333bad Privacy Policy

When you register for a 333bad account, interact with the platform, or contact our support team, we collect personal data in the following categories:

Registration and identity data: When you create a 333bad account, we collect your full legal name as it appears on your Bangladesh National Identity Card (NID), your date of birth, your registered mobile number (a Bangladesh number is required for SMS OTP authentication), and a username of your choosing. You may also provide your district of residence within Bangladesh — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar.

Identity verification documents: When 333bad requests KYC (Know Your Customer) verification — which may occur at registration, prior to processing a withdrawal, or at any time we have reasonable grounds to verify your identity — we collect copies of identity documents such as your National Identity Card, passport, or birth registration certificate. We may also collect a photograph of your registered bKash, Nagad, or Rocket account interface as proof of payment method ownership.

Financial transaction data: We record all deposits and withdrawals made through your 333bad account, including the amount in BDT, the payment method used (e.g., bKash, Nagad, Rocket, Dutch-Bangla Bank, BRAC Bank), the transaction timestamp in Bangladesh Standard Time (BST, UTC+6), and a reference identifier assigned by the payment provider. We do not store full card numbers; only the last four digits and card type are retained for Visa and Mastercard transactions.

Gameplay and betting data: We record your game session history, bet amounts, game outcomes, casino game interactions, and sports betting selections including cricket betting activity on BPL, IPL, T20, and Bangladesh Tigers markets. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

Technical and device data: We automatically collect your IP address, browser type and version, device type (desktop or mobile), operating system, and the pages or screens you access within the 333bad platform. This data is used for security monitoring, fraud detection, and aggregate analytics.

Communications data: If you contact 333bad via live chat or email at [email protected], we retain a record of that correspondence including the content of your messages and any attachments you provide. This enables us to provide consistent support and to resolve disputes effectively.

333bad uses the personal data we collect for the following specific purposes:

Account creation and management: Your registration data is used to create and maintain your 333bad player account, to authenticate your identity when you log in, and to communicate important account-related information to you via your registered mobile number or email address.

Processing financial transactions: Your financial and identity data is used to process deposits and withdrawals in BDT via your chosen payment method (bKash, Nagad, Rocket, or supported bank), to prevent duplicate transactions, and to maintain accurate records of your account balance.

Identity verification and fraud prevention: We use identity and technical data to verify that you are who you say you are, that you meet the 18+ age requirement, that you are not operating multiple accounts, and that your account is not being used for fraudulent activity, money laundering, or other prohibited conduct.

Responsible gaming monitoring: 333bad uses your gameplay and betting data to monitor for patterns that may indicate problem gambling behaviour — such as rapidly escalating bet sizes, extended unbroken play sessions, or frequent large deposits followed immediately by large withdrawals. Where such patterns are detected, our responsible gaming team may proactively contact you to offer support resources and self-exclusion options.

Customer support: Communications data from your live chat and email interactions with our support team is used solely to resolve your specific queries, to investigate disputes, and to improve the quality of our support service. Support logs are not used for marketing purposes.

Platform improvement and analytics: Aggregated, anonymised technical and gameplay data is used to understand how players use the 333bad platform, to identify performance issues, and to guide product development decisions. This analysis does not identify individual players.

Marketing communications: With your explicit consent, 333bad may send you promotional offers, bonus notifications, and event alerts relevant to your interests — such as BPL season promotions, Eid bonus offers, or new game launch announcements. You may withdraw consent for marketing communications at any time through your account settings or by contacting [email protected].

333bad does not sell, rent, or trade your personal data to any third party for their own independent commercial purposes. We may, however, share your data with the following categories of recipients in the circumstances described below:

Payment service providers: When you make a deposit or request a withdrawal, we share the transaction details necessary to process that payment with the relevant payment service provider — for example, bKash, Nagad, Rocket, or a supported Bangladeshi bank such as Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank. These providers receive only the data strictly required to process your specific transaction.

Game studio and software providers: 333bad's casino games are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, your account identifier and session token are passed to the relevant game studio's platform to initialise your game session. Game studios do not receive your full name, NID, or financial account details.

Identity verification service providers: Where 333bad uses a third-party KYC or identity verification service to assist with document verification, we share the identity documents and data you submit for that purpose with that service provider under a strict data processing agreement.

Legal and regulatory disclosure: We may disclose your personal data to law enforcement agencies, courts, or regulatory authorities where we are legally required to do so — for example, in response to a valid court order, a police investigation, or an AML reporting obligation. In such cases, we disclose only the minimum data required to comply with the specific legal obligation.

Business successors: In the event that 333bad is acquired by, merges with, or transfers its assets to another entity, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any material change to how your data is handled before it takes effect.

All third parties with whom 333bad shares personal data are required by contract to handle that data securely, to use it only for the specific purpose for which it was shared, and to comply with applicable data protection principles. 333bad does not permit its data processors to sub-contract the handling of your personal data without prior written authorisation.

