co333 Privacy Policy

co333 collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you use the site, and in limited circumstances from trusted third-party sources for verification purposes. The categories of personal data co333 may collect include:

Identity Data. Full legal name, date of birth, gender, nationality, and government-issued identification number as provided during account registration or KYC verification (e.g., National Identity Card number or passport number).

Contact Data. Email address, mobile phone number, and residential address including city, district, and postcode. For players based in Bangladesh, this typically includes locations such as Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

Financial Data. Payment method details including mobile financial service account references (bKash, Nagad, Rocket, Upay), bank account identifiers, transaction history, deposit and withdrawal records, and account balance information. co333 does not store full payment card numbers; card transactions are handled by PCI-DSS-compliant payment processors.

Account & Activity Data. Login credentials (stored in hashed form), session logs, game history, wagering records, bonus redemption history, and customer support interactions.

Technical Data. IP address, device type, operating system, browser type and version, screen resolution, time zone, and cookie identifiers collected automatically when you access co333.

Verification Documents. Copies of identity documents, proof-of-address documents, and payment method ownership evidence submitted during the KYC process.

Summary of Data Categories Collected:

co333 processes personal data only for defined, legitimate purposes. The following table sets out the primary purposes for which co333 uses the data it collects:

co333 does not use personal data to make fully automated decisions that produce legal or similarly significant effects on players without human oversight. Automated systems may flag accounts for review, but material decisions — such as account suspension or withdrawal refusal — involve human assessment.

co333 processes personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to provide the services you have registered for, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering (AML) obligations, identity verification requirements, and record-keeping duties.
• Legitimate interests: Processing carried out in co333's legitimate interests — for example, fraud detection, platform security, and abuse prevention — where those interests are not overridden by your rights and interests.
• Consent: Processing carried out with your explicit consent, primarily for the delivery of personalised promotional communications. You may withdraw consent at any time by contacting support or adjusting your communication preferences in the account dashboard. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

co333 does not sell, rent, or trade personal data to unaffiliated third parties. Data may be shared with the following categories of third parties, strictly as required for service delivery:

• Payment processors: bKash, Nagad, Rocket, Upay, and partner banks receive the minimum financial data necessary to process transactions on your behalf. These providers operate under their own privacy policies and are bound by contractual data-protection obligations with co333.
• KYC and identity verification providers: Specialist third-party services that assist co333 in verifying the identity and age of registered players. These providers process identity documents and verification data solely for the purpose of confirming player eligibility.
• Game content providers: Certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and activity data for the purpose of game delivery and technical troubleshooting. These providers do not receive personally identifiable information beyond what is technically necessary.
• Fraud and security vendors: Third-party risk-management platforms that assist co333 in detecting fraudulent activity, money laundering, and platform abuse. Data shared for this purpose is limited to technical and activity data.
• Legal and regulatory authorities: co333 may disclose personal data to competent authorities where required by law, court order, or regulatory instruction. co333 will, where legally permissible, notify affected players of any such disclosure.
• Professional advisers: Lawyers, auditors, and accountants engaged by co333, bound by confidentiality obligations, may access data in the course of their professional engagement.

co333 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

co333 implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. Key measures include:

• 256-bit SSL/TLS encryption on all data transmitted between players' devices and co333's servers.
• Encryption at rest for all sensitive personal and financial data stored in co333's databases.
• Role-based access control (RBAC) ensuring that co333 staff access personal data only where their specific operational role requires it.
• Multi-factor authentication (MFA) required for all internal systems that hold personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Audit logging of all access to personal data records, with automated alerting for anomalous access patterns.
• Incident response procedures defining co333's obligations and timelines in the event of a personal data breach, including player notification where required.

Notwithstanding the above, no method of electronic transmission or storage is entirely free from risk. co333 cannot guarantee absolute security, and players are encouraged to maintain strong, unique passwords for their co333 accounts and to contact support immediately if they suspect any unauthorised activity.

co333 uses cookies and similar tracking technologies (including local storage and session tokens) to deliver a functional, personalised, and secure platform experience. Cookies are small text files placed on your device when you visit co333. The following categories of cookies are used:

• Strictly necessary cookies: Essential for platform operation. These include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing core functionality.
• Functional cookies: Used to remember your preferences, such as language settings, game lobby view preferences, and responsible gaming limit configurations.
• Analytics cookies: Used to measure and analyse how players interact with co333 — for example, which games are most frequently accessed and how navigation flows are used. Analytics data is processed in aggregated, anonymised form.
• Security cookies: Used to detect and prevent fraudulent activity, account takeover attempts, and bot traffic. These cookies monitor login patterns and device fingerprints for anomaly detection.

co333 does not use third-party advertising cookies or retargeting pixels. co333 does not allow third-party ad networks to place cookies on the co333 platform.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the co333 platform. Disabling functional or analytics cookies will not prevent you from accessing core services but may reduce personalisation quality.

