333x Privacy Policy – How We Protect Your Personal Data in Pakistan

333x operates the online betting and casino platform available at 333x.run. When you register an account, make a deposit, place a bet or simply visit our website, you share personal information with us. This Privacy Policy explains what information 333x collects, the reasons we collect it, how we keep it safe and the choices you have as a registered Pakistani player.

We treat privacy as a genuine responsibility rather than a compliance checkbox. The Pakistani players who use 333x trust us with their names, phone numbers, payment details and betting activity. That trust is not something we take lightly. Everything in this policy reflects how we actually behave — not just how we want to be seen to behave.

By registering for a 333x account or using our platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle personal data as described here, please do not create an account or continue using the 333x platform.

333x collects personal information through several routes: information you provide directly when registering or using our services, information we collect automatically through your use of the platform, and information we receive from third-party service providers in connection with your account.

Information you provide directly to 333x:

• Full name as it appears on your national identity documents (CNIC or passport).
• Date of birth — used to verify you are 18 or older, as required before any 333x account can be activated.
• Pakistani mobile number — used for account authentication, support communications and, if you choose, promotional notifications.
• Email address — used for account communications, transaction confirmations and security alerts.
• Residential address — collected for identity verification and fraud prevention purposes.
• Payment method details — including Easypaisa account numbers, JazzCash numbers, NayaPay or SadaPay account identifiers, IBFT bank account details, and masked Visa or Mastercard information. 333x does not store full card numbers — card data is processed by our PCI DSS-compliant payment processor.
• Identity verification documents — CNIC, passport scans or equivalent documents provided during KYC verification.
• Responsible gaming information — deposit limits, loss limits, self-exclusion requests and any disclosures you make to 333x support regarding gambling habits.

Information 333x collects automatically:

• Device information including device type, operating system version and browser type.
• IP address and approximate geographic location.
• Session data including login times, session duration and pages or features accessed within the 333x platform.
• Betting and gaming activity including bets placed, games played, amounts wagered, outcomes and bonus usage history.
• Technical error logs and crash reports used to improve platform stability.
• Cookie and tracking data as described in Section 9 of this policy.

333x uses the personal information it collects for clearly defined purposes. We do not use your data for purposes beyond those listed here without first notifying you and, where required, obtaining your consent.

• Account management: Creating and maintaining your 333x account, verifying your identity, processing login requests and keeping your account secure.
• Payment processing: Processing deposits and withdrawals in PKR, verifying that payment methods belong to the registered account holder and detecting fraudulent transactions.
• Bet and game settlement: Calculating and crediting winnings, settling void bets, processing cash-out requests and managing bonus wagering requirements.
• Legal compliance: Meeting anti-money laundering (AML) obligations, know-your-customer (KYC) requirements and any other applicable regulatory requirements.
• Fraud prevention and security: Detecting unusual account activity, preventing duplicate account creation, identifying bonus abuse and protecting the platform and its players from malicious actors.
• Customer support: Responding to queries, resolving disputes and processing responsible gaming tool requests submitted to the 333x support team.
• Responsible gaming: Monitoring for patterns associated with problem gambling and proactively reaching out to players who may benefit from support or tool activation.
• Platform improvement: Analysing aggregated usage patterns to improve the 333x platform, fix bugs, optimise performance and develop new features.
• Communications: Sending account-related notifications such as deposit confirmations, withdrawal updates, password changes and security alerts. If you have opted in, also sending promotional communications about 333x offers.

333x processes personal data on one or more of the following legal grounds depending on the purpose of the processing activity:

Where 333x relies on legitimate interests as a legal basis, we have assessed that those interests do not override your fundamental rights and freedoms. Where we rely on consent — particularly for marketing communications — you may withdraw that consent at any time without affecting any other aspect of your relationship with 333x.

333x does not sell or rent your personal information to any third party. We share data only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

Service providers: 333x shares data with contracted third-party service providers who help us operate the platform. These include payment processors (Easypaisa, JazzCash and card processing providers), identity verification services, customer support platforms and fraud detection tools. All such providers operate under data processing agreements that prohibit them from using your data for any purpose other than the service they provide to 333x.

Legal and regulatory requirements: 333x may disclose personal data to law enforcement agencies, regulatory bodies or other government authorities when required to do so by applicable law, court order or regulatory direction. We will notify you of such disclosures where legally permitted to do so.

Business transfers: In the event of a merger, acquisition or sale of 333x or its assets, your personal data may be transferred as part of that transaction. You will be notified before any such transfer takes place and before your data becomes subject to a different privacy policy.

