333y  ·  Data & Privacy

Privacy Policy

This Privacy Policy explains how 333y collects, processes, stores, and protects your personal data. We are committed to handling your information with care, transparency, and respect — particularly for players accessing the platform from Pakistan.

Last Updated: January 2026  ·  Version 2026.1
18+ Only — 333y is an adults-only platform. Personal data is processed only for eligible registered users. See eligibility requirements in our Terms & Conditions.
§ 01

Introduction

333y ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access and use the online gaming and sports betting services available at https://333y.cam (the "Site"). This Privacy Policy ("Policy") sets out the basis on which we collect, use, disclose, and protect your personal information.

This Policy applies to all users of the 333y platform, including registered account holders and visitors who access the Site without registering. It should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which form part of the contractual relationship between you and 333y.

By creating an account, depositing funds, placing bets, or otherwise using any feature of the 333y platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not use the 333y platform.

Note for Pakistani Users: 333y operates as an international online gaming platform and is not regulated by the Government of Pakistan, PTA, State Bank of Pakistan, or any Pakistani provincial authority. Pakistan does not currently have a comprehensive data protection law equivalent to GDPR. This Policy is written to reflect internationally recognised privacy standards and the obligations of the jurisdiction under which 333y operates. This document does not constitute legal advice.
§ 02

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Term Meaning
"Personal Data" Any information that identifies or can reasonably identify a living individual, either directly or in combination with other data. This includes names, email addresses, national identity numbers (e.g., CNIC), IP addresses, and payment information.
"Processing" Any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
"Data Controller" The entity that determines the purposes and means of processing personal data. For users of the 333y platform, the Data Controller is the operator of 333y.
"Data Processor" Any third-party entity that processes personal data on behalf of the Data Controller in accordance with documented instructions.
"KYC Data" Identity and verification documents submitted as part of the Know Your Customer process, including CNIC, passport copies, selfies, and proof of address.
"Cookies" Small text files placed on your device by the Platform or third-party services, used to store session information, preferences, and analytics data.
"User" / "You" Any individual who accesses or uses the 333y platform, whether as a registered account holder or as an unregistered visitor.
§ 03

Personal Data We Collect

333y collects different categories of personal data depending on your interaction with the platform. The categories of data we may collect include, but are not limited to, the following:

Data Category Examples Purpose
Identity Data Full legal name, date of birth, CNIC or passport number, nationality Account registration, KYC, age verification, AML compliance
Contact Data Email address, mobile phone number Account communication, security alerts, support correspondence
Financial Data Deposit and withdrawal records, payment method identifiers (last 4 digits, wallet IDs), transaction amounts in PKR or other currency Payment processing, fraud prevention, AML monitoring
KYC Documents CNIC front/back, passport scan, selfie/liveness check, proof of address Identity verification, age verification, regulatory compliance
Technical Data IP address, device type, browser type, operating system, session data, geolocation (country-level) Security, fraud detection, platform improvement, geolocation compliance
Usage Data Games played, bets placed, deposit and withdrawal history, login timestamps, session duration Responsible gambling monitoring, account management, bonus eligibility
Communications Data Support chat transcripts, email correspondence, feedback submissions Support resolution, quality assurance, dispute management
Marketing Preferences Opt-in/opt-out status for promotional communications Sending or suppressing marketing materials in accordance with your preferences

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or political opinions unless required by applicable law or where you have provided such information voluntarily for a specific and documented purpose (e.g., a responsible gambling self-assessment).

§ 04

How We Collect Your Data

333y collects personal data through the following channels and mechanisms:

  • Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting our support team.
  • Automated collection: Technical and usage data collected automatically when you access and interact with the platform, including through server logs, cookies, and similar tracking technologies.
  • Third-party providers: Information received from payment processors, identity verification providers, fraud prevention services, and KYC bureaus where you have authorised such sharing.
  • Public sources: Publicly available information used to verify identity or to conduct AML/sanctions screening where required by applicable law.
KYC Document Submission: Identity documents must be submitted exclusively through the Platform's secure HTTPS verification portal. 333y will never request that you send CNIC copies, passport scans, or financial documents through unencrypted email, messaging applications (including WhatsApp, Telegram, or social media), or any channel other than the official secure verification flow.
§ 05

Legal Basis for Processing

Where 333y is subject to data protection legislation in its operating jurisdiction, we process your personal data on one or more of the following legal bases:

  • Contractual necessity: Processing required to register your account, execute transactions, process deposits and withdrawals, and provide the gaming and betting services you have requested.
  • Legal obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements, age verification obligations, and financial reporting requirements.
  • Legitimate interests: Processing carried out for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where these interests are not overridden by your fundamental rights and freedoms.
  • Consent: Processing based on your explicit consent, such as the receipt of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
§ 06

How We Use Your Personal Data

333y uses the personal data it collects for the following purposes:

  • Account management: Creating, maintaining, and managing your 333y account, including verifying your identity and processing login and session activity.
  • Transaction processing: Facilitating deposits, withdrawals, and bonus credits, and maintaining accurate financial records associated with your account.
  • KYC and compliance: Meeting identity verification, age verification, AML, counter-financing of terrorism (CFT), and sanctions screening obligations under applicable law.
  • Responsible gambling: Monitoring gameplay patterns for indicators of problem gambling, enforcing limits you have set, processing self-exclusion requests, and conducting affordability assessments where applicable.
  • Security and fraud prevention: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
  • Customer support: Responding to queries, resolving disputes, processing complaints, and maintaining records of support interactions.
  • Platform improvement: Analysing usage data and technical performance to improve the user experience, fix technical issues, and develop new features.
  • Marketing communications: Sending promotional offers, bonus notifications, and platform updates to users who have opted in to receive such communications. You may unsubscribe at any time.
  • Legal proceedings: Using and disclosing personal data as required by court order, regulatory directive, or law enforcement request.

