333bad Privacy Policy

How 333bad Protects Your Privacy

At 333bad, we take data privacy seriously. As Bangladesh's trusted online casino and sports betting platform, we understand that players share sensitive personal and financial information with us in order to create an account, make deposits via bKash or Nagad, and enjoy the games we offer. We do not take that trust lightly.

This Privacy Policy describes the categories of personal data we collect, the lawful bases on which we process that data, who we share it with, how long we retain it, and the rights you have over your own information. By using the 333bad platform, you confirm that you have read and understood this policy and that you consent to the data practices described within it.

1. Information We Collect

333bad collects personal data in the following categories. The specific data points collected depend on the nature of your interaction with the platform.

1.1 Registration Data

When you create a 333bad account, we collect: your full legal name, date of birth, Bangladeshi mobile phone number, a username chosen by you, and a password (stored in hashed form — never readable by 333bad staff). Providing accurate registration data is a condition of account eligibility. Inaccurate registration data may result in account suspension or the inability to process withdrawals.

1.2 Identity Verification Data

To comply with responsible gaming obligations and to verify that you meet the 21+ age requirement, 333bad may request a copy of a valid identity document — such as a National Identity Card (NID) issued by the Bangladesh Election Commission or a valid passport. Document images are used solely for verification purposes and are handled by our secure verification team. Verified documents are retained for the period required by our data retention policy and then securely deleted.

1.3 Payment and Transaction Data

We collect data related to your deposits and withdrawals, including: the mobile banking number registered to your bKash, Nagad, Rocket, or Upay account; transaction reference numbers; deposit and withdrawal amounts in BDT (৳); and timestamps of each transaction. 333bad does not store full payment credentials. Payment processing is handled via encrypted channels, and 333bad retains only the reference data needed for dispute resolution and compliance purposes.

1.4 Gameplay and Betting Data

We record a log of your gaming and betting activity on the platform. This includes: which games you played (e.g., slots from Pragmatic Play, live casino tables from Evolution Gaming, crash games from Spribe), the amounts staked and won, session durations, and sports betting selections including cricket markets (BPL, IPL, T20 World Cup). This data is used to maintain accurate account records, resolve disputes, enforce bonus terms, and fulfil responsible gaming obligations.

1.5 Technical and Device Data

When you access 333bad, our servers automatically collect certain technical data including: your IP address, device type and model, operating system version, browser type, and session timestamps. This data is used for security monitoring, fraud detection, and platform optimisation. We do not use IP addresses to identify individual users beyond security and fraud-prevention contexts.

1.6 Communications Data

If you contact 333bad's customer support team via email or live chat, we retain a record of that communication including the content of messages and any attachments you send. This data is used to resolve your query, train our support team, and maintain a complaint history in case of escalations.

2. How We Use Your Personal Data

The table below summarises the primary purposes for which 333bad processes personal data and the lawful basis that applies to each purpose.

3. Who We Share Your Data With

3.1 Game Providers

To deliver casino games on the 333bad platform, we share limited gameplay session data with our licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive only the data necessary to authenticate your session and record your game results. All providers are bound by strict data processing agreements and operate their own security-certified infrastructure.

3.2 Payment Partners

When you make a deposit or withdrawal using bKash, Nagad, Rocket, or Upay, transaction data is exchanged with the relevant mobile financial service provider to execute the transfer. 333bad shares only the minimum data required to complete the transaction — typically your registered mobile number and the transaction amount. We do not receive or store your mobile banking PIN or full account credentials.

3.3 Verification Services

Where identity verification is required, 333bad may use a third-party identity verification service to cross-reference the documents you provide against available databases. These services are bound by confidentiality obligations and are prohibited from using your data for any purpose other than the specific verification check.

3.4 Legal and Regulatory Disclosure

333bad may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of 333bad, our players, or the public. In such cases, we will disclose only the minimum data necessary to fulfil the legal requirement.

3.5 Business Transfers

In the event that 333bad undergoes a merger, acquisition, or transfer of substantially all of its assets, player data may be transferred as part of that transaction. In such circumstances, we will notify affected players in advance and ensure that the receiving entity commits to data handling standards at least equivalent to those set out in this policy.

