333be Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") describes how 333be ("the Platform", "we", "us", "our"), the operator of 333be.io, collects, processes, stores, and protects personal data relating to registered players, prospective players, and visitors to the 333be website ("you", "your"). This Policy forms part of the broader legal framework governing your use of 333be and should be read alongside the Terms & Conditions.

By registering an account with 333be or by continuing to use the 333be platform after being notified of this Policy, you acknowledge that you have read and understood how your personal data will be handled. If you do not accept the terms of this Policy, you should not register an account or continue using the platform.

1 Who We Are

333be is an online gambling platform accessible at 333be.io, offering sports betting, live casino games, slots, bingo, blackjack, and related gaming services to players in Bangladesh and other eligible markets. The platform operates under international offshore licensing and maintains its data processing infrastructure in compliance with applicable data protection standards.

For all data protection enquiries, the primary point of contact is the 333be support team. Contact details are provided in Section 13 of this Policy. Where this Policy refers to "333be", it refers to the legal entity operating the 333be platform and all of its sub-domains and associated services.

2 Data We Collect

333be collects personal data through several channels: directly from you at registration and during account use, automatically through the platform's technical systems, and from authorised third parties such as payment processors and identity verification providers. The categories of data we collect are set out below.

Data Category	Examples	When Collected
Identity Data	Full legal name, date of birth, NID / passport number, gender	Registration and KYC verification
Contact Data	Mobile number, email address, residential address (district, division)	Registration and account updates
Financial Data	bKash / Nagad / Rocket / Upay account numbers, transaction records, deposit and withdrawal history	Deposits, withdrawals, and account activity
Technical Data	IP address, device type, browser type, operating system, session timestamps, login history	Automatically on platform access
Usage Data	Pages visited, games played, bet amounts, wagering patterns, session duration	Automatically during active sessions
Communications Data	Live chat transcripts, support emails, complaint records	When you contact 333be support
Verification Documents	Scanned NID / passport / utility bills submitted during KYC	Identity and age verification requests

333be does not knowingly collect special category data (such as biometric data, health data, or data revealing racial or ethnic origin) unless explicitly required for compliance with applicable law and only with your explicit consent where required.

3 How We Use Your Data

333be uses the personal data it collects for the following purposes:

• Account registration and management: To create and maintain your 333be player account, authenticate your identity at login, and manage account settings and preferences.
• Age and identity verification (KYC): To comply with responsible gaming obligations and confirm that players are aged 21 or above before permitting real-money wagering.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other accepted payment methods, and to maintain accurate financial records of all transactions.
• Service delivery: To provide access to sports betting markets, live casino games, slots, bingo, blackjack, and all other platform features you have requested.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, duplicate accounts, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible gaming: To monitor wagering patterns for indicators of potential gambling-related harm and to apply responsible gaming tools such as deposit limits, loss limits, and self-exclusion where appropriate.
• Customer support: To respond to your enquiries, resolve complaints, and maintain records of support interactions for quality assurance purposes.
• Promotional communications: To send you information about bonuses, promotions, and platform updates where you have consented to receive such communications. You may withdraw consent at any time through your account settings.
• Legal and regulatory compliance: To fulfil obligations under applicable law, including anti-money laundering (AML) requirements, and to respond to lawful requests from authorities.
• Platform improvement: To analyse aggregate usage data and improve the performance, security, and content of the 333be platform.

4 Legal Basis for Processing

333be processes personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing required to perform the contract between you and 333be — primarily account creation, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations and responses to lawful authority requests.
• Legitimate interests: Processing conducted for 333be's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing of your data for optional communications such as promotional emails, where you have given explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing & Third Parties

333be does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your data with the following categories of third parties, strictly for the purposes described:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment service providers receive the minimum data necessary to process your transactions securely.
• Identity verification providers: Third-party KYC services receive identity documents and personal data to conduct age and identity verification on behalf of 333be.
• Game content providers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe may receive session-level technical data necessary to deliver their games. These providers operate under strict data processing agreements with 333be.
• Fraud prevention and AML services: Specialist third-party services that assist 333be in detecting suspicious activity, preventing fraud, and complying with anti-money laundering obligations.
• Regulatory and law enforcement authorities: Where required by law, 333be will disclose personal data to competent authorities in response to lawful requests. 333be will notify you of such disclosure where legally permitted to do so.
• IT infrastructure and cloud services: Hosting, data storage, and security service providers who process data on behalf of 333be under binding data processing agreements and are obligated to maintain the same data protection standards.

