3333dit Privacy Policy

3333dit collects personal data through several channels: directly from you when you register an account or contact support; automatically when you interact with the platform; and from third-party service providers such as payment processors and identity verification partners. The categories of personal data we collect are as follows:

1.1 Registration and Identity Data

When you create a 3333dit account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, email address, mobile phone number, and your chosen username. If you proceed to KYC verification — which is required before any withdrawal — we additionally collect copies of your government-issued identification document (National Identity Card or passport), and where applicable, proof of your payment method registered in your name.

1.2 Financial and Transaction Data

To facilitate deposits and withdrawals, 3333dit processes transactional data associated with your preferred payment method. For bKash, Nagad, Rocket, and Upay wallets, this includes your registered mobile wallet number and transaction reference identifiers. For Visa and Mastercard payments, we work through PCI-DSS compliant payment gateways; 3333dit does not store full card numbers on its own servers. We retain records of all deposit and withdrawal amounts, timestamps, payment method used, and transaction status for a minimum of five years as required under applicable financial record-keeping standards.

1.3 Gameplay and Betting Activity Data

We record all gaming activity associated with your 3333dit account. This includes game sessions, wager amounts, game outcomes, bet settlement records for cricket and sports markets, bonus usage history, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention. It is not used to profile you for external marketing purposes.

1.4 Technical and Device Data

When you access 3333dit, our servers automatically log certain technical data. This includes your IP address, browser type and version, operating system, device type (desktop, mobile, or tablet), referring URL, pages visited, and timestamps of your sessions. This data is collected primarily for security, fraud detection, and platform performance optimisation purposes.

1.5 Communications Data

If you contact 3333dit support by email or live chat, we retain records of those communications, including the content of your messages and the timestamps. This is necessary for quality assurance, dispute resolution, and continuity of service. We also retain records of any marketing preferences you have set (opt-in or opt-out of promotional communications).

3333dit shares personal data with third parties only in the following defined circumstances:

• Payment Service Providers: To process your deposits and withdrawals, we share necessary transaction and identity data with our payment partners. These partners include mobile financial service providers (bKash, Nagad, Rocket, Upay), international card networks (Visa, Mastercard), and their respective acquiring banks. All payment partners are contractually bound to handle your data in accordance with applicable data protection standards and are prohibited from using your data for their own marketing purposes.
• Identity Verification Services: For KYC and age verification, 3333dit works with third-party identity verification providers. Your submitted ID documents and selfie verification images (where required) are processed by these providers on our behalf under strict data processing agreements. Documents are not shared beyond what is necessary for the verification process.
• Game Software Providers: Our game suppliers (including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and Hacksaw Gaming) receive a pseudonymous player identifier and session token to facilitate game delivery. They do not receive your full name, contact details, or payment information. Game providers process gameplay data on their own servers to determine game outcomes, which are certified RNG-based.
• Analytics and Security Platforms: We use third-party analytics and fraud detection services to monitor platform performance and identify suspicious activity. These services receive anonymised or pseudonymous technical and session data. They do not receive data that directly identifies you by name or contact details.
• Legal and Regulatory Disclosure: 3333dit may be required by law to disclose personal data to governmental bodies, law enforcement agencies, financial intelligence units, or courts. Any such disclosure will be made only to the extent required and as narrowly as legally permissible. We will notify affected players of any disclosure requests where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of the company operating 3333dit, player data may be transferred to the acquiring entity. Players will be notified of any such transfer by email and will be given the opportunity to request account closure and data deletion prior to the transfer taking effect.

All third-party service providers with whom 3333dit shares personal data are required to maintain appropriate technical and organisational measures to protect that data, and are contractually prohibited from using the data for purposes beyond those specified in the relevant data processing agreement.

3333dit retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

When the applicable retention period expires, personal data is either permanently deleted from 3333dit systems or anonymised in such a way that it can no longer be linked to an identifiable individual. Anonymised aggregate data (for example, aggregated platform usage statistics) may be retained indefinitely for internal analytical purposes.

Players who request account closure may submit a data deletion request at the same time. Deletion requests are processed within 30 days, subject to the overriding legal retention obligations described in the table above. Data that must be retained under AML or financial regulation cannot be deleted earlier than the prescribed minimum retention period, even upon player request.

3333dit implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. While no platform can guarantee absolute security, the following measures reflect our commitment to maintaining a safe and reliable environment for all players across Bangladesh.

• TLS/SSL Encryption in Transit: All communications between your browser or mobile device and 3333dit's servers are encrypted using Transport Layer Security (TLS 1.2 or higher). This protects your login credentials, payment details, and personal information from interception during transmission.
• Encryption at Rest: Sensitive personal data stored on 3333dit servers — including KYC documents and payment method identifiers — is encrypted at rest using AES-256 encryption. Passwords are never stored in plain text; they are stored as salted cryptographic hashes.
• Access Controls: Access to player personal data is restricted to 3333dit employees and contractors on a strict need-to-know basis. Access rights are reviewed periodically and revoked immediately upon role change or departure. All internal access to sensitive systems is logged and monitored.
• Two-Factor Authentication: 3333dit strongly recommends that all players enable two-factor authentication (2FA) on their accounts. 2FA is available via SMS verification. Enabling 2FA significantly reduces the risk of unauthorised account access even in the event that login credentials are compromised.
• Fraud and Intrusion Monitoring: Our security team operates continuous monitoring systems that flag unusual login patterns, multiple account creation attempts from the same device, abnormal transaction sequences, and other indicators of potential fraud or unauthorised access.
• Third-Party Security Audits: 3333dit's platform and data security controls are subject to periodic review by independent security professionals. Any vulnerabilities identified through these reviews are remediated on a prioritised basis.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, 3333dit will notify affected players without undue delay and within 72 hours of becoming aware of the breach, where technically feasible. The notification will describe the nature of the breach, the categories and approximate number of records affected, likely consequences, and the measures taken to address it.

Players who believe their 3333dit account has been compromised, or who suspect that their personal data has been accessed without authorisation, should contact support immediately at [email protected]. Our security team is available 24 hours a day, 7 days a week.