Privacy Policy — How 3333p Handles Your Personal Data

1 Introduction and Scope

This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data by 3333p ("we", "us", "our") in connection with the operation of the online betting and casino platform accessible at https://3333p.io (the "Platform"). It applies to all individuals who visit, register on, or interact with any part of the Platform, whether via desktop browser, mobile browser, or any other supported access method.

3333p is committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only the data we genuinely need, retain it only for as long as necessary, and take all reasonable technical and organisational steps to keep it secure.

By registering for an account or continuing to use the Platform after this policy has been published or updated, you acknowledge that you have read and understood how your personal data is processed. If you do not agree with any aspect of this Privacy Policy, you should discontinue use of the Platform and contact us at [email protected] to arrange closure of your account.

This policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and 3333p, and our Responsible Gaming policy, which outlines the tools available to help you manage your gaming activity safely.

2 Data Controller Information

For the purposes of this Privacy Policy, 3333p acts as the data controller in respect of the personal data collected through the Platform. As data controller, 3333p determines the purposes and means by which your personal data is processed.

All data protection enquiries, subject access requests, and complaints relating to the handling of your personal data should be directed to our support team:

When contacting us about a data protection matter, please include your registered username and a clear description of your request so that we can locate your records efficiently and respond within the applicable timeframe.

3 Personal Data We Collect

The categories of personal data that 3333p collects, stores, and processes in connection with the operation of the Platform are set out in the table below. We collect only the data that is strictly necessary for the stated purpose.

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless you voluntarily disclose such information in the course of a support communication. Where such data is inadvertently received, it is not stored separately and is handled with the highest level of confidentiality.

4 How We Collect Your Data

3333p collects personal data through the following channels and mechanisms:

• Direct Submission: Data you actively provide when completing the registration form, updating your account profile, submitting identity verification documents, initiating a deposit or withdrawal, or contacting the support team via email.
• Automated Technical Collection: Data collected automatically through server logs, session management systems, and browser-based technologies including cookies and local storage. This includes your IP address, device identifiers, and navigation patterns each time you access the Platform.
• Payment Processing Partners: When you initiate a transaction via bKash, Nagad, Rocket, or Upay, the relevant payment provider transmits a transaction reference and confirmation status to 3333p. We receive only the data necessary to match your payment to your account; we do not receive your full mobile banking PIN or password.
• Third-Party Game Providers: Game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may generate gameplay logs that are transmitted to 3333p for the purpose of calculating and settling game results, auditing fairness, and resolving disputes. These logs contain your account identifier and game outcome data but do not contain financial account credentials.
• Identity Verification Services: Where 3333p uses a third-party identity verification provider to cross-reference the documents you submit during KYC, that provider may confirm or flag discrepancies in the data you have provided. 3333p does not receive raw data from these services beyond a verification pass or fail status and any flagged discrepancy details.

5 Purposes and Legal Basis for Processing

All personal data processed by 3333p is processed for a clearly defined purpose and on a recognised legal basis. The table below maps each processing activity to its purpose and legal justification:

Where processing is based on your consent — particularly in the case of marketing communications — you have the right to withdraw that consent at any time by contacting [email protected] or updating your communication preferences within your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6 Cookies and Tracking Technologies

3333p uses cookies and similar browser-based technologies to ensure the Platform functions correctly, to maintain your session while you are logged in, and to gather aggregated analytics data that helps us improve the overall user experience.

The categories of cookies used on the Platform are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to operate. They maintain your authenticated session, preserve your game state between page loads, and store security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These cookies remember your preferences such as your preferred display language, any responsible gaming settings you have activated, and recent activity within the games lobby. They improve your experience but are not strictly required for the Platform to function.
• Analytics Cookies: We use aggregated analytics tools to understand how players navigate the Platform — which pages are most visited, where users drop off, and how long sessions typically last. Analytics data is collected in anonymised or pseudonymised form and is not used to identify individual players.
• Security Cookies: Short-lived cookies used to detect unusual login patterns, enforce brute-force login protection, and flag sessions that appear to originate from known malicious IP ranges.

You may control cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a per-site basis. Please note that blocking strictly necessary cookies will prevent you from logging in and using real-money features of the Platform. Blocking functional or analytics cookies will not prevent you from using the Platform but may affect personalisation features.

3333p does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies that follow you outside the 3333p Platform domain.

7 Data Sharing and Third Parties

3333p does not sell your personal data to any third party under any circumstances. We share personal data with external parties only where it is strictly necessary to operate the Platform, comply with a legal obligation, or protect the legitimate interests of 3333p and its player community. The categories of recipients with whom data may be shared are:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners receive only the transaction data required to process deposits and withdrawals. These providers process data under their own privacy policies and data security standards.
• Game Content Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi, and other licensed game studios receive your account session identifier and bet data to the extent necessary to deliver game content and settle results. They do not receive your full personal profile or financial account details.
• Identity Verification and KYC Providers: Third-party KYC service providers may receive copies of your identity documents and personal details solely for the purpose of age and identity verification. These providers operate under strict data processing agreements with 3333p.
• IT Infrastructure and Security Providers: Cloud hosting, content delivery, database management, and cybersecurity service providers may have technical access to Platform data in the course of providing infrastructure services. All such providers are contractually bound to process data only under 3333p's instructions and to maintain appropriate security standards.
• Legal and Regulatory Authorities: 3333p may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by a valid legal demand, court order, or statutory obligation. We will notify you of such disclosures where we are legally permitted to do so.

