333x Privacy
Policy

This Privacy Policy ("Policy") is issued by 333x ("Platform", "We", "Us", "Our") and governs the collection, processing, storage, and protection of personal data belonging to individuals ("User", "You") who access or interact with the 333x platform at https://333x.cam, including through any associated web interfaces, mobile-optimised pages, or customer support channels.

333x is an English-language online betting and casino information platform primarily serving users in Pakistan. We are committed to handling personal data responsibly, proportionately, and in compliance with the data protection obligations applicable under the Platform's operating licence jurisdiction. This Policy reflects those obligations and our own higher standards for user privacy.

By accessing the Platform, completing registration, or using any of our services, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any provision, you should discontinue use of the Platform and contact our support team to discuss your account options.

The following definitions apply throughout this Privacy Policy. Terms not defined here carry their ordinary English meaning in context.

333x collects personal data from Users through several channels — directly at the point of registration and account use, automatically through Platform interaction, and from third-party sources where permitted by law. The categories of personal data we collect are set out below.

3.1 Registration and Identity Data

When you create a 333x account, we collect: full legal name, date of birth, email address, mobile number, and residential address. For Pakistani users undergoing KYC verification, we additionally collect CNIC (Computerised National Identity Card) number or passport details, and proof of address documentation.

3.2 Financial and Payment Data

When you make deposits or request withdrawals, we collect transaction reference data, payment method identifiers (such as mobile wallet account references for Easypaisa or JazzCash, or bank account details for HBL, UBL, Meezan Bank, Bank Alfalah, or Raast transfers), and transaction amounts in PKR. Full payment card numbers, where applicable, are processed by PCI-DSS compliant payment processors and are not stored on 333x servers.

3.3 Account Activity Data

We collect data relating to your use of the Platform, including: login timestamps and session durations, betting history (markets, stakes, outcomes), casino game play history, bonus opt-in and wagering activity, responsible gambling limit settings, and support ticket interactions.

3.4 Technical and Device Data

We automatically collect technical data when you access the Platform, including: IP address, device type and operating system, browser type and version, referral URL, and time-zone settings. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3.5 Communication Data

Any communications you send to 333x — whether via live chat, email, or support ticket — are recorded and stored. This includes support enquiries, complaint records, KYC correspondence, and any voluntary information you provide during these interactions.

333x processes personal data only where a valid legal basis exists. The primary legal bases under which we process your data are as follows:

4.1 Contractual Necessity

Processing your identity data, financial data, and account activity data is necessary to perform the contract between you and 333x — specifically, to create and manage your account, process your deposits and withdrawals, settle your bets, and administer bonuses you have opted into.

4.2 Legal Obligation

We are obligated to process certain personal data to comply with anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, responsible gambling regulations, and any applicable financial crime reporting requirements under the Platform's operating licence. This processing is mandatory and cannot be waived by User consent or objection.

4.3 Legitimate Interests

We process technical and device data, and certain account activity data, on the basis of our legitimate interests in: preventing fraud and account abuse, maintaining Platform security, detecting and preventing match fixing or bonus exploitation, and improving the quality of our services. We apply a balancing test to confirm that our legitimate interests do not override your fundamental data protection rights in each case.

4.4 Consent

Where we send you direct marketing communications beyond transactional notifications, we rely on your consent. You may withdraw consent to marketing communications at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of marketing consent does not affect processing carried out under other legal bases.

The personal data we collect is used for the following specific purposes. We do not use your data for any purpose incompatible with those for which it was originally collected without providing prior notice and, where required, obtaining your consent.

• Account Creation and Management: To register your account, authenticate your identity, and maintain your profile on the Platform.
• KYC and Age Verification: To verify that you meet the minimum age requirement of 18 years (or higher where required by the operator's licence jurisdiction) and to confirm your identity for AML compliance.
• Transaction Processing: To facilitate PKR deposits and withdrawals via the payment methods available in the cashier, including mobile wallet and bank transfer references familiar to Pakistani users.
• Service Delivery: To display betting markets, settle wagers, administer bonuses, provide live scores and statistics, and operate the live casino environment.
• Responsible Gambling Management: To monitor betting patterns for signs of problem gambling, enforce limits you have set, process self-exclusion requests, and fulfil our player welfare obligations under the Platform's operating licence.
• Customer Support: To respond to your enquiries, resolve complaints, and provide account assistance in English and, on request, Urdu.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other Prohibited Conduct as defined in our Terms & Conditions.
• Marketing Communications: To send you information about promotions, bonuses, and Platform updates where you have provided consent. You may opt out at any time.
• Platform Improvement: To analyse aggregate usage patterns, identify technical issues, and improve the quality and performance of the Platform for all users.
• Legal Compliance: To retain records and respond to requests from regulatory authorities or law enforcement agencies as required by applicable law and our operating licence obligations.

333x does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances, and only to the extent necessary for the defined purpose.

6.1 Data Processors

We engage third-party service providers ("Data Processors") to assist in Platform operations. These include payment processing providers, identity verification and KYC service providers, fraud detection technology providers, cloud hosting and infrastructure providers, and customer support platform operators. All Data Processors operate under binding data processing agreements that prohibit them from using your data for any purpose other than providing the contracted service to 333x.

6.2 Payment Method Providers

When you make a deposit or withdrawal, relevant transaction data is shared with the applicable payment provider to process the transaction. Payment method names familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah — are referenced here as potential payment rails only. Sharing of data with any payment provider is limited to what is technically necessary for the transaction and does not constitute an endorsement or partnership with gambling activity by any named provider.

