Privacy Policy — cj33 Online Casino Bangladesh

cj33 is committed to protecting the privacy of every individual who interacts with its platform. This Policy applies to all personal data collected through the cj33 website at cj33.io, through the cj33 mobile browser experience, through communications with the cj33 support team, and through any other channel by which a player engages with cj33 services.

The cj33 platform serves players primarily located in Bangladesh. All data practices described in this Policy are designed to balance the operational requirements of running a secure and responsible online casino and sports betting service with the privacy expectations of players based in the Bangladesh market. Where cj33 uses local payment partners such as bKash, Nagad, and Rocket to facilitate BDT transactions, those partners operate under their own privacy frameworks, which cj33 cannot control.

This Policy is written in plain, formal English and is available in full at cj33.io/privacy-policy at all times. If you have any questions about this Policy or about how your data is handled, you may contact the cj33 Data Support team at [email protected].

For the purposes of this Policy, cj33 acts as the data controller in respect of the personal data it collects from players using the cj33 platform. As data controller, cj33 determines the purposes and means by which personal data is processed.

All data-related enquiries, subject access requests, rectification requests, and erasure requests should be directed to the cj33 support team using the contact details set out in Section 13 of this Policy. cj33 will acknowledge all data-related requests within 48 hours and will aim to resolve them within 30 calendar days of receipt of a verified request.

cj33 collects personal data across several categories depending on how you interact with the platform. The following table summarises the main data categories and the context in which they are typically collected:

cj33 does not intentionally collect sensitive categories of personal data such as health information, political opinions, or religious beliefs. If such data is incidentally included in documents submitted for KYC purposes, it is not extracted or processed for any purpose other than identity verification.

Data provided by third parties: In some cases, cj33 may receive limited data about you from third-party identity verification services used to cross-check the accuracy of information provided during registration. Such data is used solely for verification purposes and is not retained beyond the verification workflow.

cj33 processes personal data only for clearly defined and legitimate purposes. The main purposes for which your data is used are set out below:

• Account administration: Creating, managing, and maintaining your cj33 account, including processing deposits and withdrawals in Bangladeshi Taka via bKash, Nagad, Rocket, and supported bank channels.
• Identity verification: Conducting KYC checks to confirm your identity, age (21+), and the legitimacy of payment methods used on your account. This is a legal and operational requirement for all registered players.
• Service delivery: Enabling access to casino games, live dealer tables, slots, and cricket and sports betting markets including BPL and T20 World Cup fixtures.
• Security and fraud prevention: Monitoring account activity for signs of fraudulent behaviour, money laundering, bonus abuse, or multiple-account creation. Technical data and usage data are central to this process.
• Responsible gaming: Analysing betting patterns and session data to identify signs of potentially problematic gambling behaviour, and to implement player-requested tools such as deposit limits, cooling-off periods, and voluntary self-exclusion.
• Customer support: Responding to enquiries, resolving disputes, and maintaining records of support interactions for quality assurance and training purposes.
• Legal compliance: Retaining records as required to demonstrate compliance with applicable regulations relating to online gaming, anti-money laundering, and data protection.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive marketing communications. You may opt out at any time by contacting support.
• Platform improvement: Using aggregated, anonymised usage data to improve the cj33 platform, optimise game loading performance, and enhance the overall player experience.

cj33 does not use personal data for automated decision-making processes that produce legal or similarly significant effects without human review, except in the case of automated fraud and duplicate-account detection systems where immediate protective action may be required to safeguard the integrity of the platform.

cj33 processes personal data on one or more of the following legal bases depending on the purpose of processing:

• Contractual necessity: Processing required to perform the contract between cj33 and the player — including account creation, transaction processing, and game delivery — is carried out on the basis that it is necessary to fulfil that contract.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform performance improvement is carried out on the basis of cj33's legitimate interests, provided those interests are not overridden by the player's privacy rights.
• Legal obligation: Processing required to comply with applicable laws — including KYC, anti-money laundering record-keeping, and age verification — is carried out on the basis of legal obligation.
• Consent: Processing for marketing communications is carried out on the basis of the player's explicit consent, which may be withdrawn at any time without detriment to the player's account or service access.

cj33 does not sell, lease, or trade personal data to third parties. Personal data may be shared with the following categories of recipients only to the minimum extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard receive only the transaction data required to process a deposit or withdrawal. No game history or account balance data is shared with payment partners.
• Identity verification providers: Third-party KYC and document verification services that assist cj33 in confirming player identity and age. These providers process data solely on cj33's instructions and are bound by confidentiality obligations.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers necessary to deliver their game content within the cj33 platform. No personally identifiable data is shared with game providers beyond what is technically required to authenticate a game session.
• IT and hosting providers: Cloud infrastructure and server hosting providers that store cj33 platform data are contractually required to maintain appropriate security standards and may not use data for their own purposes.
• Legal and regulatory authorities: Where cj33 is legally required to disclose personal data to law enforcement, government agencies, or regulatory bodies, it will do so in compliance with applicable law and will, where permitted, notify the affected player.

