do333 Privacy Policy

do333 ("do333", "we", "us", "our") operates the online casino and sports betting platform accessible at do333.app. We are committed to handling your personal information with integrity, transparency, and respect. This Privacy Policy describes how do333 collects, processes, stores, shares, and protects personal data provided by or collected from players and visitors based in Bangladesh and elsewhere.

This policy applies to all personal data collected through the do333 website, mobile browser interface, customer support channels, and any other touchpoint through which you interact with the do333 platform. It covers data collected at account registration, during the verification process, throughout your active use of the platform, and following account closure.

do333 acts as the data controller in respect of all personal data processed under this policy. This means do333 determines the purposes for which your data is collected and the means by which it is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors under written agreements that bind them to handling your data in compliance with this policy.

2.1 Data You Provide Directly

When you register an account, complete identity verification, make deposits or withdrawals, or contact our support team, you provide do333 with personal information. The categories of data we collect directly from you include:

• Identity Data: Full legal name, date of birth, gender, nationality.
• Contact Data: Email address, mobile phone number, residential address.
• Identity Verification Documents: National Identity Card (NID), passport, driving licence, or other government-issued documents submitted during KYC verification.
• Financial Data: Payment method details (bKash account number, Nagad wallet, Rocket, Upay, Visa or Mastercard details), transaction history, deposit and withdrawal amounts in BDT.
• Account Credentials: Username and encrypted password (we never store your password in plain text).
• Support Communications: The content of messages, emails, and live chat conversations you have with the do333 support team.
• Responsible Gaming Preferences: Self-imposed deposit limits, self-exclusion elections, session time reminders, and any other responsible gaming settings you configure.

2.2 Data We Collect Automatically

When you access and use the do333 platform, certain technical and behavioural data is collected automatically by our systems:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage Data: Pages visited, games played, betting markets accessed, session start and end times, click and navigation patterns, and features used.
• Transaction Log Data: A complete log of all deposits, withdrawals, bets placed, wagers settled, and bonus transactions associated with your account.
• Geolocation Data: Approximate geographic location derived from your IP address, used to verify access eligibility and comply with any applicable regional restrictions.
• Cookie and Tracking Data: Data collected via cookies and similar technologies as described in Section 5 of this policy.

2.3 Data from Third Parties

do333 may receive personal data about you from third-party sources in limited circumstances. These include identity verification providers who confirm the authenticity of your KYC documents, payment processing partners who facilitate your bKash, Nagad, and card transactions, and fraud detection services that help us maintain platform integrity. All third-party data sources used by do333 are contractually bound to handle data lawfully and in compliance with applicable data protection requirements.

do333 processes your personal data only for clearly defined, legitimate purposes. We do not sell your personal data to third parties for their own marketing or commercial use. The primary purposes for which we use your data are as follows:

3.1 Account Management and Service Delivery

Your identity and contact data is used to create and maintain your do333 account, verify your eligibility to use the platform, process your deposits and withdrawals in BDT, administer bonuses and promotions you opt into, and communicate essential account-related information to you such as withdrawal confirmations, security alerts, and Terms & Conditions updates.

3.2 Identity Verification and Compliance

do333 is required to verify the identity of all players as part of its Know Your Customer (KYC) obligations. Your identity documents and personal data are used to confirm that you are who you claim to be, that you meet the 18+ age requirement, and that your account and payment methods are registered in your own name. This processing is necessary for do333 to operate a safe and compliant platform.

3.3 Anti-Fraud and Security

do333 uses technical data, usage data, and transaction data to detect and prevent fraudulent activity, money laundering, bonus abuse, unauthorised account access, and other forms of platform abuse. Where suspicious activity is identified, do333 may restrict account activity, request additional verification, or report the matter to relevant authorities as required by applicable regulations.

3.4 Platform Improvement and Analytics

Aggregated and anonymised usage data helps do333 understand how players navigate the platform, which games and features are most popular, and where the user experience can be improved. This analytical processing does not involve making decisions about individual players and is performed using data that cannot reasonably be linked back to any specific person.

3.5 Responsible Gaming

do333 uses your account activity data, including betting frequency, session duration, and deposit patterns, to monitor for indicators of problem gambling behaviour. Where such indicators are identified, do333 may proactively reach out to offer responsible gaming tools or information. Your responsible gaming preferences (deposit limits, self-exclusion settings) are stored and applied automatically to your account.

3.6 Marketing Communications

With your consent, do333 may use your email address and contact details to send you information about new games, promotions, seasonal offers (such as those tied to BPL season, Eid, or Pohela Boishakh), and platform updates. You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or by updating your notification preferences within your account settings. Withdrawal of marketing consent does not affect the processing of your data for other lawful purposes described in this section.

do333 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

4.1 Service Providers and Data Processors

do333 engages trusted third-party service providers to assist with operating the platform. These include payment processing partners (including bKash, Nagad, Rocket, Upay, and international card processors), identity verification providers, cloud hosting and infrastructure services, customer support platform providers, and anti-fraud and cybersecurity services. All service providers are bound by data processing agreements that restrict them from using your data for any purpose other than delivering services to do333.