4. Data Retention

333bad retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our responsible gaming obligations. The following retention periods apply as general guidelines:

• Active account data — retained for the full duration that your account remains open and active on 333bad.
• Transaction records — retained for a minimum of 5 years from the date of each transaction to meet financial record-keeping requirements.
• Identity verification documents — retained for up to 5 years from the date of verification or account closure, whichever is later, then securely deleted.
• Customer support communications — retained for 3 years from the date of the last communication in a given support thread.
• Gameplay logs — retained for 3 years from the date of each session for dispute resolution and responsible gaming monitoring purposes.
• Closed account data — following account closure, personal data is anonymised or deleted within 90 days, except where longer retention is required by law or is necessary to resolve an outstanding dispute or complaint.

5. Your Data Rights

As a 333bad player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request. In some cases we may need to verify your identity before processing a data rights request.

• Right of Access: You may request a copy of the personal data 333bad holds about you, including your registration details, transaction history, and gameplay records.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain details — such as your registered mobile number — directly through your account settings.
• Right to Erasure: In certain circumstances you may request that we delete your personal data. This right does not apply where retention is required by law or where an outstanding financial or legal obligation exists between you and 333bad.
• Right to Restrict Processing: You may request that we pause the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to 333bad, to the extent that such portability is technically feasible.
• Right to Withdraw Consent: Where we process your data on the basis of consent — for example, for marketing communications — you may withdraw that consent at any time via your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Object: You may object to the processing of your personal data on the basis of legitimate interest. 333bad will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

6. Data Security Measures

333bad implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and 333bad's servers.
• Bcrypt hashing for all stored account passwords — plain-text passwords are never stored or accessible by any 333bad employee.
• OTP (one-time password) verification via your registered Bangladeshi mobile number for login and sensitive account changes.
• Automatic session timeout after a period of inactivity, protecting accounts on shared devices.
• IP-based anomaly detection that flags and temporarily locks accounts where login activity originates from an unusual location or device.
• Access controls limiting internal staff access to personal data on a strict need-to-know basis, with all access logged for audit purposes.
• Regular security reviews of our platform infrastructure and third-party integrations.

7. Cookies and Similar Technologies

333bad uses a minimal set of cookies to ensure the platform functions correctly. We do not use advertising cookies, third-party tracking pixels, or behavioural profiling technologies.

7.1 Strictly Necessary Cookies

These cookies are essential for the platform to operate. They maintain your logged-in session, store your language and display preferences, and enable security features such as CSRF protection. These cookies cannot be disabled without preventing access to core platform features.

7.2 Performance Cookies

333bad may use anonymised, first-party analytics cookies to understand how players navigate the platform — for example, which game categories are most visited or where users commonly exit during the registration flow. This data is aggregated and cannot be used to identify individual players. You may opt out of performance cookies via your browser settings.

7.3 Managing Cookies

You can control and delete cookies through your browser settings. Most mobile browsers (Chrome on Android, Safari on iOS) provide cookie management options in their privacy settings menus. Please note that disabling strictly necessary cookies will prevent you from remaining logged in to your 333bad account during a session.

8. Protection of Minors

333bad is an adult-only platform. All services are strictly restricted to persons aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that a person under 21 has registered an account or provided personal data to 333bad, we will immediately close the account, delete the associated personal data, and — where applicable — arrange the return of any real-money funds deposited.

If you are a parent or guardian and believe that a minor in your care has registered a 333bad account, please contact us immediately at [email protected] so that we can take appropriate action without delay.

9. Changes to This Privacy Policy

333bad reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Where a material change is made — for example, a new category of data being collected or a new third-party processor being engaged — we will notify registered players via a prominent notice on the platform homepage at least 14 days before the change takes effect.

Minor clarifications or corrections that do not affect the substance of our data practices may be made without advance notice. The "Last updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of 333bad following the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

10. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 333bad holds about you, please contact our support team using the details below. All privacy-related enquiries are handled by our compliance team and treated as confidential.

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week
• Response time: Privacy and data rights requests acknowledged within 3 business days; fully resolved within 30 days
• Subject line: Please use "Privacy Request – [your username]" to ensure your message reaches our compliance team promptly