6 Cookies & Tracking Technologies

333be uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device when you visit 333be.io. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication cookies and security tokens. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: Collect anonymised data about how users interact with the platform, including pages visited, errors encountered, and session duration. This data is used to improve platform performance and user experience.
• Functional cookies: Remember your platform preferences such as language settings, display preferences, and responsible gaming tool configurations across sessions.
• Fraud detection cookies: Technical identifiers used to detect suspicious activity, such as multiple account creation attempts from the same device, and to protect the integrity of the platform.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the 333be platform. 333be does not use third-party advertising cookies or behavioural targeting cookies.

7 Data Security

333be implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 333be servers.
• Salted password hashing using industry-standard cryptographic algorithms — 333be staff cannot view your plain-text password under any circumstances.
• Role-based access controls that restrict access to player data within 333be systems to authorised personnel based on job function and need-to-know requirements.
• Regular security audits and penetration testing of the 333be platform and its supporting infrastructure.
• Intrusion detection systems and real-time monitoring for anomalous access patterns.
• Secure physical and logical controls over data centre environments hosting 333be data.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, 333be will notify affected players without undue delay and take immediate remediation steps. You can assist in protecting your account by using a strong, unique password and by contacting 333be immediately if you suspect any unauthorised access.

8 Data Retention

333be retains personal data for the periods necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. General retention periods are as follows:

• Active account data: Retained for the duration of your active account relationship with 333be plus a minimum period of 5 years following account closure, to meet AML and compliance record-keeping obligations.
• Transaction records: Financial transaction data is retained for a minimum of 5 years from the date of the transaction in accordance with standard financial compliance requirements.
• KYC documentation: Identity verification documents are retained for the period specified by applicable compliance obligations, typically 5 years from the end of the account relationship.
• Support and communications records: Customer support records are retained for 3 years following the last interaction to support dispute resolution and quality assurance.
• Technical and usage logs: Anonymised or aggregated technical logs may be retained for up to 2 years for platform security and performance analysis purposes.

When data is no longer required and no legal retention obligation applies, 333be will securely delete or permanently anonymise the data so that it can no longer be attributed to you.

9 Your Data Rights

As a 333be player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact 333be at the details provided in Section 13. 333be will respond to all verified requests within 30 days.

10 Children & Minors

333be strictly prohibits the use of its platform by persons under the age of 21. The platform does not knowingly collect personal data from individuals under 21 years of age. If 333be discovers or has reason to believe that a registered account holder is under 21, the account will be immediately suspended, all associated data will be reviewed, and the account will be closed in accordance with the Terms & Conditions. Any funds held in an underage account will be handled in accordance with the findings of the KYC review.

If you believe that a minor has registered a 333be account, please notify us immediately at support@333be.io so that we can take prompt action.

11 Cross-Border Data Transfers

333be operates infrastructure across multiple jurisdictions as part of its international offshore licensing arrangement. As a result, your personal data may be transferred to and processed in countries other than Bangladesh. Where such transfers occur, 333be ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Safeguards for cross-border transfers include contractual data protection clauses with recipient entities, security standards requirements in data processing agreements, and ongoing monitoring of third-party compliance with those obligations. By using the 333be platform, you acknowledge and consent to the transfer of your data in accordance with these safeguards.

12 Changes to This Privacy Policy

333be reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. Material changes will be communicated to registered players via the email address on record or through a prominent notice on the platform, no less than 7 days before the changes take effect where operationally possible.

The "Last Updated" date at the top of this Policy will be revised whenever changes are made. We encourage you to review this Policy periodically. Your continued use of the 333be platform after the effective date of any revision constitutes acceptance of the updated Policy.

13 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to raise a concern about how 333be handles your personal data, please contact us using the details below. All privacy-related enquiries are handled by the 333be data protection team.

• Email: support@333be.io (subject line: "Privacy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 via the 333be platform support widget
• Response time: 333be aims to acknowledge all privacy enquiries within 48 hours (BST, UTC+6) and to provide a substantive response within 30 calendar days.

If you are not satisfied with 333be's response to your privacy complaint, you may escalate the matter to the relevant data protection authority or independent dispute resolution body designated under 333be's operating licence. Details of the appropriate escalation route will be provided in our response to your complaint.