Privacy Policy — How 3333dat Collects, Uses, and Protects Your Personal Data

Clause 1

Data We Collect

A full account of the categories of personal data that 3333dat collects from players and visitors to the Platform.

3333dat collects personal data through several channels: during account registration, during identity verification (KYC), through your use of the Platform's games and betting markets, through payment transactions, and through your interactions with the support team. The categories of data we collect are set out in the table below.

We do not knowingly collect personal data from individuals under the age of 18. If we discover that a minor has submitted personal data to us, we will permanently close the associated account and securely delete all associated data without delay. Any player who believes that a minor may have registered on the Platform is encouraged to notify us immediately at support@3333dat.

Clause 2

How We Use Your Data

The specific purposes for which 3333dat processes your personal data, and the legal basis for each processing activity.

3333dat processes your personal data only for defined, legitimate purposes. We do not process data in a manner that is incompatible with the purpose for which it was originally collected. The following table sets out our processing activities and their corresponding legal bases.

When we rely on legitimate interest as our legal basis, we have assessed that our interest in processing the data does not override your fundamental privacy rights. You have the right to object to processing carried out on legitimate interest grounds — see Clause 7 (Your Privacy Rights) for details on how to exercise this right.

When we rely on consent as our legal basis (primarily for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal. To withdraw consent for marketing, update your preferences in your account settings or contact support@3333dat.

Clause 3

Data Sharing & Disclosure

The circumstances under which 3333dat may share your personal data with third parties, and the safeguards applied to such sharing.

3333dat does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data only in the following defined circumstances, and only to the extent strictly necessary for the stated purpose.

• Payment Service Providers: We share relevant financial data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and data protection obligations. We share only the minimum data required to complete the transaction.
• Game Technology Providers: We work with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive technical session data (e.g., anonymised player ID, stake amounts, game outcomes) in order to deliver their games through the Platform. They are contractually prohibited from using this data for any purpose other than providing the contracted service.
• Identity Verification Partners: To fulfil our KYC and anti-money laundering (AML) obligations, we may share identity documents and related data with third-party verification service providers. These partners process identity data strictly in accordance with our data processing agreements and applicable data protection standards.
• Fraud Prevention and Security Services: We use specialist third-party services to detect and prevent fraud, account takeover attacks, and money laundering. These services may receive technical data (IP addresses, device fingerprints, session metadata) for the sole purpose of security analysis.
• Analytics Providers: We use anonymised or aggregated usage data to understand how the Platform is used and to improve the user experience. No personally identifiable information is shared with analytics providers in a form that allows you to be individually identified.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts where we are legally required to do so, or where we reasonably believe disclosure is necessary to prevent serious harm, fraud, or criminal activity. We will notify you of such disclosures where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving 3333dat, your personal data may be transferred to the successor entity. We will notify affected players via the registered email address before such a transfer takes effect, and you will have the right to request account closure and data deletion prior to the transfer.

Clause 4

Cookies & Tracking Technologies

How 3333dat uses cookies, local storage, and similar technologies to operate and improve the Platform.

3333dat uses cookies and similar tracking technologies (including local storage and session tokens) to operate the Platform, maintain your authenticated session, remember your preferences, and analyse usage patterns. When you first visit the Platform, you will be informed of our cookie usage. Continued use of the Platform constitutes acceptance of the use of strictly necessary cookies.

3333dat does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on the Platform. We do not participate in cross-site behavioural advertising networks. Your browsing activity on 3333dat is not shared with external advertising platforms for the purpose of targeting you with advertisements on other websites.

You can manage or delete cookies at any time through your browser settings. Please note that disabling functional cookies may affect your Platform experience — for example, your login session may not persist between visits, and your game preferences may not be saved. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Edge, Safari, or other).

Clause 5

Data Security

The technical and organisational measures 3333dat uses to protect your personal data against unauthorised access, loss, or misuse.

3333dat implements a layered approach to data security, combining technical controls, access management, and operational procedures to protect your personal data at every stage of its lifecycle — from collection through to deletion.

• Encryption in Transit: All data transmitted between your browser or mobile device and the 3333dat Platform is encrypted using TLS 1.2 or TLS 1.3 protocols. This prevents eavesdropping, data interception, and man-in-the-middle attacks during transmission.
• Encryption at Rest: Sensitive personal data stored in our databases — including identity documents, financial account references, and authentication credentials — is encrypted at rest using AES-256 encryption. Passwords are stored as salted cryptographic hashes and are never stored in plain text.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal systems require multi-factor authentication for all staff accessing player records. Access logs are maintained and reviewed regularly. Former employees have access revoked immediately upon termination.
• Network Security: The Platform is protected by web application firewalls (WAF), distributed denial-of-service (DDoS) mitigation systems, and intrusion detection systems. Regular penetration testing is conducted by independent security professionals to identify and remediate vulnerabilities.
• Third-Party Security Audits: Our game providers and key infrastructure partners are required to maintain their own certified security standards. Game RNG systems are independently audited by accredited testing laboratories, and the results of those audits are reflected in the RTP disclosures shown in each game's information panel.
• Incident Response: 3333dat maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to affected players, we will notify affected individuals as quickly as practicable, providing details of the nature of the breach, the data involved, and the steps we have taken to contain and remediate it.

Clause 6

Data Retention

How long 3333dat retains your personal data, and what happens to it after the retention period expires.

3333dat retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The retention periods set out below reflect the minimum and maximum periods applicable to each category of data.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted from our active systems and backups within a reasonable technical window, typically not exceeding 90 days from the scheduled deletion date. Where data is subject to an ongoing legal hold (e.g., pending litigation or a regulatory investigation), deletion will be deferred until the hold is lifted.

If you request deletion of your personal data before the end of a statutory retention period, we will delete all data that we are not legally required to retain, and we will clearly explain which data must be kept and for how long. We will not use retained data for any purpose other than compliance with the legal obligation that necessitates its retention.

Clause 7

Your Privacy Rights

The rights you hold over your personal data and how to exercise them when dealing with 3333dat.

As a player whose personal data is processed by 3333dat, you hold the following rights in relation to your data. These rights may be subject to certain limitations where a statutory obligation requires us to retain or continue processing data, but we will always explain the basis for any limitation clearly when responding to your request.

To exercise any of the rights listed above, send a written request to support@3333dat from your registered email address. Please include your full name, username, and a clear description of the right you wish to exercise. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Complex or multiple requests may take up to 60 days, in which case we will notify you of the extended timeline before the initial 30-day period expires.

Clause 8

Contact & Complaints

How to reach the 3333dat privacy team and what to do if you are not satisfied with our response to a privacy concern.

3333dat takes privacy complaints seriously. If you believe that we have processed your personal data in a manner that does not comply with this Privacy Policy, or if you wish to raise a concern about how a data subject rights request was handled, please contact us through one of the following channels.

If you submit a formal privacy complaint and are not satisfied with our response within 30 days, you have the right to escalate the matter to an appropriate supervisory authority in your jurisdiction. 3333dat is committed to resolving all privacy concerns fairly and transparently at the first instance, and we encourage players to contact us directly before escalating to any external body.

This Privacy Policy was last updated on 1 January 2026. We reserve the right to update this policy periodically to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, we will notify registered players via the email address associated with their account at least 14 days before the revised policy takes effect. The updated policy will always be accessible at 3333dat/privacy-policy. Continued use of the Platform after the effective date of a revised policy constitutes acceptance of the updated terms.