Privacy Policy — br333 Online Casino

1. Who We Are

br333 ("br333", "we", "us", "our") is the operator of the online gaming and sports betting platform accessible at br333.io (the "Platform"). The Platform offers casino games, live dealer tables, crash games, slot machines, sports betting, and cricket betting services to adult players located in Bangladesh and other permitted markets.

For the purposes of this Privacy Policy, br333 is the data controller responsible for the personal information you provide when accessing or using the Platform. If you have any questions regarding this policy or the way in which your data is handled, please contact us at [email protected].

2. Data We Collect

br333 collects personal data in several categories depending on how you interact with the Platform. The table below summarises the main data types, the purpose for which each is collected, and whether provision of that data is mandatory or voluntary.

br333 does not intentionally collect special categories of sensitive personal data (such as health information, political opinions, religious beliefs, or biometric data) unless specifically required by law or regulatory compliance obligations.

3. How We Collect Data

3.1 Directly From You

The majority of personal data br333 holds about you is provided directly by you during the registration process, during KYC verification, when making a deposit or withdrawal, when contacting our support team, or when updating your account profile. You control the accuracy of the information you provide and are responsible for keeping it current.

3.2 Automatically Through Platform Use

When you visit br333.io or use the mobile-optimised Platform, certain technical and behavioural data is collected automatically by our servers and analytics systems. This includes your IP address, session start and end times, pages visited, games launched, bets placed, and device identifiers. This data is used to ensure the Platform operates correctly and to detect fraudulent activity.

3.3 From Third-Party Service Providers

br333 may receive personal data about you from trusted third-party partners in the following circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard may share transaction confirmation data to verify deposits and withdrawals.
• Identity Verification Providers: Third-party KYC services may cross-reference the identity documents you submit against official databases to confirm your identity.
• Fraud Prevention Partners: We may receive flagging data from fraud detection services to help protect both the Platform and our player community from criminal activity.
• Game Studio Providers: Studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may share aggregated gameplay session data with br333 for audit and dispute resolution purposes.

4. How We Use Your Data

br333 uses the personal data it holds about you for the following purposes:

• Account Management: To create, maintain, verify, and administer your br333 player account.
• Payment Processing: To process deposits, withdrawals, and any associated currency handling in Bangladeshi Taka (৳).
• Identity and Age Verification: To confirm that you meet the minimum age requirement of 21 years and that your identity matches the details provided during registration.
• Regulatory Compliance: To fulfil anti-money laundering (AML) obligations, counter-terrorism financing (CTF) requirements, and any other legal obligations applicable to our operations.
• Fraud and Security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, account takeovers, and other security threats.
• Customer Support: To respond to your queries, complaints, and support requests in a timely and accurate manner.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the overall player experience on the Platform.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling and to apply self-imposed limits or restrictions you have requested via your account settings.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about new games or features — but only where you have given explicit consent to receive such communications.
• Legal Proceedings: To establish, exercise, or defend legal claims where br333's rights or interests require it.

5. Legal Basis for Processing

br333 processes your personal data on one or more of the following legal grounds, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing that is necessary to perform the contract between you and br333 — for example, processing your deposit so that you can place a bet.
• Legal Obligation: Processing required by applicable law — for example, retaining transaction records for anti-money laundering compliance.
• Legitimate Interests: Processing that serves br333's legitimate operational interests, provided those interests are not overridden by your rights — for example, fraud detection and platform security.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — for example, sending you marketing emails about seasonal promotions such as Eid or Pohela Boishakh bonus offers.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, contact support at [email protected] or update your preferences in your account settings.

6. Data Sharing and Disclosure

6.1 Service Providers

br333 shares personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors, identity verification agencies, fraud prevention services, cloud hosting providers, and customer support software vendors. All service providers are contractually required to process personal data only on br333's instructions and to maintain appropriate technical and organisational security measures.

6.2 Game Studio Partners

When you play games on the Platform, limited session and account data may be transmitted to the relevant game studio (such as Pragmatic Play, Evolution Gaming, or Spribe) to load the game, record the outcome, and handle any disputes. These studios are bound by their own data processing agreements with br333.

6.3 Legal and Regulatory Disclosure

br333 may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where required to do so by law, court order, or binding regulatory request. br333 will, where legally permitted, notify affected players of such disclosures.

6.4 Business Transfers

In the event that br333 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data following the transaction.

6.5 No Sale of Data

br333 does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Any sharing of data is strictly limited to the purposes described in this Privacy Policy.

