cr333 Privacy Policy —
How We Protect Your Data

1. Data We Collect

When you register, use, or interact with the cr333 platform, we collect certain categories of personal information. We collect only the data that is necessary for the purposes described in this Privacy Policy. The categories of data we collect are set out below.

1.1 Registration Data

When you create a cr333 account, we collect your full legal name, date of birth, residential address in Bangladesh, mobile phone number, and email address. This information is required to open and verify your account and to comply with our Know Your Customer (KYC) obligations.

1.2 Identity Verification Data

To comply with our age verification and anti-fraud requirements, we may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driver's licence. We may also collect a selfie photograph or other biometric verification image where required by our verification partner. These documents are processed securely and retained only for the duration specified in section 5 of this policy.

1.3 Financial Data

We collect data relating to your financial transactions on cr333, including deposit amounts, withdrawal requests, payment method identifiers (such as the mobile wallet number associated with your bKash, Nagad, Rocket, or Upay account), and transaction timestamps. We do not store full payment credentials. Financial transaction data is used exclusively for processing payments, detecting fraud, and meeting our financial record-keeping obligations.

1.4 Gameplay and Betting Data

We record details of your activity on the cr333 platform, including games played, bet amounts, game outcomes, bonus claims, wagering progress, and session durations. This data is used to operate the platform, resolve disputes, and identify patterns that may indicate problem gambling so that we can offer responsible gaming support where appropriate.

1.5 Technical and Device Data

When you access cr333 via a web browser or mobile application, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session identifiers. This data is collected via server logs and analytics tools and is used for platform security, fraud detection, and improving the user experience.

1.6 Communications Data

If you contact cr333 support via live chat, WhatsApp, or email, we retain a record of that communication, including its content, timestamp, and the resolution outcome. This is used for quality assurance, dispute resolution, and staff training purposes.

2. How We Use Your Data

cr333 uses the personal data we collect for the following purposes. We process your data only where we have a valid lawful basis to do so, which includes contractual necessity (operating your account), legal obligation (KYC and anti-money laundering compliance), legitimate interest (fraud prevention, platform security), and, in certain cases, your explicit consent.

2.1 Account Management

We use your registration and identity data to create and maintain your cr333 account, authenticate your identity when you log in, process deposits and withdrawals, apply bonus offers to your account, and enforce the cr333 Terms & Conditions. Without this data, we cannot provide you with a functional account.

2.2 Fraud Prevention and Security

We use technical data, financial data, and gameplay data to detect and prevent fraudulent activity, money laundering, and abuse of our promotional systems. This includes automated screening of transactions and the application of risk-scoring models to identify unusual account behaviour. Where fraud is detected, we may share relevant data with payment providers or law enforcement agencies as required by applicable law.

2.3 Responsible Gaming

cr333 monitors gameplay and session data to identify behaviour patterns that may be indicative of problem gambling. Where such patterns are detected, we may use your contact data to reach out and offer responsible gaming resources, apply voluntary or mandatory account limits, or initiate a cooling-off period. This processing is carried out in the interests of player well-being and is a core component of our responsible gaming programme.

2.4 Customer Support

We use your account data, gameplay history, and communications data to respond to your support enquiries, investigate complaints, and resolve disputes. Support staff access only the data necessary to handle the specific query you have raised.

2.5 Platform Improvement and Analytics

We use aggregated and anonymised technical and gameplay data to analyse platform performance, identify areas for improvement, and plan new features. This data is processed at an aggregate level and does not identify individual players.

2.6 Marketing Communications

If you have opted in to receive promotional communications from cr333, we may use your email address or mobile number to send you information about bonuses, new game releases, and seasonal promotions relevant to players in Bangladesh. You may withdraw your consent to marketing communications at any time by contacting support or adjusting your notification preferences in your account settings. Withdrawal of marketing consent does not affect your ability to use the cr333 platform.

3. Data Sharing & Third Parties

cr333 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, we share relevant financial and identity data with our payment processing partners, including the operators of bKash, Nagad, Rocket, and Upay. This sharing is governed by the terms of our agreements with those providers and is strictly limited to the data required to complete the transaction and comply with mobile financial service regulations.

3.2 Identity Verification Partners

cr333 uses third-party KYC and identity verification services to validate identity documents submitted during account registration or at the request of our compliance team. These providers process your identity document images and return a verification result to cr333. They do not retain your documents beyond the period required to complete the verification check.

3.3 Game Studios and Content Providers

The games available on cr333 are operated by third-party game studios including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi, and Habanero. When you play a game, certain session data — such as your anonymised player ID, bet amounts, and game outcomes — is transmitted to the relevant studio to operate the game in real time. This data is not used by game studios for their own marketing purposes.

3.4 Legal and Regulatory Disclosures

cr333 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or legal process. We will notify affected players of such disclosures where we are legally permitted to do so.

3.5 Business Transfers

In the event that cr333 undergoes a merger, acquisition, or sale of all or a substantial part of its business assets, personal data held about players may be transferred to the successor entity as part of that transaction. Affected players will be notified of any such transfer and of any resulting change to this Privacy Policy before the transfer takes effect.

