333brt Privacy Policy

1 Data Controller

333brt operates as the data controller for all personal information collected through the platform at 333brt.vip. As data controller, 333brt determines the purposes and means by which your personal data is processed. All enquiries relating to personal data, data access requests, or data deletion requests should be directed to our support team at [email protected].

This Policy applies exclusively to data collected and processed by 333brt. It does not govern the data practices of third-party game studios, payment service providers, or any other external partners whose services are integrated into the 333brt platform. We encourage you to review the privacy policies of those third parties separately.

2 Data We Collect

333brt collects personal data through several channels. The categories of data we collect are described below.

2.1 Registration Data

When you create a 333brt account, we collect the information you provide during the sign-up process. This includes:

• Full name
• Date of birth (to verify the 21+ age requirement)
• Email address
• Mobile phone number
• Preferred username
• Residential address (city and district within Bangladesh)

2.2 Identity Verification Data

To comply with anti-money-laundering (AML) obligations and to confirm player identity, we may request copies of the following documents:

• National Identity Card (NID) or passport
• Proof of address (utility bill, bank statement)
• Proof of payment method ownership (screenshot or statement for bKash, Nagad, Rocket, or Upay accounts)

Verification documents are stored securely and are accessible only to authorised 333brt compliance personnel.

2.3 Transaction Data

We record all financial transactions conducted through your 333brt account. This includes deposit amounts, withdrawal requests, payment method references (mobile wallet numbers, where applicable), transaction timestamps, and transaction reference IDs. This data is retained for a minimum of five (5) years in accordance with standard financial record-keeping requirements.

2.4 Gameplay and Betting Data

We maintain a full record of your gameplay activity on 333brt. This includes bet amounts, game types played (slots, live casino, crash games, cricket betting), outcomes, session start and end times, and wagering history. This data is used for account management, dispute resolution, bonus calculation, and responsible gaming monitoring.

2.5 Device and Technical Data

When you access 333brt, our servers automatically collect certain technical information from your device. This includes:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session duration and page interaction data
• Referring URL (the page that directed you to 333brt)

This technical data helps us detect fraud, identify unusual account activity, and improve the performance of the platform.

2.6 Customer Support Data

When you contact 333brt support via email or live chat, we retain records of your communications, including the content of your messages, timestamps, and any attachments you submit. This information is used solely to resolve your query and to improve support quality.

2.7 Cookies and Tracking Technologies

333brt uses cookies and similar tracking technologies to maintain your logged-in session, remember your preferences, and analyse platform usage patterns. Session cookies are deleted when you close your browser. Persistent cookies may remain on your device for a defined period. You can manage cookie preferences through your browser settings; however, disabling cookies may affect your ability to log in and use the platform normally.

3 How We Use Your Data

333brt processes personal data only for specific, legitimate purposes. The table below summarises our key processing activities and the legal basis for each:

Processing Purpose	Legal Basis
Account registration and management	Contractual necessity
Age and identity verification (21+ check)	Legal obligation / Contractual necessity
Processing deposits and withdrawals	Contractual necessity
Fraud prevention and AML compliance	Legal obligation / Legitimate interest
Responsible gaming monitoring	Legal obligation / Legitimate interest
Customer support and dispute resolution	Contractual necessity / Legitimate interest
Platform analytics and performance improvement	Legitimate interest
Promotional communications (where consented)	Consent

333brt does not use automated decision-making that produces legal or similarly significant effects on players without human review. Responsible gaming flags and account restrictions are reviewed by our support team before action is taken.

4 Sharing Your Data with Third Parties

333brt does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share limited personal data with the following categories of third parties strictly to operate the platform and fulfil our obligations to you:

• Payment Processors: bKash, Nagad, Rocket, and Upay receive only the transaction reference data necessary to process your deposits and withdrawals. We do not share your full profile with these providers.
• Game Studios: Providers such as Evolution Gaming, Pragmatic Play, Spribe, and Ezugi receive anonymised session tokens to run their games within the 333brt platform. No personally identifiable information is passed to game studios beyond what is technically required for session authentication.
• Identity Verification Services: Where a third-party KYC (Know Your Customer) service is used to verify identity documents, your verification data is processed under strict data processing agreements.
• Legal and Regulatory Authorities: We may be required by applicable law to disclose certain player data to law enforcement, regulatory bodies, or financial intelligence units. We will comply with such requests only where legally obligated and will notify you where permitted by law.