8 Data Retention

3333p retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or legitimate business need. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is either permanently deleted from active systems or rendered irreversibly anonymous so that it can no longer be attributed to an identifiable individual. Data stored in backup systems is purged during the next scheduled backup rotation cycle following the expiry of the retention period.

9 Data Security

3333p implements a layered approach to data security that combines technical controls, organisational procedures, and ongoing staff training to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. The principal security measures in place include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser and the 3333p Platform is encrypted using industry-standard TLS protocols. The padlock icon visible in your browser address bar confirms that your connection is encrypted at all times during a session.
• Password Hashing: Account passwords are never stored in plain text. They are processed through a one-way cryptographic hashing algorithm with a unique salt, meaning that even if our database were compromised, stored passwords could not be reversed into their original form.
• Access Controls: Access to production databases and systems containing personal data is restricted on a strict need-to-know basis. Internal team members access only the data required to perform their specific role. All access events are logged and periodically reviewed.
• Brute Force and Anomaly Detection: Automated systems monitor login attempts and flag accounts showing signs of credential stuffing or brute force attacks. Affected accounts are temporarily locked and the registered account holder is notified.
• Data Segmentation: Financial data, identity documents, and gameplay logs are stored in separate, independently secured data stores rather than a single unified database. This limits the exposure of sensitive data in the event of a partial system breach.
• Incident Response: 3333p maintains a documented data breach response procedure. In the event of a confirmed breach involving personal data, affected players will be notified at their registered email address as promptly as practicable, along with details of the nature of the breach and the remediation steps taken.

While 3333p takes all reasonable precautions to protect your personal data, no internet-based platform can guarantee absolute security. You also have a role to play: keeping your account password confidential, using a strong and unique password, and notifying us immediately at [email protected] if you suspect your account has been accessed by an unauthorised party.

10 Your Rights as a Data Subject

As an individual whose personal data is processed by 3333p, you hold the following rights in relation to that data. These rights are subject to applicable legal limitations and verification of your identity before any action is taken:

• Right of Access: You may request a copy of all personal data that 3333p holds about you. We will provide a structured summary of your data in a clear and readable format within a reasonable timeframe following a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor profile details such as your contact number or email address can be updated directly within your account settings. More significant corrections — such as a name change — may require supporting documentation.
• Right to Erasure ("Right to Be Forgotten"): You may request that 3333p delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interest. This right is not absolute — it does not apply where retention is required by law (for example, financial records subject to anti-money laundering retention obligations).
• Right to Restriction of Processing: You may request that 3333p restrict the processing of your data in certain circumstances — for example, while a dispute about accuracy is being resolved, or while an objection to processing is being evaluated.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request a copy of your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that it can be transferred to another service provider.
• Right to Object: You may object at any time to the processing of your personal data for marketing purposes or for processing based on legitimate interest. Where you object to marketing communications, we will cease sending them immediately. Where you object to legitimate-interest processing, we will assess whether our interests override your rights in the specific circumstances.
• Right to Withdraw Consent: Where any processing activity is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Subject Request". Include your registered username, the specific right you wish to exercise, and any relevant context. We will acknowledge your request within 48 BST business hours and respond substantively within 30 calendar days.

11 Children and Minors

The 3333p Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. Our registration process includes an age verification step, and we reserve the right to request documentary proof of age from any account holder at any time.

If 3333p discovers or is notified that an account has been created by or on behalf of a person under the age of 21, the account will be immediately suspended, all real-money balances will be frozen pending investigation, and any personal data associated with the minor will be deleted from our systems once the investigation is complete and any applicable legal obligations regarding record-keeping have been satisfied.

If you believe that a minor has registered on the Platform using false age information, or that your own account has been accessed by a person under 21, please contact us immediately at [email protected]. We treat all reports of underage access with the highest urgency.

Parents and guardians are strongly encouraged to use parental control software to restrict access to online betting and gambling websites on devices used by minors in their household. 3333p is not responsible for access by minors who deliberately circumvent age verification using false information, but we take all reasonable technical steps to prevent such access.

12 Changes to This Privacy Policy

3333p reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or material operational changes to the Platform. The effective date at the top of this document will be updated each time a revision is made.

When we make material changes to this policy — such as introducing a new category of data collection, changing our retention periods, or adding a new category of third-party recipients — we will notify registered players by posting a prominent notice on the Platform and, where practicable, by sending a notification to the registered email address on file.

Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement that you have reviewed the updated terms. If you do not agree with any change, you should cease using the Platform and contact [email protected] to request account closure. Closing your account does not affect any data retention obligations that 3333p holds under applicable law.

We recommend that you review this Privacy Policy periodically, particularly before making a significant deposit or initiating a withdrawal, to ensure you remain comfortable with how your data is handled.

13 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or have a concern about how your personal data has been handled, please contact the 3333p data protection team using the details below. All communications regarding data protection should be sent in English and clearly marked with the subject "Data Protection Enquiry" or "Privacy Complaint" to ensure prompt routing to the appropriate team member.

Our support team is available around the clock and aims to respond to all data protection enquiries within 2 hours during peak Bangladesh Standard Time (BST, UTC+6) hours, and within 24 hours at all other times. Formal complaints are acknowledged within 48 BST business hours and resolved within 30 calendar days.

If you are not satisfied with our response to your complaint, you may escalate the matter through any applicable dispute resolution mechanism available in your jurisdiction. 3333p is committed to resolving all data protection concerns fairly, transparently, and in good faith.