Privacy Policy – How 333x Protects Your Data in Pakistan

This Privacy Policy explains how 333x ("333x", "we", "us", "our") collects, processes, stores, shares, and protects personal data in connection with your use of the 333x website, mobile application, and all related services (the "Platform"). It applies to all current and former registered members, visitors to the Platform, and any individual who contacts us directly.

By registering an account or using the 333x Platform in any way, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of our Terms and Conditions and should be read alongside them. If you have questions about anything in this Policy, please contact our support team before using the Platform.

We update this Privacy Policy periodically as our services evolve or legal requirements change. The current version is always published on this page with the "Last Updated" date shown at the top. Continuing to use the Platform after a policy update constitutes acceptance of the revised terms.

333x collects only the data that is genuinely necessary to provide you with a secure, functional, and personalised betting and gaming experience. We do not collect data speculatively or beyond what serves a clear and legitimate purpose. The categories of personal data we may collect are:

We may also collect data indirectly — for example, information provided by payment providers to confirm a transaction, or device fingerprinting data collected automatically when you access the Platform. In all cases, the purpose of collection is limited to what is described above.

333x uses the personal data we collect for the following specific purposes:

• Account management: Creating and maintaining your 333x account, verifying your identity and age, and managing account security.
• Transaction processing: Processing deposits, settling bets and game outcomes, processing withdrawal requests, and maintaining accurate financial records.
• Compliance and legal obligations: Conducting KYC and AML (anti-money laundering) checks, responding to lawful requests from authorities, and maintaining records as required by applicable law.
• Fraud prevention and security: Detecting suspicious activity, protecting against unauthorised account access, identifying bonus abuse, and safeguarding the integrity of the Platform.
• Customer support: Responding to queries, resolving disputes, and improving our support processes based on communication records.
• Responsible gaming: Monitoring usage patterns to identify potentially problematic gambling behaviour and offering appropriate support tools.
• Platform improvement: Analysing aggregated usage data to improve the Platform's functionality, performance, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — but only where you have given your explicit consent to receive such communications. You can withdraw consent at any time.

333x processes your personal data on the basis of one or more of the following legal grounds:

• Contract performance: Processing is necessary to deliver the services you signed up for — account management, transaction processing, betting settlement, and customer support all fall into this category.
• Legal obligation: Certain processing is required to comply with applicable laws — KYC verification, AML monitoring, and record retention mandated by financial regulations are examples.
• Legitimate interests: We may process data where necessary to pursue our legitimate business interests, including fraud detection, platform security, and improving our services, provided these interests do not override your rights.
• Consent: Where processing is not required for the above reasons — such as sending marketing communications or using non-essential cookies — we obtain your explicit consent first. You can withdraw consent at any time without affecting the lawfulness of prior processing.

333x does not sell, rent, or trade your personal information. We may share your data only in the following limited and controlled circumstances:

• Payment processors: Transaction data is shared with payment service providers — including Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners — solely to process deposits and withdrawals. These partners are contractually bound to handle your data securely and only for the stated purpose.
• Identity verification services: During KYC, your identity documents may be processed by third-party verification services that 333x has contracted for this purpose. These services do not retain your documents beyond the verification process.
• Fraud prevention and security partners: Aggregated or anonymised data may be processed by security analytics tools to detect fraud patterns. No personal data is shared with these services in identifiable form unless absolutely necessary for a specific investigation.
• Regulatory and law enforcement authorities: We may disclose personal data when legally required to do so by a court order, government directive, or regulatory authority. We will inform you of such disclosures where legally permitted.
• Professional advisers: Lawyers, auditors, and other professional advisers who require access to data in order to provide services to 333x are bound by confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 333x's business, member data may be transferred as part of that transaction. You will be notified before any such transfer takes effect and will have the opportunity to request account closure.

