sd333 Privacy Policy

Introduction & Scope

This Privacy Policy governs the collection, processing, storage, and disclosure of personal data by sd333 in connection with the operation of the sd333 online casino and sports betting platform, accessible at sd333.app. It applies to all registered players, prospective applicants, and visitors who interact with the sd333 website, mobile interface, live chat system, or any other digital touchpoint operated by or on behalf of sd333.

By registering an account with sd333, making a deposit, engaging with any game or sports market, or simply browsing the platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of the platform immediately.

This policy must be read alongside the sd333 Terms & Conditions and the Responsible Gaming policy, both of which contain additional provisions that are relevant to the management of your account and personal information. In the event of any conflict between this Privacy Policy and any other document, this Privacy Policy shall prevail with respect to the specific subject of data protection and personal information handling.

sd333 may update this Privacy Policy from time to time to reflect changes in applicable law, platform functionality, or internal data governance practices. When a material update is made, players will be notified via the email address registered to their account. The effective date displayed at the top of this document will be updated accordingly. Continued use of the sd333 platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

Personal Data We Collect

sd333 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through the use of cookies and server-side logging, and from third parties such as payment providers and identity verification services. The categories of personal data we collect are outlined below.

Identity & Contact Data

This category of data is collected at registration and during any subsequent KYC (Know Your Customer) verification process. It is required to verify your identity, confirm your age eligibility (18+), and ensure compliance with our anti-money laundering obligations. Players based across Bangladesh — including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — are subject to the same collection standards.

Financial & Payment Data

sd333 does not store your full mobile banking PIN, bank account password, or card security codes. Financial data collected is limited to identifiers necessary to verify payment ownership and to comply with AML monitoring requirements. Full payment credentials are processed exclusively through the relevant payment provider's secure infrastructure (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank).

Technical & Usage Data

Technical and usage data is collected automatically each time you interact with the sd333 platform. This data is used for platform security, fraud detection, responsible gaming monitoring, and internal analytics. It does not identify you personally on its own but may be combined with identity data when investigating account anomalies or processing a withdrawal review.

Communications Data

When you contact sd333 via live chat, email, or any other support channel, we retain a record of your correspondence, including the content of messages, attachments, timestamps, and support agent responses. This data is retained for quality assurance, dispute resolution, and regulatory compliance purposes.

How We Use Your Data

sd333 processes personal data only for specific, clearly defined purposes. We do not sell your personal data to third parties for marketing purposes. The following table summarises the primary purposes for which your data is used and the corresponding legal basis for each processing activity.

• Account management: To create, maintain, and administer your sd333 player account, including processing login events, maintaining balance records, and enabling account settings changes.
• Identity verification (KYC): To verify your identity, confirm you are aged 18 or above, and ensure the account is not being operated by or on behalf of a third party. This is a legal obligation under our AML policy.
• Payment processing: To facilitate deposits, process withdrawal requests, verify payment method ownership, and maintain accurate financial transaction records for each account.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, and any other conduct that is prohibited under the sd333 Terms & Conditions.
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling behaviour, to honour self-exclusion requests, and to enforce deposit or session time limits set by the player or applied by sd333.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 live chat and email support channels.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve platform performance, user experience, and game selection. This analysis does not involve decisions made about individual players based on automated profiling.
• Promotional communications: To send you relevant bonus offers, seasonal promotions (such as Eid or BPL season offers), and platform updates, where you have given consent to receive such communications. You may withdraw consent at any time via your account settings.
• Legal and regulatory compliance: To comply with applicable law, to respond to lawful requests from competent authorities, and to enforce our contractual rights in the event of a dispute.

Data Sharing & Disclosure

sd333 does not sell, rent, or trade your personal data to third parties for commercial gain. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Payment Service Providers

When you make a deposit or request a withdrawal, your payment identifiers are transmitted to the relevant payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank — for the sole purpose of executing the financial transaction. These providers operate under their own privacy policies and are independently responsible for the data they process.

Identity Verification Partners

To fulfil our KYC obligations, sd333 may share identity documents and personal details with accredited third-party identity verification service providers. These partners are contractually bound to process the data only for verification purposes and are prohibited from using it for any secondary commercial use.

Game Software Providers

Certain game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Play'n GO, and Hacksaw Gaming — may receive a session token or anonymised player identifier in order to initialise a game session. These providers do not receive your full identity or financial data; the session data exchanged is the minimum necessary to launch and record a game round.

Legal and Regulatory Disclosure

sd333 may disclose personal data to competent authorities, law enforcement bodies, or courts where required to do so by applicable law, a valid court order, or a lawful regulatory request. In such cases, sd333 will disclose only the data specifically requested and will, where legally permissible, notify the affected player of the disclosure.

Business Transfers

In the event that sd333's business or any part of its operations is transferred, merged, or acquired, player data may be transferred as part of that transaction. Affected players will be notified in advance and afforded the opportunity to request deletion of their data prior to any such transfer, subject to the limitations of applicable law and contractual obligations.

Cookies & Tracking Technologies

sd333 uses cookies and similar tracking technologies to operate the platform effectively, maintain your session state, and gather anonymised analytics data. Cookies are small text files placed on your device when you visit the sd333 website. They do not contain executable code and cannot access other files on your device.

