cbd33 Privacy Policy

1 What Information We Collect

We collect the following types of information for the purpose of account registration and service delivery on the cbd33 platform:

1.1 Information You Provide Directly

• Full name, date of birth, and national ID details (for age verification)
• Email address and mobile phone number
• Residential address
• Payment method details — such as your bKash, Nagad, Rocket, or Upay number or bank account information
• Account username and password (stored in encrypted form)

1.2 Information Collected Automatically

• IP address and device identifier information
• Browser type and operating system
• Login and logout times, pages visited, and links clicked on the site
• Information collected via cookies and similar technologies (see cookie policy in Section 8)
• Transaction history and gaming activity records

1.3 Information Received from Third Parties

In some cases we may receive supplementary information from identity verification service providers or payment processors. This information is used solely to ensure security and prevent fraud.

2 Purpose of Using Your Information

cbd33 uses the information collected for the following legitimate purposes:

3 Data Storage & Security

We apply industry-leading technical and organisational measures to keep your information secure on the cbd33 platform.

3.1 Technical Security Measures

• SSL Encryption: All data transferred between you and our servers is encrypted using TLS/SSL technology.
• Password Hashing: Your password is never stored in plain text; strong hashing algorithms are used.
• Firewall & Intrusion Detection: Multi-layered security measures are in place to prevent unauthorised access.
• Regular Security Audits: Security audits are conducted systematically to identify potential vulnerabilities.

3.2 Data Retention Period

We retain your information for as long as your account is active or as needed to provide services. Even after an account is closed, certain information may need to be retained for a specified period due to legal obligations. Once the retention period ends, data is securely deleted or anonymised.

4 Sharing Information with Third Parties

cbd33 never sells your personal information or discloses it to third parties for advertising purposes. When it comes to sharing information, we follow the policy below:

4.1 Service Partners

Minimum necessary information may be shared with trusted partners to deliver specific services, including:

• Payment processors — such as bKash, Nagad, Rocket, and Upay — to confirm transactions
• Identity verification service providers — to confirm age and identity
• Technology service providers — for platform hosting and maintenance
• Game software providers — to keep gaming services running

All such partners are contractually obligated to protect the confidentiality of your information and may use it only for specified purposes.

4.2 Legal Obligations

We may be legally required to disclose information in response to a court order, valid legal process, or a legitimate request from authorities. In such cases we will provide only the information that is strictly necessary.

4.3 Business Transfers

In the event of a business merger, acquisition, or asset transfer, user information may be transferred. We will notify you appropriately before any such change takes place.

5 Your Rights

As a user of the cbd33 platform, you retain the following rights regarding your personal information:

• Right of Access: You have the right to know what information we hold about you.
• Right to Rectification: You may request correction of any inaccuracies in your information.
• Right to Erasure: In certain circumstances you may request that your information be deleted, though this may be limited by legal obligations.
• Right to Object to Processing: You have the right to object to certain types of data processing.
• Right to Data Portability: Where technically feasible, you have the right to receive your information in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.

6 Protection of Minors

cbd33's services are intended solely for persons aged 21 and above. We do not knowingly collect information from minors. During account registration, our age verification process ensures that the user meets the required age.

If we are informed that information belonging to a minor has reached us, we will immediately arrange to delete that information and close the associated account. To report this, contact us at: [email protected].

7 Special Protection of Payment Information

Financial information is the most sensitive. When transacting on cbd33 via bKash, Nagad, Rocket, Upay, or bank transfer, your financial information is covered by the highest standard of security measures.

• Full bank account or mobile banking numbers are not stored on our servers, or are held in tokenised form.
• Full payment details are not retained in any log after a payment is completed.
• All payment communications are end-to-end encrypted.
• Identity verification is mandatory before any withdrawal from an account.

cbd33 will never ask for your full payment PIN, OTP, or password via phone, email, or chat. If you receive any such request, treat it as a fraud attempt and inform us immediately.

8 Cookie Policy

The cbd33 platform uses various types of cookies that improve your browsing experience and ensure platform functionality.

8.1 Types of Cookies

• Essential Cookies: Essential for maintaining login sessions and ensuring security. These cannot be disabled.
• Functional Cookies: Used to remember language preferences, display settings, and other personalised preferences.
• Analytical Cookies: Used to understand which parts of the site are most frequently used — user identity is kept anonymous.

8.2 Cookie Controls

You can manage cookies through your browser settings. However, disabling essential cookies may cause some platform features to not work properly.

9 International Data Transfers

The technical infrastructure of the cbd33 platform may operate on servers located in multiple countries. Even if your information is transferred outside Bangladesh, we ensure that it will be processed in accordance with the protection standards described in this Privacy Policy.

For data transfers to third countries, we ensure appropriate safeguards are in place — such as data processing agreements.

10 Response to Security Breaches

In the event of a data security breach, we will take the following steps:

• Containment measures will be taken as quickly as possible after the incident is identified.
• Affected users will be notified in a timely manner via their registered email or phone.
• Transparent information will be provided regarding the nature of the breach, its potential impact, and the steps taken.
• Necessary measures will be taken to prevent such incidents from occurring in the future.

If you ever believe your account security has been compromised, contact us immediately at [email protected] or get assistance via our 24/7 live chat.

11 Policy Changes & Updates

cbd33 reserves the right to update this Privacy Policy from time to time. The method of notification will vary depending on the nature of the change:

• Minor Changes: An updated version will be published on this page.
• Significant Changes: A notification will be provided upon logging in to the platform and/or sent to the registered email address.

Continued use of cbd33 after any change will be considered as your agreement to the updated Policy. If you are not satisfied with any change, you may request that your account be closed.

12 Contact & Complaint Resolution

For any questions, concerns, or complaints regarding this Privacy Policy, please get in touch with us:

• Email: [email protected]
• Live Chat: Available 24/7 in Bengali and English

We will do our best to respond to your request as quickly as possible. Complex matters may take a little more time to process, but we treat every request with care.