333ko Privacy Policy

This Privacy Policy describes how 333ko ("we", "us", "our"), operating the online betting and casino platform accessible at https://333ko.io, collects, processes, stores, and protects the personal data of individuals ("you", "Member", "User") who register for or use the 333ko platform.

333ko is committed to maintaining the highest standards of data privacy and security for all members across Bangladesh, including users in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. We operate in compliance with internationally recognised data protection principles and apply them rigorously to every aspect of our data handling practices.

By registering a 333ko account or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must not use the 333ko platform.

This Policy should be read alongside the 333ko Terms and Conditions and Responsible Gaming Policy, all of which together constitute the full agreement between you and 333ko.

333ko collects the following categories of personal data from members. We collect only what is necessary for the specified purposes and do not gather data beyond those needs.

333ko does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification (e.g., a photograph on a government-issued ID).

333ko collects personal data through the following channels and mechanisms:

• Direct registration: When you create a 333ko account, you provide identity data, contact data, and initial financial data directly through the registration form.
• KYC submissions: When you submit identity documents (NID, passport, driver's licence) and proof of address for account verification prior to your first withdrawal.
• Transaction processing: When you make deposits or withdrawal requests via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank, financial data is captured to process and record those transactions.
• Platform usage: Betting and game data is generated automatically as you use the sportsbook and casino products on the 333ko platform.
• Support interactions: When you contact 333ko via live chat or email, your communication data is logged for quality assurance and compliance purposes.
• Automated technologies: Technical data including IP addresses, device identifiers, and session data is collected automatically via server logs, cookies, and similar tracking technologies when you access the platform.
• Third-party verification providers: Where identity verification is conducted via a third-party KYC provider, that provider may return identity confirmation signals to 333ko. 333ko does not store raw biometric data from these processes.

333ko processes your personal data on the following legal grounds, depending on the purpose of the processing activity:

• Contractual necessity: Processing that is required to perform our contract with you — including account creation, payment processing, bet settlement, and withdrawal handling — is carried out on the basis of contractual necessity. Without this processing, 333ko cannot provide its services to you.
• Legitimate interests: 333ko processes certain data (including technical data and betting patterns) on the basis of legitimate business interests, such as fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.
• Legal obligation: Some processing — particularly identity verification (KYC) and transaction monitoring for anti-money-laundering (AML) purposes — is carried out to comply with applicable legal and regulatory requirements.
• Consent: Where you have opted in to receive promotional communications from 333ko (such as bonus offers, seasonal promotions, and BPL/cricket betting updates), we process your contact data on the basis of your consent. You may withdraw this consent at any time by contacting 333ko support.

333ko uses the personal data we collect for the following specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with those listed below:

• Account management: Creating, maintaining, and securing your 333ko member account, including authentication and password management.
• Service delivery: Processing your bets, settling winnings, crediting your wallet, and providing access to casino games and live sportsbook markets.
• Payment processing: Executing deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and supported bank partners, and maintaining accurate financial records of those transactions.
• Identity verification (KYC): Verifying that you are who you say you are, that you meet the minimum age requirement of 21 years, and that your payment methods are registered in your own name.
• Fraud and AML prevention: Monitoring account activity and transaction patterns to detect, investigate, and prevent fraudulent activity, money laundering, and prohibited conduct as defined in the 333ko Terms and Conditions.
• Responsible gaming: Using account activity and betting pattern data to identify members who may be exhibiting signs of problem gambling, and proactively offering responsible gaming tools such as deposit limits and self-exclusion.
• Customer support: Responding to your support enquiries, resolving disputes, and maintaining records of communications for quality assurance purposes.
• Platform improvement: Using aggregated and anonymised technical data and usage statistics to improve the performance, security, and user experience of the 333ko platform.
• Marketing communications (with consent): Sending promotional offers, bonus notifications, BPL and cricket betting previews, and seasonal promotions (e.g., Eid, Pohela Boishakh) to members who have opted in to receive such communications.
• Legal compliance: Maintaining records as required by applicable law, and cooperating with law enforcement or regulatory investigations where legally required.

333ko does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Data is shared externally only in the limited circumstances described below, and always subject to appropriate contractual safeguards:

• Payment processors: To execute your deposit and withdrawal transactions, 333ko shares necessary financial data with the relevant payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank). Each provider is bound by their own privacy and security obligations.
• KYC and identity verification providers: To complete account verification, 333ko may share identity document images and personal details with a certified third-party KYC service. These providers are contractually prohibited from using the data for any purpose beyond identity verification for 333ko.
• Fraud prevention and AML agencies: 333ko may share transaction and identity data with recognised fraud prevention and anti-money-laundering screening services where required to meet its legal obligations or to protect the platform from abuse.
• Game content providers: When you play a live dealer or RNG casino game, limited technical data (e.g., session tokens, game round identifiers) is shared with the relevant game studio (Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe) to deliver the game content. These providers do not receive your full personal profile.
• Law enforcement and regulators: 333ko will disclose personal data to law enforcement authorities, courts, or regulatory bodies where required to do so by applicable law, or where 333ko reasonably believes disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 333ko's business, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and your rights under this Policy will continue to apply.

