333b Privacy Policy

1. Introduction

This Privacy Policy (hereinafter referred to as "this Policy") sets out the manner in which 333b (hereinafter "333b", "we", "us", or "our") collects, uses, stores, discloses, and protects the personal data of individuals (hereinafter "you", "your", or "the Player") who access or use the 333b platform at 333b.io and all associated subdomains, mobile interfaces, and services.

333b is committed to handling all personal data responsibly, lawfully, and transparently. This Policy has been written in plain English to ensure that players across Bangladesh can understand exactly how their information is used and what choices they have at every stage of their account relationship with 333b.

By registering an account on the 333b platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein. This Policy should be read alongside the 333b Terms & Conditions, which govern the overall use of the platform.

333b operates as an offshore gaming platform. Players in Bangladesh access the service at their own discretion. This Policy reflects 333b's internal data governance standards and its commitment to fair, transparent data practices regardless of the jurisdictional framework applicable to any individual player.

2. Personal Data We Collect

333b collects personal data through several channels: directly from you when you register and use the platform, automatically through technical systems as you browse and play, and, in limited circumstances, from third-party verification services. The categories of personal data we collect are described below.

2.1 Registration and Account Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Email address (used as your primary account identifier and for account communications).
• Mobile phone number (used for account security, two-factor authentication where enabled, and support communications).
• Residential address in Bangladesh (required for KYC verification on withdrawal).
• Username and encrypted password credential.

2.2 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued identification documents, including National ID card, passport, or birth certificate.
• Proof of address documents (utility bills, bank statements issued within the last three months).
• Proof of payment method ownership where required for withdrawal processing.

2.3 Financial and Transaction Data

• Mobile banking account identifiers (bKash wallet number, Nagad number, Rocket number, Upay number) used for deposit and withdrawal transactions.
• Bank account details (account name, account number, bank name) where bank transfer is used.
• Transaction history including deposit amounts, withdrawal requests, timestamps, and transaction reference numbers.
• Betting history, including stake amounts, odds accepted, game sessions, and settlement outcomes.

2.4 Technical and Device Data

• IP address at the time of registration and each subsequent login.
• Device type, operating system, and browser version.
• Session data including login timestamps, pages visited, duration of play sessions, and click-path data.
• Geolocation data at a country and city level, derived from IP address (333b does not use GPS-level location tracking).

2.5 Communications Data

• Content of support tickets, live chat transcripts, and emails sent to or received from the 333b support team.
• Survey responses and feedback submitted voluntarily by the Player.
• Preferences and opt-in/opt-out status for marketing communications.

3. How We Use Your Personal Data

333b processes personal data only for specific, documented purposes. The table below maps each data category to its primary processing purpose:

Data Category	Primary Purpose
Registration & Account Data	Account creation, authentication, account management, and player communications.
KYC Documents	Age and identity verification prior to first withdrawal; ongoing fraud prevention.
Financial & Transaction Data	Processing deposits and withdrawals; detecting and preventing financial fraud and money laundering.
Technical & Device Data	Platform security, duplicate account detection, responsible gaming monitoring, and service optimisation.
Communications Data	Responding to support requests; improving service quality; compliance record-keeping.
Marketing Preferences	Sending promotional communications by email or SMS where explicit consent has been given.

333b does not use personal data to make fully automated decisions that produce legal or similarly significant effects for Players, except where automated screening is required as part of our fraud prevention or anti-money-laundering obligations. In all such cases, a human reviewer is available to assess flagged cases upon request.

4. Legal Basis for Processing

333b processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is required to perform the contract between 333b and the Player — specifically, to operate the account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including anti-money-laundering requirements, age verification obligations, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing is necessary for 333b's legitimate business interests, including fraud prevention, platform security, duplicate account detection, and responsible gaming monitoring, where those interests are not overridden by the Player's data protection rights.
• Consent: Where processing is not justified by the above grounds — specifically in relation to direct marketing communications — 333b will process data only where you have given clear, informed, and freely withdrawable consent.

