333bct Privacy Policy

1. Data Controller Information

For the purposes of this Privacy Policy, 333bct ("we", "us", "our", "the Company") acts as the data controller in respect of all personal data collected through the 333bct platform accessible at https://333bct.net (the "Platform"). As data controller, 333bct determines the purposes and means by which your personal data is processed.

333bct operates as an online entertainment and sports wagering platform serving the Bangladesh market. All player accounts, transactions, and associated personal data are managed by 333bct in accordance with this Privacy Policy and applicable data protection principles.

By registering an account on the 333bct Platform, accessing its services, or continuing to use the Platform after this Privacy Policy has been updated, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must cease using the Platform immediately.

2. Personal Data We Collect

333bct collects personal data through several channels: directly from you when you register and use the Platform, automatically through technical systems when you interact with the Platform, and in limited circumstances from third-party verification and payment partners. The categories of personal data we collect are described in the table below.

Data We Do Not Collect

333bct does not knowingly collect special category (sensitive) personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data used for unique identification, health data beyond what is voluntarily disclosed in a Responsible Gaming context, or data concerning sexual orientation. If you voluntarily disclose such data in a support communication, it will be treated with the highest level of confidentiality and used only to assist with your specific query.

333bct does not collect data from children. The Platform is strictly 18+. If we become aware that data from a person under 18 years of age has been collected, we will delete it immediately and close the associated account.

3. Legal Basis for Processing

333bct processes your personal data only when a valid legal basis exists for doing so. The principal legal bases on which we rely are as follows:

• Contractual Necessity: Processing your identity, contact, account, and payment data is necessary to perform our contractual obligations to you — that is, to operate your player account, process deposits and withdrawals, settle bets and game outcomes, and deliver the services described in our Terms & Conditions.
• Legal Obligation: We are required by applicable anti-money-laundering (AML) regulations, Know Your Customer (KYC) standards, and financial record-keeping rules to collect and retain certain categories of your personal data for defined periods, regardless of your preferences.
• Legitimate Interests: We process technical and usage data to maintain platform security, prevent fraud and account takeovers, improve platform performance, and conduct internal analytics to enhance the player experience. We have assessed that these legitimate interests are not overridden by your rights and freedoms.
• Consent: Where we send you marketing communications, promotions, or personalised bonus offers by email or SMS, we do so only on the basis of your consent, which you provide at registration and can withdraw at any time through your account settings or by contacting our support team.

4. How We Use Your Data

333bct uses the personal data we collect for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with those described here without first informing you and, where required, obtaining your consent.

Account and Service Delivery

Your identity, contact, and account data is used to create and manage your player account, authenticate you at login, process deposits and withdrawals in BDT via your chosen payment method, settle your bets and game rounds, calculate and credit bonus entitlements, and provide you with a real-time view of your account balance and transaction history.

Identity Verification and Fraud Prevention

333bct uses identity and payment data to verify that you are who you claim to be, that you meet the 18+ age requirement, that your payment methods are registered in your own name, and that your account activity does not exhibit patterns consistent with fraud, money laundering, or multi-accounting. Where suspicious activity is detected, we may restrict account functionality while an investigation is conducted.

Customer Support

Communications data (live chat transcripts, email content, complaint records) is used to understand and resolve your support queries, improve the quality of our support service, and maintain a record of interactions for audit and dispute resolution purposes. Support records relating to unresolved disputes may be retained beyond the standard retention period.

Platform Improvement and Analytics

Anonymised and aggregated usage data is analysed to understand how players interact with the 333bct platform, which games and features are most popular among Bangladesh-based players, and where the user experience can be improved. This analysis does not result in decisions that materially affect individual players.

Marketing and Promotions

With your consent, we may send you information about 333bct bonus offers, new game releases, cricket betting promotions (including BPL and T20 World Cup campaigns), seasonal promotions tied to Eid, Pohela Boishakh, Victory Day, and other Bangladesh market events. You may opt out of all marketing communications at any time without affecting your ability to use the Platform.

Responsible Gaming

Responsible Gaming data (self-exclusion elections, deposit limits, problem gambling flags) is used to protect players who may be at risk of gambling-related harm. This data is treated with the highest level of sensitivity and is not used for any commercial or marketing purpose. Please visit our Responsible Gaming page for full details of the tools and support available to you.

5. Data Sharing and Disclosure

333bct does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

Payment Processors

To process deposits and withdrawals in BDT, we share relevant payment data with our certified payment partners, which currently include the operators of bKash, Nagad, Rocket, and Upay mobile financial services, as well as Visa, Mastercard, Dutch-Bangla Bank, and City Bank payment gateways. These partners act as independent data controllers in respect of transaction data processed through their own systems, and their own privacy policies govern that processing.

Game Technology Providers

Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive a pseudonymised player identifier and stake/outcome data necessary to operate the game sessions you initiate on the 333bct platform. Full identity data is not shared with game studios.

KYC and Identity Verification Partners

To fulfil our KYC obligations, 333bct may share identity documents and data with specialist identity verification service providers. These providers are contractually required to process your data only for the purpose of identity verification and to maintain appropriate security standards.

