333kc Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how 333kc ("333kc", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of users ("Player", "User", "you") who access or register on the online betting and casino platform operated at https://333kc.io and all associated subdomains and mobile applications (collectively, the "Platform").

This Policy is an integral part of the 333kc Terms and Conditions. By registering an account, using the Platform, or submitting personal data to 333kc in any form, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

333kc is committed to handling personal data with transparency, integrity, and in compliance with applicable data protection principles. We apply these principles consistently across all jurisdictions in which our Platform is accessed, including Bangladesh.

02 Data We Collect

333kc collects personal data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from third-party service providers involved in payment processing and identity verification. The categories of data we collect are described below.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile phone number, and chosen username.
• Address data: Residential address, city, and district (required for KYC verification and regulatory compliance).
• Identity documents: Copies of government-issued photo identification (National ID Card, Passport, or Driving Licence) and proof of address documents submitted during KYC verification.
• Payment data: Mobile financial service account references (bKash, Nagad, Rocket, Upay wallet numbers), bank account details, and transaction records. Full payment credentials are not stored by 333kc — they are processed directly by the relevant payment service provider.
• Communications: Records of your interactions with our support team via live chat or email, including the content of those communications.
• Responsible gaming data: Self-reported information provided when setting deposit limits, requesting cooling-off periods, or initiating self-exclusion.

2.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, features accessed, game sessions played, betting history, session duration, click-paths, and navigation patterns within the Platform.
• Location data: General geographic location derived from your IP address. 333kc does not collect precise GPS-level location data unless explicitly provided by the user.
• Cookie and tracking data: Data collected through cookies, pixel tags, and similar technologies as described in Section 6 of this Policy.

2.3 Data from Third Parties

• Identity verification providers: Results and flags from KYC checks conducted by third-party identity verification services engaged by 333kc.
• Payment processors: Transaction confirmation data, payment status updates, and fraud-screening indicators provided by bKash, Nagad, Rocket, Upay, and other payment partners.
• Fraud prevention services: Risk scoring and flagging data from anti-fraud and anti-money-laundering screening tools used by 333kc.

03 How We Use Your Data

333kc uses the personal data it collects for clearly defined, legitimate purposes. We do not use personal data for purposes incompatible with those originally stated at the point of collection. The primary purposes for which we process your data are as follows:

• Account Management: Creating, maintaining, and administering your 333kc account, including authentication, access control, and account recovery.
• Identity Verification (KYC): Verifying your identity and age to comply with our 21+ age policy and to satisfy applicable anti-money-laundering obligations.
• Payment Processing: Facilitating deposits and withdrawal transactions, reconciling payment records, and investigating payment disputes.
• Service Delivery: Providing access to casino games, live dealer tables, sportsbook markets, slot games, Royal Fishing, West Hunter Bingo, and all other Platform products.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as described in the Terms and Conditions.
• Responsible Gaming: Monitoring gambling patterns to identify potential problem gambling behaviour, enforcing self-set limits and self-exclusion requests, and fulfilling our duty of care obligations to players.
• Customer Support: Responding to account queries, technical support requests, complaints, and dispute submissions in a timely and informed manner.
• Legal Compliance: Meeting regulatory, legal, and contractual obligations, including the retention of records as required by applicable law.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game content, navigation, and the overall user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and event announcements to players who have consented to receive such communications. Consent may be withdrawn at any time.

04 Legal Basis for Processing

333kc processes personal data on the following legal grounds, as appropriate for each processing activity:

• Contractual Necessity: Processing that is required to perform the contract between you and 333kc — that is, to operate your account, process your bets, and deliver the Platform services you have registered to use. Without this processing, we cannot provide the service.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, record-keeping obligations, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out for the legitimate operational interests of 333kc, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided such interests are not overridden by your fundamental data protection rights.
• Consent: Processing based on your explicit, freely given consent — primarily for marketing communications and for any non-essential cookies or tracking technologies. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

05 Data Sharing & Third Parties

333kc does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Data is shared with third parties only in the following defined circumstances:

5.1 Service Providers

333kc engages third-party service providers who process personal data on our behalf, strictly under written data processing agreements that bind them to equivalent data protection standards. These providers include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, City Bank, BRAC Bank) — for transaction processing and payment verification
• KYC and identity verification providers — for age and identity document verification
• Anti-fraud and anti-money-laundering screening services — for transaction risk scoring
• Cloud infrastructure and data hosting providers — for secure server infrastructure
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — for the delivery of third-party game products on the Platform
• Customer support platform providers — for the operation of our live chat support system

5.2 Legal Disclosures

333kc may disclose personal data to competent authorities, law enforcement bodies, or regulatory agencies where required to do so by law, by court order, or in connection with the investigation of criminal activity, fraud, or money laundering. Such disclosures will be limited to the minimum data necessary to satisfy the legal obligation.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving 333kc, personal data held about players may be transferred to the successor entity as part of that transaction, subject to equivalent data protection commitments being maintained by the receiving party. Registered players will be notified of any such transfer that materially affects their data rights.

