c100i Privacy
Policy
At c100i, protecting the personal data of our players in Bangladesh is a core commitment, not an afterthought. This Privacy Policy explains in plain English exactly what information we collect, why we collect it, how it is used and stored, who it may be shared with, and what rights you have over your own data. We encourage you to read it in full before registering an account.
Overview
Our Approach to Privacy
c100i is committed to handling personal data with transparency, integrity, and care. We collect only the information that is genuinely necessary to operate a safe, compliant, and enjoyable online betting platform for players in Bangladesh. We do not sell your personal data to third parties. We do not use your data for purposes beyond those described in this policy without first obtaining your consent.
This Privacy Policy applies to all users of the c100i platform, including visitors who browse the site without registering, registered members who hold an active or dormant account, and former members whose accounts have been closed. It covers data collected through our website at c100i.bet, our mobile-optimised web application, and any c100i downloadable apps available for Bangladesh users.
By registering a c100i account or continuing to use our platform after this policy has been updated, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team to arrange account closure.
This document should be read alongside our Terms & Conditions and our Responsible Gaming page, both of which contain additional obligations and rights relevant to your use of c100i.
We Do Not Sell Your Data: c100i does not sell, rent, or commercially trade your personal information to any third party for their independent marketing purposes. Your data is used exclusively to deliver, improve, and secure the c100i service.
Scope of This Policy: This policy covers all personal data collected by c100i including account registration data, payment data, gameplay data, device and technical data, and communications data. It applies to Bangladesh players accessing c100i via desktop, mobile browser, and any downloadable app.
18+ Policy Reminder: c100i is an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. If we discover that data has been submitted by an underage user, we will immediately delete that data and close the associated account.
Purpose Limitation
We collect personal data only for specified, explicit, and legitimate purposes. Data collected for KYC verification is not repurposed for marketing; data collected for fraud prevention is not used for product analytics beyond what is necessary.
Data Minimisation
We ask for the minimum amount of personal data required to deliver each service. We do not request information that is excessive or irrelevant to the purpose for which it is collected. Where anonymised or aggregated data is sufficient, we use that instead.
Confidentiality
All personal data held by c100i is treated as strictly confidential. Access is restricted to authorised personnel on a need-to-know basis. All staff with access to personal data are bound by confidentiality obligations.
Accuracy
We take reasonable steps to ensure that the personal data we hold about you is accurate and up to date. You have the right to request corrections to inaccurate data at any time by contacting our support team or updating your account profile.
Storage Limitation
Personal data is retained only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. We apply defined retention schedules to all data categories — see the Data Retention section for details.
Accountability
c100i takes full responsibility for the personal data it processes. We maintain internal data processing records, conduct periodic privacy reviews, and ensure that all third-party service providers we engage meet the same standards of data protection that we apply internally.
Section 1
Information We Collect
c100i collects personal data from you in several ways: directly through information you provide when registering an account or completing KYC verification; automatically through your use of the platform; and, in limited circumstances, from trusted third-party sources such as identity verification providers and payment processors. The categories of data we collect are described below.
Registration & Account Data
When you create a c100i account, we collect your full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, or Rangpur), email address, and mobile phone number. This information is required to create and administer your account, verify your age (18+), and maintain contact with you for account and security purposes.
Identity Verification (KYC) Data
To comply with our anti-money laundering (AML) obligations and to confirm that all players are at least 18 years of age, c100i requires identity verification before processing your first withdrawal or when our compliance system flags a risk signal. KYC data includes a copy of a government-issued photo ID (National Identity Card, passport, or driving licence), a selfie or live verification image, and proof of your payment method (e.g., a screenshot of your bKash or Nagad account showing your name and number).
Payment & Financial Data
When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, c100i receives transaction reference data including the payment method type, the last four digits of a card number (for Visa/Mastercard), your mobile money account number, transaction amounts in BDT (৳), and timestamps. Full card numbers and CVV codes are never stored by c100i; card payment data is handled directly by our PCI-DSS compliant payment processor.
Gameplay & Activity Data
We record all betting and gaming activity on your account, including wager amounts, game types, outcomes, session durations, and bonus usage. This data is used for account management, responsible gaming monitoring, dispute resolution, and platform improvement. Gameplay data may also be used in anonymised, aggregated form for statistical analysis.