Data security is a core operational priority at 333x. We implement technical and organisational measures designed to protect your personal information from unauthorised access, disclosure, alteration and destruction. The specific measures we have in place include:

• Encryption in transit: All data transmitted between your device and 333x servers is protected by 256-bit SSL/TLS encryption — the same standard used by major Pakistani and international financial institutions.
• Encryption at rest: Sensitive personal data stored in 333x databases — including identity documents and payment details — is encrypted at rest using industry-standard symmetric encryption.
• Access controls: Access to personal data within 333x is restricted to staff members who require it to perform their specific job functions. Access is granted on a least-privilege basis and is subject to multi-factor authentication requirements.
• Regular security audits: 333x engages independent security professionals to conduct regular penetration tests and vulnerability assessments of the platform infrastructure.
• Segregated payment data: Card and payment account data is handled exclusively by PCI DSS-compliant payment processors. 333x does not store full payment card numbers on its own systems.
• Incident response: 333x maintains a documented data breach response procedure. In the event of a breach affecting your personal data, you will be notified within seventy-two hours of 333x becoming aware of the incident, along with details of what data was affected and what steps are being taken.

While 333x takes all reasonable precautions, no security system is entirely infallible. We encourage all Pakistani players to use strong, unique passwords for their 333x accounts and to enable two-factor authentication, which is available free of charge from the account security settings.

333x retains personal data for as long as it is necessary to fulfil the purposes for which it was collected, subject to any legal obligations that require or permit longer retention periods.

Specifically:

• Active account data: All personal information associated with an active 333x account is retained for the duration of the account relationship.
• Transaction and betting records: Financial transaction records and betting history are retained for a minimum of five years after the transaction date, in line with anti-money laundering record-keeping requirements.
• KYC and identity documents: Identity verification documents are retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later.
• Responsible gaming records: Records of deposit limits, self-exclusion requests and responsible gaming interventions are retained for a minimum of five years to allow for cross-platform self-exclusion verification and to support future duty-of-care decisions.
• Closed accounts: Where a 333x account is closed at a player's request, personal data is anonymised or deleted within ninety days, except where legal retention obligations require otherwise. Data that must be retained for legal reasons is kept in secure, restricted-access storage until the retention period expires.

As a registered 333x player you have the following rights with respect to your personal data. These rights are exercised free of charge and 333x will respond to all valid requests within thirty days.

333x uses cookies and similar tracking technologies on the platform to make the website function correctly, to understand how Pakistani players use the platform and, with your consent, to deliver relevant promotional content. Here is a breakdown of the cookie types used:

You can manage your cookie preferences at any time via the cookie settings option accessible from the footer of the 333x website. Refusing analytics or marketing cookies does not affect your ability to use any part of the 333x betting and casino platform.

333x does not knowingly collect personal data from any person under the age of 18. The platform is strictly for adults. During registration 333x requires date of birth confirmation and applies automated and manual checks to prevent account creation by minors.

If 333x becomes aware that it has inadvertently collected personal data from a minor, all such data will be deleted immediately and the account will be permanently closed. Any funds deposited by a minor will be returned to the payment source.

333x may process or store some personal data on servers located outside Pakistan, including in jurisdictions used by our cloud infrastructure and service providers. Where such transfers occur, 333x ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy.

Safeguards used for international transfers include contractual data protection clauses with service providers, ensuring that receiving jurisdictions have adequate data protection laws in place and applying encryption and access controls regardless of where data is physically stored.

Your payment data processed through Pakistani payment providers such as Easypaisa, JazzCash, NayaPay and SadaPay is processed within Pakistan's own financial infrastructure and is subject to the data protection obligations of those regulated Pakistani financial service providers.

333x reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, regulatory guidance or the services we offer to Pakistani players.

When changes are material — meaning they affect your rights, the categories of data we collect or the purposes for which we use your data — 333x will notify all registered account holders via email and via an in-platform notification at least fourteen days before the changes take effect.

Minor changes — such as corrections of typographical errors or clarifications that do not alter the substance of the policy — may be made without prior notice but will always be reflected in an updated "Last Updated" date at the top of this page.

The most current version of the 333x Privacy Policy is always available at 333x.run/privacy-policy. Continued use of the 333x platform after a privacy policy update takes effect constitutes acceptance of the revised terms.

For any questions about this Privacy Policy, to exercise your data rights or to report a privacy concern, please contact the 333x team through any of the following channels:

• Email: support@333x.run — privacy-related requests are handled by a dedicated team member and receive a response within thirty days.
• Live Chat: Available directly on the 333x platform — for urgent privacy concerns including suspected unauthorised account access.
• FAQ: Many common questions about data handling at 333x are answered in our FAQ section.

When submitting a data rights request, please provide your registered 333x email address and mobile number so we can verify your identity before processing the request. 333x will not fulfil data access or deletion requests without first confirming the identity of the requester to protect all account holders from fraudulent requests made by third parties.