Strictly necessary cookies cannot be disabled as they are essential to the functioning of the platform. Functional and analytics cookies may be disabled by adjusting your browser settings; however, doing so may impair your experience on the sd333 platform. Fraud detection cookies are applied under sd333's legitimate interest in protecting the security of the platform and all player accounts.

Data Retention

sd333 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the full duration of the active account relationship and for a minimum of 5 years following account closure, in compliance with AML record-keeping requirements.
• KYC documents: Identity and address verification documents are retained for 5 years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: All deposit and withdrawal records, including amounts, timestamps, and payment method references, are retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Live chat transcripts and email correspondence are retained for 2 years from the date of each interaction, unless the communication relates to an open dispute, in which case retention continues until the dispute is formally resolved.
• Technical and usage logs: Server logs, session data, and IP records are retained for 12 months from the date of collection, after which they are automatically purged from active systems.
• Marketing preferences: Records of your marketing consent status and communication preferences are retained for the lifetime of your account and for 3 years following account closure.

Upon expiry of the applicable retention period, personal data is either permanently deleted from sd333 systems or anonymised such that it can no longer be linked back to an individual player. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

Your Privacy Rights

As a registered player on the sd333 platform, you hold a number of rights with respect to your personal data. sd333 is committed to honouring these rights promptly and without unnecessary bureaucratic obstruction. To exercise any of the following rights, contact our support team at [email protected].

• Right of Access: You may request a copy of all personal data held by sd333 in relation to your account. We will provide this within 30 days of a verified request, in a structured, machine-readable format where technically feasible.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as a typographical error in a contact detail) can be made via your account settings panel.
• Right to Erasure: Subject to our legal retention obligations and AML requirements, you may request the deletion of your personal data. Requests for erasure will be assessed individually; data that must be retained for regulatory compliance cannot be erased on request but will be isolated from active processing.
• Right to Restrict Processing: You may request that sd333 restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding the accuracy of your data is being resolved.
• Right to Data Portability: You may request that sd333 provide your personal data in a portable format so that it can be transferred to another service provider, where technically feasible and where processing is based on your consent or contractual necessity.
• Right to Object: You may object to the processing of your personal data where that processing is based on sd333's legitimate interests. You may also withdraw consent to marketing communications at any time via your account notification settings.
• Right to Lodge a Complaint: If you believe your data rights have been violated, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

Data Security Measures

sd333 applies a layered approach to data security, combining technical controls, procedural safeguards, and ongoing monitoring to protect personal data against unauthorised access, accidental loss, destruction, or disclosure.

• Encryption in transit: All data transmitted between your device and the sd333 platform is encrypted using 256-bit TLS (Transport Layer Security). This applies to login events, game sessions, deposit flows, and all API communications.
• Encryption at rest: Sensitive personal data fields — including identity document references, payment method identifiers, and account credentials — are encrypted at the database level using industry-standard encryption algorithms.
• Access controls: Access to personal data within sd333's internal systems is restricted on a need-to-know basis. Staff are granted the minimum level of data access required to perform their specific role. All internal access events are logged and subject to audit.
• Password security: Account passwords are stored as salted cryptographic hashes. sd333 staff cannot view your password in plain text. If you forget your password, a secure reset process will be initiated — your existing password cannot be retrieved.
• Fraud monitoring: sd333 operates real-time automated systems that monitor for suspicious login patterns, unusual transaction activity, and potential account compromise. Players are alerted by email if an unfamiliar device or IP address is used to access their account.
• Third-party security audits: sd333's platform and data infrastructure are subject to periodic independent security assessments. Identified vulnerabilities are remediated in accordance with a risk-prioritised schedule.

Despite these measures, no online platform can guarantee absolute security. If you suspect that your sd333 account has been compromised, you should change your password immediately and contact our support team at [email protected]. sd333 will investigate and take immediate protective action where warranted.

Third-Party Game Providers

The sd333 platform integrates games and live dealer content supplied by third-party software providers including, but not limited to, Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Play'n GO, and Hacksaw Gaming. When you launch a game supplied by one of these providers, a secure session is established between your browser and the provider's game server.

During a game session, the provider's server may receive technical data such as a session token, anonymised player identifier, game stake values, and round-result data. This is a functional requirement of operating live-streaming and RNG-based games. sd333 does not transmit your full name, national ID, phone number, or payment details to any game provider.

Each game provider operates under its own privacy policy and data processing agreements with sd333. These agreements require providers to process player data solely for the purpose of delivering and auditing game sessions, and to comply with applicable data protection standards. sd333 performs due diligence on all game providers prior to integration and monitors compliance on an ongoing basis.

Policy Updates & Contact

sd333 reviews this Privacy Policy at least annually and following any significant change to our platform, data processing activities, or applicable law. When a material change is made, we will notify all registered players by email to the address associated with their sd333 account, and will update the effective date displayed at the top of this document.

For minor clarifications that do not affect the substantive rights or obligations of players — such as correcting typographical errors or adding further explanatory context — the document may be updated without individual notification. The version number displayed in the hero section of this page will be incremented to reflect all updates, major or minor.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which sd333 processes your personal data, please contact our Data Support team using the details below. We aim to acknowledge all privacy-related enquiries within 3 business days and to resolve them within 15 business days.