3d33 Privacy Policy — Your Data, Protected

1 Information We Collect

When you register for, access, or use the 3d33 Platform, we collect certain categories of personal information about you. The categories of data we collect and the circumstances in which they are collected are set out below.

1.1 Information You Provide Directly

When you create a 3d33 account or interact with our services, you voluntarily provide us with personal information including but not limited to:

• Identity data: Full legal name, date of birth, gender, and national identification details as required for KYC verification.
• Contact data: Mobile phone number, email address, and residential address (including city, district, and postal area within Bangladesh).
• Account credentials: Username and encrypted password. We never store passwords in plain text.
• Payment data: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) used for deposits and withdrawals. We do not store full payment credentials — only the reference identifiers necessary to process and reconcile transactions.
• Verification documents: Copies of government-issued identity documents (National ID, passport, or driver's licence) submitted during KYC review.
• Communications: Records of messages you send to our support team via email or in-platform chat, including the content and timestamps of those communications.

1.2 Information Collected Automatically

In addition to information you provide directly, we automatically collect certain technical and behavioural data when you access the Platform:

• Device data: Device type, operating system version, browser type and version, screen resolution, and language settings.
• Network data: IP address, internet service provider, and approximate geographic location derived from your IP address.
• Usage data: Pages visited, features used, game sessions played, bets placed, session duration, click paths, and error logs.
• Transaction data: A complete record of all deposits, withdrawals, bonus claims, wagers, and game results associated with your account.
• Cookie and tracking data: Information collected via cookies, local storage, and similar technologies as described in Section 4 of this Policy.

2 How We Use Your Information

3d33 processes your personal data only for clearly defined, legitimate purposes. We do not use your data for any purpose that conflicts with those described in this Policy without first obtaining your consent. The primary purposes for which we use your data are as follows:

Where we rely on your consent as the legal basis for processing (for example, sending you promotional offers or daily bonus notifications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

3d33 may use aggregated, anonymised data derived from player activity — from which no individual can be identified — for statistical analysis, product development, and market research. This aggregated data is not subject to the same restrictions as personal data under this Policy.

3 Sharing & Disclosure of Data

3d33 does not sell, rent, or trade your personal data to any third party. We may, however, share your data with a limited set of trusted partners and service providers who assist in the delivery of our Platform and services. All such parties are contractually bound to handle your data in accordance with applicable privacy standards and may only use it for the specific purpose for which it was shared.

Categories of third parties with whom your data may be shared include:

• KYC and identity verification providers: Third-party services used to verify your identity, confirm your age, and screen against sanctions and politically exposed persons (PEP) lists as required for compliance purposes.
• Payment processing partners: Mobile financial service providers including bKash, Nagad, Rocket, and Upay require certain transactional data to process deposits and withdrawals to and from your 3d33 account.
• Game content providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level data (e.g., player ID, stake amounts, game results) necessary to operate their games within the Platform. These providers operate under their own data protection frameworks.
• IT infrastructure and security providers: Cloud hosting providers, content delivery networks, and cybersecurity services that support the technical operation of the Platform.
• Legal and regulatory authorities: We may disclose personal data to law enforcement, regulatory bodies, or judicial authorities where required by applicable law, court order, or to protect the legal rights and safety of 3d33, its employees, or other players.

4 Cookies & Tracking Technologies

The 3d33 Platform uses cookies and similar technologies (such as local storage and session tokens) to ensure the Platform functions correctly, to remember your preferences, and to help us understand how players interact with the site so we can improve the overall experience.

The types of cookies we use are:

• Strictly necessary cookies: These cookies are essential for the Platform to operate. They enable core functionality such as maintaining your logged-in session, remembering your account preferences, and securing your connection. These cookies cannot be disabled without impairing the basic functionality of the Platform.
• Performance and analytics cookies: We use these cookies to collect aggregated data about how players navigate and use the Platform — for example, which pages are visited most frequently, where players encounter errors, and how long sessions typically last. This data helps us identify areas for improvement.
• Functional cookies: These cookies remember choices you make on the Platform — such as your preferred language, display settings, or recently played games — so you do not need to re-enter them on each visit.
• Targeting and personalisation cookies: With your consent, we may use these cookies to tailor promotional offers, daily bonus notifications, and game recommendations based on your activity and preferences on the Platform.

