333oj Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") explains how 333oj collects, uses, stores, discloses, and protects personal data provided by or generated through the use of the 333oj online casino and sports betting platform accessible at https://333oj.club and any associated mobile interfaces (collectively, the "Platform"). 333oj is committed to handling all player personal data responsibly, transparently, and in accordance with applicable data protection standards.

By registering an account on the Platform, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein. This Policy should be read alongside the Terms & Conditions, which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions in relation to data handling, this Policy shall prevail.

333oj reserves the right to amend this Policy at any time. Where material changes are made, 333oj will notify registered players via their registered contact details at least 14 days before the changes take effect. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

2. Personal Data We Collect

333oj collects personal data in three ways: data you provide directly during registration and account use, data generated automatically through your use of the Platform, and data received from third-party service providers such as payment processors and identity verification services. The specific categories of data collected are set out below.

2.1 Data You Provide Directly

When you register an account, complete KYC verification, make deposits or withdrawals, or contact our support team, you provide us with personal data including but not limited to:

• Identity data: full legal name, date of birth, gender, and national identity card (NID) or passport number as provided for KYC verification purposes.
• Contact data: registered mobile number, email address, and residential address (city and district level, as required for account registration in Bangladesh).
• Financial data: mobile banking account identifiers (e.g. the bKash, Nagad, or Rocket number used for deposits and withdrawals), transaction history on the Platform, account balance, and deposit/withdrawal records.
• KYC documentation: copies of identity documents and proof of address submitted during the KYC verification process. These are stored in encrypted form and are accessible only to authorised compliance personnel.
• Support communications: the content of live chat conversations, email correspondence, and any other communications you send to or receive from 333oj support, retained for quality assurance and dispute resolution purposes.

2.2 Data Collected Automatically

When you access and use the Platform, certain technical data is collected automatically by our systems. This data is used for security monitoring, fraud prevention, platform performance optimisation, and responsible gaming compliance:

• Device and technical data: device type, operating system version, browser type and version, screen resolution, device identifiers (where permitted), and IP address at the time of each session.
• Usage data: pages visited, games played, bet amounts, session duration, game outcomes, bonus activations, and navigation paths through the Platform.
• Location data: approximate geographic location derived from IP address at session level. 333oj does not collect precise GPS-level location data from player devices.
• Cookie and tracking data: session cookies, preference cookies, and analytics identifiers used to maintain session continuity, remember player preferences, and analyse Platform usage patterns. See Section 9 (Cookies) for full details.

2.3 Data from Third Parties

333oj may receive personal data about you from the following categories of third-party sources in connection with the operation of the Platform:

• Payment processors: transaction confirmation data, payment account status, and fraud screening flags received from bKash, Nagad, Rocket, and bank transfer providers used by 333oj.
• Identity verification services: the outcome of automated KYC checks (pass/fail/refer) and any supplementary verification data returned by the identity verification provider. 333oj does not receive raw biometric data from these services.
• Responsible gaming databases: self-exclusion status and problem gambling flags from third-party responsible gaming registries where 333oj participates, used to enforce account restrictions where required.

3. How We Use Your Personal Data

333oj processes personal data only for the specific, lawful purposes described in this Policy. The table below summarises the primary purposes for which each category of data is used and the lawful basis for that processing:

4. Disclosure of Your Personal Data

333oj does not sell, rent, or trade your personal data to any third party for commercial purposes. Your personal data may be disclosed to third parties only in the limited circumstances described in this Section 4. All third-party recipients of personal data are required to handle it in accordance with applicable data protection standards and are bound by appropriate data processing agreements with 333oj.

4.1 Service Providers

333oj engages trusted third-party service providers to assist in operating and improving the Platform. These providers process personal data strictly on 333oj's instructions and only to the extent necessary to deliver their specific services:

• Payment processors (bKash, Nagad, Rocket, bank transfer providers): receive the minimum financial data necessary to process the requested deposit or withdrawal transaction.
• Identity verification service providers: receive identity document images and personal identifiers to perform automated KYC checks on 333oj's behalf. They do not retain data beyond the period required to complete the verification.
• Game content providers (Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, Ezugi and others): may receive a pseudonymous player identifier and session token to enable the delivery of the game within the Platform. These providers do not receive your full identity data.
• Analytics and fraud detection providers: receive pseudonymised or aggregated usage and device data to help 333oj detect fraudulent activity and improve Platform performance. No directly identifiable personal data (such as your name or mobile number) is shared with analytics providers.