We will not use your personal data for any purpose that is incompatible with the purposes stated in this Policy without providing prior notice and, where required, obtaining your consent.

§ 07

Data Sharing & Third-Party Disclosure

333y does not sell your personal data to third parties. We share personal data only in the following circumstances and with the following categories of recipient:

  • Payment processors: Financial data is shared with payment service providers to process deposits and withdrawals. These providers process payment method information on our behalf under contractual data processing agreements.
  • Identity verification providers: KYC data, including CNIC or passport information, may be shared with third-party identity and age verification service providers as part of our compliance obligations.
  • AML and fraud prevention services: Personal and financial data may be shared with specialist AML, sanctions screening, and fraud prevention vendors to meet our regulatory obligations.
  • Platform and technology providers: Technical data may be shared with hosting, infrastructure, analytics, and software providers who process data on our behalf as data processors under binding agreements.
  • Regulatory and law enforcement authorities: We may be legally required to disclose personal data to regulatory bodies, courts, or law enforcement agencies in the applicable jurisdiction. We will disclose only the minimum data required by the applicable legal obligation.
  • Business transfers: In the event of a merger, acquisition, or sale of all or part of the 333y business, personal data may be transferred as part of that transaction, subject to the protections in this Policy.
Payment Provider Clarification: Payment services familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah — are referenced for user familiarity only. None of these providers endorse 333y or are affiliated with online gambling operations. When payment data is shared with processors, it is handled under applicable financial services regulations and the provider's own privacy terms.
§ 08

International Data Transfers

333y operates as an international online gaming platform. As a result, your personal data may be transferred to, stored, or processed in countries outside your country of residence, including countries that may have different data protection standards than those applicable in Pakistan or in the jurisdiction from which you are accessing the platform.

Where data is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are in place, which may include:

  • Transfers to countries deemed to provide an adequate level of data protection by the relevant supervising authority;
  • Use of standard contractual clauses or equivalent transfer mechanisms where required;
  • Contractual data processing agreements with all third-party processors that impose obligations equivalent to those described in this Policy.

By using the 333y platform, you acknowledge and consent to the transfer of your personal data to servers and processors located outside Pakistan and outside your country of residence, subject to the protections described in this Policy.

§ 09

Data Retention

333y retains personal data for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. The following general retention principles apply:

Data Category General Retention Period
Account & Identity Data Duration of account plus a minimum of five (5) years following account closure, or as required by AML/KYC obligations in the applicable jurisdiction.
Financial Transaction Records Minimum five (5) years from the date of the transaction, or longer where required by financial reporting or AML obligations.
KYC Documents As required by the verification service provider's obligations and applicable AML law, typically five (5) years from last interaction.
Support Communications Three (3) years from the date of the last interaction, or longer if subject to an open dispute or legal claim.
Technical & Log Data Up to twelve (12) months for routine logs; longer where required for security investigations or fraud prevention.
Marketing Preferences Until consent is withdrawn or the account is closed. Opt-out records are retained indefinitely to honour suppression requests.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

§ 10

Cookies & Tracking Technologies

The 333y platform uses cookies and similar tracking technologies to operate correctly, maintain session security, understand how users interact with the Site, and improve performance. The following categories of cookies may be used:

  • Strictly Necessary Cookies: Essential for the platform to function. These include session management cookies, authentication tokens, and security cookies. These cannot be disabled without disrupting core platform functionality.
  • Functional Cookies: Used to remember your preferences, such as language settings, and to personalise your experience on return visits.
  • Analytics Cookies: Used to collect aggregated, anonymised information about how users interact with the Site, including pages visited, session duration, and navigation paths. This data is used to improve the platform experience.
  • Security Cookies: Used to support fraud detection and prevention processes, including recognition of trusted devices and flagging of anomalous access patterns.

The following types of data may be collected via cookies and tracking technologies:

IP Address Session ID Device Fingerprint Browser Type Pages Visited Referral Source Geolocation (country) Login Timestamp

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the 333y platform, including your ability to log in or maintain a session.

§ 11

Your Data Rights

Depending on the data protection legislation applicable in the jurisdiction in which 333y operates, you may have the following rights with respect to your personal data. Please note that these rights are not absolute and may be subject to exceptions, particularly where data must be retained for legal or regulatory compliance purposes.

Right of Access

Request a copy of the personal data we hold about you and information about how it is processed.