Technical & Device Data
We automatically collect technical data when you access c100i, including your IP address, device type and model, operating system and version, browser type and version, screen resolution, time zone (Bangladesh Standard Time, UTC+6), and approximate geographic location derived from your IP address. This data is used for security monitoring, fraud prevention, platform optimisation, and to ensure compliance with geographic access restrictions.
Communications Data
If you contact our support team via email, live chat, or any other channel, we retain a record of your communications including the content of messages, timestamps, and any attachments you submit. This data is used to resolve your query, improve our support service, and maintain a record for dispute resolution purposes.
Marketing Preferences
If you opt in to receive promotional communications from c100i, we record your marketing preferences including which communication channels you have consented to (email, SMS, in-platform notification). You may update or withdraw your marketing preferences at any time from your account settings or by contacting our support team.
| Data Category | Collection Method |
|---|---|
| Account data | Provided by you at registration |
| KYC documents | Uploaded by you on request |
| Payment data | Received from payment processors |
| Gameplay data | Automatically recorded in-platform |
| Device & IP data | Automatically collected on access |
| Support records | Generated via support interactions |
| Marketing prefs | Provided by you (opt-in only) |
No Sensitive Data: c100i does not collect or process special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a liveness check is required as part of KYC (in which case it is used solely for identity verification and is not stored beyond the verification process).
Cookies & Tracking: c100i uses cookies and similar tracking technologies when you browse the platform. Full details of the cookies we use, why we use them, and how to manage your cookie preferences are set out in the Cookies & Tracking section below.
Section 2
How We Use Your Data
c100i processes your personal data only where we have a lawful basis for doing so. The primary lawful bases we rely on are: (a) performance of a contract — processing necessary to deliver the services you signed up for; (b) legal obligation — processing required to comply with AML, KYC, and responsible gaming regulations; (c) legitimate interests — processing for fraud prevention, security monitoring, and platform improvement where those interests are not overridden by your rights; and (d) consent — processing for optional activities such as marketing communications, which you may withdraw at any time.
| Purpose of Processing | Data Used | Lawful Basis |
|---|---|---|
| Account creation & management | Registration data, account data | Contract performance |
| Age verification (18+ check) | Date of birth, KYC documents | Legal obligation |
| Payment processing | Payment data, account data | Contract performance |
| AML & fraud prevention | Payment data, gameplay data, device data | Legal obligation / Legitimate interests |
| Responsible gaming monitoring | Gameplay data, account data | Legal obligation / Legitimate interests |
| Customer support | Communications data, account data | Contract performance |
| Security & platform integrity | Device data, IP address, gameplay data | Legitimate interests |
| Personalised promotions | Gameplay data, marketing preferences | Consent |
| Platform improvement | Aggregated, anonymised gameplay & technical data | Legitimate interests |
| Legal compliance & dispute resolution | All relevant data categories | Legal obligation |
Automated Decision-Making: c100i uses automated systems to detect unusual account activity, flag potential fraud, enforce responsible gaming deposit limits, and identify bonus abuse patterns. Where an automated decision results in account suspension or restriction, you have the right to request human review of that decision by contacting our support team at [email protected].
Marketing Opt-Out: If you have previously opted in to marketing communications and wish to stop receiving them, you may opt out at any time by updating your preferences in your account settings dashboard, clicking the unsubscribe link in any marketing email we send you, or contacting our support team. Opting out of marketing will not affect service communications such as security alerts or withdrawal confirmations.
Section 3
Cookies & Tracking Technologies
c100i uses cookies and similar technologies (including local storage, session storage, and pixel tags) to operate the platform, improve your experience, and maintain security. A cookie is a small text file placed on your device when you visit c100i.bet. Cookies allow our systems to recognise your device, keep you logged in during a session, remember your preferences, and detect suspicious activity.
Essential Cookies
Essential cookies are strictly necessary for the platform to function. They enable core features such as secure login sessions, maintaining your account balance display, in-platform navigation, and live game integrity. Essential cookies cannot be disabled without breaking the core functionality of c100i. No consent is required for essential cookies because they are necessary for the service you have requested.
