333e Privacy Policy — How We Protect Your Data

1 Introduction

333e is an online betting and casino platform built specifically for the Bangladesh market. We are committed to handling your personal information with care, transparency, and a firm respect for your privacy. This Privacy Policy applies to all users of 333e.io — whether you are a registered player, a visitor browsing the site, or a prospective player in the process of completing registration.

This policy explains:

• What categories of personal data 333e collects from you and how that data is gathered.
• The legal basis on which we process each category of data.
• How and why we use your data in the course of operating the 333e platform.
• With whom we share your data and the safeguards applied to such sharing.
• How long we retain your data and our procedures for secure deletion.
• The rights you hold in relation to your personal data and how to exercise them.

This Privacy Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between you and 333e.

2 Data Controller

For the purposes of this Privacy Policy, 333e acts as the data controller in respect of all personal data collected via 333e.io. As data controller, 333e determines the purposes and means by which your personal data is processed.

All data protection enquiries, subject access requests, and requests to exercise your privacy rights should be directed to the 333e support team:

• Email: [email protected] (plain text — not a clickable link)
• Language: All privacy-related communications are handled in English.
• Response Time: 333e aims to respond to all privacy-related requests within 30 days of receipt.

3 Data We Collect

333e collects personal data across several categories, depending on your level of engagement with the platform. The table below summarises the main categories of data collected and the circumstances in which each is gathered.

We do not knowingly collect data from individuals under the age of 21. If we become aware that an account has been registered by a person under 21, we will suspend the account immediately and delete associated personal data in accordance with Section 8 of this policy.

4 How We Use Your Data

333e processes your personal data only for specific, legitimate purposes. We do not use your data for purposes that are incompatible with those for which it was originally collected. The primary purposes for which we process your data are as follows:

• Account Management: To create, maintain, and administer your 333e account, including processing your registration, authenticating your login sessions, and managing account settings.
• Identity Verification (KYC): To verify your identity and age eligibility (21+) in accordance with our obligations to operate a safe and reliable platform, and to prevent fraud and underage gambling.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate transaction records in BDT.
• Service Delivery: To provide access to cricket betting, live casino, slots, virtual games, fishing games, and all other 333e products and features.
• Responsible Gaming Compliance: To monitor gameplay patterns, enforce deposit limits, process self-exclusion requests, and identify at-risk players in accordance with our Responsible Gaming obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited activities as defined in the 333e Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and manage support communications in English.
• Marketing Communications: To send you relevant promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. See Section 11 for full details.
• Platform Improvement: To analyse aggregate usage data, improve platform functionality, optimise the user experience, and develop new features and products for the Bangladesh market.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from authorities, and enforce our Terms & Conditions and other platform policies.

5 Data Sharing

333e may share your personal data with the following categories of third parties, solely to the extent necessary to deliver the services described in this policy:

• Payment Service Providers: bKash, Nagad, Rocket (DBBL), Upay (UCB), and card processing partners (Visa/Mastercard) receive the transaction data necessary to process your deposits and withdrawals in BDT. These providers are bound by their own privacy obligations.
• Game Technology Providers: Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive the minimum session and gameplay data required to deliver their games and determine round outcomes. Game providers do not receive your KYC documents or payment account details.
• Identity Verification Services: Where 333e uses third-party KYC technology providers to assist with document verification, those providers process your identity documents under strict data processing agreements and may not use your data for any other purpose.
• IT Infrastructure and Hosting Providers: 333e's platform operates on secure cloud infrastructure. Hosting and infrastructure providers may process personal data as a necessary function of hosting the platform but are bound by contractual data protection obligations.
• Legal and Regulatory Authorities: 333e will disclose personal data to law enforcement, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or to protect the legal rights and interests of 333e or its players.
• Anti-Fraud and Security Partners: We may share limited technical data (such as IP addresses and device fingerprints) with fraud detection service providers to identify and prevent prohibited activities on the platform.

All third parties with whom 333e shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the specific purpose for which it was shared.

