333x Casino — Privacy Policy

1.1  For the purposes of this Privacy Policy, the data controller responsible for your personal information is 333x Casino, operating the platform accessible at 333x.vu ("333x", "we", "us").

1.2  As data controller, 333x determines the purposes and means by which your personal data is processed. All data processing activities carried out by 333x or on 333x's behalf are governed by this Policy and applicable data protection legislation.

1.3  Where 333x engages third-party service providers to process personal data on its behalf (such as payment processors and KYC verification providers), those parties act as data processors and are bound by contractual data processing agreements that restrict their use of your data to the specific purposes authorised by 333x.

2.1  333x collects the following categories of personal data from players and platform visitors:

2.2  333x does not intentionally collect special category personal data (such as health, racial or ethnic origin, political opinions, or biometric data) except where required by KYC or responsible gaming obligations (for example, recording a player's self-exclusion status or a vulnerability flag).

3.1  333x collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC, initiating deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you visit the 333x website or use the platform, including IP address, browser fingerprint, device identifiers, and session data via cookies and server logs.
• Third-party collection: Identity and fraud screening data received from regulated KYC verification providers and payment processors when you initiate a transaction or verification request.
• Inference: Analytical data derived from your gameplay behaviour, session patterns, and transaction history, used for responsible gaming monitoring, fraud detection, and platform personalisation.

4.1  333x processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and 333x — including account creation, payment processing, bet settlement, and customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML transaction monitoring, age verification, and regulatory reporting obligations.
• Legitimate interests: Processing carried out in pursuit of 333x's legitimate business interests where those interests are not overridden by your fundamental rights and freedoms — including fraud prevention, platform security, responsible gaming monitoring, and service improvement analytics.
• Consent: Processing based on your freely given, informed, and specific consent — primarily for marketing communications and optional analytics cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4.2  Where 333x relies on legitimate interests as its legal basis, it conducts a balancing assessment to confirm that its interests do not override your data protection rights. You may request details of any legitimate interests balancing assessment by contacting the 333x support team.

5.1  333x uses your personal data for the following purposes:

• Creating, maintaining, and managing your 333x player account;
• Processing deposits and withdrawal requests via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank;
• Verifying your identity, age, and source of funds as required by KYC and AML obligations;
• Settling bets, crediting winnings, and resolving bet disputes;
• Administering bonuses and promotional offers to which you have opted in;
• Detecting, investigating, and preventing fraud, collusion, money laundering, and other prohibited activities;
• Monitoring gameplay patterns for responsible gaming purposes and identifying potential problem gambling indicators;
• Providing customer support and resolving complaints;
• Complying with requests from regulatory authorities and law enforcement agencies;
• Sending transactional communications related to your account (security alerts, deposit confirmations, withdrawal notifications);
• Sending marketing communications where you have provided explicit consent;
• Conducting anonymised analytics to improve platform performance and user experience.

6.1  333x shares your personal data only in the circumstances described below. We do not sell, rent, or otherwise transfer personal data to unaffiliated third parties for their independent commercial use.

6.2  Categories of third parties with whom 333x may share personal data:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and their respective technical intermediaries, for the purpose of processing your financial transactions.
• KYC and identity verification providers: Regulated third-party providers that perform identity document checks, age verification, and sanctions screening on 333x's behalf.
• Fraud and risk management providers: Specialist providers that assist 333x in detecting and preventing fraudulent activity, account takeovers, and financial crime.
• Regulatory and law enforcement authorities: Where 333x is legally obligated to disclose information — including anti-money laundering reporting obligations and responses to valid law enforcement requests.
• Game content providers: Licensed game studios whose titles are hosted on the 333x platform may receive anonymised session data required for game integrity auditing. No personally identifiable information is shared with game providers for marketing purposes.
• Professional advisers: Legal, accounting, and auditing professionals engaged by 333x who are bound by professional confidentiality obligations.

7.1  Given the international nature of online gaming operations, your personal data may be transferred to and processed in countries outside Pakistan. 333x takes appropriate safeguards to ensure that such transfers are conducted in compliance with applicable data protection requirements.

7.2  Where personal data is transferred to a third country that does not offer an equivalent level of data protection, 333x implements appropriate transfer mechanisms, which may include standard contractual clauses, binding corporate rules, or other recognised adequacy frameworks.

7.3  You may request further information about the specific safeguards applied to international transfers of your personal data by contacting the 333x support team.

8.1  333x retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and regulatory retention obligations.

