Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how dd3333 ("we", "us", "our", or "the Platform") collects, processes, stores, and protects personal data relating to registered players, visitors, and prospective users of the dd3333 website located at https://dd3333.win ("the Platform"). This Policy applies to all services offered by dd3333, including sports betting, casino games, live dealer tables, and related account management functions.

By creating an account on dd3333, making a deposit, or continuing to use any feature of the Platform, you acknowledge that you have read and understood this Policy in its entirety. If you do not agree with the practices described herein, you should not use the Platform and should contact us to close your account.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and any other document on dd3333, this Policy shall govern data protection matters.

02 Data Controller

dd3333 is the data controller responsible for your personal information collected through the Platform. As data controller, dd3333 determines the purposes for which and the means by which your personal data is processed. We are committed to handling all personal data in a lawful, fair, and transparent manner consistent with applicable data protection principles.

For all data protection enquiries, including subject access requests, correction requests, deletion requests, and complaints, please contact our dedicated data protection team using the details set out in Section 14 of this Policy. We aim to acknowledge all formal data protection requests within 48 hours (Bangladesh Standard Time, UTC+6) and to resolve them within 30 calendar days.

• Platform Name: dd3333
• Website: https://dd3333.win
• Contact Email: [email protected] (plain text — not a clickable link)
• Operating Market: Bangladesh
• Service Language: English

03 Data We Collect

dd3333 collects personal data across several categories, depending on how you interact with the Platform. The table below summarises the categories of data we process and provides examples of specific data points within each category.

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity documents provided for age and identity verification may incidentally contain such information. In such cases, the data is used solely for verification purposes and is not processed for any other purpose.

04 How We Collect Data

dd3333 collects your personal data through a variety of mechanisms, all of which are described transparently below:

• Direct Collection: Data you provide voluntarily when you register an account, complete your profile, make a deposit or withdrawal, contact our support team, or respond to a promotional offer.
• Automated Collection: Technical and usage data collected automatically through cookies, server logs, and analytics tools when you visit or interact with the Platform. See Section 9 for full details on our cookie practices.
• Payment Processors: Transaction confirmation data received from payment partners such as bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal. dd3333 receives transaction reference data but does not receive or store your full mobile banking PIN or password.
• Identity Verification Partners: Where you submit identity documents for account verification, those documents may be processed by a trusted third-party verification service operating under a strict data processing agreement with dd3333.
• Publicly Available Sources: In limited circumstances, such as fraud prevention or responsible gaming compliance, dd3333 may supplement your data with information from publicly available sources, such as government databases or published sanctions lists.

05 Purposes & Legal Basis for Processing

dd3333 processes your personal data only when we have a clear lawful basis and a specific, documented purpose for doing so. The following table sets out our processing purposes and the corresponding legal basis for each:

06 Sharing Your Data

dd3333 does not sell, rent, or trade personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other supported payment partners receive the minimum data required to process your financial transactions. These partners are contractually bound to handle your data securely and only for the purposes of transaction processing.
• Identity Verification Services: Where required for account verification, your identity documents may be shared with a trusted third-party verification provider under a data processing agreement that restricts use of your data to verification purposes only.
• Game Providers: Technical session data (but not your full identity) may be shared with licensed game studios — including Pragmatic Play, Evolution Gaming, JILI, NetEnt, and Ezugi — to facilitate gameplay, resolve disputes, and ensure fair-play integrity.
• IT and Platform Service Providers: We use reputable third-party providers for hosting, cybersecurity, analytics, and platform infrastructure. These providers act as data processors under agreements that require them to maintain appropriate security standards.
• Legal and Regulatory Authorities: dd3333 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory requirement — including in connection with anti-money-laundering investigations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of dd3333's assets, personal data held by dd3333 may be transferred to the acquiring entity, subject to that entity assuming equivalent data protection obligations.

07 Data Retention

dd3333 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account Data: Retained for the duration of your active account and for a period of 5 years following account closure, to comply with anti-money-laundering record-keeping requirements.
• Transaction Records: Financial transaction data, including deposit and withdrawal records in BDT (৳), is retained for a minimum of 5 years from the date of each transaction.
• Identity Verification Documents: Retained for the duration of your account and for 5 years after account closure. Documents may be retained for longer periods if required by a specific legal obligation or ongoing investigation.
• Gaming History: Bet and game records are retained for 5 years to support dispute resolution, responsible gaming monitoring, and regulatory compliance.
• Support Communications: Chat transcripts and email correspondence are retained for 2 years from the date of the last interaction in a support thread.
• Technical and Usage Data: Anonymised or aggregated technical data may be retained indefinitely for analytics and platform improvement purposes. Identifiable technical data (such as IP address logs) is retained for up to 12 months.