All third-party service providers who access your data on 333brt's behalf are required to maintain confidentiality and handle your data solely for the purpose authorised by 333brt.

5 Data Security

333brt employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers.
• Encrypted storage of sensitive fields including passwords (hashed and salted) and identity document images.
• Access controls: Internal access to personal data is restricted to authorised personnel on a need-to-know basis. All staff access is logged and audited.
• Intrusion detection systems and regular security assessments to identify and remediate vulnerabilities.
• Secure session management: Player sessions expire after a defined period of inactivity to reduce the risk of unauthorised access from shared or unattended devices.

While 333brt takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a significant risk to players, 333brt will notify affected users and take prompt remedial action.

6 Data Retention

333brt retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy or as required by applicable law. Specific retention periods are as follows:

• Active accounts: Personal and gameplay data is retained for the full duration of your account.
• Closed accounts: Core account and transaction records are retained for a minimum of five (5) years after account closure to satisfy financial record-keeping and AML compliance requirements.
• Identity verification documents: Retained for a minimum of five (5) years after the last transaction or account closure, whichever is later.
• Customer support records: Retained for two (2) years from the date of the last interaction, or longer if the communication relates to an unresolved dispute.
• Device and technical data: Anonymised and aggregated after ninety (90) days from collection.

When the applicable retention period expires, your data is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

7 Your Privacy Rights

As a 333brt player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected]:

• Right of Access: You may request a copy of the personal data we hold about you at any time.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you may request that it be corrected.
• Right to Erasure: You may request deletion of your personal data where we no longer have a legitimate basis to retain it. Note that we may be legally required to retain certain records even after a deletion request.
• Right to Restrict Processing: You may request that we limit the way we use your data in certain circumstances, for example while a dispute is being investigated.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

333brt will respond to valid data rights requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days, in which case we will inform you of the extension and the reason for it.

8 Marketing Communications

333brt may send you promotional emails or platform notifications about bonuses, seasonal promotions (such as Eid offers, Pohela Boishakh specials, or BPL cricket season promotions), new games, and platform updates. We will only send marketing communications where you have consented to receive them during registration or through your account preferences.

You may opt out of marketing communications at any time by updating your notification preferences within your account settings or by contacting support at [email protected]. Opting out of marketing communications will not affect transactional notifications, which are sent as a necessary part of account management (for example, deposit confirmations and withdrawal updates).

9 Children and Minors

333brt is strictly an adult platform. No person under the age of 21 is permitted to register or use the 333brt platform. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that a registered account belongs to a person under 21, that account will be immediately suspended, all balances will be subject to review, and the personal data of the underage individual will be deleted in accordance with our data retention policy.

If you believe a minor has registered on 333brt, please notify us immediately at [email protected].

10 Changes to This Privacy Policy

333brt reserves the right to update this Privacy Policy at any time. The date of the most recent revision is shown at the top of this page. Where changes are material — for example, changes to the categories of data collected or to data sharing arrangements — we will notify registered players by email or via an in-platform notification prior to the changes taking effect. Continued use of the platform after any update constitutes acceptance of the revised Policy.

We encourage you to review this page periodically to stay informed about how 333brt protects your personal information.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints relating to this Privacy Policy or the way 333brt handles your personal data, please reach out to our support team. We take all privacy enquiries seriously and aim to respond promptly.

Support email (plain text — not a link): [email protected]

When contacting us about a privacy matter, please include your registered username and a brief description of your query so we can assist you as efficiently as possible. Our team is available around the clock, seven days a week.