Your Privacy Matters
at 333g

1. Introduction

333g is committed to protecting your personal information and to being fully transparent about how that information is handled. We do not sell, rent, or trade your personal data to third-party commercial marketing organisations. Data is collected and processed solely to deliver, improve, and secure our services, to comply with our legal obligations, and, where you have given explicit consent, to inform you of promotions and offers relevant to your account.

This Privacy Policy should be read alongside the 333g Terms & Conditions, which govern your overall use of the platform. Capitalised terms not defined in this Policy have the same meaning as in the Terms & Conditions.

If you have any questions about this Privacy Policy or about how 333g handles your personal data, you may contact us at any time at [email protected]. Our support team is available 24/7 in English.

2. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for the personal information you provide to 333g is the operating entity behind the 333g platform, reachable at the contact details provided in Section 15 of this Policy. As data controller, 333g determines the purposes and means by which your personal data is processed, and bears responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.

333g operates as an online entertainment and betting platform serving players aged 21 and above across Bangladesh. Our primary point of contact for all data protection enquiries is [email protected]. We aim to acknowledge all data-related requests within 3 business days and resolve them within 30 days of receipt.

Where 333g engages third-party service providers to process personal data on its behalf — such as identity verification partners, payment processors, or game studios — those parties act as data processors under binding contractual agreements that restrict their use of your data to the purposes specified by 333g. A list of key processor categories is provided in Section 6 of this Policy.

3. Data We Collect

333g collects personal data from you in order to provide the services described on this platform. The categories of personal data we may collect and process are set out in the table below. Not all categories apply to every user — the specific data collected depends on how you interact with the platform and the services you use.

333g does not knowingly collect sensitive personal data beyond what is strictly necessary for identity verification and anti-money-laundering compliance. We do not collect racial or ethnic origin data, political opinions, religious beliefs, biometric data, or health information beyond age confirmation for the 21+ requirement.

4. How We Collect Data

333g collects personal data through the following channels and mechanisms:

• Direct Interactions: You provide Identity Data and Contact Data when you create a 333g account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, or submit a complaint or feedback. This is the primary source of your personal data.
• Automated Technologies: When you visit 333g's platform, we automatically collect Technical Data and Usage Data through server logs, cookies, web beacons, and similar tracking technologies. This data helps us ensure platform stability, detect fraud, and understand how players interact with the site. See Section 9 for full details on cookies.
• Payment Providers: When you initiate a financial transaction through bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or BRAC Bank, our payment processing partners transmit a reference or token confirming the transaction. 333g does not receive or store full card numbers or mobile banking PINs.
• Identity Verification Partners: Third-party KYC and anti-money-laundering (AML) service providers may verify the identity documents you submit and return a verification result to 333g. These partners process your data solely for verification purposes under strict contractual terms.
• Game Studios: Game providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may log in-game activity (game rounds, outcomes, RTP data) and share aggregated or session-level data with 333g for the purpose of resolving disputes, auditing, and improving game delivery.
• Publicly Available Sources: In limited circumstances connected to fraud prevention, 333g may cross-reference information you have provided against publicly available records or industry-shared fraud databases.

5. Purposes & Legal Bases for Processing

333g processes your personal data only where a lawful basis exists for doing so. The table below sets out the primary purposes for which we process personal data and the corresponding legal basis for each processing activity.

Where we rely on legitimate interests as a legal basis, we have assessed that our interests do not override your fundamental rights and freedoms. You may request further information about this balancing assessment by contacting [email protected]. Where we rely on consent as a legal basis (primarily for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

