333y Privacy Policy — Your Data, Handled Responsibly

1About This Policy

333y is the operator of the gaming platform available at 333y.onl. As the operator, 333y acts as the data controller for all personal data collected from registered members and platform visitors. This policy applies to all users of the platform, including those who browse without registering.

This policy is written with Pakistani players in mind. The majority of our user base is located in Pakistan and interacts with the platform in PKR using local payment methods including JazzCash, Easypaisa, Raast and bank transfers. References to "you" or "your" throughout this document refer to any individual who accesses or registers on 333y.

2Data We Collect

333y collects data in two ways: information you provide directly, and information generated automatically by your use of the platform.

Information you provide:

• Full name, date of birth, and residential address — collected at registration
• Email address — used for account access and communication
• Government-issued ID documents — submitted as part of KYC verification before first withdrawal
• Payment method details — account numbers, mobile wallet numbers, or card references used for deposits and withdrawals
• Support communications — messages sent through live chat or email are stored for quality and dispute purposes

Information collected automatically:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited, games played, and bets placed (activity logs)
• Cookie data (covered separately in Section 5)

3How We Use Your Data

The data 333y collects is used for specific, defined purposes. We do not use data for purposes beyond those listed here without first notifying you and, where required, obtaining fresh consent.

• Account operation: Your registration data and login credentials are used to maintain and secure your account.
• Identity and age verification: ID documents are verified to confirm you are 18 or older before withdrawals are processed.
• Payment processing: Payment method details are used to process deposits and withdrawals. We work with payment processors who handle the actual transaction execution.
• Fraud and security: Device data, IP addresses, and activity logs are analysed to detect unusual patterns that may indicate account compromise, fraud, or Terms violations.
• Responsible gaming: Gaming activity data is used to monitor for patterns that may indicate problematic gambling behaviour. This is used internally to support responsible gaming interventions and tools.
• Platform improvement: Aggregated, anonymised data about usage patterns helps us improve the platform — which game categories are used most, where performance issues occur, what device types to prioritise in testing.
• Communications: Email address is used for transactional messages. Marketing use requires separate consent (see Section 11).

4Payment Data

Payment data deserves specific attention because it is the most sensitive category of financial information we handle. Here is exactly how it works on 333y:

• When you deposit via JazzCash or Easypaisa, the transaction is initiated through your mobile wallet app. 333y receives a transaction confirmation and reference number — not your wallet PIN or full account credentials.
• When you deposit via bank transfer or Raast, 333y receives payment confirmation from the payment processor — not your full bank account number or internet banking credentials.
• Card payments are processed through a PCI-DSS compliant payment gateway. Full card numbers are never stored on 333y's servers — only tokenised references used for transaction matching and potential refunds.
• Withdrawal payment details (your wallet number or bank account) are stored in encrypted form and used only for processing your withdrawal requests.

5Cookies & Tracking

333y uses cookies — small data files stored in your browser — to maintain your login session, remember your preferences, and gather anonymised analytics data. The types of cookies used:

• Session cookies: Essential for maintaining your logged-in state while you use the platform. These are deleted when you close your browser.
• Preference cookies: Store settings you have chosen — language preferences, display settings — so you do not have to reset them each visit.
• Analytics cookies: Collect anonymised data about how the platform is used — page visit counts, navigation patterns, session durations. No personally identifiable data is passed through analytics cookies.

333y does not use third-party advertising or retargeting cookies. You will not see 333y ads follow you around other websites as a result of your visit to 333y.onl. Your browser settings can be used to block or delete cookies, though doing so may affect your ability to stay logged in or use certain platform features.

6Data Sharing

333y shares user data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• KYC verification providers: Your identity documents are shared with our KYC service provider for age and identity verification. These providers operate under strict data processing agreements and handle data for verification purposes only.
• Payment processors: Transaction data is shared with payment processors (JazzCash, Easypaisa, Raast, bank networks) to execute deposits and withdrawals. Only the minimum data required for each transaction is shared.
• Fraud detection services: Device fingerprint data and transaction patterns may be shared with fraud detection systems to identify and prevent account misuse.
• Email delivery providers: Your email address is shared with our transactional email provider solely for the purpose of delivering account communications.

