Your Privacy Matters at 333d

1. Introduction

333d ("we", "us", "our") is committed to protecting the privacy and security of every player who uses the 333d online casino and sports betting platform, accessible at https://333d.bid ("Platform"). This Privacy Policy ("Policy") explains in clear terms what personal information we collect, why and how we process it, with whom we may share it, and what rights you hold in relation to your data.

This Policy applies to all personal data collected through the Platform, including data provided during account registration, identity verification, payment transactions, customer support interactions, and general browsing activity on the Website. It applies to all users regardless of their location, though the Platform is primarily intended for players based in Bangladesh.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. In the event of any conflict between this Policy and those documents, this Privacy Policy governs all matters relating to personal data.

2. Data Controller

333d is the data controller responsible for the personal data collected through the Platform. As data controller, we determine the purposes and means of processing your personal data. For all data protection enquiries, including requests to exercise your rights or raise a concern, please contact us using the details provided in Section 14 of this Policy.

3. Data We Collect

We collect the following categories of personal data from users of the 333d Platform:

We do not collect or store sensitive financial credentials such as full mobile banking PINs or passwords. Payment transactions are handled by PCI-DSS-compliant third-party processors who supply only a transaction reference and status confirmation to 333d.

4. How We Collect Your Data

We collect personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated technologies: Technical and usage data collected automatically when you browse or use the Platform, via cookies, server logs, and similar tracking technologies (see Section 10).
• Third-party sources: Identity verification data cross-referenced from public records or third-party KYC providers; fraud risk signals from payment processors; device fingerprinting data from anti-fraud services.
• Referral data: If you arrive at the Platform via a marketing partner or affiliate link, we may receive limited data about the referral source, but we do not receive any personal data about you from the referring party beyond a referral identifier.

5. How We Use Your Data

333d processes your personal data for the following purposes:

• Account management: Creating and maintaining your 333d player account, including authentication and security.
• Identity verification: Fulfilling KYC obligations to verify your age (18+), identity, and payment method ownership before processing withdrawals.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods in BDT.
• Service delivery: Providing access to casino games, sports betting markets, live dealer tables, and all other Platform features.
• Customer support: Responding to your enquiries, resolving disputes, and improving our support quality through transcript review.
• Fraud prevention and security: Detecting and preventing unauthorised account access, bonus abuse, money laundering, and other fraudulent or illegal activity.
• Responsible gaming: Monitoring your gaming behaviour to identify signs of problem gambling and applying any responsible gaming tools you have activated, such as deposit limits or self-exclusion.
• Legal compliance: Meeting our obligations under applicable laws and regulations, including responding to lawful requests from competent authorities.
• Platform improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game selection, and user experience.
• Direct communications: Sending you transactional notifications (account confirmations, withdrawal alerts, security notices) and, where you have opted in, promotional messages about relevant offers.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except in cases of real-time fraud detection where an immediate protective measure (such as a temporary account hold) may be applied automatically pending manual investigation.

6. Legal Basis for Processing

All processing of personal data by 333d is carried out on one or more of the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your account, process payments, and deliver Platform services.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing necessary for 333d's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw consent at any time by contacting support or adjusting your account notification preferences.

7. Data Sharing and Disclosure

333d does not sell, rent, or trade your personal data. We may share your data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and other payment service providers receive only the minimum data necessary to process your transaction. These providers are contractually bound to protect your data and may not use it for any other purpose.
• Identity verification providers: Third-party KYC and age-verification services may receive identity documents you submit for verification purposes. These providers operate under strict data processing agreements with 333d.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session token to enable game functionality. They do not receive your full name, contact details, or financial data.
• Fraud prevention services: Anonymised or pseudonymised technical data (IP addresses, device fingerprints) may be shared with anti-fraud platforms to protect the integrity of the Platform and all its users.
• Legal and regulatory authorities: We will disclose personal data to competent law enforcement or regulatory bodies when required to do so by law, court order, or other binding legal process. Where legally permissible, we will notify you of such a request.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the 333d business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and any material change in data controller identity.

