgt33 platform. They do not receive your full identity or financial transaction data.
Legal and Regulatory Authorities
cgt33 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities when required to do so by applicable law, court order, or lawful regulatory directive. We will notify affected users of any such disclosure where we are legally permitted to do so.
All third parties with whom cgt33 shares personal data are required to maintain appropriate technical and organisational security measures to protect that data. cgt33 does not transfer personal data to countries outside Bangladesh except where necessary for the operation of game software provided by international suppliers, in which case appropriate contractual safeguards are in place.
Cookies and Tracking Technologies
cgt33 uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used:
- Essential cookies — required for the platform to function, including session management, login state, and security tokens. These cannot be disabled without affecting the functionality of the platform.
- Analytics cookies — used to understand how players interact with the platform, which pages are visited most frequently, and where technical issues occur. This data is aggregated and does not identify individual users.
- Preference cookies — used to remember your platform settings such as language preference, display options, and notification preferences across sessions.
You may control non-essential cookies through your mobile browser settings. Please note that disabling certain cookies may affect the performance of some platform features. cgt33 does not use advertising tracking cookies or share cookie data with advertising networks.
Data Retention
cgt33 retains your personal data for as long as your account remains active and for such additional period as may be required to meet legal, regulatory, and compliance obligations. Specifically: account registration data and KYC documents are retained for a minimum of 5 years following account closure; financial transaction records are retained for a minimum of 7 years to meet anti-money laundering record-keeping requirements; game session logs are retained for a period of 2 years from the date of the session.
When personal data is no longer required for the purposes for which it was collected and all applicable retention periods have expired, cgt33 will securely delete or anonymise that data in accordance with its internal data lifecycle procedures. Data that has been anonymised is no longer considered personal data and may be retained for analytical purposes indefinitely.
Your Rights Over Your Personal Data
As a cgt33 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact cgt33 customer support using the email address provided in Section 9 of this Policy.
Right of Access
You have the right to request a copy of the personal data cgt33 holds about you, along with information about how it is being processed. We will respond to access requests within 30 days of receipt.
Right of Rectification
You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Where a correction is made to account registration data, we may require re-verification of the updated information before applying the change.
Right of Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been unlawfully processed. The right of erasure does not apply where retention is required by law — for example, financial records subject to anti-money laundering retention obligations cannot be deleted on request.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests, including profiling for responsible gaming purposes. You also have an absolute right to object to direct marketing communications at any time. We will cease direct marketing upon receipt of your objection without requiring any justification.
cgt33 will not charge a fee for processing rights requests and will respond within 30 days. In exceptional cases involving complex or multiple simultaneous requests, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. If you are dissatisfied with our response to a rights request, you have the right to escalate the matter through applicable legal channels in Bangladesh.
Data Security
cgt33 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include SSL encryption for all data transmissions between your device and the cgt33 platform, bcrypt password hashing, access controls restricting internal data access to authorised personnel only, regular security audits and penetration testing of platform infrastructure, and automatic session timeout after periods of inactivity.
While cgt33 takes data security seriously and maintains robust protections, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, cgt33 will notify affected users without undue delay and will take all reasonable steps to contain the breach, assess its impact, and prevent recurrence. We encourage you to use a strong, unique password for your cgt33 account and to contact support immediately if you suspect unauthorised access.
Children and Minors
The cgt33 platform is strictly intended for users aged 21 and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. If cgt33 becomes aware that personal data has been collected from a person under 21 without appropriate age verification having taken place, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor has registered an account on cgt33, please contact us immediately at [email protected] so that we can investigate and take appropriate action.
Changes to This Privacy Policy
cgt33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify active account holders via their registered mobile number or email address prior to the changes taking effect, where reasonably practicable. The updated Policy will be effective from the date of publication on the platform.
Your continued use of the cgt33 platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically, particularly if you are an active account holder who uses the platform regularly. The date at the top of this page indicates when the Policy was most recently updated.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a concern about how your personal data is being handled, please contact the cgt33 Data Support team. We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve them fully within 30 days.
Privacy Support
Send your privacy enquiry or data rights request to our support team. We will respond within 30 days.
[email protected]Have More Questions?
Visit our FAQ for quick answers about accounts, payments, and security. Or learn more about who we are on our About Us page.
Visit Our FAQ About Us