cr333 Privacy Policy — Your Data, Protected

When you register an account or interact with cr333, we collect personal information that you provide directly. This includes:

• Full name and date of birth (required for age verification and KYC compliance).
• Bangladeshi mobile phone number, used as your primary account identifier and for account recovery purposes.
• Payment information, including bKash wallet numbers, Nagad numbers, Rocket numbers, and card details where applicable. Full card numbers are never stored by cr333; we rely on secure tokenised payment processing.
• Identity verification documents submitted during KYC, such as National ID card (NID), passport, or driving licence images.

When you access cr333, certain technical data is collected automatically to enable the platform to function correctly and to help us identify and resolve issues. This includes:

• IP address and approximate geolocation data, used to detect access from prohibited jurisdictions and to prevent account fraud.
• Device information, including device type, operating system version, browser type, and screen resolution.
• Session logs, including pages visited, games played, bets placed, time spent on session, and interaction timestamps.

cr333 uses personal data collected from players for the following purposes. We process only the minimum data necessary for each stated purpose:

• Account creation and management, including verifying your identity and age at registration, authenticating logins, and processing account changes.
• Payment processing, including executing deposits and withdrawals, fraud screening, and maintaining financial transaction records as required.
• Customer support, including responding to queries, investigating complaints, and resolving account or payment disputes.
• Responsible gaming enforcement, including monitoring betting patterns for signs of problem gambling, applying deposit limits, and processing self-exclusion requests.
• Platform improvement, including analysing aggregated (non-personally identifiable) usage data to improve game selection, performance, and user interface.
• Legal and regulatory compliance, including retaining records as required by applicable anti-money laundering (AML) obligations and responding to lawful information requests from competent authorities.

cr333 processes personal data only where a valid legal basis exists. The grounds on which we rely are:

• Contractual necessity: processing required to fulfil our obligations under the User Agreement, including account management and payment processing.
• Legal obligation: processing necessary to comply with applicable legal and regulatory requirements, including AML, KYC, and age verification obligations.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: where you have given explicit consent for specific processing activities, such as receiving promotional communications. You may withdraw consent at any time via your account settings.

cr333 does not sell, rent, or trade your personal data to any third party. We may share limited personal data only in the following circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard processors receive transactional data strictly necessary to execute deposits and withdrawals. These partners are contractually bound to process data only for payment purposes.
• Identity verification partners: third-party KYC service providers who assist with document verification, acting as data processors under our instruction.
• Regulatory and law enforcement authorities: where cr333 is legally required to disclose information, including pursuant to lawful court orders, AML reporting obligations, or requests from competent Bangladeshi authorities.
• Technical infrastructure providers: hosting, database, and security service providers who process data on our behalf as data processors under strict contractual and confidentiality obligations.

cr333 uses cookies and similar tracking technologies to ensure the platform functions correctly and to improve your experience. We use the following types of cookies:

• Essential cookies: required for the platform to operate. These include session authentication cookies and security tokens. They cannot be disabled without breaking core functionality.
• Functional cookies: used to remember your preferences such as language setting, session continuation, and responsible gaming limits you have set.
• Analytics cookies: used to collect aggregated, anonymised data about how players use the platform, helping us identify and fix performance issues and improve navigation.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to log in and use the platform. Disabling analytics cookies will not affect your ability to play games or process payments.

cr333 retains personal data for as long as your account remains active and for a reasonable period thereafter to handle any outstanding queries, disputes, or legal obligations. Account data, transaction records, and KYC documents are retained for a minimum period in accordance with applicable financial record-keeping requirements. After this retention period, data is securely deleted or anonymised.

Where cr333 processes data on the basis of consent (for example, marketing communications), we will retain that data only for as long as consent remains active. Once consent is withdrawn, we will cease processing for that purpose and delete the relevant data within a reasonable timeframe.

In relation to your personal data held by cr333, you have the following rights. To exercise any of these rights, contact cr333 support via live chat. We will respond to all valid requests within 30 days.

• Right of access: you may request a copy of the personal data we hold about you at any time.
• Right to rectification: if any data we hold about you is inaccurate or incomplete, you may request that we correct it.
• Right to erasure: in certain circumstances, you may request deletion of your personal data. Note that some data cannot be deleted where retention is legally required.
• Right to restriction: you may request that we restrict processing of your data in certain circumstances, for example where you contest the accuracy of data we hold.
• Right to object: you may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes.

To submit a data rights request, contact cr333 support via live chat on the platform. Please provide sufficient information to allow us to verify your identity before processing your request.

cr333 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls restricting data access to authorised personnel only, and regular security assessments of our platform infrastructure.

While cr333 takes all reasonable steps to safeguard your data, no system is entirely immune to risk. You are responsible for keeping your account credentials secure and for notifying cr333 support immediately if you suspect unauthorised access to your account.