Managing Your Cookie Preferences

You can control and manage cookies through your web browser settings. Most modern browsers allow you to block, delete, or receive notifications before a cookie is set. Please be aware that disabling certain categories of cookies — particularly strictly necessary cookies — may affect the functionality of the Platform and your ability to access certain features. Instructions for managing cookies are available in the help documentation for all major browsers.

5 Data Retention & Storage

3d33 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account relationship with 3d33 and for a period of five (5) years following account closure, to comply with anti-money laundering recordkeeping obligations.
• Transaction records: Financial transaction data, including deposit and withdrawal history, is retained for a minimum of five (5) years from the date of the transaction.
• KYC documents: Identity verification documents are retained for five (5) years following the end of the business relationship, in accordance with applicable compliance requirements.
• Support communications: Records of support interactions are retained for two (2) years from the date of the last communication unless an ongoing dispute requires longer retention.
• Marketing preferences: Consent records and opt-out preferences are retained for the duration of your account and for one (1) year following account closure.
• Session and usage logs: Technical logs are typically retained for 90 days and then purged, unless required for security investigations or dispute resolution purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where full deletion is not technically feasible (for example, where data is held in encrypted backup archives), we take steps to ensure that data held in such archives is not actively processed until it can be securely deleted.

3d33's primary data infrastructure is hosted on servers that employ physical and logical security controls appropriate to the sensitivity of the data stored. Where data is processed outside Bangladesh, we ensure that equivalent levels of data protection apply through contractual safeguards with the relevant service providers.

6 Your Privacy Rights

As a 3d33 player, you have a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights in a timely and transparent manner. Your rights include:

• Right of access: You have the right to request a copy of the personal data 3d33 holds about you, along with information about how it is being used and to whom it has been disclosed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure ("right to be forgotten"): In certain circumstances, you have the right to request the deletion of your personal data — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis for processing applies. Note that this right is subject to exceptions where continued retention is required by law (e.g., AML recordkeeping obligations).
• Right to restriction of processing: You may request that 3d33 restrict the processing of your personal data in certain situations — for example, while the accuracy of the data is being verified following a rectification request.
• Right to object: Where we process your data on the basis of legitimate interests, you have the right to object to that processing. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 72 hours and aim to respond in full within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it.

7 Data Security Measures

3d33 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:

• SSL/TLS encryption: All data transmitted between your device and the 3d33 Platform is encrypted using current SSL/TLS protocols, ensuring that data cannot be intercepted in transit.
• Password hashing: Account passwords are stored using strong one-way hashing algorithms. We never store passwords in plain text, and our systems are designed to prevent password exposure even in the event of a database compromise.
• Access controls: Access to personal data within 3d33's internal systems is restricted on a strict need-to-know basis. Staff members who require access to personal data for legitimate business purposes are granted only the minimum level of access necessary to perform their role.
• Two-factor authentication: Where available, 3d33 supports additional authentication steps to help protect your account from unauthorised access.
• Regular security audits: Our Platform and underlying infrastructure undergo regular security assessments, penetration testing, and vulnerability scanning to identify and remediate potential weaknesses.
• Incident response: 3d33 maintains a documented data breach response procedure. In the event of a confirmed personal data breach that poses a risk to affected individuals, we will notify impacted players without undue delay and take all reasonable steps to mitigate harm.

While 3d33 takes all reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is entirely risk-free. We encourage all players to take personal responsibility for the security of their account credentials and to report any suspected security incident to [email protected] immediately.

8 Changes to This Policy

3d33 reserves the right to update or revise this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, new product features, or improvements to our security measures.

When material changes are made to this Policy, we will notify registered players by posting a prominent notice on the Platform and, where appropriate, by sending a notification to the email address associated with your account. The "Effective Date" displayed at the top of this page will be updated to reflect the date on which the revised Policy comes into effect.

Your continued use of the 3d33 Platform following notification of changes to this Privacy Policy constitutes your acceptance of those changes. If you do not agree with the revised Policy, you should discontinue use of the Platform and may request closure of your account by contacting [email protected].

We recommend that you review this Privacy Policy periodically to stay informed about how 3d33 handles your personal data. The most current version of this Policy is always available at https://3d33.app/privacy-policy.