333de Privacy Policy — How We Collect, Use, and Safeguard Your Personal Information

This Privacy Policy ("Policy") applies to all personal data collected and processed by 333de ("we", "us", "our", "the Company") in connection with your use of the 333de online casino and sports betting platform located at 333de.io (the "Platform"). It governs how we handle personal data belonging to registered players, prospective players, and visitors to the Platform, including all individuals accessing the Platform from Bangladesh.

By registering an account on 333de, by using the Platform, or by continuing to browse the website, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately and contact us to close your account.

This Policy forms part of the binding agreement between you and 333de and should be read alongside our Terms & Conditions and our Responsible Gaming policy. Definitions used in the Terms & Conditions carry the same meaning when used in this Policy unless explicitly stated otherwise.

333de collects personal data that is strictly necessary to provide the Platform's services, fulfil regulatory obligations, and maintain platform security. The categories of personal data we collect are as follows:

2.1 Registration Data

When you create a 333de account, we collect the information you provide directly, including your full name, username, email address, mobile phone number, date of birth, and preferred currency (Bangladeshi Taka, ৳). This information is required to create and manage your account and to verify that you meet our 21+ age requirement.

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and anti-money-laundering (AML) requirements, we may collect and retain copies of identity documents including your National Identity Card (NID) issued by the Bangladesh Election Commission, passport, driving licence, or other government-issued photo identification. We may also collect proof of address documentation, such as a utility bill or bank statement, as well as proof of the payment method used to make deposits.

2.3 Financial and Transaction Data

We collect data related to all financial transactions conducted on the Platform, including deposit amounts, withdrawal requests, payment method identifiers (such as bKash mobile numbers, Nagad account references, bank account numbers, or card details), transaction timestamps, and transaction reference numbers. Full payment card numbers are not stored on our servers; card processing is handled by our PCI-DSS compliant payment partners.

2.4 Gaming and Activity Data

We collect data about your activity on the Platform including game history, bet amounts and outcomes, session duration, login timestamps, and navigation patterns. This data is used to operate the Platform, settle bets accurately, detect responsible gaming concerns, and identify potential fraud or collusion.

2.5 Technical and Device Data

We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, operating system, device type and identifiers, screen resolution, referring URL, and language settings. This information helps us optimise the Platform for the devices and networks most commonly used by players in Bangladesh, including mobile devices accessing the Platform via bKash or Nagad payment flows.

2.6 Communications Data

If you contact our support team via email or live chat, we collect and retain records of those communications, including the content of messages, timestamps, and any attachments you provide. This allows us to track the resolution of support queries and maintain quality standards.

333de uses the personal data it collects exclusively for the purposes described below. We do not use your data for purposes that are incompatible with those stated here without first obtaining your explicit consent.

• Account Management: To create, maintain, and administer your 333de player account, including processing deposits and withdrawals in Bangladeshi Taka (৳), applying bonuses, and enforcing account limits.
• Identity and Age Verification: To verify that you are 21 years of age or older and to confirm that the identity you have registered matches the payment methods linked to your account.
• Transaction Processing: To process deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, and to process withdrawal requests to your verified payment method.
• Legal and Regulatory Compliance: To fulfil KYC and AML obligations, respond to lawful requests from regulatory authorities, and maintain records as required by applicable law.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, bonus abuse, and money laundering on the Platform.
• Responsible Gaming: To monitor player activity for signs of problem gambling, to enforce self-exclusion and cooling-off periods, and to apply deposit limits set by the player in their account settings.
• Customer Support: To respond to enquiries, resolve disputes, and provide technical assistance to players via email and live chat.
• Platform Improvement: To analyse aggregated usage data to improve Platform performance, fix bugs, optimise the mobile experience, and develop new features for Bangladesh players.
• Marketing Communications: Where you have opted in to receive marketing communications, to send you information about promotions, bonus offers, and seasonal events such as BPL season offers, Eid promotions, and Pohela Boishakh specials. You may opt out of marketing communications at any time by contacting [email protected].

333de processes your personal data on the following legal bases, depending on the purpose of the processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and 333de — principally, to operate your player account, process financial transactions, and provide access to casino games and sports betting markets.
• Legal Obligation: Processing that is required to comply with legal obligations applicable to 333de, including KYC verification, AML monitoring, record-keeping requirements, and responding to lawful orders from competent authorities.
• Legitimate Interests: Processing that is necessary for 333de's legitimate business interests, including fraud prevention, platform security, dispute resolution, and responsible gaming monitoring, provided those interests are not overridden by your data protection rights.
• Consent: Where required by applicable law, processing activities such as sending marketing communications or placing non-essential cookies on your device are carried out only on the basis of your freely given, informed, and specific consent. You may withdraw consent at any time without detriment to your account.

333de does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only with parties who are bound by appropriate data protection obligations.

• Payment Processors: We share transaction data with our payment partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to the extent necessary to process your deposits and withdrawals. Each payment partner operates under its own privacy policy and is subject to financial services data security standards.
• Game Providers: We share a session token and account identifier with licensed game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to authenticate your session when you launch a game. Game providers do not receive your full registration profile or financial data.
• KYC and Identity Verification Services: We may use third-party identity verification providers to assist in validating documents submitted as part of the KYC process. These providers are contractually obligated to process your data only for verification purposes and to maintain strict confidentiality.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal order, court order, or applicable law. We will, where legally permissible, notify you of such a request before complying.
• Fraud Prevention Services: We may share data with fraud detection and AML screening services to identify and prevent financial crime. These services operate under strict data processing agreements with 333de.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of 333de's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you in advance of any such transfer and your rights in relation to it.