If required by law — for example, in response to a valid legal process or regulatory inquiry — 333y may be required to disclose user data. Where legally permitted, we will attempt to notify affected users before compliance with such requests.

7Data Security

333y applies industry-standard technical and organisational security measures to protect stored personal data. These include:

• Encryption at rest: Sensitive data — ID documents, payment details, KYC records — is stored in encrypted form using AES-256 encryption.
• Encryption in transit: All data transmitted between your browser and 333y's servers is encrypted using TLS (HTTPS). Look for the padlock in your browser address bar.
• Access controls: Internal access to personal data is restricted to staff roles that genuinely require it. Access is logged and reviewed.
• Two-factor authentication: Available for your account and strongly recommended. Enabling 2FA significantly reduces the risk of unauthorised account access.
• Regular security reviews: Platform security is reviewed on an ongoing basis. Known vulnerabilities are patched promptly.

8Data Retention

333y retains personal data for as long as your account is active and for a defined period after closure. The retention periods per data type are summarised in the table earlier on this page. General principles:

• Identity and KYC documents are retained for five years after account closure, which reflects standard record-keeping practice for financial services.
• Transaction records are retained for the same five-year period for dispute resolution and audit purposes.
• Activity logs and device data are retained on a rolling basis and are not kept indefinitely.
• If you request account deletion, all data beyond the mandatory five-year retention minimum will be deleted within 30 days of your request being confirmed.

9Your Rights

As a 333y account holder, you have the following rights regarding your personal data. All requests can be submitted through live chat or via email to [email protected]:

• Access: You can request a copy of all personal data 333y holds about you. We will provide this within 30 days of your request.
• Correction: If any of your stored data is inaccurate or outdated, you can request it be corrected. Account email and contact details can be updated directly in your account settings.
• Deletion: You can request deletion of your account and associated personal data. Mandatory retention data (transaction records, KYC documents for five years post-closure) cannot be deleted before the retention period ends, but all other data will be removed.
• Portability: You can request a structured, machine-readable export of the personal data you provided to 333y.
• Objection to processing: You can object to specific uses of your data — in particular, marketing communications — and those uses will be stopped.

10Children's Privacy

333y is strictly an 18-and-above platform. We do not knowingly collect data from anyone under the age of 18. Age verification is a mandatory step before withdrawal processing, and we actively monitor for signs of underage account use.

If you believe a minor has accessed or registered on 333y, please contact support immediately. Any account identified as belonging to an underage user will be closed, all associated data deleted, and any deposits will be refunded to the original payment method where technically possible.

11Marketing Communications

333y sends two categories of communications by email:

• Transactional messages: Deposit confirmations, withdrawal notifications, password reset emails, security alerts, and account-related updates. These are sent by default and are necessary for account operation. They cannot be turned off while your account is active.
• Marketing messages: Promotions, bonus offers, seasonal campaigns, and news about new game releases or features. These require your consent and can be turned off at any time in your account preferences — no support request needed.

333y does not send SMS marketing messages or push notifications unless you have specifically opted in to those channels. Marketing preferences can be updated in your account settings at any time with immediate effect.

12Policy Changes

333y may update this Privacy Policy from time to time. Where changes are material — for example, introducing a new category of data collection or a new sharing arrangement — registered members will be notified by email before the changes take effect. The "Last reviewed" date at the top of the policy text reflects the most recent revision.

Continued use of the platform after changes take effect constitutes acceptance of the revised policy. If you do not agree with a material change, you may close your account before the change takes effect by contacting support.

13Contact Us

For any questions, requests, or concerns related to your personal data or this Privacy Policy, you can reach 333y through:

• Live Chat: Available 24/7 directly from any page on the platform — the fastest route for most queries.
• Email: [email protected] — for detailed written requests. Data subject requests submitted by email will receive a response within one business day confirming receipt, and the request will be processed within 30 days.

When submitting a data rights request by email, include your registered email address and a brief description of your request so we can verify your identity and route your query correctly. No further identification beyond your registered email is required for standard requests.