333 x Privacy Policy – How We Handle Your Data in Pakistan

1. Introduction

This Privacy Policy explains how 333 x — operating the gaming platform accessible at 333x.biz — collects, uses, stores, and protects the personal information of players and visitors based in Pakistan and elsewhere. It applies to all interactions you have with 333 x, including account registration, deposits, gameplay, customer support conversations, and visits to 333x.biz from any device.

At 333 x, we believe that privacy is not just a legal obligation — it is a basic form of respect for our players. Pakistani players share sensitive information with us when they register and verify their accounts. A CNIC number, a mobile wallet number, a home address — these are not trivial pieces of information, and 333 x treats them with the seriousness they deserve. We collect only what we genuinely need, we protect it with robust technical measures, and we give you real control over it.

By creating a 333 x account or using any part of the 333x.biz platform, you acknowledge that you have read and understood this Privacy Policy. If you have any questions about anything in this document, please contact our support team at support@333x.biz before using the platform.

2. Information We Collect

333 x collects personal information in three main ways: information you provide directly, information generated by your use of the platform, and — in limited cases — information from third-party verification partners. Here is a full breakdown:

333 x does not collect sensitive personal data such as biometric information beyond what is strictly required for identity verification, and does not collect political opinions, religious beliefs, or health data.

3. How 333 x Uses Your Information

Every piece of data that 333 x collects has a specific, legitimate purpose. We do not collect information speculatively or store it indefinitely without reason. Here is how your information is used:

• Account operation: Your registration details are used to create and manage your 333 x account, authenticate your logins, and ensure you can access the platform securely from your devices.
• Transaction processing: Financial data is used exclusively to process PKR deposits from and withdrawals to your verified payment methods, including Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard accounts.
• Identity verification and compliance: CNIC and identity document data is used to verify that you meet the 333 x eligibility requirements — specifically that you are at least 18 years old and that you are who you claim to be. This is a legal obligation under anti-money laundering standards, not optional.
• Responsible gaming: Your activity data — session lengths, deposit frequency, loss patterns — is monitored by 333 x systems to identify potential signs of problem gambling. If concerning patterns are detected, 333 x may reach out proactively or apply protective limits in accordance with its responsible gaming obligations.
• Platform security and fraud prevention: Technical data including IP addresses and device fingerprints are used to detect suspicious activity such as multiple account creation, unauthorised login attempts, and bonus abuse patterns.
• Customer support: When you contact the 333 x support team, your account data and communication history are used to resolve your query efficiently and accurately.
• Marketing communications: With your explicit consent, 333 x may use your email address and mobile number to send you information about promotions, new games, and platform updates. You can opt out at any time.
• Legal and regulatory compliance: 333 x may be required to disclose certain data to regulatory bodies, law enforcement agencies, or financial intelligence units where mandated by applicable law.

4. How We Share Your Data

333 x does not sell your personal data to third parties — ever. However, there are specific, limited circumstances where data may be shared with trusted service providers or disclosed by legal requirement:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive the minimum data required to process your PKR transactions. These providers have their own privacy obligations and are contractually bound to handle your data securely.
• Identity verification partners: Third-party KYC providers receive identity document data to perform age and identity checks. They are prohibited from using your data for any purpose beyond verification services for 333 x.
• Technology and hosting providers: Cloud infrastructure and platform technology providers may technically process data as part of delivering the 333 x service, under strict data processing agreements that limit their use of your information.
• Legal and regulatory authorities: 333 x may disclose data where required by law, court order, or regulatory demand — for example, to financial intelligence units investigating money laundering, or to law enforcement acting under a valid legal instrument. 333 x will not disclose more than is legally required in such circumstances.
• Fraud prevention networks: In cases of suspected fraud or multi-accounting, 333 x may share limited data with industry fraud prevention services to protect the integrity of its platform and other players.

5. How 333 x Protects Your Data

Data security at 333 x is not a marketing statement — it is an operational reality backed by specific technical and organisational measures:

• TLS encryption in transit: All data exchanged between your browser or app and 333x.biz is encrypted using TLS (Transport Layer Security). The padlock in your browser address bar confirms this is active on every page.
• Encryption at rest: Sensitive personal data including identity document images and financial records is encrypted when stored on 333 x servers. Even in the event of an unauthorised server access, encrypted data cannot be read without the decryption keys.
• Access controls: Access to personal data within 333 x is restricted on a strict need-to-know basis. Support agents can access only the data required to resolve your specific query. Senior data access requires multi-factor authentication and is logged.
• Security monitoring: 333 x operates continuous monitoring of its infrastructure for unusual access patterns, attempted intrusions, and data exfiltration indicators. Anomalies trigger automated alerts and manual review.
• Data breach response: In the event of a data security incident that affects your personal information, 333 x will notify affected players as quickly as possible with details of what occurred, what data was involved, and what steps are being taken. We take this obligation seriously.

