0k333 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy (the "Policy") is published by 0k333 (referred to as "0k333", "we", "us", or "our") and applies to all personal data collected, processed, stored, and shared in connection with the 0k333 website at https://0k333.io, its mobile interface, and all related services, features, games, sportsbook functionality, promotions, and customer support channels (collectively, the "Platform" or "Service").

This Policy applies to all individuals who interact with the Platform in any capacity — including registered players, prospective players who browse the site without registering, and individuals who contact our support team. By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how 0k333 handles your personal data, you should discontinue use of the Platform and close your account if applicable.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement governing your relationship with 0k333. In the event of a conflict between this Policy and any other document, this Policy shall govern all matters relating to personal data.

0k333 is committed to handling personal data with the highest standards of care, transparency, and security. This Policy reflects practices aligned with internationally recognised data protection principles, including those established under the General Data Protection Regulation (GDPR) as a benchmark for best practice, even where local law may not require full GDPR compliance.

0k333 collects personal data across several categories. The specific data collected depends on how you interact with the Platform:

0k333 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes. Where verification documents contain incidental sensitive information, that information is not extracted or processed separately.

0k333 collects personal data through the following methods:

• Direct submission: Data you actively provide when creating an account, completing your profile, making a deposit, requesting a withdrawal, submitting identity verification documents, or contacting our support team.
• Automated collection: Technical and behavioural data collected automatically as you navigate the Platform, including through server logs, session tracking, and analytics systems. This data is collected without requiring any action on your part and is used primarily for platform security and performance monitoring.
• Cookie-based collection: Data collected through cookies, web beacons, and similar tracking technologies placed on your device when you access the Platform. See Section 9 (Cookies & Tracking) for full details.
• Third-party sources: Where necessary for fraud prevention and identity verification, 0k333 may receive data about you from authorised third-party KYC verification providers, payment processors, and fraud detection services. Such data is used solely for the stated verification or security purpose.
• Payment provider data: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a linked bank card, the relevant payment provider shares transaction confirmation data with 0k333 to facilitate the transfer. 0k333 does not receive or store your full payment credentials — only the transaction reference and masked account identifier.

0k333 processes your personal data for the following defined purposes:

• Account creation and management: To create and maintain your 0k333 player account, verify your identity at registration, and administer your account settings and preferences throughout the lifecycle of your relationship with the Platform.
• Transaction processing: To facilitate deposits and withdrawals via your chosen payment method, reconcile transaction records, and issue confirmations to your registered email address.
• Identity verification (KYC): To verify that you meet the minimum age requirement of 21 years, that you are who you claim to be, and that your use of the Platform complies with eligibility requirements. KYC data is processed in accordance with anti-money laundering obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and unauthorised account access. This includes automated behavioural analysis and pattern-matching against known fraud signals.
• Responsible gaming: To monitor wagering behaviour and identify patterns that may indicate problem gambling. Where such patterns are detected, 0k333 may proactively reach out to affected players or activate protective measures as described in the Responsible Gaming Policy.
• Customer support: To respond to your support queries, investigate account disputes, process self-exclusion requests, and communicate with you regarding your account.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the performance, design, and feature set of the Platform. No individual player is identifiable from aggregated analytics data.
• Legal and regulatory compliance: To comply with applicable legal obligations, respond to lawful requests from public authorities, and maintain records required by anti-money laundering regulations and financial reporting obligations.
• Direct communications: To send you transactional emails (account confirmations, withdrawal notifications, bonus alerts) and, where you have opted in, promotional communications about new games, offers, and platform updates. You may opt out of promotional communications at any time.

