333oj Privacy Policy

1 Introduction

333oj ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every player who registers and plays on our platform. This Privacy Policy has been prepared to give you a clear, transparent account of how your personal information is handled from the moment you visit our website at 333oj.io through the entire lifecycle of your account.

We recognise that our players in Bangladesh trust us with sensitive personal and financial information, and we take that responsibility seriously. Our data practices are designed to be proportionate — we collect only what is necessary, retain it only for as long as required, and protect it with industry-standard security measures at every stage.

This policy applies to all personal data collected through the 333oj website, any mobile-optimised version of the platform, and all associated support, payment, and identity verification channels. It should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated into your agreement with us by reference.

If you have questions about any aspect of this Privacy Policy or wish to exercise a data right, please refer to Section 15 (Contact Us) for the appropriate contact procedure.

2 Personal Data We Collect

333oj collects personal data through several channels. The categories of data we collect, and the circumstances in which we collect them, are set out below.

2.1 Registration Data

When you create a 333oj account, we collect the following information directly from you:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (Bangladeshi Taka, BDT / ৳)

2.2 Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and age verification policy, we may request the following documents at any stage of your account lifecycle:

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of residential address (utility bill or bank statement dated within three months)
• Proof of payment method ownership (screenshot or statement from your bKash, Nagad, Rocket, Upay, or bank account showing your name and account number)
• Selfie photograph for liveness verification, where required

2.3 Transaction & Financial Data

Every deposit and withdrawal you make on the 333oj platform generates a transaction record. We retain the following financial data:

• Payment method type and masked account identifier (e.g., bKash number ending in ****)
• Transaction amounts in BDT (৳)
• Transaction timestamps and reference numbers
• Bonus and promotional credits applied to your account
• Withdrawal request history and approval status

2.4 Gameplay & Betting Data

Your activity on the 333oj platform generates a detailed gameplay record, which is used for dispute resolution, bonus wagering verification, and responsible gaming monitoring:

• Games played, bet amounts, and outcomes
• Sports betting market selections and stakes
• Session duration and login timestamps
• Active bonus and wagering progress
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)

2.5 Technical & Device Data

When you access the 333oj platform, our servers and analytics tools automatically collect certain technical data:

• IP address and approximate geographic location (city/region level)
• Device type, operating system, and browser version
• Referring URL and on-site navigation path
• Cookie identifiers and session tokens (see Section 6)
• Time zone (Bangladesh Standard Time, UTC+6)

2.6 Customer Support Communications

When you contact our support team by email, live chat, or any other channel, we retain a record of that communication, including the content of messages, attachments shared, and the resolution outcome. This data is used to manage your query and to improve our support quality.

3 How We Use Your Personal Data

333oj uses the personal data we collect for the following specific purposes. We process data only where we have a valid legal basis to do so (see Section 4).

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, KYC data	Contract performance
Age and identity verification (21+ policy)	Date of birth, KYC documents	Legal obligation
Processing deposits and withdrawals	Financial data, KYC data	Contract performance
Fraud prevention and AML compliance	All categories	Legal obligation / Legitimate interest
Responsible gaming monitoring	Gameplay data, account settings	Legal obligation / Legitimate interest
Dispute resolution and game audit	Gameplay data, transaction data	Contract performance / Legitimate interest
Promotional communications (opted-in)	Email, phone number	Consent
Platform analytics and improvement	Technical data, gameplay data	Legitimate interest
Customer support	All relevant categories	Contract performance
Legal and regulatory compliance	All categories as required	Legal obligation

4 Legal Basis for Processing

333oj processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing is necessary to fulfil our contractual obligations to you as a registered player — including operating your account, processing transactions, and delivering the gaming services you have requested.
• Legal obligation: Processing is required to comply with applicable laws — including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate interest: Processing is necessary for our legitimate business interests — including fraud detection, platform security, analytics, and responsible gaming monitoring — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent as the legal basis (primarily for direct marketing communications), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

5 Data Sharing & Disclosure

333oj does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share your data only in the following limited circumstances:

