333bm Privacy Policy — Your Data, Your Rights, Our Responsibility
At 333bm, protecting the personal information of every registered player across Bangladesh is a fundamental obligation, not an afterthought. This Privacy Policy explains precisely what data we collect, why we collect it, how it is stored and protected, and the rights you hold over your own information.
Our Privacy Commitments
Six Principles That Guide How 333bm Handles Your Data
These cards summarise the core commitments 333bm makes to every player. They are intended as an accessible overview — the full binding policy text is set out in the sections below.
Minimal Data Collection
333bm collects only the personal data that is genuinely necessary for account registration, identity verification, payment processing, and the delivery of a safe gaming environment. We do not collect data speculatively or in excess of what each specific purpose requires.
Secure Storage
All personal data held by 333bm is stored on encrypted servers protected by industry-standard security protocols including SSL/TLS encryption in transit and AES-256 encryption at rest. Access to member data is restricted to authorised personnel only, on a strict need-to-know basis.
No Sale of Personal Data
333bm does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your information is used exclusively within the 333bm ecosystem and shared only with the limited service providers necessary to operate the platform as described in this policy.
Your Rights Are Respected
Every 333bm member has the right to access, correct, and request deletion of their personal data, subject to legal retention obligations. Requests are handled within 30 days and at no cost to the member.
Full Transparency
333bm believes players have a right to know exactly how their data is used. This Privacy Policy is written in plain English, structured clearly, and updated whenever our practices change. We will never bury significant data-use decisions in opaque legal language designed to obscure rather than inform.
Defined Retention Periods
We do not retain your personal data indefinitely. Each category of data is held only for as long as necessary to fulfil its stated purpose or comply with applicable legal obligations. When the retention period expires, data is securely deleted or anonymised so it can no longer be linked to you personally.
Document Navigation
Table of Contents
Use the links below to jump directly to any section of the 333bm Privacy Policy. This policy is binding on all registered members and visitors to https://333bm.io.
Sections in This Document
- 01 Who We Are and How to Contact Us
- 02 What Personal Data We Collect
- 03 How and Why We Use Your Data
- 04 Legal Basis for Processing
- 05 Cookies and Tracking Technologies
- 06 Third-Party Sharing and Disclosure
- 07 Data Retention
- 08 Security Measures
- 09 Your Rights Over Your Personal Data
- 10 Marketing and Communications
- 11 Children and Minors
- 12 Changes to This Privacy Policy
- 13 Contact and Data Requests
01 Who We Are and How to Contact Us
333bm is an online casino and sports betting platform accessible at https://333bm.io, serving adult players primarily across Bangladesh. For the purposes of this Privacy Policy, 333bm acts as the data controller responsible for deciding how and why your personal data is processed in connection with your use of the platform.
If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, you may contact the 333bm data and privacy team using the following details:
- Email: [email protected] — please include "Privacy Request" in your subject line for faster routing.
- Live Chat: Available within the 333bm platform after login, 24 hours a day, 7 days a week.
- Response Time: All privacy-related enquiries are acknowledged within 48 hours and substantively resolved within 30 calendar days.
02 What Personal Data We Collect
333bm collects personal data through several channels: directly from you when you register, deposit, or contact support; automatically when you use the platform; and, in limited cases, from third-party verification and payment service providers. The categories of data we collect are as follows:
2.1 Registration and Identity Data
- Full legal name
- Date of birth (to verify you are aged 21 or above)
- Residential address in Bangladesh
- Email address
- Mobile phone number
- Username and encrypted account password
2.2 Identity Verification (KYC) Data
- Scanned or photographed copies of government-issued photo identification (National ID, passport, or driving licence)
- Proof of address documentation (utility bill, bank statement)
- Selfie photograph alongside your submitted ID document
- bKash, Nagad, or Rocket wallet screenshots confirming registered mobile number ownership
2.3 Financial and Transaction Data
- Deposit and withdrawal history including amounts, dates, and payment method references
- Payment method identifiers (e.g., last 4 digits of a card, registered bKash mobile number)
- Bonus balance, wagering activity, and real money balance records
2.4 Usage and Technical Data
- IP address and approximate geographic location derived from IP
- Device type, operating system, and browser type
- Session timestamps, login and logout records
- Pages visited, games played, bets placed, and feature interactions within the platform
- Referral source (e.g., how you arrived at 333bm.io)
2.5 Communications Data
- Records of support chat conversations, emails, and complaint correspondence
- Survey responses and feedback submissions
- Marketing preference settings (opt-in and opt-out records)
03 How and Why We Use Your Data
The table below sets out the primary purposes for which 333bm processes your personal data, together with a brief explanation of each purpose.