4.2 Game Software Providers

The casino games available on do333 are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as your session token and game round results) to facilitate game delivery and settle outcomes. Game providers do not receive your full personal profile and are not permitted to use any data shared for independent marketing purposes.

4.3 Legal and Regulatory Disclosure

do333 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required to do so by applicable law, court order, or binding regulatory instruction. We may also disclose data where necessary to investigate, prevent, or take action in respect of illegal activity, fraud, or a serious threat to the safety of any individual.

4.4 Business Transfers

In the event that do333 undergoes a merger, acquisition, restructuring, or sale of all or part of its business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to how your data is handled as a result.

5.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function properly, to improve performance, and to provide analytical information to site operators. do333 uses cookies and similar tracking technologies (including local storage and session storage) across the platform.

5.2 Types of Cookies We Use

5.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies will impair your ability to log in and use core platform features. Disabling performance or analytics cookies will not affect your ability to play games or process transactions on do333. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

do333 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations.

• Active Accounts: Your personal data is retained for the full duration of your account with do333 and for a minimum of 5 years following account closure, in order to meet our legal and regulatory record-keeping obligations.
• Transaction Records: Financial transaction data, including all deposit and withdrawal records, is retained for a minimum of 7 years from the date of each transaction, in accordance with anti-money laundering (AML) record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later.
• Support Communications: Records of customer support interactions are retained for up to 3 years from the date of the interaction.
• Marketing Data: If you withdraw your consent to receive marketing communications, your data will be removed from our active marketing lists within 30 days. A suppression record may be retained indefinitely to prevent future unsolicited contact.
• Anonymised Analytics Data: Aggregated, anonymised usage data from which you cannot be identified may be retained indefinitely for statistical and business improvement purposes.

When your personal data is no longer required for any legitimate purpose, do333 will securely delete or anonymise it in accordance with our internal data disposal procedures.

Protecting your personal data is a core operational priority at do333. We implement a layered security architecture designed to safeguard your information against unauthorised access, accidental loss, alteration, or disclosure.

While do333 takes all reasonable and proportionate steps to secure your data, no online system can be guaranteed entirely free from risk. You also play a role in keeping your account secure: use a strong, unique password, do not share your login credentials with anyone, and contact us immediately at [email protected] if you suspect your account has been compromised.

As a player on the do333 platform, you hold meaningful rights over your personal data. do333 is committed to honouring these rights and to making it straightforward for you to exercise them. Your rights are as follows:

• Right of Access: You may request a copy of all personal data that do333 holds about you at any time. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Updates to core account information (name, date of birth) may require supporting documentation.
• Right to Erasure: You may request that do333 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that data required for AML record-keeping or active legal proceedings cannot be erased on request.
• Right to Restriction of Processing: You may request that do333 restrict the processing of your data in certain circumstances, such as while a dispute is under investigation.
• Right to Data Portability: You may request a copy of personal data you have provided to do333 in a commonly used, machine-readable format for the purpose of transferring it to another service.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, where your individual circumstances warrant it.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact the do333 data team at [email protected] with the subject line "Privacy Rights Request". Please include your registered email address and a brief description of the right you wish to exercise. We will respond within 30 days of receiving a valid request. We may need to verify your identity before acting on certain requests.

The do333 platform integrates with third-party services to deliver games, process payments, and maintain platform security. While do333 selects its service partners with care and requires them to maintain high data protection standards, we are not responsible for the privacy practices of independent third-party providers operating under their own policies.

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate under their own privacy frameworks. Similarly, payment partners including bKash, Nagad, Rocket, and Upay are subject to the data handling practices set out in their own terms and privacy policies. do333 recommends that you review the privacy policies of any third-party service you interact with directly.

The do333 platform does not contain links to external websites for commercial or affiliate purposes. Any links present on the platform are limited to internal navigation within the do333 domain.

do333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or internal data handling practices. When material changes are made to this policy, do333 will notify registered players by email to their registered address and will post a prominent notice on the platform for a period of no less than 14 days following the update.

The effective date at the top of this policy indicates when the current version came into force. We encourage you to review this Privacy Policy periodically to stay informed about how do333 protects your data. Your continued use of the do333 platform following any update to this policy constitutes your acknowledgement of the revised terms.

Previous versions of this Privacy Policy may be requested by contacting the do333 support team at [email protected]. We maintain an internal archive of all prior policy versions for reference and compliance purposes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way do333 handles your personal data, please contact our support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.