When your personal data is no longer required for its original purpose and no legal obligation requires retention, dd3333 will securely delete or anonymise it in accordance with our internal data disposal procedures.

08 Security Measures

dd3333 takes the security of your personal data extremely seriously and has implemented a comprehensive set of technical and organisational measures to protect against unauthorised access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data in transit between your browser or app and dd3333 servers is encrypted using SSL/TLS protocols. Look for the padlock icon in your browser's address bar when accessing the Platform.
• Encryption at Rest: Sensitive personal data stored on dd3333 servers — including identity documents and payment reference data — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to authorised dd3333 personnel on a strict need-to-know basis. All staff with access to personal data undergo regular data protection training.
• Two-Factor Authentication: dd3333 supports two-factor authentication (2FA) for player accounts as an additional layer of login security. We strongly encourage all players to enable 2FA from within their account settings.
• Intrusion Detection: dd3333 maintains active monitoring systems to detect and respond to security threats in real time. Suspected security incidents are escalated immediately to our security team.
• Penetration Testing: We conduct regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses in our platform infrastructure.

09 Cookies & Tracking Technologies

dd3333 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, analyse usage patterns, and detect fraud. Below is an overview of the cookie categories we use:

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary or fraud-prevention cookies may prevent you from accessing certain features of dd3333 or may trigger additional security checks on your account. dd3333 does not use cookies to deliver third-party advertising or to track your activity across external websites.

10 Your Data Rights

As a dd3333 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of the personal data dd3333 holds about you. We will provide this information within 30 days of receiving a verified request, free of charge for the first request each calendar year.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update basic account information directly through your account settings.
• Right to Erasure: In certain circumstances, you may request that dd3333 delete your personal data. This right is subject to limitations — for example, we cannot delete data that we are legally required to retain for anti-money-laundering compliance purposes.
• Right to Restriction: You may ask dd3333 to restrict processing of your personal data while a dispute or complaint is being resolved, or if you contest the accuracy of data we hold.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our demonstrating compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11 Minors & Age Policy

dd3333 strictly prohibits access by persons under the age of 18. Our services are intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data relating to minors.

If dd3333 discovers or is notified that personal data has been collected from a person under 18 years of age, we will immediately close the account, delete the associated personal data (subject to any mandatory retention obligations under applicable anti-money-laundering law), and, where applicable, report the matter to the appropriate authorities.

12 Third-Party Services

The dd3333 Platform integrates with a number of third-party services to deliver its full range of features. While dd3333 carefully selects and vets its third-party partners, we are not responsible for the privacy practices of those services. The relevant third-party services and the nature of their data interactions are described below:

• Game Providers (Pragmatic Play, Evolution Gaming, JILI, NetEnt, Microgaming, Ezugi, Spribe): These studios power the casino and live dealer games available on dd3333. Session identifiers and game-relevant data are shared to enable gameplay. Each provider operates under its own privacy policy and data protection framework.
• Payment Processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank): Transactional data is exchanged with these providers solely for the purpose of processing deposits and withdrawals. Their own privacy policies govern how they handle data on their respective platforms.
• Analytics Providers: dd3333 may use anonymised analytics tools to understand how players interact with the Platform. These tools process aggregated, non-identifiable data only.

Any links or references within this Policy to third-party services are provided for informational purposes only. dd3333 does not endorse and is not responsible for the content, privacy practices, or security of any third-party platform.

13 Changes to This Privacy Policy

dd3333 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the scope of our services. When we make material changes to this Policy, we will publish the updated version on this page with a revised effective date, and where practicable, notify registered players via the email address associated with their account.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically to stay informed of how dd3333 collects, uses, and protects your data. If you object to any material change, you should cease using the Platform and contact us to close your account before the effective date of the revised Policy.

14 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way dd3333 handles your personal data, please contact our support team. All data protection enquiries are handled with strict confidentiality and in accordance with this Policy.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request"
• Subject Line for Privacy Complaints: "Privacy Complaint"
• Response Timeframe: Acknowledgement within 48 hours; full resolution within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week
• Language: English

dd3333 takes all privacy complaints seriously. Upon receiving a formal complaint, we will acknowledge receipt, conduct a thorough internal review, and provide a written response within the timeframe stated above. For further guidance on your rights or our data practices, please also refer to our FAQ page.