4.2 Legal and Regulatory Disclosure

333oj may disclose personal data to governmental authorities, law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or by a binding legal order. In such cases, 333oj will disclose only the minimum data necessary to satisfy the legal requirement and will, where legally permissible, notify the affected player of the disclosure.

• Anti-money-laundering (AML) reporting obligations: 333oj may be required to file suspicious transaction reports with relevant financial intelligence authorities. Such reports and the underlying data are treated as strictly confidential.
• Court orders and legal proceedings: where 333oj is served with a valid court order, subpoena, or other binding legal process requiring the disclosure of player data, 333oj will comply with that order.
• Responsible gaming registries: where required by the applicable responsible gaming framework, 333oj may share a player's self-exclusion status with third-party responsible gaming registries to prevent the player from opening a new account on a participating platform during the exclusion period.

5. Data Retention

333oj retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. The retention periods applicable to each major category of player data are set out in Section 5.1. Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 333oj's internal data destruction procedures.

5.1 Retention Periods by Data Category

The following retention periods apply to each category of personal data held by 333oj:

• Account and identity data: retained for the lifetime of the account plus 5 years following account closure, to comply with anti-money-laundering record-keeping requirements.
• Financial transaction records: retained for 7 years from the date of the transaction, in accordance with financial record-keeping obligations applicable in 333oj's operating jurisdiction.
• KYC documentation: retained for 5 years following account closure. Where a suspicious transaction report has been filed in relation to the account, KYC documentation is retained for a further 5 years after the filing of that report, or as otherwise required by the applicable AML authority.
• Support communications: retained for 3 years from the date of the most recent communication in the relevant support thread, for quality assurance and dispute resolution purposes.
• Usage and device data: retained in identifiable form for 12 months from the date of collection, after which it is aggregated and anonymised. Anonymised aggregated data may be retained indefinitely for platform analytics purposes.

6. Data Security

333oj implements a range of technical and organisational security measures designed to protect player personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly in line with industry best practices. While no data transmission over the internet can be guaranteed to be completely secure, 333oj takes all reasonable steps to protect your data.

6.1 Technical Measures

The following technical security measures are in place across the 333oj Platform:

• SSL/TLS encryption for all data transmitted between player devices and the Platform, ensuring that login credentials, payment data, and personal information cannot be intercepted in transit.
• Encrypted storage for all sensitive personal data at rest, including KYC documentation, financial records, and account credentials. Encryption keys are managed separately from the encrypted data.
• Role-based access controls limiting access to personal data to only those 333oj personnel who require it to perform their specific job functions. All staff with access to personal data are subject to confidentiality obligations.
• Automated fraud detection systems that monitor Platform activity in real time for patterns consistent with account compromise, identity fraud, payment fraud, or bonus abuse.

6.2 Your Role in Data Security

Players are jointly responsible for the security of their 333oj account. You must keep your registered mobile number and account password confidential and must not share them with any third party. You should use a strong, unique password for your 333oj account and change it immediately if you believe it has been compromised. If you suspect that your account has been accessed without your authorisation, contact 333oj support immediately at [email protected]. 333oj will investigate all reported security incidents promptly.

7. Your Rights Regarding Your Personal Data

As a player on the 333oj Platform, you hold a number of rights in relation to the personal data we hold about you. These rights may be exercised at any time by contacting 333oj support at [email protected]. 333oj will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or 333oj receives a high volume of requests, this period may be extended by a further 30 days, in which case 333oj will notify you of the extension within the initial 30-day period.

• Right of access: you may request a copy of all personal data that 333oj holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
• Right of rectification: if any personal data that 333oj holds about you is inaccurate or incomplete, you may request that it be corrected. 333oj will update inaccurate data within 5 business days of a verified rectification request.
• Right of erasure: you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (and there is no other lawful basis for processing), or where the data has been processed unlawfully. Note that 333oj may be required to retain certain data for legal or regulatory reasons even following a valid erasure request.
• Right to restrict processing: you may request that 333oj restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interest.
• Right to data portability: where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that 333oj provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: where processing is based on your consent (for example, for the receipt of marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

To exercise any of the above rights, contact 333oj support at [email protected] with your full name, registered mobile number, and a clear description of the right you wish to exercise. 333oj may request additional verification before processing a data rights request to protect against fraudulent requests.