Performance & Analytics Cookies
Performance cookies collect anonymised information about how visitors use c100i — for example, which pages are visited most frequently, how long users spend on each section, and which features generate the most engagement. This data helps us identify areas for improvement and optimise the platform for Bangladesh users. These cookies do not identify you as an individual; all data is aggregated.
Functional Cookies
Functional cookies remember choices you make on the platform — such as your preferred language (English), time zone display preference (BST, UTC+6), and notification settings — so you do not have to re-enter them each time you visit. Disabling functional cookies may result in some preferences not being retained between sessions.
Marketing & Targeting Cookies
With your consent, c100i may use marketing cookies to deliver personalised promotional content based on your betting interests and gameplay history — for example, showing cricket betting promotions during BPL season or Eid bonus offers. These cookies may also be used by our affiliate partners to attribute your visit to c100i to the correct referral source. You may withdraw consent for marketing cookies at any time.
Managing Your Cookie Preferences
You can manage or delete cookies at any time using your browser's built-in cookie management settings. Please note that disabling essential cookies will prevent you from logging in to your c100i account. Most modern browsers on Android and iOS devices — which Bangladesh players commonly use to access c100i — provide clear cookie management controls in their privacy settings menus.
Essential Cookies
Session authentication token, CSRF protection token, load balancing identifier, responsible gaming session timer, in-game state persistence. These cannot be disabled while using c100i.
Analytics Cookies
Anonymised page view counters, feature engagement metrics, error tracking, performance benchmarks. All data is aggregated; no individual player is identified through analytics cookies.
Functional Cookies
Language preference (English), time zone (BST), notification settings, preferred payment method display, last-visited game category. Stored for up to 90 days.
Marketing Cookies
Personalised offer targeting, affiliate attribution, BPL/IPL season campaign delivery. Require your explicit consent. Opt out at any time via account settings or browser controls.
Section 4
Data Sharing & Third Parties
c100i does not sell, rent, or trade your personal data. We share your data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
Payment Processors
To process deposits and withdrawals, we share the minimum necessary payment data with our payment processor partners — bKash, Nagad, Rocket, Upay, and the card network processors for Visa and Mastercard. These providers process data under their own privacy policies and are contractually required to use your data solely to complete the transaction you initiated. They do not receive your gameplay history or KYC documents.
Identity Verification Providers
For KYC verification, we use a third-party identity verification service provider to authenticate government-issued IDs and perform liveness checks. Your KYC documents are transmitted to this provider over encrypted connections and are used exclusively for identity verification. The provider operates under strict data processing agreements with c100i and does not retain your documents beyond the period required for verification.
Game Providers
Live casino and slot games on c100i are provided by third-party studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. To deliver these games, your account session token and wager data are shared with the relevant game provider in real time. Game providers do not receive your full name, address, or payment method details. They process only the game-session data necessary to run the game and return a result.
Responsible Gaming & Fraud Prevention Services
c100i may share anonymised or pseudonymised account data with responsible gaming monitoring tools and fraud prevention networks to identify problem gambling patterns and detect coordinated fraud. Where industry-standard self-exclusion registers are applicable, c100i may check your registration details against those registers as part of its responsible gaming obligations.
Legal & Regulatory Disclosure
c100i will disclose personal data to law enforcement agencies, regulatory authorities, or courts if required to do so by a valid legal order, warrant, or statutory obligation. Where legally permitted, we will notify you of such a disclosure request before complying. We may also disclose data without prior notice where necessary to prevent an imminent risk of fraud, money laundering, or serious harm.
No Sale of Data: c100i does not and will never sell your personal data to data brokers, advertising networks, or any third party for commercial exploitation. Any third party that receives your data does so strictly as a processor acting under our instructions, not as an independent controller with the right to use your data for their own purposes.
Business Transfers
In the event that c100i undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified in advance of any such transfer and of any material changes to how your data will be processed as a result. You will retain your right to request deletion of your data at any point during that process.
International Data Transfers
Some of our third-party service providers may process your personal data in countries outside Bangladesh. Where such transfers occur, we ensure that appropriate safeguards are in place — including contractual data protection clauses — to provide a level of protection equivalent to that applied within Bangladesh. Game providers such as Evolution Gaming and Pragmatic Play operate data centres in Europe and Asia under industry-standard security frameworks.