333g does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank receive only the transaction data necessary to process your specific deposit or withdrawal request. These partners are subject to their own regulatory data protection obligations.
• Identity Verification & KYC Partners: Third-party verification service providers receive a copy of the identity documents you submit during the KYC process. They are contracted to process this data solely for verification and to return a pass/fail result to 333g. They may not retain, use, or disclose your documents for any other purpose.
• Game Studios: Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe, and other certified studios that supply games to the 333g platform may receive your player session identifier and in-game activity data to facilitate gameplay, maintain game logs, and resolve disputes. These studios operate under independent regulatory certification and their own privacy frameworks.
• IT & Infrastructure Providers: Cloud hosting, content delivery, and platform infrastructure providers that power 333g's technical operations may process Technical Data and Usage Data as data processors acting under 333g's instructions.
• Analytics & Security Providers: Third-party analytics tools and cybersecurity services may process anonymised or pseudonymised Technical and Usage Data to help 333g monitor platform performance, detect abnormal behaviour, and prevent fraud.
• Legal & Regulatory Authorities: 333g may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other competent authorities where required to do so by applicable law, court order, or regulatory demand. Such disclosures are made only to the extent legally required and, where permitted, you will be notified in advance.
• Professional Advisers: Legal counsel, auditors, and financial advisers retained by 333g may access personal data on a strictly confidential basis in connection with the services they provide to 333g.

7. Data Retention

333g retains personal data for as long as necessary to fulfil the purposes for which it was collected, to maintain an active account relationship with you, and to comply with our legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

• Active Account Data: Identity, Contact, and Financial Data are retained for the full duration of your 333g account relationship and for a period of 5 years after account closure, in compliance with anti-money-laundering record-keeping requirements.
• Transaction Records: All deposit, withdrawal, and wagering transaction records are retained for a minimum of 5 years following the date of each transaction.
• KYC and Verification Documents: Identity documents submitted during verification are retained for 5 years from the date of submission or from the date of account closure, whichever is later.
• Technical and Usage Data: Server logs, session data, and analytics data are typically retained for 24 months, after which they are anonymised or deleted.
• Support Communications: Customer support tickets, chat transcripts, and email correspondence are retained for 3 years following resolution, in case of follow-up disputes.
• Marketing Data: Marketing preference records and consent logs are retained for the duration of your consent or until you withdraw it, plus 12 months to evidence compliance.

At the end of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original information. Where anonymisation rather than deletion is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for statistical purposes.

8. Security Measures

333g employs a layered, defence-in-depth approach to protecting your personal data. Our technical and organisational security measures include, but are not limited to, the following:

• SSL/TLS Encryption: All data transmitted between your browser or device and the 333g platform is encrypted using SSL 256-bit TLS encryption. The padlock icon in your browser's address bar confirms an active encrypted connection at all times.
• Data Encryption at Rest: Sensitive personal data stored on 333g servers — including identity documents and financial records — is encrypted at rest using industry-standard AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data within 333g's operations is restricted on a strict need-to-know basis. Staff access is controlled through role-based permissions, unique user credentials, and multi-factor authentication for administrative systems.
• Payment Data Isolation: 333g does not store full card numbers, CVV codes, or mobile banking PINs on its own servers. Payment credentials are tokenised by the relevant payment processor and only a secure reference token is retained by 333g.
• Intrusion Detection & Monitoring: 333g's infrastructure is monitored 24/7 by automated intrusion detection systems and security information and event management (SIEM) tools. Anomalous patterns trigger immediate alerts for investigation.
• Penetration Testing: 333g conducts regular security assessments and penetration testing of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All 333g personnel who handle personal data receive regular data protection and information security training. Handling procedures are reviewed and updated in line with emerging threats and best practices.

Notwithstanding these measures, no online platform can guarantee absolute security. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, 333g will notify affected individuals and relevant authorities in accordance with applicable legal requirements, as promptly as circumstances allow.

9. Cookies & Tracking Technologies

333g uses cookies and similar tracking technologies to operate the platform, maintain session security, analyse usage patterns, and, where consent has been given, to personalise your experience. A cookie is a small text file placed on your device by the web server when you visit a website. The cookies 333g uses fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as secure login sessions, account authentication, and navigation between pages. The platform cannot be used without these cookies, and no consent is required for their placement.
• Performance & Analytics Cookies: These cookies collect anonymised information about how visitors use the 333g platform — for example, which pages are visited most frequently and whether users encounter error messages. This data helps us continuously improve the platform experience. These cookies do not identify individual users.
• Functional Cookies: These cookies remember your preferences and settings — such as preferred game categories or display options — to provide a more personalised experience across sessions. They do not track your activity on other websites.
• Security Cookies: These cookies are used to detect and prevent fraudulent login attempts, identify suspicious session behaviour, and protect the integrity of your account. They are a core component of our platform security architecture.