5.1 Service Providers

We engage carefully selected third-party service providers who process personal data on our behalf to support platform operations. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card networks (Visa, Mastercard) to facilitate deposits and withdrawals. Payment data shared with processors is subject to their own PCI-DSS compliant privacy frameworks.
• KYC and identity verification providers: Specialist verification services that check identity documents and screen names against sanctions and PEP (Politically Exposed Person) lists.
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed providers receive the minimum gameplay session data required to deliver their games (e.g., session token, bet amount, currency). They do not receive your full registration profile.
• Cloud hosting and infrastructure: Server and database infrastructure providers operating in secure data centres. All infrastructure providers are bound by confidentiality and data processing agreements.
• Customer support platforms: Ticketing and live-chat software providers that store support conversation records.

All service providers are required to process data only on our documented instructions, to implement appropriate technical and organisational security measures, and to delete or return data upon termination of the service relationship.

5.2 Legal and Regulatory Disclosure

333oj may disclose your personal data to law enforcement agencies, regulators, courts, or other public authorities where we are required to do so by applicable law, by a valid legal order, or where disclosure is necessary to prevent, detect, or prosecute financial crime. We will notify you of such disclosures where we are legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the 333oj business, personal data held by us may be transferred to the acquiring entity as part of that transaction. We will notify registered players by email prior to any such transfer and will ensure that the acquiring entity is bound to honour the commitments made in this Privacy Policy.

6 Cookies & Tracking Technologies

333oj uses cookies and similar tracking technologies to operate the platform, maintain session integrity, remember your preferences, and analyse how players use our services. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without impacting platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred payment method display, and responsible gaming tool configurations. Disabling these cookies will not prevent you from using the platform but may reduce convenience.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the platform — pages visited, time on site, entry and exit points. This data is used to improve platform performance and user experience. No individual player is identifiable from analytics data.
• Security cookies: Support fraud detection and account protection features, including device fingerprinting for multi-account detection and suspicious login alerts.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent login and normal platform use. 333oj does not use third-party advertising cookies or retargeting pixels.

7 Data Retention

333oj retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to longer retention where required by legal or regulatory obligations. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of your account registration plus a minimum of five years following account closure, to comply with anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Gameplay logs: Retained for a minimum of two years from the date of each game session, and for longer periods where a dispute is outstanding.
• Customer support records: Retained for two years from the date of the final communication in each support case.
• Marketing consent records: Retained for the duration of your consent plus two years following withdrawal, to demonstrate compliance with our consent obligations.

When personal data is no longer required, it is securely deleted or irreversibly anonymised. Anonymised, aggregated data (which cannot be linked back to any individual) may be retained indefinitely for statistical and business analytics purposes.

8 Data Security

333oj implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and the 333oj platform is protected by industry-standard SSL/TLS encryption (minimum TLS 1.2).
• Encryption at rest: Sensitive personal data — including identity documents, payment details, and password hashes — is encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, and all access is logged and audited.
• Password security: Passwords are hashed using a strong one-way hashing algorithm (bcrypt or equivalent). We never store passwords in plain text and cannot retrieve your password — only reset it.
• Fraud and intrusion monitoring: Automated systems monitor platform activity 24 hours a day for anomalous behaviour indicative of account takeover, credential stuffing, or other security threats.
• Penetration testing: The 333oj platform undergoes periodic independent security assessments to identify and remediate vulnerabilities.

9 International Data Transfers

333oj operates as an offshore platform. As a result, personal data collected from players in Bangladesh may be transferred to, stored in, and processed in countries or jurisdictions outside Bangladesh. These jurisdictions may not have data protection laws equivalent to those in your home country.

Where personal data is transferred internationally — for example, to cloud infrastructure providers or game studio partners operating in other jurisdictions — 333oj ensures that appropriate safeguards are in place to protect the data. These safeguards include contractual data processing agreements requiring the recipient to implement security standards equivalent to those described in this Privacy Policy.

By registering an account on 333oj, you acknowledge and consent to the transfer of your personal data to countries outside Bangladesh for the purposes described in this Privacy Policy. If you have concerns about international data transfers, please contact us at the address in Section 15.

