333r Privacy Policy – How We Handle Your Personal Data

1. Introduction

This Privacy Policy ("Policy") is published by 333r ("we", "us", "our", "the Platform") and applies to all users ("you", "User", "Player") who access, browse, register on, or otherwise interact with 333r.club and its associated services.

333r operates an online casino and sports betting platform primarily targeting users in Pakistan. As a platform that collects personal and financial data in order to operate, 333r recognises its responsibilities under applicable data protection frameworks and is committed to maintaining the privacy, confidentiality, and security of all user data.

By registering a 333r account or using any feature of the platform, you acknowledge that you have read, understood, and accepted this Privacy Policy. If you do not agree with any part of this Policy, you must cease using 333r immediately.

2. Data We Collect

333r collects personal data in two broad categories: data you provide directly, and data collected automatically through your use of the platform.

Data you provide directly to 333r includes:

• Full legal name as shown on your national identity document;
• Date of birth (used to verify the 18+ age requirement);
• Email address, mobile phone number, and residential address;
• Username and password (passwords are stored in hashed form only – 333r never stores plaintext passwords);
• Identity documents submitted for KYC purposes, including CNIC front and back, selfie with document, and where required, proof of address and proof of payment method;
• Financial information including deposit amounts, withdrawal requests, and transaction history in PKR;
• Correspondence and support communications sent to 333r.

Data collected automatically when you use 333r includes:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session start and end times, pages visited, and features used;
• In-game activity data including bets placed, games played, and wagering history;
• Cookie and tracking data (see Section 8).

3. How We Collect Your Data

333r collects personal data through the following mechanisms:

4. How 333r Uses Your Personal Data

333r uses your personal data only for legitimate purposes directly related to the operation of the platform and the provision of services to you. Specifically, your data is used to:

• Create and manage your 333r account and verify your eligibility to use the platform;
• Process deposits and withdrawals and maintain accurate transaction records in PKR;
• Verify your identity and age in compliance with KYC requirements applicable to 333r;
• Detect, investigate, and prevent fraud, money laundering, collusion, and other prohibited activities;
• Comply with legal and regulatory obligations applicable to 333r's operations;
• Communicate with you about your account, including security alerts, transaction confirmations, and policy updates;
• Send promotional communications where you have opted in to receiving them – you may opt out at any time;
• Improve the platform by analysing aggregated usage data and identifying technical issues;
• Enforce the Terms & Conditions of 333r.

5. KYC & Identity Verification

5.1 333r requires all users who wish to process withdrawals to complete a Know Your Customer (KYC) verification process. This is a standard compliance requirement in the online gaming industry and is designed to prevent fraud, underage gambling, and financial crime.

5.2 KYC documents submitted to 333r (including CNIC copies, selfie images, and proof of address) are stored securely using encryption at rest and in transit. Access is limited to compliance personnel and any third-party identity verification provider engaged by 333r for this specific purpose.

5.3 Third-party KYC providers used by 333r are contractually bound to process submitted documents solely for identity verification purposes and to maintain the same or equivalent security standards as 333r.

5.4 KYC documents are retained for the period required by applicable anti-money laundering (AML) regulations, after which they are securely destroyed. In most cases this is a minimum of five (5) years from the date of verification or account closure, whichever is later.

5.5 333r will never use KYC documents for any purpose unrelated to identity verification and regulatory compliance, and will never share them with advertising networks, data brokers, or commercial third parties.

6. Payment Data & Financial Information

6.1 333r processes payments through third-party payment providers including JazzCash, Easypaisa, and domestic banking partners. 333r does not directly store your full mobile wallet credentials, bank account numbers, or card details. Such data is handled entirely by the respective payment processor.

6.2 333r retains transaction metadata including deposit and withdrawal amounts, timestamps, transaction reference numbers, and the payment method category (e.g., JazzCash, HBL bank transfer). This data is stored as part of your account transaction history and is required for financial reconciliation, dispute resolution, and regulatory reporting.

6.3 All financial data held by 333r is encrypted at rest and access is restricted to authorised finance and compliance team members. This data is never shared with marketing or advertising partners.

7. Sharing Your Data with Third Parties

333r does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes under any circumstances. Data may be shared with the following categories of third parties, strictly for the purposes indicated:

• Identity Verification Providers: KYC documents and identity data may be shared with contracted third-party verification services for the sole purpose of completing user verification;
• Payment Processors: Transaction data is shared with JazzCash, Easypaisa, banking partners, and card networks as necessary to complete financial transactions;
• Regulatory Authorities: 333r may disclose user data to regulatory bodies, law enforcement agencies, or courts where required by applicable law or a lawful order;
• Technical Service Providers: Hosting providers, content delivery networks, and security service providers who process data on 333r's behalf under strict data processing agreements;
• Anti-Fraud and AML Services: Transaction and account data may be shared with fraud detection and anti-money laundering screening services to protect the platform and its users.