6.3 Regulatory and Legal Disclosure

We may disclose personal data to competent regulatory authorities, law enforcement bodies, or courts where we are legally compelled to do so under applicable law, court order, or the requirements of our operating licence. We will notify you of such disclosure where legally permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 333x's business operations, personal data held by 333x may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

333x uses cookies and similar tracking technologies to operate, secure, and improve the Platform. By continuing to use the Platform after being presented with cookie information, you consent to the use of cookies in accordance with this section.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for core Platform functionality including session authentication, security tokens, and load balancing. These cannot be disabled without disrupting Platform access.
• Functional Cookies: Store your preferences such as language settings, odds format selection (decimal/fractional), and responsible gambling limit configurations to personalise your Platform experience.
• Analytics Cookies: Collect aggregated and anonymised data on how Users navigate the Platform — including page visit frequency, session duration, and feature usage — to help us improve Platform quality.
• Security Cookies: Support fraud detection and account security systems by tracking device fingerprints and login patterns to identify suspicious access attempts.

7.2 Cookie Management

You can control cookie settings through your browser's privacy configuration. Disabling strictly necessary cookies will impair Platform functionality and may prevent you from accessing your account. Disabling analytics or functional cookies will not affect your ability to use core Platform features.

7.3 Local Storage and Session Storage

In addition to cookies, 333x may use browser local storage and session storage to retain temporary data required for Platform performance, such as your active betting slip contents or live match data cache. This data is cleared when your session ends or when you clear your browser storage.

333x retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our operating licence obligations. The following general retention schedules apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. Anonymised aggregate data may be retained indefinitely for statistical and Platform improvement purposes.

333x implements technical and organisational security measures proportionate to the sensitivity of the personal data we process. Our security framework includes the following controls:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and the 333x Platform
• Encryption at rest for sensitive personal data including identity documents and financial records
• Access controls ensuring that Platform personnel can access personal data only on a strict need-to-know basis
• Regular security assessments, vulnerability scanning, and penetration testing of Platform infrastructure
• Multi-factor authentication requirements for administrative access to systems holding personal data
• Documented data breach response procedures with defined notification timelines
• Data processor due diligence and contractual security requirements for all third-party service providers

Whilst 333x implements robust security measures, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. Users also bear responsibility for maintaining the security of their own account credentials and should not share passwords with any third party.

Subject to applicable law and the legal bases under which we process your data, you have the following rights regarding your personal data held by 333x. To exercise any of these rights, contact our support team at the details provided in Section 14.

10.1 Submitting a Data Request

All data rights requests should be submitted in writing to our support team via email or live chat, quoting your registered account email address for identification. We will acknowledge all requests within 5 business days and aim to provide a substantive response within 30 calendar days. Where a request is complex or involves a high volume of data, we may extend this period by a further 30 days, notifying you of the extension in advance.

10.2 Identity Verification for Rights Requests

To protect your data from unauthorised access, we may ask you to verify your identity before processing a data rights request. This typically involves confirming your registered email address, account details, and — where necessary — providing KYC documentation equivalent to that provided at registration.

333x's Platform infrastructure and third-party service providers may operate data processing systems in jurisdictions outside Pakistan. Where personal data is transferred across international borders in the course of Platform operations — for example, to cloud hosting providers or payment processing platforms — 333x ensures that appropriate safeguards are in place to protect your data to a standard consistent with applicable data protection requirements.

Safeguards applied to international data transfers include binding contractual clauses incorporated into data processing agreements with third-party processors, selection of processors operating in jurisdictions with recognised data protection frameworks, and technical security measures applied consistently regardless of geographic location.

You may request information about the specific safeguards applied to any cross-border transfer of your personal data by contacting our support team using the details in Section 14.

The 333x Platform is strictly intended for adults aged 18 years or above, or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect or process personal data from individuals under the age of 18.

Age verification is applied as a mandatory step in the account registration process. Where 333x identifies, whether through verification processes or other means, that personal data has been submitted by an individual under the minimum age, all such data will be deleted immediately and the associated account will be closed without retention of any balance.

If you are a parent or guardian and believe that a person under the age of 18 may have registered on the 333x Platform using personal details you recognise, please contact our support team immediately so that we can investigate and take appropriate action.

333x reviews this Privacy Policy periodically and reserves the right to update or amend it at any time. Where amendments materially affect your rights or how we process your personal data, we will provide notice to registered Users via email or a prominent Platform notification at least seven (7) days before the changes take effect.

Non-material amendments — such as typographical corrections or clarifications that do not alter the substance of data processing activities — may be made without advance notice. The revision date displayed at the top of this page reflects the date of the most recent update.

Continued use of the Platform following notification of amendments constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.

For all privacy-related queries, data rights requests, or concerns about how 333x processes your personal data, please contact our Data Protection team through the following channels. All privacy communications will be handled in English. Urdu-language assistance is available on request.

Email: [email protected] — displayed as plain text only; this address is not a clickable link.

Live Chat: Available 24 hours a day, 7 days a week via the chat interface on the Platform homepage.

Subject Line: When emailing about data rights or privacy concerns, please include "Privacy Request" or "Data Rights" in your subject line and quote your registered account email address to allow us to identify your account.

Response Commitment: We will acknowledge privacy and data rights enquiries within 5 business days and provide a substantive response within 30 calendar days of receipt.