All third parties with whom we share personal data are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond the specific service they provide to 333d.

8. Data Retention

333d retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account data: Retained for the duration of your active account plus a minimum of 5 years following account closure, to satisfy legal and anti-money-laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the date of submission or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 2 years from the date of the interaction, or longer if the communication relates to an unresolved dispute or investigation.
• Technical and usage logs: Retained for up to 12 months for security and performance monitoring purposes, after which they are anonymised or deleted.
• Marketing consent records: Retained for the period of your consent plus 2 years following withdrawal, as evidence of your prior consent.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to any individual.

9. Security Measures

333d takes the security of your personal data seriously and has implemented a range of technical and organisational safeguards, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and 333d servers.
• AES-256 encryption for sensitive data stored in our databases.
• Strict role-based access controls ensuring only authorised personnel can access personal data, limited to the minimum necessary for their role.
• Regular penetration testing and vulnerability assessments of the Platform infrastructure.
• Two-factor authentication (2FA) availability for player accounts to protect against unauthorised access.
• Comprehensive audit logging of all access to and modifications of personal data records.
• A formal data breach response procedure, including notification to affected players and relevant authorities where required by applicable law.

While 333d employs robust security measures, no system is completely immune to risk. You are responsible for keeping your own account credentials confidential and for notifying 333d support immediately if you suspect any unauthorised access to your account.

10. Cookies & Tracking Technologies

333d uses cookies and similar technologies to operate and improve the Platform. A cookie is a small text file stored on your device by your browser. We use the following categories of cookies:

• Strictly necessary cookies: Essential for core Platform functionality such as user authentication, session management, and security token validation. These cookies cannot be disabled without breaking Platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how users navigate the Platform — which pages are most visited, how long sessions last, and where errors occur. This data helps us improve the Platform experience.
• Functional cookies: Remember your preferences such as language settings, notification choices, and responsible gaming tool configurations so you do not need to re-enter them on each visit.

333d does not use advertising or behavioural targeting cookies. No cookie data is sold to or shared with advertising networks. You may manage cookies through your browser settings. Please note that disabling strictly necessary cookies may prevent you from logging in or using core Platform features.

11. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 333d:

• Right of access: You may request a copy of all personal data we hold about you, along with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. Note that certain data must be retained for legal compliance reasons and cannot be deleted on request.
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances, for example while a correction request is being reviewed.
• Right to data portability: Where processing is based on your consent or a contract with you, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing of your personal data where it is based on legitimate interests, including profiling for responsible gaming monitoring. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact 333d support via live chat or email at [email protected]. We will verify your identity before actioning any request and will respond within 15 business days. There is no charge for exercising your rights, though we reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive in nature.

12. Minors

The 333d Platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from any person under the age of 18. If you are under 18, you must not register an account or use any feature of the Platform.

If 333d becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately, the associated account will be closed, and any funds held will be returned to the deposit source in accordance with our Terms & Conditions. If you are a parent or guardian and believe your child may have created an account on 333d, please contact us immediately at [email protected] so that we can take prompt action.

13. Changes to This Policy

333d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered players via the contact method on file and will publish the revised Policy on this page with an updated effective date at the top.

Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to stay informed of how your data is being handled. If you have any objection to a material change in this Policy, you may request account closure as described in our Terms & Conditions.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please reach out to the 333d data protection team through the following channels:

• Live Chat: Available 24/7 directly on the Platform — the fastest route to our support team.
• Email: [email protected]
• Response Time: Data subject requests are acknowledged within 2 business days and fully responded to within 15 business days (Bangladesh Standard Time, UTC+6).

All formal data protection requests must be submitted in writing via email. Please include your registered account username and a description of your request to help us action it promptly. 333d may request proof of identity before processing any data access, correction, or deletion request to protect against unauthorised disclosure.