| Purpose | Data Categories Used | Details |
|---|---|---|
| Account creation and management | Registration data | To create, maintain, and administer your 333bm account, including password recovery and account security. |
| Age and identity verification | KYC data, registration data | To confirm all players are 21 years of age or older and to verify that the identity provided at registration is genuine. |
| Processing payments | Financial data, KYC data | To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard. |
| Fraud and abuse prevention | Usage data, financial data, KYC data | To detect and prevent money laundering, bonus abuse, multi-accounting, fraudulent chargebacks, and automated bot activity. |
| Responsible gaming | Usage data, financial data, registration data | To monitor for indicators of problem gambling and to enforce self-exclusion, deposit limits, and cooling-off periods requested by members. |
| Customer support | Communications data, registration data | To respond to enquiries, complaints, and support requests submitted via chat or email. |
| Platform improvement | Usage data, technical data | To analyse how members use the platform and identify areas for improvement, new features, and performance optimisation. |
| Marketing communications | Registration data, communications preferences | To send promotional offers, bonus alerts, and event notifications — only to members who have opted in to receive marketing. See Section 10 for full details. |
04 Legal Basis for Processing
333bm processes your personal data under one or more of the following legal bases depending on the specific purpose:
- Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accepted when registering — including account management, payment processing, and game delivery.
- Legal obligation: Processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and financial record-keeping regulations.
- Legitimate interests: Processing that serves 333bm's legitimate business interests where those interests are not overridden by your rights — such as fraud detection, platform security, and analytical improvement of services.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Where 333bm relies on legitimate interests as the legal basis for processing, we have assessed that the processing is necessary, proportionate, and does not unduly interfere with your rights and freedoms as a data subject.
05 Cookies and Tracking Technologies
5.1 What Are Cookies
Cookies are small text files placed on your device when you visit a website. 333bm uses cookies and similar tracking technologies (such as web beacons and local storage objects) to ensure the platform functions correctly, to maintain your session between pages, and to gather analytical data about how the platform is used.
5.2 Types of Cookies Used
- Essential cookies: Required for the platform to operate. These include session authentication cookies that keep you logged in as you navigate between pages. These cookies cannot be disabled without impairing core platform functionality.
- Analytical cookies: Used to collect aggregated, anonymised data about visitor behaviour — such as which game categories are most visited, how long sessions last, and where users drop off. This data informs platform improvements.
- Preference cookies: Store non-sensitive preferences such as your selected language settings or game display options to improve your experience on return visits.
- Security cookies: Support fraud detection and account security functions by helping to identify unusual login patterns or suspicious device activity.
5.3 Managing Cookies
You may adjust cookie preferences through your browser settings at any time. Most modern browsers allow you to block, delete, or receive notifications about cookies. Please note that disabling essential cookies will prevent you from logging into your 333bm account and accessing the platform's full functionality. 333bm does not currently use third-party advertising or retargeting cookies.
06 Third-Party Sharing and Disclosure
333bm does not sell, rent, or trade your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and card networks (Visa, Mastercard) receive the transactional data necessary to process deposits and withdrawals. Each payment partner operates under its own privacy policy and is independently responsible for data it collects during payment processing.
- Identity verification providers: Third-party KYC service providers may process identity documents on our behalf to assist with age verification and fraud checks. These providers are contractually bound to process data only on 333bm's instructions.
- Game content providers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive your account session token and staking data necessary to deliver their games within the 333bm platform. They do not receive your full registration details unless contractually required for their own compliance obligations.
- IT and infrastructure providers: Cloud hosting, server management, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
- Legal and regulatory authorities: Where required by applicable law, court order, or regulatory instruction, 333bm may disclose personal data to law enforcement agencies or financial intelligence units. We will notify affected members of such disclosures where legally permitted to do so.
07 Data Retention
333bm retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The table below sets out our standard retention periods by data category:
| Data Category | Retention Period | Reason |
|---|---|---|
| Registration and identity data | Duration of account plus 5 years after closure | Legal obligation and fraud prevention |
| KYC verification documents | 5 years from date of verification or account closure | Anti-money laundering compliance |
| Financial and transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Game and betting history | 5 years from session date | Dispute resolution and regulatory compliance |
| Support communications | 3 years from last interaction | Quality assurance and complaint management |
| Usage and technical data | 24 months on a rolling basis | Security monitoring and platform analytics |
| Marketing preferences | Until opt-out, then 2 years | Consent record management |
| Self-exclusion records | Minimum 7 years | Responsible gaming and regulatory compliance |
Upon expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data (which cannot be used to identify you) may be retained indefinitely for statistical purposes.
08 Security Measures
333bm implements a layered approach to data security, combining technical, organisational, and procedural measures to protect your personal data against unauthorised access, loss, alteration, or disclosure.
8.1 Technical Safeguards
- SSL/TLS encryption: All data transmitted between your device and 333bm servers is encrypted using industry-standard TLS 1.2 or higher protocols.
- AES-256 encryption at rest: Sensitive personal data stored in our databases is encrypted at rest using AES-256 standard encryption.
- Password hashing: Account passwords are stored exclusively as salted cryptographic hashes. 333bm staff cannot view your plain-text password at any time.