Processor Agreements: All third-party service providers who process personal data on behalf of c100i are required to sign a Data Processing Agreement (DPA) that specifies: the permitted purposes of processing, security standards to be maintained, data retention limits, and sub-processor restrictions. We do not engage processors who cannot demonstrate compliance with these requirements.
Section 5
Data Retention
c100i retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The table below summarises our standard retention periods by data category. Where a legal hold or ongoing investigation requires data to be retained beyond the standard period, it will be held until that requirement is resolved and then deleted promptly.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML regulatory requirements; dispute resolution |
| KYC identity documents | 5 years from date of verification | AML legal obligation |
| Payment & transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Gameplay & betting history | 5 years from account closure | Dispute resolution; responsible gaming audit |
| Support communications | 3 years from last interaction | Dispute resolution; quality assurance |
| Device & IP log data | 12 months from collection | Security monitoring; fraud prevention |
| Marketing preferences | Until opt-out or account closure | Consent-based processing; withdraw anytime |
| Anonymised analytics data | Indefinite (no personal identifiers retained) | Platform improvement; statistical analysis |
Account Closure & Deletion: When you close your c100i account, we begin the process of anonymising or deleting your personal data in line with the retention periods above. Data that must be retained for legal or regulatory reasons is held securely in a restricted archive, accessible only to compliance personnel, and is not used for any operational purpose during the retention period.
Secure Archiving: All data held beyond its primary operational period — for example, KYC documents retained for AML compliance — is moved to a separately secured archive environment with strict access controls. This archived data is encrypted at rest and is not accessible to general operational systems or staff.
Section 6
Your Privacy Rights
As a c100i user, you have a number of rights in relation to your personal data. We are committed to honouring these rights promptly and without unnecessary bureaucracy. To exercise any of the rights listed below, please contact our support team at [email protected] with the subject line "Privacy Rights Request", your registered account username, and a description of the right you wish to exercise. We will respond within 30 days of receiving a valid request.
Right of Access
You have the right to request a copy of all personal data that c100i holds about you. We will provide this in a structured, commonly used format within 30 days. A reasonable fee may be charged for manifestly unfounded or excessive repeat requests.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For account data such as your name or address, you may also update this directly in your account profile settings.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. Note that legal retention obligations may prevent full immediate erasure.
Right to Restriction
You may request that c100i restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while you have objected to processing based on legitimate interests and we are assessing that objection.
Right to Portability
Where processing is based on your consent or on the performance of a contract, and processing is carried out by automated means, you have the right to receive your personal data in a machine-readable format for transfer to another service provider.
Right to Object
You have the right to object to processing of your personal data where it is based on legitimate interests, including profiling for personalised promotions. You also have an absolute right to opt out of direct marketing at any time without giving a reason.
Rights Re: Automated Decisions
Where a decision with significant effect on your account (such as suspension or restriction) is made solely by automated means, you have the right to request human review of that decision by contacting our compliance team.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing communications, marketing cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to Complain
If you believe c100i has not handled your personal data correctly, you have the right to lodge a complaint with a relevant supervisory authority. We encourage you to contact us first so we have the opportunity to resolve the matter directly and promptly.
Identity Verification for Rights Requests: To protect your privacy and prevent unauthorised access, c100i requires you to verify your identity before we can action a privacy rights request. We will ask you to confirm your registered email address and account username. For high-sensitivity requests such as erasure or data portability, we may require a second form of verification. We will never charge a fee for a first, non-excessive rights request.
Section 7
Data Security
c100i implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. While no online platform can guarantee absolute security, we apply industry-standard best practices and continuously review and improve our security posture.
Encryption
All data transmitted between your device and c100i is encrypted using TLS 1.2 or higher. Personal data stored on our servers — including KYC documents, payment records, and account credentials — is encrypted at rest using AES-256 encryption. Password hashes are stored using a secure, salted hashing algorithm and are never stored in plain text.
Access Controls
Access to personal data within c100i is governed by a strict role-based access control (RBAC) policy. Only personnel with a documented need to access a specific category of data for a defined operational purpose are granted access. All access is logged, and access logs are reviewed periodically by our security team. Administrative access to production systems requires multi-factor authentication (MFA).
Network Security
c100i's platform infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and distributed denial-of-service (DDoS) mitigation. Our systems are subject to regular vulnerability scanning and penetration testing. Critical security patches are applied on a priority basis, typically within 24-72 hours of a verified vulnerability disclosure.