As a co333 player, you hold the following rights in relation to the personal data co333 holds about you. co333 will respond to all valid rights requests within 30 days of receipt.

• Right of access: You may request a copy of all personal data co333 holds about you, together with information about the purposes and legal bases for processing.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held on your account. Minor corrections (e.g., updating contact details) can be made directly via the account dashboard.
• Right to erasure ("right to be forgotten"): In certain circumstances, you may request deletion of your personal data. This right does not apply where co333 is legally obliged to retain the data (e.g., AML record-keeping requirements).
• Right to restriction: You may request that co333 restricts processing of your data in specific circumstances — for example, while a dispute regarding data accuracy is being resolved.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to co333, where technically feasible.
• Right to object: You may object to processing carried out on the basis of legitimate interests. co333 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without detriment to your use of co333's core services.

To exercise any of the above rights, please contact co333 at [email protected]. co333 may request proof of identity before processing a data rights request to ensure personal data is not disclosed to an unauthorised party.

co333 is strictly an adults-only platform. No individual under the age of 21 is permitted to register, deposit, wager, or otherwise use co333's services. co333 does not knowingly collect personal data from individuals under the age of 21.

If co333 discovers or has reasonable grounds to believe that a registered account belongs to a person under 21 years of age, co333 will immediately suspend the account, void any associated wagers and winnings, and permanently delete all personal data associated with that account from its active systems, subject to any overriding legal retention obligations.

If you are a parent or guardian and believe that your child under the age of 21 may have registered a co333 account, please contact co333 immediately at [email protected] so that the account can be closed and the data removed without delay.

The co333 platform integrates with a range of third-party service providers to deliver its full range of gaming and payment features. These integrations are necessary for the operation of the platform and are subject to contractual data-protection standards.

Game Providers. co333 hosts games from certified studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, certain technical and session data is transmitted to the game provider's servers for the purpose of delivering the game and calculating results. Game providers operate under their own privacy policies and are independently certified for fair play.

Payment Service Providers. Transactions processed via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners are handled by those providers' own systems. co333 does not store full payment credentials. These providers are subject to their own regulatory obligations and privacy policies.

Analytics & Security Vendors. co333 uses anonymised analytics tools and fraud-detection platforms to monitor platform health and security. These vendors receive only the minimum data necessary for their specific function and are contractually prohibited from using that data for independent purposes.

co333 is not responsible for the privacy practices of third-party websites or services linked to or from the co333 platform. Players are encouraged to review the privacy policies of all third-party services they interact with in connection with their co333 account.

co333 reserves the right to amend this Privacy Policy at any time to reflect changes in law, regulatory guidance, platform functionality, or business operations. When material changes are made, co333 will notify registered players by email to their registered address and/or by a prominent notice on the co333 platform at least 14 days before the changes take effect.

The updated Privacy Policy will be published on this page with a revised effective date. Your continued use of co333 after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the co333 platform and may contact support to close your account and request data deletion in accordance with Section 8 above.

Minor changes — such as corrections of typographical errors, clarifications that do not alter the substance of co333's data practices, or updates to contact details — may be made without advance notice. The version number at the top of this document will be incremented to reflect any revision.

For any questions, concerns, or requests relating to this Privacy Policy or co333's data-handling practices, please contact the co333 Data Support team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 inside your co333 account dashboard (English language support)
• Response time: Within 1 hour for general support queries; within 30 calendar days for formal data rights requests (BST, UTC+6)

When submitting a data rights request by email, please include your registered email address, the nature of your request, and sufficient detail to allow co333 to identify your account. co333 may request proof of identity before processing the request.

Governing Language. This Privacy Policy is written in English. In the event of any conflict between an English version of this Policy and any translation, the English version shall prevail.

Entire Agreement. This Privacy Policy, together with co333's Terms & Conditions and Responsible Gaming Policy, constitutes the entire agreement between you and co333 with respect to the processing of your personal data. It supersedes all prior representations, arrangements, and understandings relating to data privacy.