333pk Privacy Policy

1 Who We Are

333pk is an online betting and casino entertainment platform operating at https://333pk.io and all associated mobile and web interfaces (collectively, the "Platform"). References to "333pk", "we", "us", or "our" in this Privacy Policy refer to the operator of the 333pk Platform.

333pk serves the Bangladesh market, with the majority of its player base located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. All Platform operations and customer communications are conducted in English and denominated in Bangladeshi Taka (BDT / ৳).

For all data protection enquiries, you may contact our support team via live chat on the Platform or by email. The contact email address is set out in Section 16 of this Policy and is provided as plain text only.

2 Scope of This Policy

This Privacy Policy applies to all personal data collected by 333pk in connection with:

• The registration and management of player accounts on the Platform;
• The use of any 333pk betting, gaming, casino, or live dealer service;
• Deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard;
• Customer support interactions conducted via live chat or email;
• Marketing and promotional communications sent to players who have provided consent;
• Browsing and technical usage data generated while navigating the Platform.

This Policy does not apply to any third-party websites or services that may be accessible via links from the 333pk Platform. Those third parties operate their own independent privacy policies for which 333pk bears no responsibility.

3 Data We Collect

333pk collects personal data across the following categories. A full summary with specific data points and processing purposes is provided in the data table earlier on this page.

3.1 Identity Data

We collect your full legal name, date of birth, and government-issued identification details (National Identity Card number, passport number, or birth certificate reference) for the purpose of account registration and mandatory identity verification (KYC). This data is required to comply with our age verification obligations — all players must be aged 21 or above.

3.2 Contact Data

We collect your mobile phone number (which may be your bKash or Nagad-linked number), email address, and residential address within Bangladesh. This data is used to communicate account-related information, process withdrawal confirmations, and respond to support requests.

3.3 Financial Data

We collect payment method details necessary to process deposits and withdrawals. For mobile financial services such as bKash, Nagad, Rocket, and Upay, this includes your registered wallet number. For bank transfers, this includes your account number and branch details. For card payments, we collect only the last four digits of your card number — full card numbers are not stored by 333pk.

3.4 Transaction and Betting Data

We maintain records of all financial transactions (deposits and withdrawals) and all betting and gaming activity on your Account. This includes bet amounts, game types, outcomes, bonus usage, and session duration. This data is necessary for account management, dispute resolution, responsible gaming monitoring, and regulatory record-keeping.

3.5 Technical and Device Data

When you access the Platform, we automatically collect technical information including your IP address, device identifier, browser type and version, operating system, screen resolution, time zone (Bangladesh Standard Time, UTC+6), and session logs. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3.6 Usage and Behavioural Data

We collect anonymised or pseudonymised data about how you interact with the Platform, including which pages you visit, which games you browse (cricket betting, slots, live dealer, crash games), and how long you spend in each section. This data informs our product development and allows us to personalise your experience on the Platform.

4 How We Collect Data

333pk collects personal data through the following channels:

• Directly from you: When you complete the account registration form, submit KYC documentation, make a deposit or withdrawal request, contact our support team, or update your account profile, you provide data directly to 333pk.
• Automatically: When you browse or use the Platform, technical and usage data is collected automatically through server logs, session tracking, and analytics tools.
• From payment processors: When you make a deposit or withdrawal, our payment processing partners (including bKash, Nagad, and bank partners) transmit limited transaction confirmation data to 333pk to reconcile your account balance.
• From identity verification services: Where we use third-party KYC verification tools to cross-reference the identity documents you submit, those tools may return a verification result to 333pk. The original document images are handled in accordance with the data retention rules in Section 10.
• From cookies and tracking technologies: As described in Section 8 of this Policy, certain data is collected via cookies and similar technologies when you visit the Platform.

5 Legal Bases for Processing

333pk processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Performance of a contract: Processing that is necessary to register your account, verify your identity, process deposits and withdrawals, and deliver the betting and gaming services you have requested. Without this processing, 333pk cannot provide the services.
• Legal obligation: Processing that is required to comply with applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, financial record-keeping obligations, and any lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out to protect the security and integrity of the Platform, detect and prevent fraud, improve our services, and manage the business relationship with players — provided those legitimate interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing purposes, including sending promotional offers related to BPL, IPL, T20 World Cup, Eid, and Pohela Boishakh campaigns, where you have given explicit consent. You may withdraw this consent at any time as described in Section 12.

