Your Privacy Matters at 333oko

333oko uses the personal data we collect to operate and improve the platform, fulfil our contractual obligations to you as a registered player, meet our legal and regulatory requirements, and prevent fraud and financial crime. The specific purposes for which we process your data include:

• Account creation and management: To register your account, verify your identity, and maintain your player profile throughout your relationship with 333oko.
• Service delivery: To enable you to access casino games, fishing games, slots, cricket betting markets, and all other 333oko platform features.
• Payment processing: To process your deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to fulfil your withdrawal requests to your registered payment method.
• KYC and age verification: To verify that you are at least 18 years of age and meet all eligibility requirements set out in the 333oko Terms and Conditions.
• Anti-money laundering (AML) compliance: To monitor transactions for suspicious activity, conduct source-of-funds checks, and fulfil reporting obligations where required.
• Responsible gaming: To monitor patterns of play that may indicate problem gambling behaviour, to enforce self-exclusion requests, and to apply deposit limits and session controls at your request.
• Customer support: To respond to your queries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
• Platform security: To detect and prevent fraud, abuse of bonuses, multi-accounting, use of automated software, and other violations of the 333oko Terms and Conditions.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal campaign alerts (Eid, Pohela Boishakh, BPL cricket specials) — subject to your marketing preferences and opt-out rights.
• Platform analytics and improvement: To understand how players use the 333oko platform, identify technical issues, and make data-informed decisions about feature development.

333oko will not use your personal data for any purpose that is materially different from those listed above without first obtaining your explicit consent, or where required or permitted to do so by applicable law.

333oko does not sell your personal data to any third party. We share your data only where it is strictly necessary for the delivery of our services, for compliance with legal obligations, or where you have given explicit consent. The categories of third parties with whom your data may be shared include:

All third parties who receive your personal data on behalf of 333oko are required to implement appropriate technical and organisational measures to protect your data and are prohibited from using it for any purpose beyond what is necessary for the service they provide to 333oko.

333oko retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to perform our contractual obligations to you, and to comply with applicable legal retention requirements. The following general retention periods apply:

• Active account data: Retained for the full duration of your account relationship with 333oko, plus a defined post-closure period for legal and compliance purposes.
• Transaction and betting records: Retained for a minimum of 5 years from the date of the transaction, in line with standard financial record-keeping practices for anti-money laundering compliance.
• Identity verification documents: Retained for a minimum of 5 years following account closure or the completion of the KYC process, whichever is later.
• Support communications: Retained for up to 3 years from the date of the last interaction, to enable dispute resolution and quality assurance reviews.
• Marketing preference records: Retained for the duration of your account relationship and for up to 2 years following account closure, to honour opt-out requests.
• Analytics data: Anonymised or aggregated analytics data may be retained indefinitely as it no longer constitutes personal data following anonymisation.

When personal data is no longer required and its retention period has expired, 333oko will securely delete or irreversibly anonymise the data using industry-standard methods. If you request deletion of your account and associated data, 333oko will honour that request subject to any overriding legal retention obligations that prevent immediate deletion.

333oko implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security posture is reviewed and updated on a regular basis to address emerging threats and vulnerabilities.

Key security measures in place at 333oko include:

• SSL/TLS encryption: All data transmitted between your browser or device and the 333oko platform is encrypted using industry-standard SSL/TLS protocols, ensuring that your credentials, financial details, and personal information cannot be intercepted in transit.
• Encrypted data storage: Sensitive data fields — including passwords (stored as salted hashes), payment method identifiers, and verification document references — are stored in encrypted form within our secure database infrastructure.
• Access controls: Internal access to personal data is restricted to staff members who require it to perform their job functions. Role-based access controls and audit logging are in place across all systems that handle player data.
• Fraud detection systems: Automated systems monitor for unusual login patterns, suspicious transaction activity, and device anomalies that may indicate account compromise or fraudulent activity.
• Secure document handling: Identity verification documents submitted via the KYC process are stored in a dedicated, access-controlled document management environment separate from general platform databases.
• Regular security reviews: 333oko's technical infrastructure undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.

While 333oko takes all reasonable steps to protect your data, no system connected to the internet can be guaranteed to be entirely free from security risk. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 333oko will notify affected players promptly and take all necessary steps to contain and remediate the breach.

You also play an important role in keeping your account secure. Never share your 333oko password with anyone, use a strong and unique password, and contact 333oko support immediately if you suspect your account has been compromised.

333oko reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. The effective date displayed at the top of this document will be updated whenever a new version is published.

Where changes are material — meaning they meaningfully affect how your personal data is collected, used, or shared — 333oko will notify registered players via a prominent on-platform notice, an email to your registered address, or both, at least 7 days before the changes take effect. Non-material changes (such as typographical corrections or clarifications that do not alter the substance of the policy) may take effect immediately upon publication.

We encourage you to review this Privacy Policy periodically to stay informed about how 333oko protects your data. Continued use of the 333oko platform after a revised policy becomes effective constitutes your acceptance of the updated terms. If you do not agree with any updates to this policy, you should stop using the platform and may request account closure in accordance with the 333oko Terms and Conditions.