333de uses cookies and similar tracking technologies on the Platform to ensure it functions correctly, to remember your preferences, to analyse usage patterns, and — where you have consented — to deliver relevant promotional content. A cookie is a small text file placed on your device when you visit the Platform. Cookies do not contain executable code and cannot access files on your device beyond those you have stored in the browser.

Types of Cookies Used by 333de:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your cart and game state, and enable secure payment flows. These cookies cannot be disabled without impairing core Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how visitors use the Platform — including which pages are visited most frequently, how long sessions last, and which device types are used. This data helps us improve Platform performance for players in Dhaka, Chittagong, Sylhet, and across Bangladesh.
• Functional Cookies: These cookies remember your preferences, such as your chosen language, default currency display (৳), and notification settings, so you do not need to reconfigure them on each visit.
• Marketing and Targeting Cookies: Where you have given consent, these cookies track your interaction with 333de promotional content and may be used to present relevant bonus offers. You may withdraw this consent at any time by adjusting your browser cookie settings or by contacting our support team.

You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent certain Platform features from functioning correctly. For detailed instructions on managing cookies in your browser, refer to your browser's official help documentation.

333de retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The specific retention periods we apply are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

333de implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes, but is not limited to, the following measures:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS encryption. This applies to all registration flows, login sessions, payment transactions, and support interactions.
• Encrypted Data Storage: Sensitive data fields, including identity document images and financial account identifiers, are encrypted at rest using AES-256 encryption within our database infrastructure.
• Two-Factor Authentication (2FA): 333de offers two-factor authentication to all registered players and strongly recommends enabling it. 2FA adds a critical additional layer of protection against unauthorised account access.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. 333de staff members are granted access only to the data categories required to fulfil their specific job functions. All internal data access is logged and audited.
• Penetration Testing: 333de's Platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that affects your personal data, 333de maintains a documented incident response procedure. Affected players will be notified in accordance with applicable data protection requirements, including the nature of the breach, the data involved, and the remedial steps being taken.

As a player on the 333de Platform, you hold the following rights in relation to your personal data. These rights may be subject to certain limitations where processing is carried out to comply with legal obligations or to exercise or defend legal claims.

• Right of Access: You have the right to request a copy of the personal data 333de holds about you, along with information about how it is used, where it originated, and with whom it has been shared. We will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data 333de holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you may request that 333de delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. Note that this right is subject to overriding legal obligations, including our AML record-keeping requirements.
• Right to Restriction of Processing: You may request that we temporarily restrict the processing of your personal data while you contest its accuracy, pending a decision on your objection, or while a legal claim is being resolved.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data where 333de relies on legitimate interests as its legal basis. You also have an absolute right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please submit a written request to our data protection team at [email protected], clearly stating the right you wish to exercise and providing sufficient information to verify your identity. We will acknowledge your request within 5 business days and provide a substantive response within 30 days.

The 333de Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that an account has been registered by a person under the age of 21, we will immediately close the account, forfeit any balances in accordance with our Terms & Conditions, and delete the personal data of the underage individual from our systems, except where retention is required to document the age verification failure for compliance purposes.

If you believe that a minor under the age of 21 has registered an account on 333de, please contact us immediately at [email protected] so that we can take prompt remedial action.

333de is operated as an international platform. In the course of providing our services, your personal data may be transferred to, stored on, or processed by servers and service providers located outside Bangladesh. This may occur, for example, when data is processed by our game studio partners such as Evolution Gaming, Pragmatic Play, or NetEnt, which operate server infrastructure in multiple global jurisdictions.

When transferring personal data internationally, 333de takes appropriate steps to ensure that an adequate level of protection is applied to your data, consistent with the standards described in this Privacy Policy. These steps may include entering into data transfer agreements with the recipient organisation, ensuring the recipient country is recognised as providing an adequate level of data protection, or implementing other appropriate safeguards.

By using the 333de Platform, you acknowledge and consent to the international transfer of your personal data for the purposes described in this Policy. If you have questions about the safeguards applied to specific international transfers, please contact us at [email protected].

The 333de Platform does not contain links to external third-party websites or services that are outside our control. However, in the event that certain pages reference external game studios, payment providers, or regulatory bodies by name, please be aware that 333de has no control over the privacy practices of those third parties and this Privacy Policy does not apply to their services.

If you navigate to any third-party website or service in connection with your 333de account (for example, your bKash or Nagad mobile application), you should review that third party's own privacy policy before providing personal information. 333de accepts no responsibility or liability for the data practices of third-party services.

333de reserves the right to update and amend this Privacy Policy at any time. When material changes are made to the Policy — changes that affect your rights or how your data is used in a significant way — we will notify you by email to your registered address and by posting a prominent notice on the Platform at least 7 days before the amended Policy comes into effect.

For minor, non-material changes (such as clarifications of existing language, formatting updates, or corrections of typographical errors that do not alter your rights), the revised Policy will take effect immediately upon publication at 333de.io/privacy-policy. We recommend reviewing this Policy periodically to stay informed about how 333de protects your data.

Your continued use of the Platform after any amendment takes effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with the amended Policy, you must cease using the Platform and contact us to close your account before the effective date of the change.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 333de handles your personal data, please contact our data protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Policy Enquiry" or "Data Protection Request" in your email subject line to ensure prompt routing to the correct team.
• Live Chat: Available within the 333de account dashboard after logging in
• Response Time: We will acknowledge all privacy-related enquiries within 5 business days and aim to provide a full substantive response within 30 days of receipt.
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

When contacting us about a data protection matter, please provide your registered username and a clear description of your request or concern so we can direct it to the appropriate team member without delay.