s333 Privacy
Policy

1. Information We Collect

s333 collects personal data from users in several ways: directly when you register an account or contact us, automatically as you interact with the platform, and occasionally from third-party verification and payment service providers. The categories of data we collect are described below.

1.1 Account Registration Data

When you create an s333 account, we collect the following information:

• Full legal name
• Date of birth (used to verify the 18+ age requirement)
• Residential address (city and district within Bangladesh)
• Email address
• Mobile phone number
• Chosen username and encrypted password

1.2 Identity Verification (KYC) Data

In order to comply with our anti-money laundering (AML) obligations and to verify your age and identity, s333 may request copies of one or more of the following documents:

• National ID Card (NID) issued by the Bangladesh Election Commission
• Valid Bangladeshi passport
• Driving licence issued by the Bangladesh Road Transport Authority
• Recent utility bill, bank statement, or official correspondence as proof of address (dated within 3 months)

KYC documents are stored in encrypted form on secure servers and are accessible only by authorised compliance personnel. They are not used for any purpose other than identity and age verification.

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal, s333 records transaction details including the amount, date and time, payment method (e.g., bKash, Nagad, Rocket), and transaction reference number. We do not store full payment account numbers or full mobile money PINs. Payment processing is handled by our payment partners under their own security and data protection obligations.

1.4 Platform Usage Data

As you use the s333 platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location (country/city level)
• Device type, operating system, and browser version
• Pages visited, features used, and session duration
• Game history, bet amounts, and wagering activity
• Login timestamps and session activity logs

This data is used for security monitoring, fraud prevention, responsible gaming analysis, and the improvement of platform performance. It is not used to build individual advertising profiles.

1.5 Communications Data

If you contact s333 support via email at [email protected] or through any other communication channel we may make available, we retain a record of that correspondence, including the content of your message and our response. This is used to resolve disputes, improve support quality, and maintain an audit trail for compliance purposes.

2. How We Use Your Data

s333 processes your personal data on the following legal bases and for the following purposes:

s333 does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated systems flag an account for review (for example, due to unusual wagering patterns), a member of the compliance team will assess the case before any action is taken.

3. Data Sharing & Third Parties

s333 does not sell, rent, or trade your personal data. We may share limited personal data with carefully selected third-party service providers where it is strictly necessary to deliver our services, and only under binding data processing agreements that require those parties to protect your data to the same standard we apply ourselves. Categories of third parties with whom data may be shared include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank) receive transaction data necessary to process deposits and withdrawals.
• KYC and identity verification providers: Certified third-party services that verify the authenticity of identity documents submitted during the account verification process.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens and anonymised player identifiers necessary to deliver their games. They do not receive your full name, contact details, or financial data.
• IT infrastructure and cloud providers: Hosting, database, and content delivery providers that process data on our behalf under strict contractual terms.
• Law enforcement and regulatory bodies: s333 may disclose personal data where required to do so by applicable law, court order, or legitimate regulatory request.

4. Cookies & Tracking Technologies

s333 uses cookies — small text files stored on your device — and similar technologies such as local storage and session tokens. The cookies deployed on s333.bio fall into the following categories:

• Essential cookies: Required for the platform to function correctly. These include session authentication tokens, security cookies (e.g., CSRF protection), and load-balancing cookies. You cannot opt out of essential cookies without ceasing to use the platform.
• Functional cookies: Remember your preferences such as language settings (English) and display options to provide a more consistent experience across sessions.
• Analytics cookies: Anonymised data collected via first-party analytics tools to help us understand how players navigate the platform, which pages generate the most engagement, and where technical errors occur. This data is aggregated and cannot be used to identify you personally.

s333 does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts. Your browsing activity on s333.bio is not shared with external advertising platforms.

You may control cookie behaviour through your browser settings. Disabling essential cookies will prevent you from logging in and using the platform. Disabling analytics cookies will not affect your ability to play. Note that clearing cookies will end your active session and you will need to log in again.

5. Data Security & Retention

5.1 Security Measures

s333 employs a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• TLS 1.2+ encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data at rest, including KYC documents and payment records
• Role-based access controls ensuring that staff can access only the data required for their specific job function
• Multi-factor authentication (MFA) required for all internal administrative access
• Regular automated vulnerability scanning and periodic third-party penetration testing
• Intrusion detection systems monitoring for anomalous access patterns in real time

5.2 Data Retention

s333 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law or regulation. The general retention schedules are as follows:

• Account registration and KYC data: Retained for a minimum of 5 years and a maximum of 7 years following account closure, in line with standard AML record-keeping requirements.
• Financial transaction records: Retained for 7 years from the date of the transaction.
• Platform usage logs: Retained for up to 24 months, after which they are anonymised or deleted.
• Support correspondence: Retained for 3 years from the date of the last interaction, unless the matter relates to an ongoing dispute or investigation.
• Marketing consent records: Retained for the duration of your consent or until you withdraw it, whichever is earlier.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with you personally.

6. Your Privacy Rights

As a user of the s333 platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request" and a description of your request. We will acknowledge your request within 5 business days and aim to fulfil it within 30 days.

• Right of access: You may request a copy of the personal data s333 holds about you, together with information about how and why it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected.
• Right to erasure: Subject to applicable legal obligations (such as AML retention requirements), you may request that s333 delete your personal data. Requests for erasure that conflict with regulatory retention obligations will be handled on a case-by-case basis, and we will explain clearly which data can and cannot be deleted and why.
• Right to restriction: You may request that s333 restrict the processing of your personal data in certain circumstances, for example while a correction request is being assessed.
• Right to data portability: Where processing is based on your consent or on a contractual basis, you may request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interest, including profiling. s333 will stop processing unless compelling legitimate grounds override your interests.

7. International Data Transfers

s333 is primarily operated to serve players based in Bangladesh. Some of our technology infrastructure providers and game studio partners may be located in or process data in jurisdictions outside Bangladesh. Where personal data is transferred internationally, s333 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses incorporated into agreements with third-party data processors
• Data processing agreements that require international partners to implement security standards equivalent to those applied by s333
• Transfers made only to processors operating in jurisdictions with data protection frameworks recognised as providing adequate protection

s333 does not transfer KYC documents or full financial records to international parties beyond what is strictly necessary for compliance screening purposes, and any such transfers are subject to binding contractual protections.

8. Policy Updates & Contact

8.1 Policy Updates

s333 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of our platform. When material changes are made, we will notify registered users by email and/or by posting a prominent notice on s333.bio for a minimum of 14 days before the changes take effect. The "Effective Date" at the top of this document will be updated to reflect the date of the most recent revision.

Your continued use of the s333 platform following the effective date of any revised Privacy Policy constitutes your acceptance of those changes. If you do not agree with a revised policy, you should cease using the platform and request account closure before the effective date.

8.2 Contact

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data s333 holds about you, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response time: We aim to acknowledge all privacy-related enquiries within 5 business days