Right to Rectification

Request correction of inaccurate or incomplete personal data held in your account.

Right to Erasure

Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.

Right to Restriction

Request that we restrict processing of your data in specific circumstances, for example while a rectification request is being resolved.

Right to Portability

Receive a copy of personal data you have provided to us in a structured, machine-readable format where technically feasible.

Right to Object

Object to processing carried out on the basis of legitimate interests, including direct marketing communications. Marketing opt-outs take effect promptly.

Automated Decision-Making

Request human review of any decision made solely by automated means that significantly affects you, where applicable under governing law.

Right to Withdraw Consent

Withdraw consent for processing based on consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, please contact our support team using the contact details in Section 16 of this Policy. We will respond to valid requests within a reasonable period consistent with applicable data protection law. We may require identity verification before processing certain requests.

§ 12

Data Security

333y implements appropriate technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

  • Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the 333y platform;
  • Encryption of sensitive data, including KYC documents and payment information, at rest using industry-standard encryption protocols;
  • Access controls and role-based permissions that restrict access to personal data to authorised personnel only, on a need-to-know basis;
  • Regular security testing, including vulnerability assessments and penetration testing;
  • Monitoring for anomalous access patterns and security events, with incident response procedures in place.

While we take security seriously and implement robust controls, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will take appropriate steps to contain the breach and, where required by applicable law, notify affected individuals and relevant authorities within the applicable timeframe.

Your Responsibility: You are responsible for maintaining the security of your account credentials. Use a unique, strong password for your 333y account and do not share your login details with any third party. If you believe your account has been compromised, contact our support team immediately at the address in Section 16.
§ 13

Children's Privacy

The 333y platform is strictly intended for adults aged 18 years and above, or the higher minimum age required by the operator's licensing jurisdiction. 333y does not knowingly collect personal data from any person below the required minimum age.

If we become aware that personal data has been collected from a minor — whether through registration, deposit, or any other platform interaction — we will promptly close the associated account, delete all collected data to the extent permissible under applicable law, and forfeit any associated balances in accordance with our Terms & Conditions.

Parents and guardians who believe that a minor has accessed or registered on the 333y platform should contact our support team immediately so that appropriate action can be taken. Parental controls and device-level filtering tools are recommended for households with minors.

§ 14

Third-Party Services & Links

The 333y platform may reference third-party services in the context of available payment methods, gaming providers, or responsible gambling resources. These references do not constitute endorsement of those services, nor do they imply that those services support or facilitate online gambling.

Third-party services that process data on behalf of 333y — including payment processors and KYC verification providers — do so under contractual data processing agreements that require them to implement appropriate security and privacy measures. However, 333y is not responsible for the privacy practices of third-party processors operating under their own independent data controller capacity.

The 333y Site does not contain external links to third-party websites in its navigation, footer, or primary content areas. If you independently navigate to a third-party website, that website's own privacy policy will govern the collection and use of your data, and 333y accepts no responsibility for such third-party privacy practices.

§ 15

Amendments to This Policy

333y reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this document indicates the date of the most recent revision.

Where amendments are material — meaning they significantly change how we collect, use, or share your personal data — we will make reasonable efforts to notify registered users in advance via email notification to the address on file, or via prominent notice on the Platform.

Your continued use of the 333y platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data.

§ 16

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 11, please contact the 333y support team using the details below.

Support Email (plain text — not a link):
[email protected]

Live Chat: Available via the live chat widget on the 333y platform. Availability is subject to operator hours.

Response Times: Privacy-related requests submitted by email are typically acknowledged within 48 hours and resolved within 30 days, or within the timeframe required by applicable data protection law where shorter. During peak periods — such as PSL season, ICC tournament rounds, or major football events — response times for general support may be extended, but we endeavour to prioritise data rights requests.

When contacting us about a privacy or data rights matter, please include your registered email address and, where relevant, the section number of this Policy to which your query relates. We may be required to verify your identity before processing certain requests.

How 333y Protects Your Data

Our privacy commitments are not just legal obligations — they are operational standards we apply every time we collect, store, or use your information.

End-to-End Encryption

All data transmitted between your device and 333y is protected by TLS/SSL encryption. Sensitive data including KYC documents and payment records is also encrypted at rest using industry-standard protocols.

No Data Selling

333y does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Data sharing is limited to service providers and legal requirements as defined in this Policy.

Your Rights, Your Control

Access, rectify, delete, or export your data. Manage marketing preferences. Request self-exclusion. All data rights requests are handled by our support team with identity verification for your protection.

Secure KYC Handling

CNIC, passport, and proof-of-address documents are submitted only through our secure HTTPS verification portal. 333y will never request sensitive documents through chat apps, email, or social media.

Defined Retention Periods

We keep data only as long as necessary for operational and legal purposes. Retention periods are defined by category and published in this Policy. Data beyond retention limits is securely deleted or anonymised.

Transparent Policy Updates

Any material changes to this Privacy Policy are communicated to registered users before they take effect. The last-updated date is displayed prominently on this page at all times.

Your Privacy Is Part of How We Build 333y

Explore our full platform, review our terms, and play with the confidence that your data is handled responsibly.