333x Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 333x Group ("333x", "we", "us", "our") collects, uses, stores, and shares personal information relating to players and visitors who use the 333x platform at 333x.club, including all associated subdomains, mobile-optimised sites, and applications (collectively, the "Platform").

333x is committed to safeguarding the privacy of all users. We understand that Pakistani players entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy is written in plain language so that every player — whether from Karachi, Lahore, Islamabad, or Faisalabad — can clearly understand how their data is handled.

By registering an account, accessing the Platform, or otherwise interacting with any 333x service, you acknowledge that you have read and understood this Policy. If you do not agree with the terms of this Policy, you should not use the 333x Platform.

2 Data Controller

The data controller responsible for your personal information is 333x Group, the operator of the 333x online gaming platform. As the data controller, 333x Group determines the purposes and means of processing personal data collected through the Platform.

For all data protection enquiries, you may contact 333x at [email protected] or through the live chat function available inside your account dashboard. Please mark data protection queries clearly in your message so they are routed to the appropriate team.

3 Data We Collect

333x collects personal data in several ways: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third-party service providers such as payment processors and identity verification services. The categories of data we collect include:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (for age verification — you must be 21 or older);
• National Identity Card (CNIC) number for Pakistani players;
• Residential address, including city (e.g. Karachi, Lahore, Islamabad);
• Email address and mobile phone number;
• Username and encrypted password.

3.2 Financial & Payment Data

• JazzCash or EasyPaisa mobile wallet numbers used for deposits and withdrawals;
• HBL, UBL, or Meezan Bank account details provided for bank transfer transactions;
• USDT TRC20 wallet addresses where applicable;
• Transaction history including deposit amounts, withdrawal requests, and bonus activity;
• Account balance history in Pakistani Rupees (PKR).

3.3 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser information;
• Pages visited, games played, session duration, and betting history;
• Login timestamps and activity logs;
• Cookie identifiers and similar tracking technologies (see Section 7).

3.4 KYC Verification Documents

• Scanned or photographed copies of government-issued photo ID (CNIC, passport);
• Proof of address documents (utility bills, bank statements);
• Selfie photographs taken for liveness verification during the KYC process;
• Proof of payment method ownership where required.

4 How We Use Your Data

333x uses the personal data it collects for the following documented purposes:

5 Legal Basis for Processing

333x processes personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contract Performance: Processing that is necessary to fulfil our obligations under the Player Agreement, including operating your account and processing transactions;
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering (AML) regulations, responsible gaming obligations, and tax reporting requirements;
• Legitimate Interest: Processing for fraud prevention, platform security, and product improvement, where our interests are not overridden by your rights and interests;
• Consent: Processing for optional activities such as marketing communications, where you have given a clear, informed, and freely given consent that you may withdraw at any time.

6 Sharing Your Data

333x does not sell your personal data. We may share your data with the following categories of third parties strictly on a need-to-know basis and subject to appropriate data protection agreements:

6.1 Payment Processors

To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT TRC20, we share the minimum necessary payment data with the relevant payment service provider. These providers are contractually bound to use your data solely for payment processing purposes.

6.2 Identity Verification Providers

333x uses regulated third-party identity verification services to perform KYC checks. These providers process identity documents and biometric data on our behalf and are prohibited from using this data for any other purpose.

6.3 IT Infrastructure and Hosting Providers

Our Platform is hosted on secure cloud infrastructure. Hosting providers may have incidental access to encrypted data as part of providing infrastructure services, but they do not process your data in any meaningful way.

6.4 Regulatory and Law Enforcement Bodies

333x may be legally required to share player data with regulatory authorities, law enforcement agencies, or financial intelligence units in connection with anti-money laundering investigations, court orders, or other lawful demands. We will disclose only the minimum data required to comply with such requests.

7 Cookies & Tracking Technologies

333x uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device when you visit 333x.club. We use the following categories of cookies:

• Essential Cookies: Required for the Platform to function correctly. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies without losing access to the Platform.
• Analytics Cookies: Used to understand how players navigate the Platform — which pages are most visited, where sessions end, and how game categories are explored. This data is aggregated and anonymised.
• Functionality Cookies: Remember your preferences such as language settings, display preferences, and last-visited game categories to personalise your experience.
• Marketing Cookies: Where you have consented, we may use cookies to serve you relevant promotions on the 333x Platform. We do not use marketing cookies to track you across third-party websites.

You can manage your cookie preferences through your browser settings. Note that disabling non-essential cookies may affect certain Platform features. For a full list of cookies in use on 333x.club, contact support via your account dashboard.

8 Data Retention

333x retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to longer retention where required by applicable law or regulation. Our general retention guidelines are:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, in line with standard anti-money laundering record-keeping requirements;
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• Support Communications: Retained for three (3) years from the date of the interaction;
• Technical Logs: Retained for twelve (12) months from the date of generation, unless required for an ongoing investigation;
• Marketing Consent Records: Retained for the duration of your active consent plus three (3) years.

Once the applicable retention period expires, personal data is securely and irreversibly deleted or anonymised so that it can no longer be attributed to an identifiable individual.

9 Data Security

333x implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment details;
• Multi-factor authentication requirements for account access and internal administrative systems;
• Regular penetration testing and vulnerability assessments of the 333x Platform;
• Role-based access controls ensuring that only authorised 333x personnel can access player data, strictly on a need-to-know basis;
• Continuous security monitoring and automated intrusion detection systems;
• Regular staff training on data protection and information security best practices.

10 Children & Minors

The 333x Platform is strictly for adults aged 21 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 21. Registration by minors is prohibited and constitutes a material breach of the 333x Terms & Conditions.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered an account on 333x, please contact us immediately at [email protected]. We will investigate promptly and, if confirmed, close the account and delete all associated personal data without undue delay.

11 International Data Transfers

333x Group operates on an international basis. As a result, your personal data may be transferred to and stored in countries outside Pakistan. Where such transfers occur, 333x ensures that appropriate safeguards are in place to protect your data to an equivalent standard as required under applicable data protection law. Such safeguards may include standard contractual clauses, data processing agreements, or transfers to jurisdictions that offer an adequate level of data protection.

By using the 333x Platform, you acknowledge and consent to the transfer of your personal data as described in this Section. If you have questions about the specific safeguards applied to your data transfers, contact us via [email protected].

12 Marketing Communications

333x may send you marketing communications about promotions, new games, bonus offers, and platform updates if you have given your explicit consent to receive such communications during registration or at a later point in your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your account settings;
• Clicking the "unsubscribe" link included in any marketing email from 333x;
• Contacting support via live chat in your account dashboard.

Withdrawal of consent for marketing communications will not affect your ability to continue using the 333x Platform or receive essential transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.

13 Changes to This Privacy Policy

333x reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players by email to their registered address and/or by a prominent notice on the Platform at least 14 days before the changes take effect.

The effective date at the top of this Policy will be updated each time a new version is published. We encourage you to review this Policy periodically to stay informed about how 333x handles your personal data. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

14 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 333x handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 inside your 333x account dashboard after login — the fastest route for privacy queries;
• Email: [email protected] — please use the subject line "Privacy Query" so your message reaches the right team.

We commit to acknowledging all data protection queries within 5 business days and resolving them within 30 days. For complaints that we are unable to resolve to your satisfaction through our internal process, you may escalate the matter to the applicable data protection or gaming regulatory authority.