6 Payment Data

333e handles financial data — including bKash account numbers, Nagad wallet identifiers, Rocket account references, and Visa/Mastercard details — with the highest level of care. Payment data is processed only for the purpose of completing your deposit and withdrawal transactions and is never used for any other purpose without your explicit consent.

333e does not store full card numbers, CVV codes, or complete mobile banking PINs on its own servers. Where card or mobile banking data is captured during a transaction, it is transmitted directly to the relevant payment processor over an encrypted connection and handled in accordance with the processor's own security standards.

333e enforces a strict same-name policy: the payment account used for deposits must be registered in the same name as the 333e account. This requirement exists both as a fraud prevention measure and to ensure that withdrawals are returned to the correct account holder. Attempting to use payment accounts registered in a third party's name is a breach of the 333e Terms & Conditions.

All account balances on the 333e platform are held and displayed in Bangladeshi Taka (BDT) using the ৳ symbol. No foreign currency conversion is applied within the 333e platform itself; any currency conversion by your bank or mobile payment provider is a matter between you and that provider.

7 Cookies and Tracking Technologies

333e uses cookies and similar tracking technologies on 333e.io to ensure the platform operates correctly, to secure your login session, and to improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the 333e platform to function. They maintain your login session, remember your language and currency preferences, and enable the platform's security features. These cookies cannot be disabled without affecting your ability to use the platform.
• Performance and Analytics Cookies: These cookies collect anonymised information about how visitors use 333e.io — for example, which pages are visited most frequently and whether any error messages are encountered. This information helps us improve the platform. The data collected is aggregated and does not identify individual users.
• Functional Cookies: These cookies allow 333e to remember choices you have made (such as responsible gaming tool settings or notification preferences) and provide enhanced, personalised features during your session.
• Marketing and Retargeting Cookies: Where you have consented to receive marketing communications, 333e may use cookies to deliver relevant promotional content and to measure the effectiveness of marketing campaigns. You may withdraw this consent at any time through your account settings.

Most web browsers are set to accept cookies by default. You may configure your browser to refuse all cookies or to alert you when cookies are being sent. Please be aware that disabling strictly necessary cookies will impair the functionality of 333e.io, including your ability to log in and place bets.

8 Data Retention

333e retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply to the main categories of personal data held by 333e:

• Account Registration Data: Retained for the duration of your account and for a period of five (5) years following account closure, to satisfy our legal and compliance obligations.
• KYC Documents (NID, Proof of Address): Retained for the period required by our compliance framework, typically five (5) years from the date of verification. Documents are securely deleted once the retention period expires.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
• Gameplay and Betting History: Retained for the duration of your account and for two (2) years following account closure, for dispute resolution and responsible gaming purposes.
• Technical and Log Data (IP addresses, session logs): Retained for a maximum of twelve (12) months, unless retained for longer in connection with a specific fraud or security investigation.
• Support Communications: Retained for three (3) years from the date of the communication, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your account and until you withdraw consent. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

When the applicable retention period expires, 333e will securely delete or anonymise the relevant personal data in accordance with our data destruction procedures.

9 Data Security

333e implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and 333e.io is encrypted using SSL/TLS protocols. The 333e.io connection is HTTPS-secured at all times.
• Encrypted Data Storage: Sensitive personal data, including KYC documents and payment references, is stored in encrypted form using industry-standard encryption algorithms. Data is not stored in plain text.
• Access Controls: Access to personal data held by 333e is restricted to authorised personnel who require it to perform their specific job functions. Access is controlled through role-based permissions and is logged for audit purposes.
• Secure Payment Transmission: Payment data is transmitted directly to payment processors over encrypted connections. 333e does not store full payment credentials on its own servers.
• Account Security: 333e accounts are protected by password authentication. Players are strongly encouraged to use a strong, unique password for their 333e account and to change it regularly. 333e will never ask for your password via email, SMS, or live chat.
• Fraud Monitoring: 333e operates continuous fraud detection monitoring on platform activity to identify suspicious patterns, including unusual login behaviour, atypical transaction patterns, and signs of account takeover attempts.

