333x Privacy Policy

333x (referred to throughout this policy as "333x", "we", "us", or "our") operates the online sportsbook and casino platform accessible at 333x.asia. 333x acts as the data controller in respect of all personal information collected from users of the Platform, meaning we determine the purposes and means by which your personal data is processed.

This Privacy Policy applies to all users of 333x.asia, including registered account holders, visitors who have not yet registered, and any individual whose personal data we process in connection with our services. By accessing 333x.asia or creating a 333x account, you acknowledge that you have read and understood this Privacy Policy.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference into the overall agreement between you and 333x.

333x collects the minimum personal data necessary to provide our services, comply with legal obligations, and maintain the integrity of the Platform. The categories of personal data we collect are described below.

We do not collect any special categories of sensitive personal data (such as health data, biometric data for identification purposes beyond standard KYC liveness checks, or political opinions) unless explicitly required by law and with your informed consent.

333x collects personal data through the following means:

• Direct interactions: Data you provide when registering your 333x account, completing KYC verification, making deposits or withdrawals, contacting our support team, or responding to promotions.
• Automated technologies: When you visit 333x.asia, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. See Section 7 for full details on our cookie practices.
• Third-party providers: We may receive data about you from our payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), identity verification service providers, fraud prevention partners, and analytics platforms — all operating under strict data processing agreements with 333x.
• Publicly available sources: In limited circumstances related to fraud prevention or AML compliance, we may consult publicly available information such as sanctions lists or publicly available regulatory databases.

333x uses the personal data we collect for the following purposes:

• Account management: To create, maintain, verify, and administer your 333x account, including processing your registration, verifying your identity (KYC), and managing your PKR balance.
• Service delivery: To provide you with access to sports betting markets, live casino games, Tower, BetterLive Live, slot games, and all other features of the 333x Platform.
• Payment processing: To process your deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other forms of abuse on the Platform.
• Regulatory compliance: To fulfil our obligations under our international gaming licence, including age verification, AML reporting, responsible gaming monitoring, and record-keeping requirements.
• Customer support: To respond to your queries, complaints, and requests via live chat and email support in Urdu and English.
• Marketing communications: Where you have given explicit consent, to send you promotional offers, PSL betting updates, bonus notifications, and other marketing materials. You may opt out at any time.
• Platform improvement: To analyse usage patterns, conduct A/B testing, identify technical issues, and improve the overall 333x user experience.
• Legal proceedings: To establish, exercise, or defend legal claims where necessary.

333x processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you — namely, operating your 333x account, delivering gaming services, and processing PKR transactions.
• Legal obligation: Processing required to comply with our international gaming licence conditions, AML regulations, age verification requirements, and other applicable laws.
• Legitimate interests: Processing carried out in pursuit of 333x's legitimate business interests, including fraud prevention, platform security, and product improvement — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for direct marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

333x does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and under appropriate contractual protections:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — to process your PKR deposits and withdrawals. These providers process your data as independent data controllers under their own privacy policies.
• Identity verification providers: Third-party KYC/AML service providers who assist 333x in verifying your identity and age, and screening against sanctions and PEP lists.
• Game and content providers: Software providers that power specific games or features on the 333x Platform. These providers may receive limited technical data necessary to deliver their games.
• Analytics and fraud prevention services: Providers that help 333x monitor for suspicious activity, prevent account fraud, and analyse Platform performance.
• Regulatory and law enforcement authorities: Where required by our licensing obligations or by applicable law, we will share data with gaming regulators, financial intelligence units, or law enforcement agencies without prior notice to you.
• Professional advisers: Lawyers, auditors, and consultants who are bound by professional confidentiality obligations and assist 333x in operating its business lawfully.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 333x's business, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties with whom 333x shares personal data are required to respect the security and confidentiality of your data and to process it only for the specified purpose and in accordance with our instructions.

333x uses cookies and similar tracking technologies on 333x.asia to enhance your browsing experience, maintain your session, prevent fraud, and analyse how the Platform is used. A cookie is a small text file placed on your device when you visit a website.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged into your 333x account and security tokens that protect against CSRF attacks. These cookies cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and display preferences to personalise your 333x experience.
• Analytics cookies: Help 333x understand how players use the Platform — which pages are visited most, how long sessions last, and where users encounter issues. This data is aggregated and anonymised wherever possible.
• Marketing cookies: Used only with your consent to track the effectiveness of 333x promotional campaigns and deliver relevant offers. These can be managed via your browser settings or by contacting our support team.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of 333x.asia — in particular, disabling session cookies will prevent you from remaining logged into your account.