Each processing activity carried out by 0k333 is grounded in one of the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions — including account management, payment processing, and game delivery — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with applicable law — including KYC/AML obligations, tax reporting, and responses to lawful authority requests — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics is based on 0k333's legitimate interests in operating a safe, fair, and legally compliant platform. We conduct balancing tests to ensure our legitimate interests do not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications and non-essential cookies is carried out on the basis of your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

0k333 does not sell, rent, or trade your personal data to any third party. Data sharing is limited to the following categories of authorised recipients, and in each case only the minimum data necessary for the stated purpose is shared:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard receive transaction data necessary to execute deposits and withdrawals. Each payment provider operates under its own privacy policy and data security standards.
• KYC and identity verification providers: Authorised third-party identity verification services receive identity documents and personal data necessary to confirm your eligibility and comply with anti-money laundering obligations.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate game engines that you access through the 0k333 Platform. Your Player ID and session token are shared with the relevant provider to deliver game content. These providers do not receive your full identity or payment data.
• Fraud prevention and security services: Specialist fraud detection providers may receive technical and behavioural data to assist in the identification and prevention of fraudulent activity.
• Legal and regulatory authorities: Where required by law or valid legal process, 0k333 may disclose personal data to relevant public authorities, law enforcement agencies, or regulatory bodies.
• Professional advisers: Legal counsel, auditors, and financial advisers who are subject to professional confidentiality obligations may receive limited personal data in the course of providing their services to 0k333.

All third-party service providers who process personal data on behalf of 0k333 are required to enter into data processing agreements that impose data security and confidentiality obligations consistent with the standards applied by 0k333 itself.

0k333 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active account data: Retained for the duration of your active account relationship with 0k333, plus a minimum post-closure period of five (5) years to comply with financial record-keeping and anti-money laundering obligations.
• Transaction records: Financial transaction data is retained for a minimum of five (5) years following the date of the transaction in accordance with applicable financial regulations.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the last transaction date, whichever is later.
• Support communications: Retained for three (3) years from the date of the last communication, unless the communication relates to an ongoing dispute or legal matter.
• Technical and log data: Server logs and session data are retained for up to twelve (12) months for security monitoring purposes, after which they are permanently deleted or anonymised.
• Marketing consent records: Records of your consent to receive marketing communications are retained for the duration of your account and for three (3) years following account closure.

At the end of the applicable retention period, personal data is securely deleted or rendered permanently anonymous. Where anonymisation is not technically feasible, data is archived with strict access controls until deletion is possible.

0k333 applies a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in transit: All data transmitted between your device and 0k333 servers is encrypted using TLS 1.2 or higher (256-bit SSL encryption). You can verify this protection by checking for the padlock icon in your browser's address bar.
• Encryption at rest: Sensitive personal data stored on 0k333 servers — including identity documents, financial data, and hashed credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within 0k333's internal systems is governed by role-based access controls. Only personnel whose job function requires access to specific categories of data are granted that access, and all access events are logged and audited.
• Two-factor authentication: 0k333 supports and encourages the use of two-factor authentication (2FA) for player accounts and mandates it for internal staff access to data management systems.
• Penetration testing and vulnerability assessments: 0k333 conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that is likely to result in risk to your rights and freedoms, 0k333 will notify affected individuals and take all reasonable steps to contain and remediate the incident as rapidly as possible.

Whilst 0k333 takes every reasonable precaution to secure your data, no digital platform can guarantee absolute security against all possible threats. You play an important role in your own data security by maintaining a strong, unique password for your account and enabling two-factor authentication.

0k333 uses cookies and similar tracking technologies to deliver and improve the Platform experience. Cookies are small text files placed on your device when you visit the Platform. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies, security tokens, and load-balancing cookies. No consent is required for these cookies.
• Functional cookies: These cookies remember your preferences — such as language settings and session timeout preferences — to personalise your experience. They are activated based on your consent.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate the Platform, which pages are most visited, and where technical errors occur. This data helps 0k333 improve the Platform. They are activated based on your consent.
• Responsible gaming cookies: These cookies support session time tracking and reality check functionality, enabling the Platform to display session duration alerts and net wagering summaries at the intervals you configure.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from accessing the Platform. Disabling other cookie categories may reduce the functionality of certain features but will not prevent basic access. 0k333 does not use cookies to deliver third- party advertising or cross-site tracking technologies.

0k333 is strictly an adult platform. Access to and use of the Platform is permitted only to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21 under any circumstances.

