33dd Privacy Policy

This Privacy Policy applies to all personal data processed by 33dd in connection with the operation of the online gaming and sportsbook platform accessible at https://33dd.ws. It covers data collected when you visit our website, register a 33dd account, deposit funds, place bets, play casino games, contact support, or otherwise interact with any part of the 33dd service.

For the purposes of this Privacy Policy, "personal data" means any information that identifies you or could reasonably be used to identify you as an individual — including your name, contact details, financial information, device identifiers, and betting activity records. "Processing" means any operation performed on personal data, including collection, storage, use, and deletion.

33dd is the data controller in respect of the personal information collected through the platform. This means 33dd determines the purposes and means by which your personal data is processed. Where 33dd engages third-party processors — such as payment providers or identity verification services — those parties act strictly under 33dd's instruction and are contractually bound to handle your data in accordance with applicable data protection standards.

By creating a 33dd account or continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood the terms set out in this document.

33dd collects personal data through several channels — directly from you when you register or interact with the platform, automatically when you use the service, and occasionally from third-party verification providers during the KYC process. The categories of data we collect are outlined below.

33dd uses the personal data we collect for the following purposes, each of which is tied to a legitimate basis described in Section 4 of this Policy:

• Account Management: To create, maintain, and secure your 33dd account, including verifying your identity during registration and processing changes to your account details.
• Service Delivery: To allow you to place bets, access the 33dd Casino, use sportsbook markets including PSL cricket, snooker, UFC, and slot games, and to process deposits and withdrawals in PKR.
• KYC & Compliance: To verify your age (21+), identity, and source of funds in accordance with anti-money laundering (AML) and know-your-customer (KYC) obligations applicable to the platform.
• Fraud Prevention & Security: To monitor account activity for signs of fraud, collusion, money laundering, multi-accounting, or other prohibited behaviours that could harm the platform or other players.
• Responsible Gaming: To support the operation of responsible gaming tools including deposit limits, session controls, cooling-off periods, and self-exclusion, and to identify patterns of play that may indicate problem gambling behaviour warranting outreach.
• Customer Support: To respond to your queries, complaints, and support requests efficiently and accurately using your account history and communications records.
• Platform Improvement: To analyse aggregated, anonymised usage patterns and technical performance data in order to improve the 33dd platform's reliability, speed, and game offering.
• Legal Obligations: To fulfil record-keeping, reporting, and disclosure obligations imposed on 33dd under applicable gaming compliance standards and financial regulations.
• Service Communications: To send you transactional communications related to your account — including deposit confirmations, withdrawal notifications, and security alerts — via email or SMS.

33dd does not use your personal data for behavioural advertising on third-party platforms, nor do we sell, rent, or trade your personal information to unaffiliated third parties for their own marketing purposes.

For each purpose for which 33dd processes your personal data, we rely on one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and 33dd — i.e., to operate your account, process transactions, and deliver gaming services. Without this processing, 33dd cannot provide you with a functioning account.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including AML checks, age verification, record retention obligations, and mandatory reporting to compliance authorities where required.
• Legitimate Interests: Processing is necessary for 33dd's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your rights and interests.
• Consent: Where 33dd relies on your consent to process personal data — for example, to send promotional communications — you may withdraw that consent at any time by updating your account preferences or contacting support.

33dd does not sell your personal data. We share personal information only in the circumstances described below, and only to the extent strictly necessary for each purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the financial data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy and data security frameworks.
• Identity Verification Providers: Third-party KYC service providers may receive copies of identity documents you submit during the verification process in order to confirm your identity and age on 33dd's behalf.
• Game Content Providers: Casino game providers integrated into the 33dd platform may receive session identifiers and game-specific data necessary to operate individual game titles. These providers do not receive your full identity or financial profile.
• Compliance & Regulatory Authorities: 33dd may be required by law to disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies where a valid legal demand is made. 33dd will notify you of such disclosures where legally permitted to do so.
• Fraud Prevention Services: Aggregated or pseudonymised account data may be shared with industry-level fraud prevention and responsible gaming databases to prevent known bad actors from accessing the platform.
• Business Transfers: In the event of a merger, acquisition, or restructuring of 33dd's business, your personal data may be transferred to the acquiring or successor entity, subject to equivalent data protection commitments.