6 How We Use Your Data

333pk uses the personal data it collects for the following specific purposes:

• To register, maintain, and administer your player Account;
• To verify your identity and age (21+) in accordance with our KYC obligations;
• To process deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card payment methods;
• To process withdrawal requests and remit funds to your registered payment method;
• To detect, investigate, and prevent fraudulent transactions and prohibited conduct on the Platform;
• To comply with anti-money laundering obligations and to report suspicious activity where required by law;
• To provide customer support via live chat and email;
• To send transactional notifications such as deposit confirmations, withdrawal updates, and account security alerts;
• To send promotional and marketing communications where you have consented to receive them;
• To monitor compliance with our Responsible Gaming Policy and to administer self-exclusion, deposit limits, and cooling-off periods where requested;
• To improve the Platform's features, performance, and content based on aggregated usage data;
• To enforce the 333pk Terms & Conditions and other applicable platform policies.

7 Sharing Your Data

333pk does not sell, rent, or transfer your personal data to third parties for their own commercial use. We share your data only in the following limited and controlled circumstances:

• Payment processing partners: Your financial data (wallet numbers, bank details, transaction references) is shared with bKash, Nagad, Rocket, Upay, and banking partners solely to process the deposit or withdrawal transaction you have initiated. These partners act as data processors and are bound by their own data protection obligations.
• Identity verification providers: Where KYC verification is carried out with the assistance of a third-party identity verification service, your submitted identity documents and personal details are shared with that service for the sole purpose of completing the verification check.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical session data (such as player ID and game session token) required to deliver their game content on the 333pk Platform. They do not receive your full identity or financial data.
• Legal and regulatory authorities: 333pk may disclose your data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Business successors: In the event of a merger, acquisition, or transfer of all or part of the 333pk business, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer in advance.

8 Cookies & Tracking Technologies

333pk uses cookies and similar tracking technologies on the Platform to support core functionality, security, and analytics. The following categories of cookies may be set when you access the Platform:

• Essential cookies: Strictly necessary for the Platform to function. These include session authentication cookies that keep you logged in to your Account, security cookies that detect malicious activity, and load-balancing cookies. These cannot be disabled without rendering the Platform inoperable.
• Functional cookies: Remember your preferences such as language settings and last-used payment method to improve your experience on return visits to the Platform.
• Analytics cookies: Collect anonymised data about how visitors use the Platform, including which pages are most visited and where users navigate from. This data is used in aggregate to improve Platform design and content. 333pk uses privacy-respecting analytics tools that do not share data with third-party advertisers.
• Security cookies: Help 333pk identify and investigate suspicious login patterns, unusual transaction behaviour, and potential account compromises. These are a core component of the Platform's fraud detection infrastructure.

You may manage cookie preferences via your browser settings. Blocking essential cookies will prevent you from logging in to your Account and using core Platform features. Blocking analytics or functional cookies will not prevent access but may affect the quality of your experience.

333pk does not use third-party advertising cookies or tracking pixels that transmit your data to external advertising networks.

9 Data Security

333pk implements a layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Encryption in transit: All data transmitted between your device and the 333pk Platform is encrypted using TLS 1.2 or higher (HTTPS). This protects your login credentials, payment details, and personal information from interception in transit.
• Encryption at rest: Sensitive data stored in 333pk's databases — including identity documents, payment details, and account credentials — is encrypted at rest using AES-256 or equivalent encryption.
• Access controls: Access to systems containing personal data is restricted to authorised 333pk personnel only, on a strict need-to-know basis. Access is authenticated using multi-factor authentication and is subject to regular access reviews.
• Intrusion detection: The Platform operates continuous security monitoring, automated anomaly detection, and intrusion prevention systems to identify and respond to threats in real time.
• Password hashing: Player account passwords are never stored in plain text. They are stored as irreversible cryptographic hashes using industry-standard hashing algorithms.
• Security testing: 333pk conducts periodic security assessments to identify and remediate vulnerabilities in the Platform's infrastructure and application layer.

10 Data Retention

333pk retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active Account relationship with 333pk, and for a further period of up to 7 years following Account closure, in accordance with financial record-keeping and AML compliance requirements.
• Transaction and betting records: Retained for a minimum of 5 years following the date of the transaction or bet, as required for financial audit and dispute resolution purposes.
• KYC documents (copies of NID, passport, etc.): Retained for the duration of the active Account relationship and for a further period as required by applicable regulatory obligations following Account closure. Document copies are stored in encrypted form and access is tightly restricted.
• Support communications: Live chat transcripts and email correspondence are retained for up to 3 years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Technical and device data: IP address logs and session data are retained for up to 12 months, after which they are either deleted or anonymised so they can no longer be linked to your Account.
• Marketing preference data: Consent records and marketing preference flags are retained for as long as your Account is active and for a reasonable period thereafter, to demonstrate compliance with consent obligations.