10 Children & Minors

The 333oj platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Our registration process includes mandatory date-of-birth verification, and accounts that cannot be verified as belonging to a person aged 21 or older will be refused or closed.

If we become aware that personal data belonging to a person under the age of 21 has been submitted to us — whether through a misrepresentation during registration or any other means — we will take immediate steps to close the account, delete the data, and return any deposited funds to the originating payment source after verifying ownership.

If you are a parent or guardian and believe that a minor in your care has registered an account on 333oj, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11 Exercising Your Data Rights

333oj respects your right to control your own personal data. The six rights summarised in the feature cards at the top of this page are elaborated here with the procedural detail you need to exercise them effectively.

11.1 How to Submit a Data Rights Request

To exercise any of the data rights described in this policy, please send a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". Include in your message: your registered email address, your username, the specific right you wish to exercise, and a brief description of the data or processing activity concerned.

11.2 Identity Verification for Data Requests

To protect your personal data from unauthorised access or deletion, 333oj will verify your identity before processing any data rights request. We may ask you to confirm details already on your account or to provide a copy of an identity document. We will not process a data rights request from an unverified requester.

11.3 Response Timescales

We aim to acknowledge all data rights requests within 5 business days and to provide a substantive response within 30 calendar days. Where a request is complex or voluminous, we may extend the response period by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.

11.4 Limitations on Data Erasure

The right to erasure is not absolute. 333oj is legally required to retain certain categories of data — particularly financial transaction records and KYC documentation — for a minimum of five years under anti-money laundering obligations. Where erasure of specific data is not possible due to a legal retention requirement, we will inform you of this and explain the basis for continued retention.

12 Marketing Preferences

333oj may send you promotional communications — including bonus offers, tournament announcements, and seasonal promotions tied to Bangladeshi events such as Eid, Pohela Boishakh, BPL, and the T20 World Cup — where you have opted in to receive such communications during registration or via your account settings.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email you receive from us;
• Updating your communication preferences in your account settings;
• Contacting our support team at [email protected] and requesting removal from our marketing list.

Opting out of marketing communications will not affect transactional communications — we will continue to send you account-related messages such as deposit confirmations, withdrawal notifications, identity verification requests, and security alerts, as these are necessary for the operation of your account.

Self-excluded players are automatically removed from all marketing lists and will not receive promotional communications for the duration of their self-exclusion period. This is a firm commitment, not an opt-in preference.

13 Third-Party Links

The 333oj platform may contain links to game studio websites, payment provider information pages, or other third-party resources. This Privacy Policy applies solely to data collected and processed by 333oj through the 333oj.io platform. When you follow a link to a third-party website, that website's own privacy policy governs the collection and use of your data.

333oj is not responsible for the privacy practices of third-party websites and does not endorse or make any representations about their data handling. We encourage you to review the privacy policy of any third-party website you visit before submitting personal data to it.

14 Updates to This Privacy Policy

333oj reserves the right to update or revise this Privacy Policy at any time. The most current version will always be accessible at 333oj.io/privacy-policy, with the effective date prominently displayed at the top of the document.

Where changes are material — for example, changes to the categories of data we collect, the third parties we share data with, or the legal basis for processing — we will provide advance notice by email to your registered address at least 14 days before the changes take effect. Continued use of the platform after the effective date of a revised policy constitutes your acceptance of the updated terms.

We recommend reviewing this Privacy Policy periodically to stay informed about how 333oj protects your personal data. If you have questions about any change to this policy, please contact us using the details in Section 15 before the change takes effect.

15 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or to the way 333oj handles your personal data, please contact us through the following channel:

• Email: [email protected]
• Subject line for data requests: "Data Rights Request — [Your Username]"
• Subject line for privacy concerns: "Privacy Concern — [Brief Description]"
• Support hours: 24 hours a day, 7 days a week
• Response time: Within 5 business days for acknowledgement; within 30 days for substantive response
• Language: English

For questions about responsible gaming, self-exclusion, or gambling-related support, please visit our dedicated Responsible Gaming page, which contains guidance and resources specific to players in Bangladesh.

For questions about account management, deposits and withdrawals, or bonus terms, please refer to our FAQ page or contact our support team directly.