333o Privacy Policy — Your Data, Your Rights

1. Introduction

333o ("we", "us", "our") operates the online casino and sports betting platform accessible at https://333o.bio. This Privacy Policy sets out how 333o collects, uses, stores, discloses, and protects personal data relating to individuals who access or use our platform ("players", "you", "your"). This policy should be read alongside our Terms and Conditions, which govern the overall use of the 333o platform.

By registering an account with 333o or using any feature of our platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Privacy Policy, you must not register an account or use the 333o platform.

2. Personal Data We Collect

We collect personal data in the following categories. We collect only data that is necessary for the purposes described in this policy. We do not collect data beyond what is reasonably required to deliver our services, process payments, verify identity, and comply with our legal obligations.

• Registration data: your mobile phone number (used as your account identifier), and any additional verification information you provide during account registration or KYC verification (such as your name or a copy of an identity document).
• Transaction data: records of all deposits and withdrawals made through your account, including the payment method used (e.g., bKash, Nagad, Rocket), transaction amounts in BDT, transaction timestamps, and transaction reference numbers.
• Account activity data: your betting history, game play records, session duration data, login timestamps, and responsible gaming tool settings (deposit limits, self-exclusion status, session reminders).
• Device and technical data: your IP address, device type and operating system version, browser type and version, and mobile network operator. This data is collected automatically when you access the 333o platform and is used for security, fraud detection, and platform optimisation purposes.
• Communications data: records of support requests, emails, and other communications between you and the 333o customer support team. These records are retained to ensure continuity of support and to resolve any disputes that may arise.
• Cookies and usage data: session cookie identifiers and anonymous usage analytics. See Section 7 (Cookies) for full details on what we collect and how it is used.

3. How We Use Your Personal Data

333o uses personal data collected from players for the following purposes. Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time by contacting us, subject to legal or contractual obligations that may require us to retain certain data.

• Account management: to create, maintain, and administer your 333o player account, including processing your registration, verifying your identity, managing your account balance, and administering your deposit limit and self-exclusion settings.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and local bank transfer, to verify the ownership of payment methods, and to maintain transaction records as required for financial compliance purposes.
• Security and fraud prevention: to detect, investigate, and prevent fraud, money laundering, identity theft, bonus abuse, use of automated software, and other prohibited conduct as set out in our Terms and Conditions.
• Responsible gaming compliance: to administer and enforce the responsible gaming tools you have set on your account (deposit limits, session reminders, self-exclusion periods), and to monitor account activity for indicators of problem gambling in accordance with our responsible gaming obligations.
• Customer support: to respond to your support requests, investigate complaints, resolve disputes, and provide ongoing assistance with your account, payments, and use of the platform.
• Platform improvement: to analyse anonymised usage patterns and technical performance data in order to improve the platform's stability, speed, and user experience for players accessing 333o on Bangladeshi mobile networks and devices.

4. Legal Basis for Processing

We process your personal data on the following legal bases. Different processing activities rely on different legal bases, as set out below:

• Contractual necessity: processing that is necessary to perform our contract with you — i.e., to operate your player account, process deposits and withdrawals, and deliver the gaming and betting services you have registered to use.
• Consent: processing based on your informed consent, including your acceptance of this Privacy Policy at registration. You may withdraw consent at any time, subject to legal or contractual retention requirements that may apply.
• Legal obligation: processing that is required to comply with applicable legal obligations, including anti-money laundering (AML) regulations, financial record-keeping requirements, and obligations to cooperate with law enforcement or regulatory authorities where required by law.
• Legitimate interests: processing carried out in pursuit of our legitimate interests as a platform operator, including fraud detection, security monitoring, platform optimisation, and responsible gaming compliance — provided those interests are not overridden by your rights and interests.

5. Data Sharing and Disclosure

333o does not sell, rent, or trade personal data belonging to players. We share personal data only where necessary and only with the categories of recipients listed below:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum data necessary to process your deposit or withdrawal transaction. These processors are subject to their own privacy policies and security standards.
• Game software studios: providers such as Evolution Gaming, Pragmatic Play, Spribe, and others may receive session identifiers and bet data as part of the game delivery process. These studios do not receive your personal registration data or payment information.
• Legal and regulatory authorities: we may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where required to do so by applicable law, court order, or legal process.
• Fraud prevention services: we may share data with third-party fraud detection and identity verification services to validate the identity of players, investigate suspected fraud, and prevent money laundering.