333x retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting requirements. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account's active status plus a minimum of five (5) years after account closure, in line with AML and gaming licence record-keeping requirements.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of the transaction, as required by anti-money laundering regulations applicable to our licensing jurisdiction.
• Support and communication records: Retained for three (3) years from the date of the last interaction, to enable us to reference prior communications in the event of a dispute or complaint.
• Technical and usage data: Generally retained for thirteen (13) months in identifiable form for security analysis, after which it is aggregated and anonymised for longer-term platform improvement purposes.
• Marketing consent records: Retained for the duration of your marketing subscription plus three (3) years, as evidence of consent in the event of a regulatory query.
• Self-exclusion records: Where a self-exclusion has been applied to your account, relevant records are retained indefinitely to prevent inadvertent re-registration during the exclusion period.

When personal data is no longer required, 333x will securely delete or anonymise it in a manner that prevents reconstruction or identification.

Subject to applicable law and the terms of our gaming licence, you have the following rights in relation to your personal data held by 333x:

• Right of access: You have the right to request a copy of the personal data that 333x holds about you and to receive information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is subject to our regulatory retention obligations — we may be required to retain certain data even following an erasure request.
• Right to restrict processing: You have the right to request that we temporarily or permanently restrict the processing of your personal data in defined circumstances, such as where you contest the accuracy of the data.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another controller.
• Right to object: You have the right to object to processing based on 333x's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and respond in full within thirty (30) days, or such shorter period as required by applicable law. We may need to verify your identity before processing your request.

333x operates a strict 21+ policy. The Platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 21. Age verification is performed during the registration process and again before any withdrawal is processed.

If 333x becomes aware that it has inadvertently collected personal data from an individual under the age of 21, we will immediately close the associated account, forfeit any balances in accordance with our Terms & Conditions, delete all associated personal data to the extent not required for regulatory purposes, and report the incident where legally required.

If you are a parent or guardian and believe that your child has registered on 333x, please contact our support team immediately at [email protected]. We take underage gambling extremely seriously and will act on all credible reports without delay.

333x has implemented a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include but are not limited to:

• TLS 1.3 encryption for all data in transit between your device and 333x.asia servers.
• AES-256 encryption for sensitive data at rest, including identity documents, payment details, and authentication credentials.
• Role-based access controls (RBAC) ensuring that 333x staff can only access the personal data necessary for their specific job function.
• Two-factor authentication (2FA) available to all 333x account holders and mandatory for internal staff accessing administrative systems.
• Regular penetration testing and vulnerability assessments of the 333x Platform conducted by independent security specialists.
• Real-time fraud monitoring systems that detect and flag suspicious account activity, login anomalies, and unusual transaction patterns.
• Segregated account storage — your PKR account balance is held separately from 333x's operational funds to protect player funds in all circumstances.

While 333x takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You also play an important role in keeping your account secure — please use a strong, unique password for your 333x account and enable 2FA wherever possible.

333x.asia may contain links to third-party websites, game providers, or external resources. This Privacy Policy applies solely to the 333x Platform and does not extend to any third-party website or service. 333x has no control over and accepts no responsibility for the privacy practices or content of any third-party website.

We encourage you to review the privacy policy of any third-party website you visit. The presence of a link on 333x.asia does not constitute an endorsement of that website or its privacy practices by 333x.

333x reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this policy, we will notify registered users by email or via a prominent notice on the 333x Platform prior to the changes taking effect.

The "Effective Date" displayed at the top of this page and in the hero section above indicates when the most recent revision was made. We encourage you to review this policy periodically to stay informed about how 333x protects your personal data. The current version of this Privacy Policy is always available at 333x.asia/privacy-policy.

Your continued use of the 333x Platform after any update to this Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with the updated policy, you must cease using the Platform and contact our support team to arrange account closure.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about how 333x has handled your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] — Subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 inside your 333x account dashboard, in both Urdu and English
• Response time: We aim to acknowledge all privacy-related enquiries within 72 hours and provide a full response within 30 days

If you are not satisfied with 333x's response to your privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the dispute resolution body associated with our gaming licence. Details of the applicable complaints body are available upon request from our support team.