5. Payment Data and Financial Security

333b takes the security of financial data with particular seriousness given the payment methods commonly used by players in Bangladesh. The following specific arrangements apply to payment data processing:

• All deposit and withdrawal transactions are processed directly through the applicable payment service provider's secure infrastructure. 333b does not store mobile banking PINs, OTP codes, or card verification values (CVVs) at any point during a transaction.
• bKash, Nagad, Rocket, and Upay transaction data is transmitted via encrypted API channels. 333b retains only the transaction reference number, amount, timestamp, and the partial mobile number (last four digits) associated with each transaction for its own records.
• Bank account details provided for bank transfer withdrawals are stored in encrypted form and used solely for the purpose of processing the specific withdrawal request to which they relate.
• 333b employs automated transaction monitoring to identify unusual deposit or withdrawal patterns that may indicate account compromise, money laundering, or other financial crime. Flagged transactions may be placed on hold pending manual review and, where appropriate, reported to relevant authorities.

6. Cookies and Tracking Technologies

The 333b platform uses cookies and similar tracking technologies to operate effectively, maintain session security, and understand how players use the service. The categories of cookies used are as follows:

6.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They maintain your login session, remember your account preferences, and ensure security features operate correctly. These cookies cannot be disabled as the platform cannot function without them.

6.2 Analytical Cookies

333b uses first-party analytical cookies to collect anonymised data about how players navigate the platform, which game categories attract the most engagement, and where technical errors occur. This data is used solely to improve the platform's performance and user experience. No personal identifiers are transmitted to third-party analytics services.

6.3 Fraud Prevention Cookies

Certain cookies are used specifically to support our fraud prevention and duplicate account detection systems. These cookies record technical fingerprint data — such as browser configuration and device type — to identify patterns that may indicate the creation of multiple accounts by a single individual in violation of the 333b Terms & Conditions.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging into your account and using the platform. Disabling analytical cookies will not affect your ability to play but will reduce 333b's ability to identify and resolve technical issues on your device.

7. Third-Party Data Sharing

333b does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes under any circumstances. Data may be shared with the following categories of third parties strictly as necessary to operate the platform:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and partner banking institutions receive the minimum data required to process each individual transaction. These providers are bound by their own regulatory obligations and data protection commitments.
• Identity Verification Providers: Where 333b uses a third-party KYC verification service to assist with document authentication, the relevant KYC documents are shared with that provider under a data processing agreement that restricts use to the specific verification purpose only.
• Game Content Providers: When you play a game supplied by a third-party provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), a session token and anonymised player identifier are shared with that provider's game server to enable the game to function. These providers do not receive your name, contact details, or payment information.
• Legal and Regulatory Authorities: 333b will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or lawful regulatory request. 333b will notify the affected Player of such disclosure where it is legally permitted to do so.
• Platform Infrastructure Providers: Hosting, content delivery, and cybersecurity service providers may process technical data as part of delivering the platform's infrastructure. All such providers are contracted under data processing agreements that prohibit independent use of Player data.

8. International Data Transfers

As an offshore platform serving players in Bangladesh, 333b's core infrastructure and data processing operations are based outside of Bangladesh. Personal data collected from Bangladesh-based players may therefore be transferred to, stored in, and processed in jurisdictions other than Bangladesh.

333b ensures that all international transfers of personal data are subject to appropriate safeguards. Where data is transferred to a third-party service provider located in a jurisdiction without an equivalent data protection framework, 333b requires that provider to operate under contractual data protection clauses that impose obligations equivalent to those described in this Policy.

By registering an account on the 333b platform, you acknowledge and consent to the transfer of your personal data to 333b's international infrastructure as described in this section.

9. Data Retention

333b retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Data Category	Retention Period
Account registration data	Duration of active account, plus 5 years from account closure.
KYC verification documents	Duration of active account, plus 5 years from account closure.
Transaction and betting history	Duration of active account, plus 7 years from account closure (financial audit requirements).
Support communications	3 years from the date of the last communication in the relevant support thread.
Technical and session data	13 months from collection date, after which data is anonymised.
Marketing consent records	Duration of active consent, plus 2 years from withdrawal of consent.

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted or rendered irreversibly anonymous. Anonymised data may be retained for statistical and analytical purposes without further retention restrictions as it no longer constitutes personal data.

