Privacy Policy for
3337x — Your Data, Protected

3337x collects personal data from players in Bangladesh through several channels: directly when you register an account, when you make deposits or withdrawals, when you contact our support team, and automatically through your use of the platform. The categories of data we collect are set out below.

Registration and Account Data:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (required to verify that you are 18 years of age or older).
• Email address — used for account communications, transaction notifications, and promotional messages where you have opted in.
• Mobile phone number — used for account verification, two-factor authentication, and customer support communications.
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar) and country.
• Username and encrypted password hash.
• Account currency selection (BDT or INR).

KYC Verification Data:

• Scanned copy or photograph of a government-issued photo ID (National ID card, passport, or driving licence).
• Proof of address document (utility bill, bank statement, or similar) dated within the last three months.
• In some cases, a live selfie or video verification may be requested to confirm that the documents submitted match the account holder.

Financial and Transaction Data:

• bKash, Nagad, Rocket, or Upay mobile financial service account numbers used for deposits and withdrawals.
• Masked card numbers (last four digits only) for Visa or Mastercard transactions. 3337x does not store full card numbers; complete card data is processed directly by our certified payment gateway partner.
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used.
• Account balance history.

Betting and Gaming Activity Data:

• Bet history: markets wagered on (cricket, football, kabaddi, live casino, slots), odds, stake amounts, and outcomes.
• Game session logs: titles played (Pragmatic Play, NetEnt, Microgaming, Spribe, Evolution Gaming, Ezugi), session duration, and wagering amounts.
• Bonus and promotional offer history: bonuses claimed, wagering progress, and fulfilment status.
• Responsible gaming settings: any deposit limits, loss limits, session limits, or self-exclusion periods you have configured.

Technical and Device Data (Collected Automatically):

• IP address and approximate geolocation (country and city level) derived from your IP address.
• Device type, operating system, and browser version.
• Platform access logs: pages visited, session start and end times, features used, and navigation paths within the 3337x platform.
• Cookie identifiers and session tokens. See Section 4 for full details of our cookie practices.
• Referral source: how you arrived at the 3337x platform (e.g., direct URL entry, search engine, affiliate link).

Communication Data:

• Content of messages sent to 3337x via email at [email protected], including any attachments.
• Live chat transcripts (where live chat functionality is in use).
• Records of any formal complaints submitted and the correspondence relating to their resolution.

3337x processes your personal data for specific, defined purposes. We do not process your data in ways that are incompatible with the purposes described in this section. The legal basis for each type of processing is noted alongside the purpose.

Where we rely on your consent as the legal basis for processing (for example, to send you promotional emails about BPL season offers, Eid promotions, or new slot releases from Pragmatic Play), you have the right to withdraw that consent at any time by contacting [email protected] or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Where we rely on our legitimate interests as the legal basis for processing, we have carried out a balancing assessment and determined that our legitimate interests do not override your fundamental privacy rights. If you wish to obtain details of any such balancing assessment, please contact us at [email protected].

3337x may share your personal data with the following categories of third parties:

• Payment processors: Your financial data (mobile number for bKash, Nagad, Rocket, and Upay; masked card details for Visa and Mastercard) is shared with our certified payment gateway partners solely to process deposit and withdrawal transactions. These partners are bound by their own data protection obligations and may not use your data for any purpose beyond processing the specific transaction.
• Game suppliers: When you play games provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi through the 3337x platform, limited session data (such as a session token and wager amounts) is shared with the relevant game supplier's servers to facilitate gameplay. Game suppliers do not receive your full personal profile or financial details.
• Identity verification providers: To fulfil KYC obligations, 3337x uses a third-party identity verification service to validate documents submitted during the verification process. Your ID document images and, where required, selfie data are shared with this provider for the sole purpose of verification.
• Fraud prevention services: Device fingerprint data, IP address, and behavioural signals may be shared with specialist fraud detection platforms to identify and prevent fraudulent account activity, money laundering, and bonus abuse. These services process your data on our behalf under strict confidentiality agreements.
• Analytics providers: Anonymised and aggregated platform usage data may be shared with analytics service providers to help us understand how players use the 3337x platform and to identify areas for improvement. This data does not identify you personally.
• Legal and regulatory authorities: 3337x may be required to disclose personal data to law enforcement agencies, courts, financial intelligence units, or regulatory authorities where we are under a legal obligation to do so, or where disclosure is necessary to protect the rights, property, or safety of 3337x, our players, or the public. This includes filing Suspicious Transaction Reports (STRs) where required.
• Business transfers: In the event that 3337x undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players by email before any such transfer takes place and will ensure the receiving entity is bound by equivalent data protection obligations.