8. International Data Transfers

333oj operates as an internationally licensed online gaming platform and its infrastructure — including server hosting, payment processing, and game delivery systems — may involve the transfer of personal data to locations outside Bangladesh. Where personal data is transferred internationally, 333oj ensures that appropriate safeguards are in place to protect the data in accordance with applicable data protection standards.

8.1 Safeguards for International Transfers

Where personal data is transferred to a third-party service provider located outside Bangladesh, 333oj applies the following safeguards:

• Data processing agreements: all third-party service providers who receive personal data from 333oj are required to enter into a data processing agreement that sets out their obligations in relation to the data, including security requirements, purpose limitations, and sub-processing restrictions.
• Adequacy and certification: where possible, 333oj selects service providers located in jurisdictions that provide an adequate level of data protection, or that hold recognised security certifications such as ISO 27001 or SOC 2.
• Minimum data principle: only the minimum personal data necessary to fulfil the specific service is transferred internationally. Where a service can be delivered using pseudonymised or aggregated data, 333oj will use pseudonymised or aggregated data in preference to identifiable personal data.

8.2 Game Provider Data

Game content providers (including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe and Ezugi) operate their own server infrastructure in various international locations to deliver game content to the Platform. When you play a game, a pseudonymous session token is passed to the game provider's servers to establish the game session. This token does not include your name, mobile number, or payment details. Game providers are contractually prohibited from using this session data for any purpose other than delivering the game session to the Platform.

9. Cookies and Tracking Technologies

333oj uses cookies and similar tracking technologies on the Platform to maintain session continuity, remember player preferences, prevent fraud, and analyse how the Platform is used. Cookies are small data files placed on your device when you access the Platform. The following categories of cookies are used by 333oj: (a) Strictly necessary cookies — required for the Platform to function and cannot be disabled; (b) Functional cookies — used to remember your preferences such as language settings and display options; (c) Analytics cookies — used in pseudonymised form to understand how players navigate the Platform and to identify areas for improvement. 333oj does not use advertising or targeting cookies to build profiles for third-party advertising purposes.

You may control cookie settings through your browser or device settings. Disabling strictly necessary cookies will prevent you from using certain features of the Platform, including the ability to log in. Analytics and functional cookies may be disabled without affecting core Platform functionality. 333oj's cookie settings panel, accessible from the Platform's privacy settings menu, allows you to manage your cookie preferences at any time.

10. Marketing Communications

333oj may send you promotional messages, bonus offers, and platform news by SMS or email, but only where you have given your explicit consent to receive such communications during the account registration process or subsequently through your account settings. You may withdraw your consent to receive marketing communications at any time by updating your preferences in the account settings section of the Platform, or by contacting support at [email protected].

• Opt-out via account settings: log in to your 333oj account, navigate to Account Settings > Notifications, and toggle off the relevant marketing communication channels.
• Opt-out via support: contact 333oj support at [email protected] with your registered mobile number and a request to unsubscribe from all marketing communications. Changes will take effect within 5 business days.
• SMS unsubscribe: reply STOP to any marketing SMS received from 333oj to be immediately removed from the SMS marketing list.

Opting out of marketing communications does not affect the delivery of transactional messages — such as deposit confirmations, withdrawal notifications, security alerts, and account verification messages — which are essential to the operation of your account and cannot be disabled.

11. Children and Underage Players

The 333oj Platform is strictly for adults aged 21 and above. 333oj does not knowingly collect, process, or retain personal data from individuals under the age of 21. If 333oj discovers that personal data has been collected from an individual who is under 21 years of age, that data will be deleted immediately and the associated account will be closed. If you believe that an underage individual has registered an account on the Platform, please contact [email protected] immediately so that we can investigate and take appropriate action.

333oj implements age verification as a mandatory step in the account registration process. Players are required to declare that they are aged 21 or over at the point of registration. Where 333oj has reasonable grounds to doubt the accuracy of an age declaration, it may require the player to submit documentary proof of age as part of the KYC verification process. Any account where age verification cannot be successfully completed will be suspended pending resolution.

12. Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a complaint about the way in which 333oj has handled your personal data, please contact our support team at [email protected]. Include your full name, registered mobile number, and a clear description of your query or complaint. 333oj will acknowledge receipt of all formal privacy complaints within 5 business days and will provide a substantive response within 30 calendar days.

Where a complaint cannot be resolved to your satisfaction through 333oj's internal complaints process, you may have the right to escalate your complaint to a relevant external data protection authority or dispute resolution body, depending on the jurisdiction applicable to your circumstances. 333oj will provide you with information about available escalation options upon request.