d333 Privacy Policy

d333 operates an online casino and sports betting platform accessible at d333.lat, serving players primarily located in Bangladesh. For the purposes of this Privacy Policy, d333 acts as the data controller — meaning we determine the purposes and means by which your personal data is collected and processed.

This Privacy Policy applies to all visitors to d333.lat, all registered account holders, and any individual who interacts with d333's services — whether through the website, customer support channels, or promotional communications. It covers all personal data we hold about you, regardless of the channel through which it was originally collected.

d333 collects personal data across several categories depending on your interaction with the platform. The following table summarises the types of data we may hold about you:

We do not collect sensitive special-category data such as racial or ethnic origin, religious beliefs, health information, or biometric data unless explicitly required by law for identity verification purposes and with your prior consent.

d333 collects personal data through the following channels and methods:

• Direct interaction: Data you provide when you create an account, complete identity verification, make a deposit or withdrawal, place a bet, contact our support team, or respond to a survey or promotion.
• Automated technologies: Technical and usage data collected automatically when you visit d333.lat, using cookies, server logs, pixel tags, and similar tracking technologies. See Section 7 (Cookies & Tracking) for more detail.
• Payment processors: Financial data received from mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners in connection with deposit and withdrawal transactions. This data is received only to the extent necessary to confirm and process the transaction.
• Identity verification partners: Where enhanced KYC checks are required, d333 may work with third-party identity verification services to cross-reference the documents you submit. These partners operate under strict data processing agreements with d333.
• Publicly available sources: In limited circumstances related to fraud prevention or AML compliance, d333 may reference publicly available data sources to verify information you have provided.

d333 uses the personal data we hold for the following purposes:

• Account management: To create, maintain, and administer your d333 account, verify your identity, and ensure the security of your login credentials.
• Service delivery: To provide you with access to casino games, live dealer tables, sports betting markets, and all other features of the d333 platform.
• Payment processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, BRAC Bank, City Bank), reconcile transactions, and maintain accurate financial records.
• Regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML) laws, Know Your Customer (KYC) requirements, and responsible gaming regulations, including age verification to enforce the 21+ policy.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support services based on historical interaction data.
• Platform improvement: To analyse aggregated usage data, improve the user interface, optimise game selection, and enhance the overall player experience on d333.
• Responsible gaming: To monitor gameplay patterns and identify signs of potentially problematic gambling behaviour, in order to proactively offer support tools such as deposit limits, time-out periods, or self-exclusion.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS — but only where you have opted in to receive such communications. You may opt out at any time.
• Legal proceedings: To establish, exercise, or defend legal claims in the event of a dispute involving your account or transactions on the platform.

Every processing activity carried out by d333 is grounded in one or more of the following lawful bases:

• Contract performance: Processing necessary to provide the services described in our Terms & Conditions — including account creation, payment processing, and game delivery — is carried out on the basis that it is necessary to perform our contract with you.
• Legal obligation: Certain processing activities, particularly those related to KYC/AML compliance, age verification, and record-keeping, are required by applicable law. d333 must process your data in these circumstances regardless of consent.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and service improvement is conducted on the basis of d333's legitimate business interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Where d333 sends you marketing communications by email or SMS, we rely on your explicit opt-in consent as the lawful basis. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting [email protected].

d333 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the following limited and controlled circumstances:

• Payment service providers: We share the minimum necessary financial data with bKash, Nagad, Rocket, Upay, and our banking partners to process your transactions. These providers act as independent data controllers for their own payment infrastructure and are bound by their own privacy policies.
• Identity verification partners: Where KYC checks require document validation, we may share identity documents with accredited third-party verification services. These partners are contractually obligated to process your data solely for the verification purpose and to maintain its confidentiality.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised session data necessary to deliver their games correctly on the d333 platform. These providers do not receive your identity or financial data.
• Legal and regulatory authorities: d333 may be required to disclose personal data to law enforcement agencies, courts, regulatory bodies, or financial intelligence units in Bangladesh or other applicable jurisdictions where we receive a lawful request to do so.
• Professional advisers: In the event of legal proceedings or significant business decisions, d333 may share relevant data with lawyers, auditors, or other professional advisers operating under strict confidentiality obligations.
• Business transfers: In the unlikely event of a merger, acquisition, or sale of all or part of d333's operations, your data may be transferred to the successor entity. You will be notified of any such change and your rights will be preserved.

d333 uses cookies and similar tracking technologies on d333.lat to provide a functional, secure, and personalised experience. A cookie is a small text file stored on your device when you visit a website. The cookies we use fall into the following categories:

• Essential cookies: Required for the platform to function correctly. They enable core features such as session management, login state, and security controls. These cannot be disabled without breaking the site experience.
• Performance cookies: Used to collect anonymised data about how visitors use d333.lat — such as which pages are visited most frequently and whether users encounter error messages — so we can improve platform performance.
• Functional cookies: Store your preferences such as language settings, game display preferences, and notification settings so you do not have to re-configure them on each visit.
• Analytics cookies: Help d333 understand aggregate user behaviour on the platform. Data collected through analytics cookies is not shared with advertising networks and is used solely for internal platform optimisation.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling essential cookies will impair your ability to use the d333 platform, including logging in and processing transactions.

d333 does not use third-party advertising cookies or place cookies from ad networks on d333.lat. We do not serve behavioural advertising based on your browsing activity outside of our platform.

d333 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active account data: All personal data associated with an active player account is retained for the full duration of the account's existence.
• Closed account data: Following the closure or self-exclusion of an account, d333 retains identity, transaction, and communication records for a minimum of 5 years from the date of closure to satisfy AML, KYC, and record-keeping obligations under applicable law.
• Transaction records: Individual transaction records (deposits, withdrawals, bets) are retained for a minimum of 7 years for financial audit and regulatory compliance purposes.
• Customer support records: Support tickets, chat transcripts, and email correspondence are retained for 3 years from the date of the interaction, after which they are securely deleted or anonymised.
• Technical and usage data: Anonymised aggregate usage and technical data may be retained indefinitely for platform analytics purposes, as it no longer identifies any individual.
• Marketing data: If you withdraw your consent to receive marketing communications, your preferences are updated immediately and your contact details are removed from active marketing lists within 30 days.

When data is no longer required under any of the above criteria, d333 securely destroys it using industry-standard data sanitisation methods appropriate to the medium on which it is stored.

As a d333 account holder or platform visitor, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and your registered account email address:

• Right of access: You may request a copy of all personal data d333 holds about you. We will provide this within 30 days of your verified request.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure: You may request that d333 delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no overriding legal basis for retention exists. Note that certain data must be retained under AML/KYC law even after an erasure request.
• Right to restriction: You may request that d333 temporarily stop processing your personal data in certain circumstances — for example, while the accuracy of the data is under dispute.
• Right to data portability: Where processing is based on your consent or the performance of a contract, you may request a machine-readable copy of your personal data to transfer to another service.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease that processing immediately.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing emails), you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

d333 operates a strict 21+ platform. Our services are not directed at, and are not intended to be used by, individuals under the age of 21. We do not knowingly collect, store, or process personal data belonging to any person under 21 years of age.

Age verification is a mandatory part of the d333 registration process. All accounts are subject to KYC checks that confirm a player's date of birth. Any account found to belong to a person under 21 will be immediately suspended and all associated data will be securely deleted in accordance with our data retention obligations.

d333 implements a comprehensive suite of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and d333.lat is encrypted using TLS 1.2 or higher, ensuring that your credentials and financial information cannot be intercepted in transit.
• AES-256 encryption at rest: Sensitive personal and financial data stored in d333's databases is encrypted at rest using AES-256, an industry-standard symmetric encryption algorithm.
• Access controls: Access to personal data within d333's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data are trained in data protection obligations and operate under confidentiality agreements.
• Two-factor authentication (2FA): d333 offers — and strongly recommends — 2FA for all player accounts to provide an additional layer of protection beyond a username and password.
• Regular security testing: d333 conducts periodic vulnerability assessments and penetration testing of its platform infrastructure to identify and remediate security weaknesses proactively.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, d333 will notify affected individuals and relevant authorities in accordance with applicable data protection law. Notifications will be sent without undue delay and will include details of the breach, its likely consequences, and the measures taken to address it.

Despite these measures, no online platform can guarantee absolute security. We encourage all players to use strong, unique passwords for their d333 accounts, to enable 2FA, and to contact [email protected] immediately if they suspect any unauthorised access to their account.

d333 reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered account holders via email and display a prominent notice on d333.lat for a minimum of 30 days following the update. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.

Continued use of the d333 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any revision, you are entitled to close your account and request deletion of your personal data in accordance with Section 9 above.

For all privacy-related enquiries — including data subject rights requests, concerns about how your data is being used, or to report a suspected data breach — please contact the d333 privacy team:

We are committed to working with you to resolve any privacy concern. If you feel your concern has not been adequately addressed, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.