You may configure your browser settings to block or delete cookies at any time. However, blocking strictly necessary or security cookies will impair your ability to use the 333g platform, including the ability to log in and conduct financial transactions. 333g does not use cookies to track your activity across unrelated third-party websites.

10. Your Rights Over Your Personal Data

As a data subject, you hold a number of rights with respect to the personal data that 333g processes about you. These rights are described below. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request and proof of your identity (to prevent unauthorised disclosure of your data to third parties).

• Right of Access: You have the right to request a copy of all personal data that 333g holds about you, along with information about the purposes for which it is processed, the categories of data involved, and the recipients to whom it has been disclosed. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. You may update many of your basic account details directly in your account settings panel.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw the consent on which processing was based. This right is subject to overriding legal obligations; for example, 333g is legally required to retain certain transaction and identity records for a minimum of 5 years and cannot delete these on request during that period.
• Right to Restriction: You may request that 333g restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved, or where you have objected to processing based on legitimate interests and a determination is pending.
• Right to Data Portability: Where processing is based on your consent or on performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

333g will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reasons for it within the initial 30-day window. There is no charge for exercising your rights, except where requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.

11. Minors & Age Policy

333g strictly prohibits the use of its platform by any person under the age of 21. The collection and processing of personal data from individuals under 21 is not intended and not permitted under our Terms & Conditions or this Privacy Policy. All prospective players are required to confirm their age during registration, and 333g actively employs identity verification procedures to enforce this requirement.

If 333g becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed. Any funds held in such an account will be returned to the source payment method following confirmation of the account holder's identity and age.

12. International Data Transfers

333g's primary operations and data processing activities are directed at users in Bangladesh. However, certain third-party service providers engaged by 333g — including cloud infrastructure providers, game studios (such as Evolution Gaming, Pragmatic Play, and NetEnt), and identity verification partners — may process personal data in locations outside Bangladesh.

Where such international transfers occur, 333g ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy. These safeguards may include contractual clauses governing data processing obligations, data processing agreements with binding privacy commitments, or reliance on the third party's own certifications and regulatory frameworks applicable to their industry.

If you would like further information about the specific safeguards applied to any international data transfer involving your personal data, you may request this by contacting [email protected].

13. Marketing Communications

333g may send you promotional communications — including information about deposit bonuses, free spins, tournament announcements, seasonal promotions (such as BPL cricket season offers, Eid promotions, or Pohela Boishakh specials), and platform updates — where you have given your explicit consent to receive such communications during registration or at any point thereafter.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email sent by 333g.
• Updating your communication preferences in your account settings panel.
• Contacting the support team at [email protected] and requesting removal from all marketing lists.

Opting out of marketing communications does not affect your receipt of service-related communications that are necessary for the operation of your account — such as transaction confirmations, security alerts, KYC requests, and updates to Terms or this Privacy Policy. These operational communications are sent on the basis of contractual necessity and will continue regardless of marketing preferences.

333g does not share your Contact Data with third-party marketers for the purpose of sending their own promotional materials. All marketing communications you receive will originate from 333g directly.

14. Changes to This Privacy Policy

333g reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform services. When material changes are made, we will notify registered Players by email to the address on file and/or by displaying a prominent notice on the platform for a period of not less than 7 days before the changes take effect.

The "Last Updated" date at the top of this Policy and in the hero section above indicates the date of the most recent revision. We encourage you to review this Privacy Policy periodically to remain informed about how your personal data is being protected. Your continued use of the 333g platform after the effective date of any revised Policy constitutes your acknowledgement of the changes.

Archived versions of previous Privacy Policies are available upon written request to [email protected].

15. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by 333g, please contact us using the details below. We take all privacy enquiries seriously and will respond promptly and in English.

If you are not satisfied with 333g's handling of your personal data or with our response to a data rights request, you have the right to escalate your complaint through such further processes as are available under applicable law. We strongly encourage you to contact us directly in the first instance so that we have the opportunity to address your concern before any escalation becomes necessary.

333g is an online entertainment platform serving players aged 21 and above across Bangladesh. This Privacy Policy was last reviewed and updated on 1 January 2026.