06 Cookies & Tracking Technologies

333kc uses cookies and similar tracking technologies to operate the Platform, maintain your session, personalise your experience, and analyse usage patterns. The categories of cookies used are described below.

6.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They manage your login session, maintain security tokens, and enable core features. Essential cookies cannot be disabled without impairing Platform functionality. No consent is required for essential cookies as they are a necessary component of the service you have requested.

6.2 Analytics Cookies

Analytics cookies help 333kc understand how players use the Platform — which pages are visited most frequently, where users encounter difficulties, and how gameplay sessions unfold. This data is processed in aggregated, anonymised form to inform Platform improvements. Analytics cookies require your consent and may be declined.

6.3 Preference Cookies

Preference cookies remember your settings and choices — such as your preferred game category, language settings, and notification preferences — so that your experience is consistent across sessions. These cookies require consent.

6.4 Managing Cookies

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking essential cookies will prevent you from logging in and using core Platform features. Blocking analytics or preference cookies will not affect your ability to place bets or access games, but some personalisation features may not function as expected.

07 Data Retention

333kc retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. The general retention periods applied by 333kc are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using methods that prevent reconstruction of the original data. KYC document images are shredded from secure storage upon expiry using certified secure deletion procedures.

08 Your Data Rights

As a registered player on the 333kc Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and your account username. 333kc will respond within 30 days of receiving a valid, verifiable request.

• Right of Access: You have the right to request a copy of the personal data 333kc holds about you, together with an explanation of how that data is being used and on what legal basis.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. For basic account details, you may also update these directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal retention obligations — for example, transaction records required by financial law cannot be deleted before the mandatory retention period expires.
• Right to Restriction: You may request that 333kc restricts processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction over deletion.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive a structured, machine-readable copy of your personal data for transfer to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes, which will be actioned immediately upon receipt.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to the withdrawal.
• Right to Human Review: Where 333kc makes an automated decision that significantly affects your account (such as a fraud flag or account restriction), you have the right to request human review of that decision.

09 Children & Minors

The 333kc Platform is strictly for adults aged 21 and above. 333kc does not knowingly collect, process, or store personal data from individuals under the age of 21. Registration is not permitted for anyone below the minimum age, and age verification is applied during the KYC process to enforce this requirement.

If 333kc discovers that it has inadvertently collected personal data from a person under the age of 21, that account will be immediately suspended, all balances and winnings will be voided, any deposited funds will be returned to the funding source, and all personal data associated with the account will be securely deleted as soon as it is no longer required for legal compliance purposes.

If you are a parent or guardian and believe that a person under the age of 21 in your household has registered on 333kc, contact us immediately at [email protected] with subject line "Under-Age Account Report". We will investigate and act promptly. We also encourage parents and guardians to use parental control software to restrict access to online gambling platforms.

10 Data Security

333kc implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• Transport Encryption: All data in transit between your device and 333kc servers is encrypted using TLS 1.2 or higher (256-bit SSL). HTTPS is enforced across the entire Platform with HSTS headers applied.
• Data-at-Rest Encryption: Personal data stored in 333kc databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data within 333kc's internal systems is restricted to authorised personnel who require it to perform their specific job functions, on a least-privilege basis. All internal access is logged and audited.
• Two-Factor Authentication: Internal administrative access to systems containing personal data requires multi-factor authentication.
• Security Audits: 333kc conducts regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate security risks.
• Incident Response: 333kc maintains a data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, affected players will be notified without undue delay, and appropriate authorities will be informed where required.

Despite these measures, no internet-based system is entirely immune from security risk. 333kc cannot guarantee absolute security, but we continuously invest in improving our defences and respond swiftly to any identified incidents.

11 Third-Party Links & Content

The 333kc Platform may display third-party game content provided by studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While this content is embedded within the 333kc Platform, each game provider operates their own data processing practices within the bounds of their contractual obligations to 333kc.

333kc is not responsible for the privacy practices of third-party game providers or any other external service whose content may appear on the Platform. We encourage you to review the privacy policies of any third-party service provider whose products you access. 333kc does not permit third-party providers to independently collect personal data from Platform users without a contractual data processing agreement in place with 333kc.

12 Updates to This Policy

333kc reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. When material changes are made to this Policy, 333kc will notify registered players by email and/or by displaying a prominent notice on the Platform, at least 7 days before the updated Policy takes effect.

Your continued use of the Platform following the effective date of an updated Policy constitutes your acceptance of the revised terms. The effective date of the current version is displayed at the top of this page. We recommend reviewing this Policy periodically to remain informed about how your data is being handled.

Where a proposed change to this Policy would require processing your data in a materially different way than originally consented to, 333kc will seek fresh consent before implementing the new processing activity on your account.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 333kc handles your personal data, please contact our data support team through the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate. Response within 2 hours during Bangladesh Standard Time (UTC+6) business hours.
• Live Chat: Available 24/7 directly from your account dashboard after login. Identify your query as a privacy or data matter to ensure it is routed to the appropriate team.

For data rights requests specifically, please include your registered account username, your registered email address, and a clear description of the right you wish to exercise. 333kc will verify your identity before processing your request and will respond within 30 calendar days.