As part of our registration and KYC process, all players are required to confirm their date of birth and submit identity verification documents that prove they meet the minimum age requirement. Where our verification processes identify that a player may be under the age of 21, that account is suspended immediately and all associated personal data is reviewed. If the player is confirmed to be underage, their account is permanently closed, all funds are handled in accordance with applicable legal requirements, and their data is deleted to the extent permitted by law.

If you believe a minor has registered on the Platform or that a minor has access to an account, please notify us immediately at [email protected] so that we can take immediate protective action. We treat all such reports as the highest-priority support matters and will act within 24 hours of receipt.

Parents and guardians are encouraged to use third-party parental control software to restrict access to online gambling platforms on shared devices. 0k333 cannot be held responsible for underage access facilitated by the sharing of login credentials between adults and minors.

The rights summarised in the "You Are in Control" section above are formal, enforceable rights. The following practical guidance explains how to exercise each right:

• Access requests: Submit your request to [email protected] with the subject line "Data Access Request". Include your registered username and email address. We will provide a full data export within 14 calendar days.
• Rectification requests: For straightforward corrections (e.g., updating your contact number or address), you may make changes directly through your account settings. For identity data corrections that require document re-verification, contact support with the subject line "Data Rectification Request".
• Erasure requests: Submit a request with the subject line "Data Erasure Request". Please note that we are legally required to retain certain financial and identity records for a minimum of five years following account closure. Erasure of these records cannot be accommodated during the mandatory retention period, but all other data will be deleted.
• Restriction requests: If you dispute the accuracy of data we hold, or if you have objected to processing and are awaiting our response, you may request that we restrict processing in the interim. Contact support with the subject line "Data Restriction Request".
• Portability requests: Request a structured, machine-readable export of the data you have provided to 0k333 by contacting support with the subject line "Data Portability Request". Exports are provided in JSON or CSV format within 14 calendar days.
• Objection to direct marketing: You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, or by contacting support with the subject line "Unsubscribe from Marketing". Your opt-out will be processed within 5 business days.
• Withdrawal of consent: Where processing is based on consent (e.g., marketing communications, non-essential cookies), you may withdraw consent at any time without affecting the lawfulness of prior processing. Contact support or adjust your account preferences to withdraw consent.

All privacy rights requests are handled free of charge. In exceptional circumstances where a request is manifestly unfounded or excessive, 0k333 reserves the right to charge a reasonable administrative fee or decline the request, with written reasons provided to the requester.

0k333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the features and services offered on the Platform. All updates will be handled as follows:

• Material changes: Where a change materially affects your rights or the way we process your personal data, registered players will be notified by email to their registered address at least 14 days before the change takes effect. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.
• Minor changes: Corrections of typographical errors, clarification of existing provisions without substantive change, and updates to contact information may be made without prior notice. The "Last Updated" date at the top of this Policy will be revised to reflect the change.
• Version history: The current version of this Policy, with its effective date clearly displayed, is always accessible at https://0k333.io/privacy-policy. We recommend reviewing this page periodically to stay informed of any updates.

If you object to any change to this Privacy Policy, you may close your account and request deletion of your data in accordance with the procedures described in Section 11. Continued use of the Platform following the effective date of any update constitutes your acknowledgement and acceptance of the revised Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how 0k333 has handled your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line guidance: Use a descriptive subject line such as "Privacy Enquiry", "Data Access Request", or "Data Erasure Request" to ensure your message is routed to the correct team.
• Support hours: Available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).
• Response time: General privacy enquiries are acknowledged within 24 hours. Formal data rights requests are acknowledged within 48 hours and resolved within 14 calendar days.
• Language: All privacy-related communications are handled in English.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint. While 0k333 operates in the Bangladesh market and Bangladeshi data protection law is evolving, we are committed to resolving all privacy complaints promptly and fairly. We encourage you to contact us first so that we have the opportunity to address your concern before any escalation.

When contacting support in relation to a privacy matter, please include your registered username and the email address associated with your account so that we can locate your records promptly. Do not include your full password, PIN, or payment credentials in any correspondence — 0k333 will never request this information via email.