6. Payment Data and Financial Records

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or bank transfer, 333o receives confirmation of the transaction from the payment provider. We store the transaction reference number, the amount, the payment method type, and the timestamp. We do not store your full mobile banking PIN, password, or any full payment credentials. Payment method verification is conducted through tokenised references provided by the payment gateway.

Financial transaction records are retained for a minimum period required by applicable financial regulations and anti-money laundering obligations. This retention period typically extends beyond the closure of a player account. Even if you close your account, 333o is legally obliged to retain your transaction history for the applicable statutory period. These records will not be used for marketing purposes after account closure.

7. Cookies and Tracking Technologies

333o uses cookies and similar technologies on its platform. A cookie is a small data file stored on your device by your browser. We use the following categories of cookies:

• Essential session cookies: these are required for the platform to function correctly. They maintain your login session, preserve your account settings during your visit, and ensure the correct language version of the platform is displayed. These cookies cannot be disabled without breaking the platform.
• Analytics cookies: we use anonymised analytics cookies to measure aggregate platform usage — such as which pages are visited most frequently, average session duration, and device type distribution. This data contains no personally identifiable information and is used solely to improve platform performance.
• Security cookies: short-lived cookies used to verify that requests made during your session originate from your authenticated device and browser, helping prevent session hijacking and cross-site request forgery attacks.

333o does not deploy advertising cookies, retargeting cookies, or cross-site tracking cookies. We do not share cookie data with advertising networks or social media platforms. You may configure your browser to block or delete cookies; however, blocking essential session cookies will prevent you from logging into your 333o account.

8. Data Retention

333o retains personal data for the period necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply: active account data is retained for the duration of your account; financial transaction records are retained for a minimum of five years from the date of the transaction in compliance with applicable financial regulations; communications and support records are retained for three years from the date of the communication; device and technical data (IP logs) are retained for twelve months.

When the applicable retention period expires, personal data is securely deleted or anonymised. Where data cannot be fully deleted due to legal obligations (for example, financial records subject to statutory retention requirements), the data will be restricted so that it is no longer accessible for operational purposes and is used solely for compliance.

9. Data Security

333o implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Security measures in place include SSL/TLS encryption for all data in transit between your device and our servers; access controls that restrict employee access to personal data on a need-to-know basis; regular security assessments of the platform and its underlying infrastructure; and monitoring for suspicious access patterns and potential data breaches.

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. If 333o becomes aware of a data breach that is likely to result in a risk to the rights and freedoms of affected players, we will take prompt action to contain the breach and notify affected players as required. Players who suspect that their account data has been compromised must contact 333o support immediately at [email protected].

10. Your Data Rights

You have the following rights in relation to the personal data that 333o holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond to all valid requests within a reasonable timeframe. We may need to verify your identity before processing a rights request.

• Right of access: you have the right to request a copy of the personal data that 333o holds about you, together with information about how that data is used and with whom it has been shared.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may also update certain account information directly within your account settings.
• Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw your consent, or where you object to processing and there is no overriding legitimate interest. This right is subject to legal retention obligations that may require us to retain certain data regardless of your request.
• Right to restriction: you have the right to request that we restrict processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing pending verification of whether our legitimate interests override yours.
• Right to object: you have the right to object to processing of your personal data where that processing is based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Please note that some rights requests may be subject to identity verification before we can process them. We will not charge a fee for reasonable rights requests. If a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or refuse the request, providing written reasons for any refusal.

11. Children and Minors

The 333o platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will delete that data promptly and close the associated account. Parents and guardians who believe that a minor may have registered an account with 333o are encouraged to contact us immediately at [email protected].

12. Third-Party Services and Links

The 333o platform integrates third-party game software from studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These game environments are delivered within the 333o platform but are operated by their respective studios, which have their own privacy policies. 333o does not control the data practices of third-party game studios and recommends that players review the privacy documentation of those studios if they have concerns about how game-session data is handled at the studio level. 333o does not link to external third-party websites, and this Privacy Policy does not govern any external sites.

13. Changes to This Privacy Policy

333o reserves the right to update or revise this Privacy Policy at any time. When we make changes, we will update the effective date at the top of this page. Where a change is material — for example, where we introduce a new category of data collection or a new sharing arrangement — we will take reasonable steps to notify active players, such as displaying a notice within the platform upon login. Your continued use of the 333o platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you should stop using the platform and may request account closure by contacting [email protected].

14. Contact and Data Queries

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to report a suspected data security issue, please contact the 333o support team. We aim to acknowledge all data-related queries within 48 hours and to resolve them within a reasonable timeframe.

Email (plain text — not a link): [email protected]