All third parties with whom cj33 shares personal data are required to handle that data in a manner consistent with the obligations set out in this Policy and to implement appropriate technical and organisational security measures.

The cj33 platform uses cookies and similar tracking technologies to deliver core platform functionality, maintain session state, and improve the overall player experience. The following categories of cookies may be used:

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in to your cj33 account during an active session. These cookies cannot be disabled without preventing access to the platform.
• Performance cookies: Collect anonymised information about how players navigate the cj33 platform — for example, which pages load most slowly or which game categories attract the most visits. This data is used to improve platform performance and is not linked to your personal identity.
• Functional cookies: Remember your preferences such as language settings and display options so that you do not need to reset them on each visit.
• Analytics cookies: Used to generate aggregated reports on platform usage patterns. Data processed via analytics cookies is anonymised before analysis and is not used to identify individual players.

cj33 does not use third-party advertising cookies or behavioural targeting cookies that track your activity outside of the cj33 platform. You may manage cookie preferences through your browser settings, though disabling essential cookies will impair your ability to log in and use the platform.

cj33 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any legal obligations that require longer retention. The following general retention principles apply:

• Active account data: Retained for the full duration of the player's registered account relationship with cj33.
• Post-closure account data: Following account closure — whether voluntary or by cj33 — identity, transaction, and KYC records are retained for a minimum period to satisfy anti-money laundering and responsible gaming legal obligations. After this period, data is securely deleted or irreversibly anonymised.
• Support communications: Retained for a period sufficient to resolve any outstanding disputes and to support quality assurance processes, after which they are deleted.
• Marketing data: Retained only while the player has an active marketing consent on record. Upon opt-out or account closure, marketing data is removed from active communication lists promptly.
• Technical and usage logs: Retained in anonymised form for platform performance analysis. Identifiable technical logs are retained for a short period for security monitoring purposes before being anonymised or deleted.

Players who wish to understand the specific retention period applicable to a particular category of their personal data may submit a request to [email protected].

cj33 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption on all data in transit between the player's device and cj33 servers
• Encryption of sensitive data fields at rest, including identity document references and financial account identifiers
• Role-based access controls ensuring that only authorised cj33 personnel can access personal data, and only to the extent required for their specific function
• Regular security assessments and penetration testing of platform infrastructure
• Automated monitoring for unusual account access patterns, including logins from unfamiliar IP addresses or devices
• Strict internal data handling policies and mandatory confidentiality obligations for all cj33 staff and contractors

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that affects your personal data, cj33 will notify affected players promptly and will take all reasonable steps to contain and remediate the breach.

Players are responsible for maintaining the security of their own cj33 login credentials. If you believe your account has been compromised, contact the cj33 support team immediately at [email protected].

The cj33 platform is strictly for adults aged 21 years and above. cj33 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the cj33 registration and KYC process precisely to enforce this restriction.

If cj33 becomes aware that personal data has been submitted by or on behalf of an individual under the age of 21, that data will be deleted immediately, the associated account will be closed, and any funds held in that account will be handled in accordance with cj33's Terms & Conditions and applicable legal requirements.

If you have reason to believe that a minor has registered on the cj33 platform, please notify the support team at [email protected] immediately so that the appropriate action can be taken without delay.

To exercise any of the data rights described in this Policy — including your right to access, rectification, erasure, restriction of processing, data portability, or withdrawal of marketing consent — please contact the cj33 support team using the following details:

• Email: [email protected] (plain text only — do not send sensitive financial data via email)
• Live Chat: Available 24 hours a day, 7 days a week, directly on the cj33 platform
• Subject line: Please use the subject line "Data Rights Request – [Your Username]" when submitting requests by email

cj33 will acknowledge your request within 48 hours. Before acting on any data rights request, cj33 may need to verify your identity to ensure the request is being made by the account holder. This verification step is a security measure to protect your data from being accessed or deleted by a third party without your knowledge.

Requests will be fulfilled within 30 calendar days. In cases of complexity or high volume, cj33 may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it before the initial deadline expires.

cj33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in platform operations, applicable law, or data processing practices. The most current version of this Policy is always published at cj33.io/privacy-policy, together with the effective date of the current version.

Where changes are material — meaning they meaningfully affect how personal data is collected, used, or shared — cj33 will notify registered players via on-site notification or by email to the address registered on the account. The notification will be issued at least 14 days before the amended Policy takes effect, giving players adequate time to review the changes.

Continued use of the cj33 platform after the effective date of any amended Policy constitutes acceptance of the revised terms. If you do not agree with the changes, you may request account closure as described in the cj33 Terms & Conditions.

All questions, concerns, or formal requests relating to this Privacy Policy or to cj33's data handling practices should be directed to the cj33 support team. We are available 24 hours a day, 7 days a week, and all communications are handled in English.

• Email: [email protected]
• Live Chat: Available directly on the cj33 platform at cj33.io
• Response time: Within 48 hours for all data-related enquiries

When contacting cj33 regarding a data privacy matter, please include your registered username and a clear description of your request. Do not include your password, full payment card numbers, or mobile banking PINs in any correspondence. cj33 staff will never ask for this information.