6. Cookies and Tracking Technologies

333 x uses cookies and similar technologies on 333x.biz to make the platform work correctly, understand how players use it, and improve the experience over time. Here is what each type of cookie does:

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using 333 x, though some features may work less smoothly. Essential session and security cookies cannot be disabled as they are required for the platform to function.

7. How Long We Keep Your Data

333 x retains your personal data only for as long as it is necessary for the purpose for which it was collected or as required by applicable legal obligations. The following retention periods apply:

• Active account data: While your 333 x account is active, all account, transaction, and activity data is retained to provide the service and meet our operational obligations.
• Post-closure retention: After an account is closed — whether by you or by 333 x — personal data is retained for a minimum of five years to comply with anti-money laundering record-keeping requirements and to allow resolution of any disputes that arise after closure.
• Identity verification documents: CNIC copies, passport scans, and selfie photographs used for KYC verification are retained for the period required by applicable financial regulations, typically five to seven years after the end of the account relationship.
• Support communications: Customer support transcripts and email correspondence are retained for three years after the last interaction, to assist with dispute resolution and service quality review.
• Technical logs: Server-side access logs and security event records are retained for up to 12 months for security monitoring purposes, after which they are deleted or anonymised.
• Marketing data: If you have opted in to marketing communications, your contact details for this purpose are retained until you opt out. On opt-out, marketing data is removed from active lists within 48 hours.

8. Your Rights Over Your Data

As a 333 x player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@333x.biz with the subject line "Data Rights Request":

333 x will respond to all data rights requests within 30 days. Where a request is complex or we receive multiple requests simultaneously, we may extend this to 60 days, and we will inform you of the extension within the initial 30-day period.

9. Marketing Communications

333 x may send you marketing communications about new promotions, game launches, PSL season offers, and platform updates. The following rules apply to marketing from 333 x:

• Consent-based only: 333 x only sends marketing communications to players who have explicitly opted in — either during registration or through their account settings. We do not send unsolicited marketing to players who have not opted in.
• What we send: Marketing from 333 x may include promotional bonus notifications, new game announcements, PSL betting reminders during cricket season, and Eid or seasonal offers. We do not send marketing on behalf of third parties.
• How to opt out: You can opt out of 333 x marketing communications at any time by clicking the unsubscribe link in any marketing email, updating your communication preferences in your account settings, or emailing support@333x.biz with the subject line "Marketing Opt-Out". We process opt-outs within 48 hours.
• Transactional communications: Opting out of marketing does not affect transactional communications — messages about your deposits, withdrawals, account security, or regulatory requirements will still be sent as they are essential to the service.

10. Third-Party Links and Services

The 333 x platform at 333x.biz does not contain links to external third-party websites beyond the payment providers necessary to process your transactions. In the unlikely event that a link to an external site appears on 333x.biz, 333 x is not responsible for the privacy practices or content of that external site. You should review the privacy policy of any third-party site you visit independently.

Payment service providers including Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners operate under their own privacy policies when processing your transactions. 333 x shares only the minimum data required for each transaction — we recommend reviewing the privacy policies of your chosen payment provider for details of how they handle your data on their end.

11. Children and Minors

333 x is strictly an 18+ platform. We do not knowingly collect personal data from individuals under 18 years of age. If we discover that a person under 18 has provided us with personal data through the 333 x registration process, we will immediately:

• Suspend and close the account in question.
• Delete all personal data associated with the underage account as promptly as possible, subject to any legal retention obligations relating to the investigation of the age falsification.
• Retain a minimal record sufficient to prevent re-registration by the same individual.

If you believe a minor has registered a 333 x account, please notify us immediately at support@333x.biz with subject line "Underage Account Report". We will investigate and act promptly.

12. Updates to This Privacy Policy

333 x may update this Privacy Policy from time to time to reflect changes in how we handle data, changes in applicable law, or improvements to our practices. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered 333 x players via email at least 14 days before significant changes take effect, where this is practically possible.
• In cases where changes are required immediately for legal or security reasons, notify players as soon as practicable after the change is implemented.

Your continued use of 333 x after the effective date of a Privacy Policy update constitutes your acceptance of the revised policy. If you do not accept a material change, you should stop using 333 x and contact us to close your account and request data deletion.

13. Contact – Privacy Questions and Requests

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern about 333 x, please contact us through the following channels:

333 x aims to respond to all privacy-related enquiries within 72 hours. For formal data rights requests (access, erasure, portability), we will acknowledge receipt within 72 hours and fulfil the request within 30 days. Where identity verification is required before fulfilling a data request, we will let you know what documentation is needed.