- Intrusion detection: Automated systems monitor our infrastructure 24/7 for anomalous access patterns, brute-force attempts, and other indicators of a security breach.
- Two-factor authentication: Members are encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of login security.
8.2 Organisational Safeguards
- Access to member personal data is restricted to authorised 333bm personnel on a documented need-to-know basis.
- All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
- Data processing agreements are in place with all third-party service providers who handle personal data.
8.3 Breach Response
In the event of a personal data breach that poses a risk to affected members, 333bm will take immediate steps to contain and assess the breach, notify affected members without undue delay, and take remedial action to prevent recurrence. Members who suspect their 333bm account has been compromised should contact [email protected] immediately.
09 Your Rights Over Your Personal Data
As a 333bm member, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request".
- Right of access: You may request a copy of all personal data 333bm holds about you, along with details of how it is being used.
- Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. Please note that core identity data can only be changed through the KYC process to maintain verification integrity.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (see Section 7).
- Right to restrict processing: In certain circumstances you may request that processing of your data be restricted — for example, while a dispute over data accuracy is being resolved.
- Right to data portability: You may request that personal data you have provided to 333bm be delivered to you in a structured, machine-readable format.
- Right to object: You may object to processing based on legitimate interests, including profiling for fraud detection purposes, where you believe your individual circumstances warrant an override of those interests.
- Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
All rights requests are processed within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days — in which case we will inform you of the extension and the reason for it within the initial 30-day window. We will not charge a fee for rights requests unless they are manifestly unfounded or excessive.
10 Marketing and Communications
10.1 Opt-In Marketing
333bm sends promotional emails, bonus notifications, and event alerts only to members who have expressly opted in to receive marketing communications. Consent to receive marketing is requested during registration and can be updated at any time through your account preferences dashboard.
10.2 Types of Marketing Communications
Where you have opted in, 333bm may send communications relating to: welcome bonus and reload bonus offers; VIP tier promotions and exclusive high-roller rewards; seasonal promotions tied to events such as Eid, Pohela Boishakh, BPL season, IPL, and T20 World Cup; new game launches from providers such as Pragmatic Play, Evolution Gaming, and Spribe; and responsible gaming reminders and self-assessment prompts.
10.3 Transactional Communications
Certain communications are sent regardless of your marketing preference because they are necessary to operate your account. These include: deposit and withdrawal confirmation notices; account verification and KYC status updates; security alerts (e.g., new device login detected); password reset emails; and important policy update notifications. These transactional communications cannot be opted out of while your account remains active.
10.4 How to Opt Out
You may opt out of marketing communications at any time by: updating your preferences in the account dashboard; clicking the unsubscribe link in any marketing email; or contacting [email protected] with the subject line "Marketing Opt-Out". Opt-out requests are processed within 5 business days. You may continue to receive transactional emails after opting out of marketing.
11 Children and Minors
The 333bm platform is strictly for adults aged 21 years and above. 333bm does not knowingly collect personal data from anyone under the age of 21. Our registration process includes mandatory date-of-birth collection and KYC verification procedures specifically designed to identify and exclude underage applicants.
If 333bm discovers that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated data will be securely deleted as soon as legally permissible, and any deposited funds will be returned to the originating payment method. Parents or guardians who believe their child may have registered on the 333bm platform should contact [email protected] immediately.
12 Changes to This Privacy Policy
333bm reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered members by email to the address on file at least 14 days before the updated policy takes effect.
The date of the most recent revision is always displayed at the top of this page. For minor, non-material updates (such as clarifications of existing language that do not alter the substance of our commitments), we may update the policy without prior notice but will update the revision date accordingly.
Your continued use of the 333bm platform after an updated Privacy Policy takes effect constitutes your acknowledgement of and agreement to the revised terms. If you disagree with any update, you should stop using the platform and contact support to request account closure before the effective date.
13 Contact and Data Requests
For all privacy-related matters — including data access requests, erasure requests, marketing opt-outs, consent withdrawals, or questions about this Privacy Policy — please use the following contact details:
- Email: [email protected] — include "Privacy Request" or "Data Rights Request" in the subject line.
- Live Chat: Available in the platform after login, 24 hours a day, 7 days a week. Mention "privacy" or "data request" at the start of the conversation to be routed to the appropriate team.
- Response Commitment: All privacy enquiries are acknowledged within 48 hours and resolved within 30 calendar days. Complex requests may take up to 60 days with prior notification.
333bm's support team operates on Bangladesh Standard Time (BST, UTC+6) with distributed 24/7 coverage. We are committed to handling every privacy request with diligence, respect, and the highest standard of confidentiality. Your trust is the foundation of our relationship, and we treat every data enquiry as a priority.
Continue Exploring
Questions About Your Data? We Are Ready to Help.
If you have any questions about how 333bm handles your personal information, our support team is available around the clock. You can also review our full Terms & Conditions, explore our responsible gaming tools, or log in to manage your account preferences directly.