The 333ko platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device when you visit the platform. 333ko uses the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Remember your preferences such as language settings and last-used game categories to personalise your experience on return visits.
• Analytics cookies: Collect anonymised data about how members navigate the platform (pages visited, session duration, game categories accessed) to help 333ko improve the platform. No personally identifiable data is transmitted via analytics cookies.
• Security cookies: Used for fraud detection purposes, including identifying unusual login patterns or access from unrecognised devices or locations.

You may control cookie settings through your browser preferences. However, disabling strictly necessary cookies will prevent you from logging in or using core platform features. 333ko does not use third-party advertising or behavioural targeting cookies.

333ko retains personal data for only as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide:

After the applicable retention period, data is securely and irreversibly deleted, or anonymised so that it can no longer be linked to any individual. Anonymised aggregated data may be retained indefinitely for statistical and platform improvement purposes.

333ko implements a comprehensive suite of technical and organisational security measures to protect member data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport encryption: All data in transit between your device and the 333ko platform is protected by TLS 1.3 (Transport Layer Security), the current industry standard for encrypted web communications.
• Storage encryption: Sensitive data stored on 333ko servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Password security: Member passwords are never stored in plain text. They are hashed using a cryptographically strong one-way hashing algorithm with per-account salting.
• Two-factor authentication (2FA): 333ko strongly recommends and supports 2FA for all member accounts, adding a second layer of login security beyond the password.
• Access controls: Internal access to member data is strictly limited to 333ko personnel who require it to perform their specific job function, on a need-to-know basis. All internal access is logged and audited.
• Security monitoring: 333ko operates continuous security monitoring of platform infrastructure, with automated alerts for anomalous access patterns, login attempts from unrecognised locations, and unusual transaction behaviour.
• Penetration testing: 333ko conducts periodic security assessments of the platform to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a personal data breach that poses a risk to member rights, 333ko will notify affected members without undue delay and take all appropriate steps to contain and investigate the incident.

333ko respects your rights over your own personal data. Subject to applicable law and verification of your identity, you have the following rights in relation to data 333ko holds about you:

• Right of access: You may request a copy of the personal data 333ko holds about you, along with information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. For basic account details (email address, mobile number), you can update these directly via your account settings.
• Right to erasure ("right to be forgotten"): You may request that 333ko delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to 333ko's legal data retention obligations — for example, we are required to retain certain financial and KYC records for regulatory purposes even after account closure.
• Right to restriction: You may request that 333ko restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you may request that 333ko provide your personal data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of 333ko's legitimate interests, including profiling for responsible gaming purposes. 333ko will cease that processing unless compelling legitimate grounds override your objection.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the 333ko support team via live chat or email at [email protected]. We will respond to all verified requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

The 333ko platform is strictly for adults aged 21 years and over. 333ko does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the 333ko account registration and KYC process.

If 333ko discovers or has reason to believe that a member is under the age of 21, their account will be immediately suspended pending investigation, all pending transactions will be halted, and the matter will be handled in accordance with Section 3 of the 333ko Terms and Conditions regarding underage access.

If you are a parent or guardian and believe that a minor has registered a 333ko account using false information, please contact 333ko support immediately via live chat. We take underage gambling extremely seriously and will act without delay upon receiving a credible report.

The 333ko platform may contain references to third-party game studios and payment providers. While 333ko takes care to work only with reputable partners, 333ko does not control the privacy practices of third-party services and cannot accept responsibility for their data handling.

When you interact with a third-party game interface (e.g., a live dealer table powered by Evolution Gaming or Ezugi), or complete a payment via bKash or Nagad's own interface, you are subject to the privacy policy of that third party in addition to this Policy. 333ko recommends reviewing the privacy notices of any third-party service you interact with.

This Privacy Policy applies exclusively to data collected by 333ko through its own platform and channels. It does not govern any data collected by third-party providers on their own platforms or apps.

333ko reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, the introduction of new platform features, or feedback from members and regulators.

When we make material changes to this Privacy Policy, we will notify active members by email to their registered address at least 14 days before the changes take effect. The updated Policy will also be published on this page with a revised effective date clearly displayed at the top of the document.

Your continued use of the 333ko platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must stop using the platform and may request account closure by contacting 333ko support.

If you have any questions, concerns, or requests relating to this Privacy Policy or 333ko's data handling practices, please contact our Data Privacy team using the details below. We are committed to responding to all privacy-related enquiries promptly and thoroughly.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the 333ko platform — the fastest way to reach our support team
• Response Time: We aim to acknowledge all written privacy enquiries within 2 business days and to provide a full response within 30 calendar days
• Language: Our support team handles privacy enquiries in English

When contacting us about a data rights request, please include your registered username or email address and a brief description of your request so we can route it to the correct team member without delay.