10. Your Data Rights

333b recognises and respects your rights over your personal data. The following rights are available to all Players regardless of their location in Bangladesh:

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request" and your registered account email address. 333b will acknowledge all data rights requests within 5 business days (Bangladesh Standard Time, UTC+6) and will complete the request within 30 calendar days. Exceptionally complex requests may require up to 60 calendar days; 333b will notify you of any extension within the initial 30-day period.

333b reserves the right to verify your identity before processing a data rights request to ensure that data is not disclosed to or deleted at the request of an unauthorised third party.

11. Children and Minors

The 333b platform is strictly for adults aged 21 years and above. 333b does not knowingly collect personal data from individuals under the age of 21 and does not permit individuals under that age to register an account or use the platform in any capacity.

If 333b discovers or has reason to believe that it has collected personal data from a person under the age of 21, it will immediately suspend the associated account, delete the personal data collected, and void any transactions associated with that account. Any winnings associated with an under-age account will be forfeited.

If you are a parent or guardian and believe that a person under 21 in your care may have registered an account on the 333b platform, please contact [email protected] immediately so that the account can be investigated and closed without delay.

12. Security Measures

333b employs a multi-layered approach to data security. The following technical and organisational measures are in place to protect personal data from unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in Transit: All data exchanged between your browser or mobile device and the 333b platform is encrypted using TLS 1.2 or higher. The platform does not permit unencrypted HTTP connections for authenticated sessions.
• Encryption at Rest: Sensitive personal data fields — including identity document records, payment identifiers, and account credentials — are encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data within 333b's internal systems is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions and is subject to audit logging.
• Intrusion Detection: 333b's infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, and potential data breaches.
• Incident Response: In the event of a confirmed personal data breach that is likely to result in a risk to affected Players, 333b will notify affected Players by email within 72 hours of becoming aware of the breach, describing the nature of the incident and the steps being taken to contain it.

While 333b takes all reasonable precautions to protect your data, no online platform can guarantee absolute security against all threats. You are responsible for maintaining the security of your own login credentials and for notifying 333b promptly at [email protected] if you suspect your account has been compromised.

13. Marketing Communications

333b may send promotional communications — including bonus offers, tournament announcements, seasonal promotions, and platform news — to Players who have given explicit consent to receive such communications at the time of registration or subsequently through account settings.

333b marketing communications are delivered by email and, where you have provided consent, by SMS to your registered mobile number. We do not send unsolicited marketing communications via WhatsApp, Telegram, or any third-party messaging platform, and we do not sell or share your contact details with any third-party marketing service for independent use.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any 333b marketing email;
• Updating your communication preferences in your account settings dashboard; or
• Sending a written withdrawal request to [email protected] with the subject line "Unsubscribe Request".

Withdrawal of marketing consent will be processed within 3 business days. Transactional communications — including deposit confirmations, withdrawal notifications, KYC requests, and account security alerts — are not marketing communications and will continue to be sent regardless of marketing preference settings, as they are necessary for the operation of your account.

14. Changes to This Privacy Policy

333b reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform services. Where a change is material — meaning it significantly affects the way we process your personal data or the rights available to you — 333b will provide at least 14 days' advance notice by email to your registered account address before the change takes effect.

Minor clarifications and editorial amendments that do not substantively alter your rights or 333b's data processing practices may be made without prior notice, and the "Last Updated" date at the top of this Policy will be revised accordingly.

Your continued use of the 333b platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change to this Policy, you must close your account and request deletion of your personal data before the effective date of the change.

15. Contact Us

For all enquiries, requests, or complaints relating to this Privacy Policy or to the way 333b processes your personal data, please contact the 333b Data Privacy team using the details below. All communications must be submitted in English to ensure accurate and timely handling.

Privacy & Data Enquiries Email:
[email protected]

Subject Line Format:
Please use one of the following subject line prefixes to ensure your request is routed to the correct team without delay:

• "Data Rights Request" — for access, rectification, erasure, portability, and restriction requests.
• "Privacy Enquiry" — for general questions about this Policy or our data practices.
• "Data Breach Report" — if you believe your account data has been exposed or compromised.
• "Unsubscribe Request" — to withdraw consent for marketing communications.

Response Times:
All privacy-related enquiries are acknowledged within 5 business days (Bangladesh Standard Time, UTC+6). Substantive responses to data rights requests are completed within 30 calendar days of receipt.