8.2  The following indicative retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in compliance with AML regulations.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, as required by financial regulation.
• KYC documentation: Retained for the duration required by the applicable licensing authority, typically a minimum of 5 years post-account closure.
• Gameplay and bet history: Retained for 2 years for standard accounts; extended retention may apply where a dispute or investigation is pending.
• Marketing consent records: Retained for 3 years from the date consent was given or last confirmed.
• Support communications: Retained for 2 years from the date of the last communication in a support thread.

8.3  Where data is retained solely to comply with a legal obligation and is no longer required for the original purpose of collection, it will be restricted from further processing and deleted or anonymised at the end of the applicable retention period.

9.1  333x uses cookies and similar tracking technologies to operate the platform, maintain session continuity, prevent fraud, and analyse platform usage. A cookie is a small text file stored on your device when you access a website.

9.2  333x uses the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the 333x platform, including maintaining your logged-in session, preserving your bet slip state, and enabling secure account transactions. These cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to understand how players navigate the 333x platform, which games are most frequently accessed, and where technical issues occur. Data collected is aggregated and anonymised. These are optional and can be declined.
• Preference cookies: Store your platform preferences such as language and display settings to provide a more consistent experience on return visits.

9.3  You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the 333x platform. For analytics and preference cookies, you may opt out at any time without affecting your platform access.

10.1  333x will only send promotional and marketing communications to players who have given explicit prior consent during registration or subsequently via account preferences. Marketing communications may include information about new games, seasonal promotions, bonus offers, and VIP programme updates.

10.2  You may withdraw your marketing consent at any time by:

• Updating your communication preferences in your 333x account dashboard;
• Clicking the unsubscribe link included in any 333x marketing email;
• Contacting the 333x support team directly.

10.3  Withdrawal of marketing consent will be processed within 10 business days. Please note that transactional communications — such as deposit confirmations, withdrawal notifications, security alerts, and account-related notices — are not marketing communications and will continue to be sent regardless of marketing opt-out status.

10.4  333x will not sell, license, or otherwise transfer your contact details to third parties for their own independent marketing purposes.

11.1  Subject to applicable law and any overriding legal obligations, you have the following rights with respect to your personal data held by 333x:

12.1  The 333x platform is strictly for adults aged 21 and above. 333x does not knowingly collect or process personal data from individuals under the age of 21. Age verification is performed as part of the KYC process prior to withdrawal, and 333x employs reasonable technical measures to prevent underage access.

12.2  If 333x becomes aware that personal data has been collected from a person under 21 years of age, that account will be closed immediately, all associated balances will be frozen pending investigation, and the data will be deleted or anonymised to the extent permitted by applicable legal obligations.

12.3  If you believe that a minor has registered a 333x account or accessed the platform using false identity information, please contact the 333x support team immediately with relevant details so that the account can be investigated and closed.

13.1  333x implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 333x platform;
• Encryption at rest for all stored personal and financial data;
• Access controls limiting internal access to personal data to authorised staff on a need-to-know basis;
• Regular internal and third-party security audits and penetration testing;
• Real-time anomaly detection and intrusion monitoring systems;
• Two-factor authentication (2FA) available for all player accounts;
• Regular staff training on data protection and information security obligations.

13.2  In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 333x will notify you without undue delay and in accordance with applicable data breach notification requirements.

14.1  The 333x platform may contain links to third-party websites or services — for example, links to payment provider portals or licensing authority websites. This Privacy Policy applies only to the 333x platform and does not extend to any third-party sites accessed through links on 333x.

14.2  333x is not responsible for the privacy practices of third-party websites. We recommend that you review the privacy policy of any third-party site you visit before providing personal data to that site.

15.1  333x reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a significant change to how we use your personal data or the categories of third parties with whom we share it — 333x will provide at least 14 days' advance notice via email and a prominent notice on the platform.

15.2  The effective date of the current version of this Policy is displayed at the top of this page. The version published on this page at any given time is the operative version. We encourage you to review this Policy periodically to stay informed of how 333x protects your data.

15.3  Your continued use of the 333x platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree with any amendment, you should cease using the platform and contact support to initiate account closure.

16.1  If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how 333x handles your personal data, please contact the 333x support team. Support is available 24 hours a day, 7 days a week, via live chat on the platform. The 333x contact email is displayed in the footer of the website as plain text.

16.2  333x will acknowledge receipt of data rights requests and privacy complaints within 48 hours and will aim to provide a substantive response within 30 days. Where a request is particularly complex or involves a high volume of data, the response period may be extended by a further 60 days, with notice given within the initial 30-day window.

16.3  If you are not satisfied with 333x's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. Details of applicable escalation routes will be provided as part of any final privacy complaint response.