No method of data transmission or electronic storage is 100% secure. While 333e applies industry best practices and invests continuously in platform security, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights and interests, 333e will notify affected players in a timely manner and take immediate steps to mitigate the impact.

10 Your Rights

As a 333e player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the 333e support team at [email protected]. We will respond to all valid requests within 30 days.

• Right of Access: You have the right to request a copy of the personal data that 333e holds about you. We will provide this in a clear, readable format at no charge.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain categories of data (such as your registered name or date of birth), we may require supporting documentation before making corrections.
• Right to Erasure: You may request that 333e delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. Please note that this right is subject to overriding legal retention obligations — for example, we are not able to delete transaction records that are required for compliance purposes.
• Right to Restriction of Processing: In certain circumstances (for example, while the accuracy of your data is being verified), you may request that 333e restricts the processing of your personal data to storage only.
• Right to Data Portability: Where your data has been provided by you and processed on the basis of your consent, you have the right to receive it in a structured, machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where 333e processes your data on the basis of your consent (including consent to marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
• Right to Object: You have the right to object to the processing of your personal data where 333e relies on a legitimate interest as the legal basis for processing. 333e will consider your objection and cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

11 Marketing Communications

333e may contact you with promotional offers, bonus notifications, seasonal campaigns (for example, Eid and Pohela Boishakh promotions), BPL cricket betting alerts, and other marketing communications — but only where you have actively opted in to receive such communications during registration or through your account settings.

Marketing communications from 333e may be delivered via:

• Email to your registered email address.
• SMS to your registered phone number (Bangladesh mobile numbers only).
• In-platform notifications displayed within your 333e account dashboard.

You may opt out of all marketing communications at any time by:

• Updating your communication preferences in your 333e account settings.
• Clicking the unsubscribe link included in any 333e marketing email.
• Contacting the 333e support team directly and requesting that your marketing preferences be updated.

Opting out of marketing communications does not affect your receipt of transactional or account-related messages (such as deposit confirmations, withdrawal notifications, and KYC status updates), which are sent as a necessary part of operating your account and cannot be disabled.

333e does not send marketing communications to players who have self-excluded or who have set account restrictions under our Responsible Gaming tools. 21+ only.

12 Minors

During the registration process, 333e collects date of birth information and performs age verification checks to confirm that all registering players meet the 21+ eligibility requirement. Where KYC verification is completed, the date of birth on the submitted NID document is cross-checked against the date of birth provided at registration.

If 333e becomes aware — through KYC verification, fraud detection, or any other means — that a player is under the age of 21, the following actions will be taken immediately:

• The account will be suspended without prior notice.
• All bets placed and winnings generated during the underage period will be voided.
• Any deposit funds that remain in the account balance, net of voided winnings, will be returned to the payment method used for the original deposit, following confirmation of the payment account holder's identity.
• Personal data collected in connection with the underage account will be deleted in accordance with our data retention obligations, except where retention is required for legal or fraud-prevention purposes.

If you believe a minor may be using your device to access the 333e platform, please contact support immediately and consider using appropriate parental control software. 333e recommends that account holders keep their login credentials secure and never share them with any third party, including family members under 21.

13 Changes to This Privacy Policy

333e reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in platform operations, applicable legal requirements, or best-practice standards for data protection. The effective date shown at the top of this document will be updated each time a material change is made.

Where changes are material — meaning they affect how your data is used or the rights available to you — 333e will notify registered players via their registered email address or through a prominent notice on the 333e.io platform, at least 7 days before the changes take effect.

Your continued use of the 333e platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. The most current version of this Privacy Policy is always available at 333e.io/privacy-policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy — including requests to exercise any of the rights described in Section 10 — please contact the 333e data team via the support channel:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to respond to all privacy-related enquiries within 30 days of receipt. Complex requests may require additional time; we will inform you if an extension is required.
• Language: All privacy communications are conducted in English.
• Subject Line: When contacting us with a data privacy request, please include "Privacy Request" in the subject line of your email to ensure it is routed to the correct team.