Incident Response
c100i maintains a documented data breach response plan. In the event of a security incident that results in unauthorised access to your personal data, we will assess the severity and scope of the breach, take immediate steps to contain it, notify affected users without undue delay (and no later than 72 hours after we become aware of the breach where feasible), and cooperate fully with any investigation by relevant authorities.
Your Role in Security
You play an important part in keeping your c100i account secure. We strongly recommend that you use a unique, strong password for your c100i account that you do not reuse on any other site; enable any two-factor authentication option available in your account settings; never share your login credentials with another person; log out of your account after each session, especially when using a shared or public device; and immediately contact our support team if you suspect unauthorised access to your account.
TLS Encryption in Transit
Every connection to c100i.bet is protected by TLS 1.2+ encryption. The padlock icon in your browser's address bar confirms you are on a secure, encrypted connection. Never log in if this indicator is missing.
AES-256 Encryption at Rest
All stored personal data — including KYC documents and payment records — is encrypted using AES-256, the same standard used by global financial institutions. Encryption keys are managed separately from the encrypted data.
Role-Based Access Control
Internal access to personal data is restricted by role. Support agents can access account data needed to resolve your query but cannot view KYC documents. Compliance officers can view KYC data but are not involved in day-to-day support operations.
Phishing Warning: c100i will never ask for your password via email, SMS, or live chat. If you receive a message purporting to be from c100i that asks for your password or payment credentials, do not respond. Report it immediately to [email protected].
Section 8
Contact & Privacy Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a complaint about how c100i has handled your personal data, please contact our dedicated privacy support team using the details below. We treat all privacy-related enquiries with the highest priority and aim to acknowledge all requests within one business day (BST, UTC+6) and provide a full response within 30 calendar days.
How to Contact Us
The primary channel for all privacy-related requests is our support email: [email protected]. Please include "Privacy Request" or "Data Rights" in the subject line of your email so it is routed correctly to our privacy team. You may also use the in-platform Live Chat feature to initiate a privacy request; however, for formal requests such as erasure or data portability, email is the recommended channel as it creates a written record of your request.
What to Include in Your Request
To help us handle your request as efficiently as possible, please include the following in your communication: your full name as registered on your c100i account; your registered email address; your c100i account username; a clear description of your request or complaint, including the specific right you wish to exercise or the nature of your complaint; any relevant transaction or bet IDs if your complaint relates to a specific event; and your preferred method of response (email reply or in-platform message).
Complaints Escalation
If you submit a privacy complaint and are not satisfied with our response, or if we fail to respond within 30 days, you have the right to escalate your complaint to an appropriate data protection authority. c100i is committed to cooperating fully with any such investigation and to implementing any remedial action required as a result of an upheld complaint.
Policy Updates
c100i may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable regulations, or the services we offer. When we make material changes, we will notify registered users via their registered email address and display a prominent notice on the c100i platform for at least 14 days following the update. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this policy periodically.
Privacy Support Email
For all privacy rights requests and data protection complaints, contact us at: [email protected]
Use subject line: "Privacy Request"
Response time: within 30 calendar days (BST).
Live Chat (In-Platform)
Our English-speaking support team is available 24/7 via Live Chat inside the c100i platform. Live Chat is suitable for general privacy queries and to initiate a formal request, but email remains the recommended channel for formal rights requests requiring a written record.
Response Timeline: We acknowledge all privacy requests within 1 business day (BST, UTC+6). Full resolution is provided within 30 calendar days for standard requests. Complex requests — such as large-scale data access requests or contested erasure requests involving legal retention obligations — may take up to 90 days; we will notify you if an extension is required and explain the reason.
No Fee for First Requests: c100i does not charge a fee for the first instance of any privacy rights request. For manifestly unfounded or excessive repeat requests — for example, repeated identical access requests within a short timeframe — we reserve the right to charge a reasonable administrative fee or refuse to action the request, in which case we will explain our reasons in writing.
Explore c100i with Confidence
Your privacy is protected every step of the way. Now that you understand how we handle your data, explore our cricket betting markets, premium slots, and live casino — or check our FAQ for quick answers. 18+ only. Please gamble responsibly.