4. Cookies & Tracking

cr333 uses cookies and similar tracking technologies on its website and mobile platform to provide core functionality, remember your preferences, and analyse usage patterns. This section explains what cookies we use and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to recognise your device on subsequent visits and recall information about your session or preferences. cr333 also uses similar technologies such as local storage, session tokens, and pixel tags for some of the purposes described below.

4.2 Types of Cookies We Use

• Strictly necessary cookies: These are essential for the cr333 platform to function. They manage your login session, maintain your account state during gameplay, and protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: We use analytics tools to collect anonymised data about how players navigate the cr333 platform, which pages are visited most frequently, and where users encounter errors. This data is used exclusively to improve the platform experience.
• Preference cookies: These cookies remember your platform settings such as language preference, notification settings, and display options, so that you do not need to re-enter them on each visit.
• Security cookies: These support our fraud detection and account security systems by helping cr333 identify unusual login patterns or device changes that may indicate unauthorised account access.

4.3 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block or delete cookies from specific websites, or to block all third-party cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your cr333 account and using the platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation. cr333 does not currently respond to "Do Not Track" browser signals, as there is no industry-wide standard for how such signals should be interpreted.

5. Data Retention

cr333 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods by data category are set out below.

After the applicable retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical analysis purposes.

6. Data Security

cr333 takes the security of your personal data seriously. We maintain a set of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

6.1 Technical Measures

All data transmitted between your device and the cr333 platform is encrypted using industry-standard SSL/TLS protocols. Sensitive data at rest — including identity documents and financial records — is encrypted in our database using AES-256 encryption. Access to cr333's production database is restricted to authorised personnel only and is protected by multi-factor authentication and IP allowlisting.

6.2 Organisational Measures

Access to personal data within cr333 is granted on a strict need-to-know basis. Staff members who handle personal data are trained in data protection best practices and are bound by confidentiality obligations. cr333 conducts regular internal reviews of its data handling procedures and engages third-party security specialists to perform periodic security assessments of the platform.

6.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights, cr333 will notify affected players without undue delay and will take immediate remedial steps to contain the breach, assess its impact, and prevent recurrence. We will provide affected players with clear information about what data was involved, what cr333 is doing in response, and what steps you can take to protect yourself.

6.4 Your Role in Security

While cr333 takes robust measures to protect your data on our side, you also play an important role. You should use a strong, unique password for your cr333 account, enable any additional security features available in your account settings, and never share your login credentials with anyone. If you suspect your account has been accessed without your authorisation, contact our support team immediately via live chat or WhatsApp at +880 1700 000333.

7. Your Privacy Rights

As a cr333 player, you have the following rights in relation to the personal data we hold about you. You may exercise any of these rights at any time by contacting our support team at [email protected]. We will respond to all data rights requests within 30 days of receipt.

7.1 Right of Access

You have the right to request a copy of the personal data that cr333 holds about you. Upon receipt of a verified access request, we will provide you with a summary of the data we hold, the purposes for which it is processed, the categories of recipients to whom it has been disclosed, and the retention period applicable to each category.

7.2 Right to Rectification

If any of the personal data cr333 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details — such as your contact email or WhatsApp number — directly from within your cr333 account settings. For corrections to core identity data such as your name or date of birth, you will need to submit a support request along with supporting documentation.

7.3 Right to Erasure

You have the right to request that cr333 delete the personal data we hold about you. This right applies where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent and there is no other lawful basis for processing, or where the data has been processed unlawfully. Please note that the right to erasure is not absolute — we are entitled to retain data where we have a legal obligation to do so, such as financial transaction records required for anti-money laundering compliance.

7.4 Right to Restrict Processing

You have the right to request that cr333 restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data while we verify it, or where you have objected to processing pending our determination of whether our legitimate interests override yours. While processing is restricted, we will continue to store your data but will not actively use it for other purposes.

7.5 Right to Data Portability

Where cr333 processes your personal data on the basis of your consent or contractual necessity, and the processing is carried out by automated means, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format. You may also request that we transmit that data directly to another data controller where technically feasible.

7.6 Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, cr333 will immediately cease sending you promotional communications. This right is unconditional and does not require justification.

8. Contact & Updates

If you have any questions, concerns, or complaints about how cr333 handles your personal data, or if you wish to exercise any of the rights described in section 7, please contact us using the details below.

8.1 Data Controller Contact

The data controller responsible for your personal information on the cr333 platform is the cr333 operations team. You may contact us as follows:

• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +880 1700 000333
• Live Chat: Available 24/7 within the cr333 app

8.2 Updates to This Privacy Policy

cr333 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes to this policy, we will update the "Last Updated" date at the top of the page and, where appropriate, notify players by email or in-app notification. We encourage you to review this Privacy Policy periodically. Your continued use of the cr333 platform after any update constitutes your acceptance of the revised policy.

8.3 Children's Privacy

cr333 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a person under 18, we will delete that data immediately and close the associated account. If you believe that a minor has registered on cr333, please contact us immediately at [email protected].