As a regulated financial services platform, 333x is required to verify the identity of members who make withdrawals. This Know Your Customer (KYC) process involves the collection and verification of identity documents. The following applies to KYC data specifically:

• Documents you submit for KYC — such as a copy of your CNIC — are encrypted immediately upon receipt and stored in a restricted-access secure environment.
• Only personnel with a specific operational need to review KYC documents have access to them. Access is logged and audited regularly.
• KYC documents are retained for the period required by applicable anti-money laundering law. After this period, documents are securely destroyed.
• We do not store your full payment card number. Card transactions are processed through PCI-DSS compliant payment gateways and only a tokenised reference is retained by 333x.
• Easypaisa and JazzCash wallet numbers associated with your account are stored in encrypted form and used solely for processing your deposit and withdrawal requests.

The transaction history associated with your account — including deposit amounts, withdrawal amounts, dates, and payment methods — is retained as part of your account record and may be accessed by you at any time through your account dashboard.

333x retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specific retention periods by data category are as follows:

• Active account data (name, contact details, preferences): Retained for the duration of your account plus 30 days after closure to allow for any outstanding disputes to be resolved.
• Transaction records (deposit/withdrawal history, bet history): Retained for 7 years after the relevant transaction date, as required for financial and tax compliance purposes.
• KYC documents (CNIC copies, verification records): Retained for 5 years after account closure in compliance with anti-money laundering regulations.
• Customer support communications: Retained for 3 years from the date of the last interaction to support dispute resolution and service improvement.
• Technical logs (IP addresses, session data): Retained for 12 months for security monitoring and fraud investigation purposes.
• Marketing consent records: Retained for the lifetime of your account plus 3 years to demonstrate consent compliance.

When data is no longer required for its retention period, it is securely deleted or anonymised so that it can no longer be associated with you personally. Anonymised, aggregated data may be retained indefinitely for analytical and reporting purposes.

The 333x Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to protect your account security, and — where you have given consent — to improve your experience and deliver relevant promotions. A cookie is a small text file placed on your device when you visit a website.

The following types of cookies are used on 333x:

You can also control cookies through your browser settings. Note that disabling all cookies through your browser may prevent some parts of the 333x Platform from functioning correctly. We recommend using the in-account preference controls rather than browser-level blocking for the best experience.

As a 333x member, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@333x.click with your request. We will respond within 30 days.

The 333x Platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe that a minor has registered an account or provided personal data to 333x, please contact us immediately at support@333x.click.

Upon receiving a credible report of underage access, 333x will immediately suspend the relevant account, investigate the matter, and delete all personal data associated with the account to the extent possible under applicable law. Any deposited funds will be returned to the originating payment method net of any withdrawals already made.

333x implements technical and organisational security measures proportionate to the sensitivity of the data we process and the risks involved. Our security framework includes:

• SSL/TLS encryption: All data transmitted between your device and the 333x Platform is encrypted using industry-standard SSL/TLS protocols. This applies to every page of the Platform, not just financial pages.
• Encryption at rest: Sensitive personal data — including identity documents, financial data, and passwords — is stored in encrypted form on our servers. Passwords are hashed using a modern one-way algorithm and are never stored or transmitted in plain text.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. Staff access to member data is logged and audited. Access rights are reviewed regularly and revoked immediately upon role changes.
• Intrusion detection: 333x operates continuous intrusion detection and monitoring systems to identify and respond to potential security threats in real time.
• Penetration testing: We conduct regular third-party security assessments of the Platform to identify and remediate vulnerabilities before they can be exploited.
• Data breach response: In the event of a security incident that affects your personal data, 333x will notify you without undue delay, describe what data was affected, what steps we have taken, and what actions you can take to protect yourself.

While we take every reasonable step to secure your data, no internet platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong, unique password for your 333x account and never share your login credentials with anyone.

333x reviews and updates this Privacy Policy periodically to reflect changes in our services, applicable law, or privacy best practices. When we make material changes to the Policy, we will notify active members by email or through an in-platform notification at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page always reflects when the Policy was most recently revised. We encourage you to review this page periodically so you remain informed about how 333x protects your personal information. Continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If a proposed change to this Policy would materially affect your rights or how your data is used in a way you do not agree with, you have the right to close your account before the change takes effect. Instructions for closing your account are available in the account settings section of the Platform.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to make a complaint about how 333x has handled your personal data, please contact us using the details below. All privacy-related requests are handled by a dedicated team and we aim to respond within 30 days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. 333x will not penalise you for making a complaint or for exercising any of your data rights.