All third parties with whom 3337x shares personal data are required to process that data in accordance with applicable data protection laws and under contractual obligations that restrict their use of the data to the specified purpose only. 3337x does not permit any third-party data processor to use your personal data for their own independent marketing or commercial purposes.

The 3337x platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to measure platform performance, and — where you have given consent — to deliver relevant promotional content. This section explains the types of cookies used and how you can manage them.

What are cookies? Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They allow the website to recognise your device on subsequent visits, remember your preferences, and track certain browsing behaviours.

Managing Your Cookie Preferences: You may update your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your 3337x account and using platform services. The following browser-level controls are available:

• Chrome: Settings → Privacy and Security → Cookies and other site data
• Firefox: Settings → Privacy and Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Microsoft Edge: Settings → Cookies and site permissions → Cookies and site data

In addition to browser controls, you can manage your analytics and marketing cookie preferences by contacting [email protected]. Cookie preference changes take effect upon your next visit to the 3337x platform.

Session Tokens: Session authentication tokens used to keep you logged into your 3337x account are strictly necessary cookies. These expire automatically when you log out or after a defined period of inactivity (typically 30 minutes). They do not track your activity outside of the 3337x platform.

3337x retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply:

• Account and registration data: Retained for the duration of your active 3337x account plus a minimum of five years following permanent account closure. This extended retention is required for anti-money laundering compliance and to respond to any legal disputes arising from your account activity.
• KYC documents (ID and proof of address): Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later. In cases where a regulatory inquiry or legal proceeding is ongoing, retention may be extended until the matter is fully resolved.
• Financial transaction records: Retained for a minimum of seven years from the date of each transaction, in line with financial record-keeping obligations.
• Betting and gaming activity logs: Retained for five years from the date each activity was recorded. Aggregated, anonymised betting data may be retained indefinitely for platform analytics purposes.
• Customer support communications: Retained for three years from the date of the last communication in each support thread, unless the communication relates to an unresolved dispute, in which case it is retained until the dispute is closed plus one year.
• Marketing consent records: Retained for the duration of your active account and for three years following account closure, to demonstrate the legal basis for any marketing communications sent.
• Technical logs (IP addresses, device data, session logs): Retained for 12 months from collection, after which they are anonymised or deleted.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where anonymisation is used, the resulting data may be retained indefinitely for statistical and analytical purposes.

If you request deletion of your account, 3337x will process the request promptly and remove or anonymise your personal data where no legal obligation requires us to retain it. Where a legal retention obligation applies, we will notify you of the specific data being retained and the legal basis for its retention.

The following security measures are in place across the 3337x platform:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and the 3337x servers is encrypted using 256-bit SSL/TLS technology. This ensures that your login credentials, personal details, and financial information cannot be intercepted in transit.
• Password hashing: Passwords are never stored in plain text. 3337x uses a one-way cryptographic hashing algorithm with a unique salt per account to store password credentials. Even internal staff cannot retrieve your plaintext password.
• Two-factor authentication (2FA): 3337x strongly recommends that all players enable 2FA on their accounts. When 2FA is active, a one-time code is required in addition to your password at each login, significantly reducing the risk of unauthorised access.
• Access controls: Access to player personal data within 3337x's internal systems is restricted on a need-to-know basis. Staff who do not require access to personal data in the course of their duties are not granted it. Access rights are reviewed regularly.
• Intrusion detection and monitoring: 3337x operates continuous monitoring of its platform infrastructure to detect unusual activity, potential intrusion attempts, and security anomalies. Automated alerts are configured to notify the security team of any such events in real time.
• Secure data centres: Player data is stored in secure data centre facilities that maintain physical access controls, environmental controls, and redundant infrastructure to ensure both security and availability.
• Payment data security: 3337x does not store full payment card numbers or CVV codes. Card payment processing is handled by a PCI-DSS compliant payment gateway. bKash, Nagad, Rocket, and Upay transactions are processed via the official APIs of those respective providers using encrypted session tokens.

