3333vat Privacy Policy

1.1 Registration Data. When you create a 3333vat account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, email address, phone number, and your chosen payment method. This information is required to create and maintain your account and to comply with our Know Your Customer (KYC) obligations.

1.2 Identity Verification Data. To process withdrawals and comply with anti-money-laundering requirements, we may request copies of your Bangladesh National Identity Card (NID), passport, or other government-issued identification. Where required, we may also ask for a recent selfie or proof of address document. This data is used solely for identity verification purposes.

1.3 Financial Transaction Data. We record details of all deposits and withdrawals made through your account. This includes transaction amounts in Bangladeshi Taka (৳), transaction dates and times, the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard), and transaction reference numbers. Full payment card numbers are never stored on 3333vat servers.

1.4 Gaming Activity Data. We collect information about your activity on the platform, including games played, bet amounts, game outcomes, session durations, and any responsible gaming tools or limits you have set. This data is used to provide you with a personalised experience, to resolve disputes, and to identify and prevent problem gambling behaviour.

1.5 Technical and Device Data. When you access the 3333vat platform, our systems automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, time zone, and the pages you visit. This information is used for security monitoring, fraud prevention, and platform performance optimisation.

1.6 Communications Data. If you contact our support team by email or through our messaging channels, we retain a record of that correspondence, including your contact details, the content of your messages, and any attachments. This helps us manage your enquiries, resolve disputes, and improve our support quality.

1.7 Voluntary Information. You may choose to provide additional information when completing surveys, participating in promotions, or providing feedback. Participation in such activities is always voluntary, and any data collected through them is used only for the stated purpose of that activity.

3.1 No Sale of Personal Data. 3333vat does not sell, rent, or lease your personal information to any third party under any circumstances. Your data is used exclusively to deliver and improve our services to you, and to meet our legal and regulatory obligations.

3.2 Service Providers. We work with a carefully selected set of third-party service providers who assist us in operating the 3333vat platform. These partners are permitted to access only the data they need to perform their specific function and are contractually required to maintain the confidentiality and security of that data. Categories of service providers include:

• Payment processors — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card payment gateways (Visa, Mastercard) for processing deposits and withdrawals.
• Game providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed providers who deliver game content. These providers may collect technical gameplay data directly through their game clients.
• Identity verification services — Third-party KYC platforms that assist with document verification and identity confirmation.
• Cloud hosting and infrastructure providers — Secure cloud services used to host the 3333vat platform and store data.
• Analytics providers — Tools used to analyse aggregated, anonymised platform usage data to improve performance and user experience.

3.3 Legal Disclosure. 3333vat may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so. This includes responding to court orders, complying with anti-money-laundering regulations, and cooperating with official investigations. We will only disclose the minimum data necessary to satisfy the legal requirement.

3.4 Business Transfers. In the event that 3333vat undergoes a merger, acquisition, or transfer of assets, your personal data may be transferred as part of that transaction. In such circumstances, we will take all reasonable steps to ensure that your data continues to be handled in accordance with this Privacy Policy, and we will notify you of any material changes via your registered email address.

3.5 International Data Transfers. Some of our third-party service providers operate from outside Bangladesh. Where your data is transferred internationally, we take appropriate measures to ensure an adequate level of data protection is maintained, including contractual safeguards equivalent to those described in this policy.

5.1 Technical Safeguards. 3333vat implements a comprehensive set of technical security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include TLS/SSL encryption for all data in transit, AES-256 encryption for sensitive data stored at rest, and regular security audits of our platform infrastructure.

5.2 Access Controls. Access to personal data within the 3333vat organisation is restricted on a strictly need-to-know basis. Staff members and contractors who require access to personal data in the course of their duties are subject to confidentiality obligations and receive regular data protection training. Administrative access to production systems is protected by multi-factor authentication.

5.3 Fraud Detection Systems. We operate automated fraud detection systems that continuously monitor account activity for patterns consistent with unauthorised access, identity fraud, money laundering, and other suspicious behaviours. Where a security risk is detected, the affected account may be temporarily suspended pending investigation.

5.4 Payment Security. Deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer are processed through the secure APIs of those payment providers. Visa and Mastercard transactions are processed via PCI-DSS compliant payment gateways. 3333vat does not store raw card data on its own servers at any point in the payment process.

5.5 Data Breach Response. In the event of a personal data breach that poses a risk to your rights and freedoms, 3333vat will take immediate steps to contain and assess the breach, notify affected users at their registered email address without undue delay, and take remedial action to prevent recurrence. We maintain an internal incident response procedure for this purpose.

5.6 Your Responsibility. While we take extensive measures to protect your data, the security of your account also depends on you. You are responsible for keeping your password confidential, logging out of your account after each session on shared devices, and promptly reporting any suspected unauthorised access to [email protected]. Never share your account credentials with any third party.