Cookies are small text files stored on your device by your web browser when you visit a website. 333bad uses the following categories of cookies:

• Essential session cookies: These cookies are strictly necessary for the 333bad platform to function. They maintain your login session, preserve your account state between pages, and prevent cross-site request forgery (CSRF) attacks. Without these cookies, you cannot log in or place bets. Essential cookies cannot be disabled without breaking platform functionality.
• Preference cookies: These cookies remember your platform settings — such as your preferred language (English), display preferences, and responsible gaming reminder schedules — so that you do not need to reconfigure them on each visit.
• Analytics cookies: 333bad uses anonymised, aggregated analytics cookies to understand how players navigate the platform, which game categories are most popular, and where players encounter friction in the deposit or registration flow. This data does not identify you individually and is used solely for platform improvement.
• Security cookies: These cookies assist our fraud detection systems by identifying unusual access patterns — such as a login attempt from an IP address not previously associated with your account — and triggering additional verification steps where appropriate.

Managing cookies: You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. Please note that disabling essential cookies will prevent you from logging into your 333bad account. Disabling analytics cookies will not affect your ability to use any platform feature.

No third-party advertising cookies: 333bad does not place third-party advertising or retargeting cookies on your device. We do not participate in cross-site advertising networks and do not allow advertising technology providers to place tracking pixels or scripts on the 333bad platform.

The security of your personal data is a core operational priority for 333bad. We implement the following technical and organisational security measures:

• Transport layer encryption: All data transmitted between your browser or app and the 333bad platform is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed continuously to ensure uninterrupted encrypted transmission.
• Password hashing: Account passwords are never stored in plain text. We apply a strong cryptographic hashing algorithm with per-account salting so that even in the unlikely event of a data breach, stored password hashes cannot be reversed to recover your original password.
• Two-factor authentication (2FA): 333bad supports SMS OTP-based two-factor authentication using your registered Bangladesh mobile number. We strongly recommend enabling 2FA on your account to provide an additional layer of protection against unauthorised access.
• Access controls: Access to personal data stored in 333bad's systems is restricted to authorised personnel on a strict need-to-know basis. Support agents, for example, can view the account information necessary to resolve your query but cannot access full payment method credentials or raw identity document images beyond what is required for KYC processing.
• Infrastructure security: The 333bad platform is hosted on servers with physical and logical access controls, continuous security monitoring, and regular vulnerability assessments. We conduct periodic reviews of our security architecture to identify and remediate potential weaknesses.

Data breach response: In the event that 333bad becomes aware of a security incident that has resulted in unauthorised access to or disclosure of your personal data, we will notify affected players promptly at their registered contact details and will take immediate steps to contain the breach, assess its scope, and prevent recurrence.

Your responsibility: 333bad's security measures protect your data on our side of the connection. You are also responsible for securing your own device, keeping your 333bad password strong and confidential, and not accessing your account over unsecured public Wi-Fi networks. Never share your account credentials with anyone — 333bad support staff will never ask for your password.

As a 333bad player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. We will acknowledge your request within 2 business days (BST) and aim to fulfil it within 30 days.

• Right of access: You may request a copy of the personal data that 333bad holds about you. We will provide this in a structured, readable format (typically a PDF or CSV summary) covering your registration data, transaction history, gameplay records, and communications history.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. For example, if your registered name contains a typo or your district of residence has changed, contact support to request an update.
• Right to erasure: You may request that 333bad delete your personal data. We will fulfil this request where we are not required to retain the data by law (for example, transaction records that must be retained for AML compliance purposes may not be immediately erasable). Where full erasure is not possible due to legal obligations, we will anonymise your data to the greatest extent possible.
• Right to restrict processing: You may request that 333bad temporarily restrict the processing of your personal data — for example, while you dispute the accuracy of data we hold. During a restriction period, we will continue to store your data but will not use it for any purpose beyond storage.
• Right to data portability: You may request that we provide your personal data in a machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider if you wish.
• Right to withdraw consent: Where 333bad processes your data on the basis of your consent — such as for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object to direct marketing: You may opt out of receiving promotional communications from 333bad at any time by updating your preferences in your account settings or by emailing [email protected]. Opting out of marketing does not affect transactional communications (such as deposit confirmations and withdrawal notifications), which are necessary for account management.

The length of time 333bad retains your personal data depends on the category of data and the purpose for which it was collected. The following retention schedules apply:

When the applicable retention period expires and no legal obligation requires further retention, 333bad will securely delete or irreversibly anonymise your personal data. Secure deletion involves overwriting stored data in a manner that makes recovery infeasible. Where physical media containing your data is decommissioned, that media is destroyed in accordance with data destruction best practices.

If you request account closure, we will cease active use of your personal data immediately but will retain it in an archived state for the applicable retention periods set out in the table above. Your data will not be accessible to support agents or used for any operational purpose during the archive period; it is retained solely to fulfil legal obligations and to respond to any regulatory or law enforcement requests that arise after account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 333bad handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled in English and are treated with strict confidentiality.

Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
Live chat: Available 24/7 through the 333bad platform
Response time: 2–5 minutes via live chat; within 4 hours via email (Bangladesh Standard Time, UTC+6)

Complaints procedure: If you are not satisfied with 333bad's response to a privacy-related concern, you may escalate your complaint by emailing [email protected] with the subject line "Escalated Privacy Complaint" and a summary of your original query and the response you received. An escalated complaint will be reviewed by a senior member of the 333bad operations team within 5 business days.

Changes to this Privacy Policy: 333bad reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered players via email to their registered address or via an in-platform notification. The "Last updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of the 333bad platform following notification of a change to this Privacy Policy constitutes acceptance of the revised policy.