7. International Data Transfers

br333 operates a globally distributed infrastructure, which means your personal data may be transferred to and stored on servers located outside of Bangladesh. Where such transfers occur, br333 takes steps to ensure that your data receives an equivalent level of protection to that which applies in Bangladesh, including by implementing standard contractual clauses or other appropriate transfer mechanisms with data recipients in third countries.

If you have questions about the specific countries to which your data may be transferred, please contact us at [email protected].

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by a website to store information about your session and preferences. br333 uses cookies and similar technologies (such as local storage and pixel tags) to provide a functional and personalised gaming experience.

8.2 Categories of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display options, and last-played games to improve your return visit experience.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform — such as which pages are visited most frequently and where users encounter errors — so that br333 can improve site performance.
• Responsible Gaming Cookies: Store your active deposit limit, session time reminder, and cooling-off status so that these protections remain active across sessions.

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using core Platform functionality. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. Please consult your browser's help documentation for detailed instructions.

9. Data Retention

br333 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, to comply with financial record-keeping and AML obligations.
• Transaction Records: Retained for a minimum of seven (7) years to satisfy financial audit and regulatory requirements.
• KYC Documents: Retained for a minimum of five (5) years after the end of the customer relationship, consistent with anti-money laundering regulations.
• Support Communications: Retained for three (3) years to allow for follow-up on complaints and dispute resolution.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever occurs first.
• Technical / Log Data: Typically retained for twelve (12) months for security monitoring purposes, after which it is anonymised or deleted.

When data is no longer required, br333 will securely delete or anonymise it in accordance with our internal data destruction procedures.

10. Your Privacy Rights

As a player on br333, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. br333 will respond within 30 days of receiving a verified request.

• Right of Access: You may request a copy of the personal data br333 holds about you, along with information about how that data is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your account profile.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. Note that br333 may be unable to comply where retention is required by law (e.g., AML records).
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Restrict Processing: You may request that br333 limits the way it processes your data in specific circumstances, for example while a dispute over accuracy is resolved.
• Right to Object: You may object to processing based on legitimate interests, and you may withdraw consent for marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without penalty — though this will not affect the lawfulness of processing that took place before withdrawal.

Please note that exercising certain rights — such as requesting erasure of your account data — may result in the inability to continue using the br333 Platform, as some data is necessary for account operation.

11. Children and Minors

The br333 Platform is strictly intended for adults aged 21 years and older. br333 does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. If you believe that a minor has registered an account on br333, please notify us immediately at [email protected]. Upon confirmation, we will close the account, delete the associated personal data, and void any bets or bonuses generated through that account.

Parents and guardians are encouraged to use available parental control tools to prevent underage access to online gambling platforms.

12. Security Measures

br333 maintains a comprehensive information security programme that includes the following technical and organisational safeguards:

• 256-bit SSL/TLS Encryption: All data in transit between your device and br333 servers is encrypted using industry-standard protocols.
• Encrypted Data at Rest: Sensitive data fields — including financial records, KYC documents, and password hashes — are encrypted in our database using strong symmetric encryption algorithms.
• Access Controls: Internal access to player data is restricted on a need-to-know basis. All staff access is logged, audited, and subject to regular review.
• Two-Factor Authentication: br333 offers optional two-factor authentication (2FA) for player accounts to add an additional layer of protection against unauthorised access.
• Penetration Testing: br333 commissions periodic third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: br333 maintains a documented incident response plan that is activated in the event of a suspected or confirmed data security incident, with defined timelines for containment, investigation, and player notification.

While br333 takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account login credentials and for notifying br333 promptly if you suspect unauthorised access.

13. Policy Amendments

br333 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. When material changes are made, we will publish the revised policy on the Platform with an updated "Last Updated" date and, where appropriate, notify affected players via their registered email address.

Your continued use of the br333 Platform after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you must cease using the Platform and may request account closure by contacting our support team.

We recommend reviewing this policy periodically — particularly around significant local dates such as Eid, Independence Day (March 26), or Victory Day (December 16) when we may introduce seasonal promotions that involve new data processing activities.

14. Contact and Complaints

If you have any questions, concerns, or complaints relating to this Privacy Policy or the way in which br333 processes your personal data, please contact our Data Support team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
• Response Time: Data access and rights requests responded to within 30 days; general enquiries within 24 hours

br333 does not operate a postal address or telephone support line for privacy matters. All data-related requests must be submitted in writing via email so that a complete and accurate record can be maintained. Please include your registered account username and email address when submitting a request so that we can verify your identity before processing it.

If you are dissatisfied with br333's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection or regulatory authority in your jurisdiction.