When personal data reaches the end of its applicable retention period and no legal obligation requires its continued storage, 333pk will securely delete or irreversibly anonymise that data so that it can no longer be attributed to any identifiable individual.

If you request deletion of your personal data under Section 11 of this Policy, 333pk will action that request promptly, subject to any overriding legal retention obligations that require us to retain certain records for a defined minimum period.

11 Your Rights

As a player whose personal data is processed by 333pk, you hold the following rights in relation to that data. A summary of these rights is also presented in visual card format earlier on this page.

• Right of Access (Subject Access Request): You may request a copy of the personal data 333pk holds about you. We will respond to verified Subject Access Requests within 30 days of receipt. The response will include the categories of data held, the purposes for which it is processed, and details of any third parties with whom it has been shared.
• Right of Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain Account details directly through your Account profile settings; for identity data corrections, please contact support.
• Right of Erasure ("Right to be Forgotten"): You may request deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) the data has been unlawfully processed. This right is subject to overriding legal retention obligations.
• Right to Restriction of Processing: You may request that 333pk restricts the processing of your data where you contest its accuracy, where processing is unlawful but you prefer restriction over deletion, or where you have objected to processing and a determination is pending.
• Right to Data Portability: You may request that 333pk provides your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) suitable for transfer to another service provider, where processing is based on consent or contract.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, in which case 333pk will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of the rights listed above, please contact 333pk's support team via live chat on the Platform or by email at [email protected] (plain text — not a clickable link). We may ask you to verify your identity before acting on any request, to protect your data from unauthorised access by a third party.

333pk will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

12 Marketing Communications

333pk may send you promotional and marketing communications relating to bonuses, seasonal offers, cricket betting promotions (BPL, IPL, T20 World Cup, Bangladesh Tigers matches), Eid and Pohela Boishakh campaigns, and other Platform promotions — but only where you have explicitly consented to receive such communications at the time of Account registration or at a subsequent point via your Account preferences.

Marketing communications may be delivered via email or SMS to the contact details registered on your Account. The frequency of marketing messages will be reasonable and proportionate, and every marketing message will include a clear and functional opt-out mechanism.

To opt out of marketing communications at any time, you may:

• Click the unsubscribe link included in any marketing email;
• Update your communication preferences within your Account settings;
• Contact our support team via live chat or at [email protected] and request removal from marketing lists.

Opting out of marketing communications will not affect your ability to receive transactional and account-related notifications, which are sent on the basis of contract performance rather than consent and cannot be disabled while your Account is active.

13 Children & Minors

The 333pk Platform is strictly intended for adults aged 21 and above. 333pk does not knowingly collect, store, or process personal data from any individual under the age of 21. All Account registrations require age verification as part of the KYC process.

If you are a parent or guardian and you believe that a minor in your care has registered an Account on 333pk without your knowledge, please contact our support team immediately via live chat or at [email protected] so that we can take prompt action. We take the protection of minors with the utmost seriousness.

14 Third-Party Links

The 333pk Platform may contain references to or integrations with third-party services — including game content provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — which operate under their own independent privacy policies. 333pk has no control over, and accepts no responsibility for, the privacy practices of any third-party service.

If you navigate away from the 333pk Platform to any third-party website or application, you do so at your own risk and subject to that third party's terms and privacy policy. We encourage you to review the privacy policy of any external service before providing your personal data to it.

The inclusion of game content from a third-party studio on the 333pk Platform does not constitute an endorsement of that studio's privacy practices or a warranty that their data handling meets any particular standard.

15 Changes to This Policy

333pk reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law or regulation, changes in our data processing practices, improvements to Platform features, or changes in the structure of our business operations.

When material changes are made to this Policy, 333pk will notify active players via a notice on the Platform and, where appropriate, by email to the address registered on the Account. The "Effective Date" shown at the top of this Policy will be updated to reflect the date on which the revised version takes effect.

Your continued use of the 333pk Platform following notification of any changes to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any change, you should cease using the Platform and contact our support team to discuss your Account options.

Previous versions of this Privacy Policy may be obtained by contacting [email protected]. We recommend that you review this Policy periodically to stay informed of how 333pk handles your personal data.

16 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how 333pk has handled your personal data, please contact us using the details below.

Email (plain text — not a link):
[email protected]

Live Chat: Available 24/7 directly on the 333pk Platform, Bangladesh Standard Time (UTC+6).

333pk will acknowledge your complaint or enquiry within 5 business days and will aim to provide a substantive response or resolution within 30 calendar days. If the matter is complex, we will keep you informed of progress throughout the process.

333pk takes all privacy complaints seriously. Our support and data protection teams will investigate every complaint thoroughly and fairly, and will take corrective action where a breach of this Policy or applicable data protection standards is identified.