All third parties who process personal data on behalf of 333r are subject to contractual obligations that require them to maintain the confidentiality and security of that data and to use it only for the agreed purpose.

8. Cookies & Tracking Technologies

8.1 333r uses cookies and similar tracking technologies to operate the platform effectively and to improve the user experience. Cookies are small text files stored on your device when you visit 333r.

8.2 Essential Cookies: Required for core platform functionality including maintaining your logged-in session, remembering security preferences, and enabling the cashier. These cannot be disabled without impairing platform functionality.

8.3 Analytics Cookies: Used by 333r to understand how users interact with the platform, which pages are visited most, where users encounter errors, and how navigation flows are used. Data collected is aggregated and anonymised where possible.

8.4 Preference Cookies: Remember your language setting, display preferences, and any personalisation options you have configured within your 333r account.

8.5 You may manage cookie preferences through your browser settings. Note that disabling analytics or preference cookies will not prevent you from using 333r but may reduce functionality. Disabling essential cookies may prevent login and platform use entirely.

9. Data Retention

9.1 333r retains your personal data for as long as your account remains active and for a further period after account closure as required by applicable law. The specific retention periods are as follows:

• Account and registration data: Retained for the lifetime of the account plus a minimum of five (5) years after closure, to comply with AML record-keeping obligations;
• KYC documents: Retained for a minimum of five (5) years from date of verification or account closure, whichever is later;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction for financial and regulatory record-keeping;
• Support communications: Retained for three (3) years from the date of the interaction unless a longer period is required for an ongoing dispute or investigation;
• Analytics and usage data: Retained in aggregated form for platform improvement purposes. Individual-level usage data is typically retained for up to twelve (12) months.

9.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 333r's data deletion procedures.

10. Data Security

10.1 333r implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• HTTPS encryption for all data transmitted between your browser and the 333r platform;
• Encryption of sensitive data at rest, including KYC documents and hashed credentials;
• Role-based access controls limiting data access to personnel who require it for their specific function;
• Regular security assessments and vulnerability testing of the 333r platform infrastructure;
• Two-factor authentication requirements for internal administrative access to user data systems;
• Monitoring and logging of all access to sensitive data stores.

10.2 Notwithstanding the above, no internet-based system is entirely immune from security risks. Users are encouraged to take their own precautions including using a strong, unique password for their 333r account and enabling 2FA in account settings.

10.3 In the event of a data breach that is likely to result in a risk to Users, 333r will notify affected Users and any applicable regulatory authority within the timeframe required by applicable law.

11. Your Rights Regarding Your Personal Data

Subject to applicable law, you have the following rights in relation to the personal data 333r holds about you:

• Right of Access: You may request a copy of the personal data 333r holds about you, along with information about how it is used;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held by 333r;
• Right to Erasure: You may request deletion of your personal data where 333r no longer has a legitimate legal basis to retain it. Note that data subject to AML retention obligations cannot be deleted during the mandatory retention period;
• Right to Restrict Processing: You may request that 333r limit the processing of your data in certain circumstances, such as during a dispute about data accuracy;
• Right to Data Portability: Where technically feasible, you may request your data in a structured, machine-readable format;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact 333r support. We will respond within thirty (30) days of receiving a valid request. We may ask you to verify your identity before processing your request.

12. Children & Minors

12.1 The 333r platform is strictly for adults aged 18 years and older. 333r does not knowingly collect personal data from any person under the age of 18.

12.2 If 333r becomes aware that personal data has been collected from a person under 18, the associated account will be immediately suspended, the data will be reviewed, and appropriate action will be taken including deletion of the data and notification to relevant authorities where required.

12.3 If you believe a minor has used or attempted to use 333r, please contact us immediately at the address in Section 14.

13. Changes to This Privacy Policy

13.1 333r reserves the right to update or amend this Privacy Policy at any time. Where changes are material, 333r will notify registered users by email or via an in-platform notification at least fourteen (14) days before the changes take effect.

13.2 Your continued use of 333r following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must cease using 333r and may request account closure.

13.3 The "Last Updated" date at the top of this page reflects when the current version came into effect. Previous versions of this Policy are available on request.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 333r, you may contact our support team. Our contact details are provided in the footer of this page. Please mark your message as "Privacy Request" to ensure it is directed to the appropriate team member.

We will acknowledge receipt of your query within 48 hours and aim to provide a substantive response within 30 days of receiving a complete and valid request.