Reporting a Security Incident: If you believe your 3337x account has been compromised, or if you discover a security vulnerability in the 3337x platform, please contact us immediately at [email protected] with full details. Do not attempt to exploit any vulnerability you discover. We take all security reports seriously and will investigate promptly.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, 3337x will notify affected individuals without undue delay, providing details of the nature of the breach, the data involved, the likely consequences, and the measures taken or proposed to address the breach.

As a player on the 3337x platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with a clear description of your request and, where required to verify your identity, a copy of a government-issued ID. 3337x will respond to verified requests within 30 days of receipt.

• Right of access: You have the right to request a copy of all personal data that 3337x holds about you. Upon receipt of a verified request, we will provide a structured summary of your data in a commonly used, machine-readable format where technically feasible.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For basic account details such as your email address or mobile number, you may be able to update these directly from your account settings page. For identity and KYC data corrections, please contact [email protected].
• Right to erasure: You have the right to request the deletion of your personal data where: the data is no longer necessary for the purpose for which it was collected; you withdraw consent (where consent was the legal basis); or the processing was unlawful. Please note that this right is not absolute — where 3337x is under a legal obligation to retain specific data (for example, financial transaction records under applicable law), we cannot delete that data until the mandatory retention period has expired.
• Right to restriction of processing: You have the right to request that 3337x restricts the processing of your personal data in certain circumstances — for example, while we investigate an accuracy dispute or assess an objection to processing.
• Right to data portability: Where processing is based on your consent or on a contract, and where processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted directly to another data controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where 3337x relies on legitimate interests as the legal basis. Upon receiving an objection, 3337x will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where processing is based on your consent (for example, receipt of promotional communications about IPL betting offers, Eid bonus campaigns, or new game releases), you may withdraw that consent at any time by contacting [email protected] or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.
• Right not to be subject to automated decision-making: 3337x may use automated systems to flag accounts for fraud review or responsible gaming intervention. Where an automated decision produces a significant effect on your account (such as a temporary suspension), you have the right to request human review of that decision by contacting [email protected].

To submit a data rights request, please email [email protected] with the subject line "Data Rights Request" and include your full name, registered email address, and a description of the right you wish to exercise. We may ask you to verify your identity before processing the request. There is no fee for submitting a data rights request. If a request is manifestly unfounded or excessive, 3337x reserves the right to charge a reasonable administrative fee or to refuse the request, with written reasons provided.

3337x reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes in the services offered by the 3337x platform. The most current version of this Privacy Policy will always be available at https://3337x.app/privacy-policy.

When material changes are made to this Privacy Policy, 3337x will notify affected players by one or more of the following methods:

• Displaying a prominent notice on the 3337x homepage or within the player account area for a minimum of 14 days prior to the changes taking effect.
• Sending a notification to the registered email address associated with your 3337x account.
• Updating the "Last Updated" date and version number displayed at the top of this Privacy Policy page.

Your continued use of the 3337x platform after the effective date of any amendment to this Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree with the updated policy, you must cease using the platform and may request account closure by contacting [email protected] before the amendment's effective date.

Minor amendments — such as typographical corrections, clarifications that do not alter the substantive meaning of any clause, or updates to third-party provider names — may be made without advance notice and will take effect immediately upon publication.

For any questions, concerns, or complaints regarding this Privacy Policy or the way in which 3337x handles your personal data, please contact our support team at [email protected]. Our team is available 24 hours a day, 7 days a week, including during public holidays in Bangladesh such as Eid, Pohela Boishakh, Independence Day (26 March), and Victory Day (16 December). All privacy-related communications are handled in English.