Legal and Regulatory Disclosure

333bct will disclose personal data to law enforcement authorities, financial intelligence units, or other regulatory bodies where we are legally required to do so — for example, in response to a valid court order, subpoena, or statutory reporting obligation under AML regulations. Where permitted, we will notify you of such disclosure.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 333bct's business, your personal data may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data under the new entity before the transfer takes effect.

6. Cookies and Tracking Technologies

333bct uses cookies and similar technologies (collectively "cookies") on the Platform to deliver core functionality, maintain session security, and gather anonymised performance data. The following categories of cookies are in use:

Cookies We Do Not Use

333bct does not use advertising cookies, retargeting cookies, social media tracking pixels (e.g., Facebook Pixel, Twitter/X pixel), or any third-party tracking technology that follows your activity across other websites outside the 333bct domain.

Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics or functional cookies will not prevent you from accessing the Platform but may affect certain preference features. Refer to your browser's help documentation for instructions on managing cookies on your specific device.

7. Data Retention

333bct retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention schedule below outlines our standard approach:

• Active account data (identity, contact, account records): retained for the lifetime of your active player account plus five (5) years following account closure, in compliance with AML record-keeping requirements.
• KYC and identity verification documents: retained for a minimum of five (5) years from the date of account closure or the date of the last transaction, whichever is later.
• Transaction and financial records (deposit and withdrawal history, bet records, bonus records): retained for seven (7) years from the date of each transaction, consistent with standard financial record-keeping practices.
• Customer support communications: retained for three (3) years from the date of the interaction, or until any related dispute is fully resolved, whichever is later.
• Technical and usage data (server logs, IP records, session data): retained for up to thirteen (13) months from the date of collection, after which it is deleted or irreversibly anonymised.
• Marketing consent records: retained from the date of consent grant until consent is withdrawn plus three (3) years, to maintain a demonstrable record of your consent status.
• Responsible Gaming records (self-exclusion, deposit limits): retained for five (5) years from the date on which the restriction was last active, to prevent circumvention through new account registration.

8. Your Privacy Rights

As a 333bct player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or email [email protected]. We will respond to verified requests within thirty (30) days, or within a shorter period where required by applicable standards.

Right of Access

You have the right to request a copy of the personal data that 333bct holds about you, together with information about how that data is being used. We will provide this in a structured, commonly used, machine-readable format where technically feasible.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. For certain data fields (such as your registered name and date of birth), correction will require submission of supporting identity documents.

Right to Erasure

You may request that 333bct delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that we may be unable to fulfil erasure requests in full where legal retention obligations apply — for example, AML-mandated financial records that must be retained for five to seven years cannot be deleted earlier on request.

Right to Restrict Processing

You have the right to request that we restrict the processing of your data — for example, while the accuracy of data is disputed or while an objection to processing is being assessed. During a restriction period, we will store your data but not actively process it for other purposes.

Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a portable format so that you can transfer it to another service provider if you choose.

Right to Object to Marketing

You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. On receipt of an objection to marketing, we will cease all marketing communications to you within five (5) business days and update your account preferences accordingly.

9. Data Security Measures

333bct maintains a comprehensive technical and organisational security programme designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• Transport Layer Security (TLS 1.3): All data in transit between your device and the 333bct servers is encrypted using current industry-standard TLS protocols.
• Data Encryption at Rest: Sensitive personal data stored in our databases — including identity documents, payment references, and account credentials — is encrypted at rest using AES-256 encryption.
• Password Hashing: Account passwords are never stored in plain text. We use a modern adaptive hashing algorithm with a per-user cryptographic salt, ensuring that even an internal data access event cannot expose your password.
• Access Controls: Access to personal data within 333bct's systems is restricted on a strict need-to-know basis. Internal team members can only access the minimum data required to perform their role. All internal access to player records is logged and subject to periodic audit.
• Two-Factor Authentication: 333bct strongly recommends enabling 2FA on your player account to add a second layer of identity verification at login. 2FA is available through your account security settings.
• Intrusion Detection: Our platform infrastructure is monitored continuously by automated intrusion detection systems that flag and escalate unusual access patterns, brute-force login attempts, and other security anomalies for immediate review.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, 333bct will notify affected players promptly and take immediate steps to contain and remediate the breach.

10. Updates to This Privacy Policy

333bct may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform services. When we make material changes to this Policy — meaning changes that affect your rights, the categories of data we collect, or the purposes for which we use your data — we will notify you by:

• Displaying a prominent notification on the Platform the next time you log in after the update takes effect.
• Sending a notification to your registered email address where the change is significant enough to warrant direct communication.
• Updating the "Effective Date" shown at the top of this page and in the hero section above.

Your continued use of the 333bct Platform after a Privacy Policy update constitutes your acknowledgement of the revised Policy. If you do not agree with the updated terms, you must stop using the Platform and may request account closure in accordance with the Terms & Conditions.

The current version of this Privacy Policy is always accessible at https://333bct.net/privacy-policy and supersedes all prior versions. We recommend bookmarking this page and reviewing it whenever you receive a notification of an update.

This Privacy Policy was last reviewed and updated with an effective date of 1 January 2026. It applies to all registered players and all visitors to the 333bct Platform from that date onward.