33dd uses cookies and similar tracking technologies on the platform to support platform functionality, maintain session security, and analyse aggregate usage patterns. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the 33dd platform to function. They maintain your session state, support login security, and enable core features such as account balance display and bet slip management. These cookies cannot be disabled without compromising platform functionality.
• Functional Cookies: These cookies remember your platform preferences — such as your preferred language, odds format, and responsible gaming settings — so that they are applied consistently across sessions.
• Analytics Cookies: 33dd uses first-party analytics data to understand how players interact with the platform in aggregate. This data is anonymised and used solely to improve platform performance and game availability. No personally identifiable information is included in analytics reports.
• Security Cookies: Cookies used to detect and prevent fraudulent access attempts, bot activity, and credential stuffing attacks. These are essential to maintaining a secure environment for all registered 33dd players.

You may adjust your browser settings to refuse or delete cookies at any time. Please note that disabling strictly necessary or security cookies may impair your ability to log in to or use your 33dd account. 33dd does not use third-party advertising cookies or tracking pixels that transmit your data to external advertising networks.

33dd retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. The general retention framework applied by 33dd is as follows:

• Active Account Data: Retained for the duration of your 33dd account, plus a minimum period of 5 years following account closure to fulfil AML record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years from the date of submission, or longer where required by applicable financial regulations.
• Transaction Records: All deposit, withdrawal, and gaming transaction records are retained for a minimum of 5 years following the date of the transaction.
• Support Communications: Live chat transcripts and support emails are retained for up to 3 years from the date of the interaction, or longer where they relate to an unresolved dispute or compliance matter.
• Technical & Log Data: Server logs and technical access records are retained for up to 12 months, after which they are anonymised or deleted.
• Self-Exclusion Records: Where a player applies for self-exclusion, the associated exclusion record is retained indefinitely to prevent re-registration during the exclusion period and to support future responsible gaming reviews.

Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for aggregate statistical and business analysis purposes.

33dd applies industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. The security measures in place on the 33dd platform include:

• TLS/SSL Encryption: All data transmitted between your browser or device and the 33dd platform is encrypted using Transport Layer Security (TLS). The 33dd platform operates exclusively over HTTPS.
• Password Security: User passwords are never stored in plain text. All passwords are processed using a cryptographic hashing algorithm with salt, rendering them unrecoverable even in the event of a data breach.
• Access Controls: Access to personal data held by 33dd is restricted on a strict need-to-know basis. Only authorised personnel with a documented operational need may access identifiable player data, and all access is logged.
• Independent RNG Audits: Casino game RNG systems are independently audited to ensure that game outcomes are not manipulated and that game integrity is maintained for all players.
• Fraud Monitoring: Automated systems monitor account activity in real time for anomalous patterns indicative of account compromise, fraud, or coordinated abuse.

As a 33dd account holder, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, please contact the 33dd support team using the details in Section 13 of this Policy.

• Right of Access: You may request a copy of the personal data 33dd holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data held by 33dd is inaccurate or incomplete, you may request that it be corrected. You can update certain account details directly from within your 33dd account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, and where no overriding legal obligation requires its retention. Note that AML and regulatory record-keeping requirements will typically prevent full erasure of transaction and identity records within the mandatory retention period.
• Right to Restrict Processing: You may request that 33dd restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of data held about you pending verification.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests at any time. 33dd will cease that processing unless compelling legitimate grounds for continuation exist that override your interests and rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place prior to withdrawal.

The 33dd platform is strictly for individuals aged 21 years and above. 33dd does not knowingly collect personal data from individuals under the age of 21. Age verification is enforced at the account registration stage through KYC document review, and no account may be approved without confirmed proof of age.

If 33dd becomes aware that personal data has been collected from an individual under 21 years of age, we will immediately suspend the associated account, void any associated gaming activity, and delete the personal data in question as far as permitted by applicable law. Any funds deposited by an underage user will be handled in accordance with 33dd's compliance procedures.

The 33dd platform may from time to time contain references or links to third-party websites, game providers, or services. This Privacy Policy applies solely to personal data processed by 33dd in the context of the 33dd platform. It does not extend to any third-party website, application, or service that may be accessible via a link from the 33dd platform.

33dd is not responsible for the privacy practices, data collection methods, or security standards of any third-party website. We encourage you to review the privacy policy of any external service before submitting personal information to it.

33dd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. Where changes are material — meaning they significantly affect how we collect or use your personal data — 33dd will provide advance notice via a prominent notice on the platform and, where practicable, by direct communication to registered account holders.

The effective date at the top of this document will be updated each time the Policy is revised. Your continued use of the 33dd platform following any update constitutes acceptance of the revised Privacy Policy. We recommend reviewing this page periodically to stay informed of how 33dd handles your personal information.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to raise a privacy-related concern, please contact the 33dd data team using the details below:

When contacting us regarding a data rights request, please include your registered account username and a clear description of your request. This allows our team to locate your records promptly and respond within the applicable timeframe.