bl333 Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by bl333 ("bl333", "we", "us", "our") and applies to all individuals ("you", "your", "Player", "User") who access, register on, or otherwise interact with the bl333 platform at bl333.io, including all associated web pages, features, services, games, promotions, and payment interfaces (collectively, "the Platform").

bl333 is committed to protecting the privacy and personal data of every player. We operate the Platform with full awareness that our players trust us with sensitive information — including identity documents, financial details, and account activity — and we take that responsibility seriously. This Policy sets out in plain, accessible English exactly what data we collect, why we collect it, how we store and protect it, with whom we may share it, and what rights you have in relation to your personal data.

This Policy should be read together with the bl333 Terms & Conditions and the bl333 Responsible Gaming Policy. In the event of any conflict between this Policy and another bl333 document regarding the handling of personal data, this Privacy Policy takes precedence unless expressly stated otherwise.

By creating a bl333 account, depositing funds, placing a wager, or simply browsing the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data practices described herein. If you do not agree with any part of this Policy, you must not use the Platform.

Data We Collect

bl333 collects personal data across several categories. The table below summarises the types of data we may hold about you and the purpose each category serves:

We do not collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information) unless strictly required by law or voluntarily provided by you in a support context (for example, if you disclose a gambling-related health concern when requesting self-exclusion — in which case the data is used solely to administer your responsible gaming request and is not used for any other purpose).

How We Collect Data

bl333 collects personal data through the following channels and mechanisms:

• Direct Registration: When you create a bl333 account, you provide your name, date of birth, email address, and mobile number directly through the registration form.
• KYC Document Uploads: When you submit identity documents for account verification, we collect the information contained in those documents, including your NID number, photograph, address, and date of birth.
• Payment Transactions: Each time you deposit or withdraw funds using bKash, Nagad, Rocket, Upay, Visa, or Mastercard, our payment processing partners transmit transaction metadata to us, including the payment method identifier, transaction amount in BDT (৳), and transaction timestamp.
• Platform Activity: Our servers automatically record technical data about every interaction you have with the Platform, including your IP address, device fingerprint, browser type, session duration, pages viewed, games played, and wagers placed.
• Cookies & Tracking Technologies: bl333 uses cookies, web beacons, and similar technologies to collect session data and behavioural data as you navigate the Platform. See Section 7 for full cookie details.
• Customer Support Interactions: When you contact our support team by email at [email protected] or through the on-site support interface, we collect and retain the content of your communications for service and audit purposes.
• Third-Party Verification Providers: Where we engage third-party identity verification or fraud detection services to cross-check information you have provided, those providers may return additional data points to us as part of the verification result.

How We Use Your Data

bl333 uses the personal data it holds about you for the following purposes. We process your data only to the extent necessary and proportionate to each stated purpose:

• Account Creation & Management: To register your account, verify your identity, maintain your account profile, and provide you with access to all bl333 platform features including games, betting markets, and payment services.
• Age & Identity Verification (KYC): To confirm that you meet the minimum age requirement of 21 years and that the information you have provided is accurate. This is a mandatory compliance step before full account activation.
• Payment Processing: To facilitate deposits and withdrawals in BDT (৳) via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to maintain accurate financial records for your account.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the Platform. This includes automated transaction monitoring and behavioural anomaly detection.
• Legal & Regulatory Compliance: To meet our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection regulations, including responding to lawful requests from regulatory or law enforcement authorities.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, enforce deposit limits and self-exclusion requests, and provide responsible gaming interventions where appropriate.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance in relation to your bl333 account.
• Platform Improvement: To analyse usage patterns, identify technical issues, optimise the player experience, and develop new features and products.
• Marketing Communications (with consent only): To send you promotional emails or SMS messages about bl333 offers, bonuses, seasonal promotions (such as Eid specials, BPL season offers, and Pohela Boishakh promotions), and new game launches — but only where you have given explicit consent to receive such communications. You may opt out at any time.
• Personalisation: To tailor your on-platform experience, including relevant game recommendations, personalised bonus offers, and account dashboard customisation based on your gaming preferences and history.

Legal Basis for Processing

bl333 processes your personal data only where a valid legal basis exists. The applicable legal bases for our key processing activities are as follows:

• Contractual Necessity: Processing your identity data, contact data, financial data, and gaming data is necessary to perform our contractual obligations to you under the bl333 Terms & Conditions — specifically, to operate your account, process transactions, settle wagers, and provide customer support.
• Legal Obligation: KYC verification, AML/CTF screening, age verification, and cooperation with regulatory or law enforcement requests are required by applicable law. bl333 must process relevant data to remain compliant with these obligations.
• Legitimate Interests: Fraud detection, platform security, responsible gaming monitoring, and service improvement activities are carried out on the basis of bl333's legitimate interests in operating a secure, fair, and sustainable platform, balanced against your right to privacy. We conduct proportionality assessments to ensure these interests do not override your fundamental rights.
• Consent: Sending marketing communications (email or SMS), placing non-essential cookies, and processing any data beyond what is strictly necessary for contract performance or legal compliance is done only with your prior, freely given, specific, and informed consent. You may withdraw consent at any time by contacting [email protected] or using the opt-out mechanism in any marketing communication.

Data Sharing & Disclosure

bl333 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary:

• Payment Service Providers: We share the transaction data necessary to process your deposit or withdrawal with bKash, Nagad, Rocket, Upay, and card network processors (Visa, Mastercard). These providers operate under their own data protection frameworks and are contractually prohibited from using your data for any purpose beyond payment processing.
• Identity Verification Partners: Where we engage a third-party KYC service to verify your identity documents, we share the relevant document and personal data with that provider solely for verification purposes. The provider does not retain your data beyond the verification period specified in our data processing agreement.
• Fraud Detection & Security Services: We may share technical and behavioural data (such as IP address, device fingerprint, and transaction patterns) with contracted fraud detection and cybersecurity partners to protect the integrity of the Platform and prevent financial crime.
• Game Providers: When you play a game powered by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, or another studio, a session token and minimal technical data (such as your player ID) are shared with that provider to initialise and manage the game session. Game providers do not receive your full personal profile.
• Regulatory & Law Enforcement Authorities: bl333 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where legally required to do so — for example, in response to a valid legal order, a court subpoena, or a mandatory regulatory report relating to suspected AML or CTF activity. Where legally permissible, we will attempt to notify you of such a request before complying.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of bl333's business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to the same data protection standards described in this Policy. You will be notified of any such transfer in advance.

Cookies & Tracking Technologies

bl333 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) to operate certain platform features, analyse usage, and deliver a personalised player experience. The following categories of cookies are used on the Platform:

You can manage your cookie preferences through your browser settings at any time. Most modern browsers allow you to block or delete cookies. However, please be aware that disabling strictly necessary or responsible gaming cookies may impair your ability to use certain Platform features, including logging in and maintaining an active game session. Marketing and analytics cookies can be disabled without affecting core Platform functionality.

Data Retention

bl333 retains personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. Our standard data retention periods are as follows:

• Active Accounts: All personal and account data is retained for the full duration of your account's active status on the Platform.
• Closed Accounts: Following account closure, identity data, financial transaction records, and KYC documents are retained for a minimum of five (5) years to comply with AML record-keeping requirements. After this period, data is securely deleted or anonymised.
• Self-Excluded Accounts: Where a player has requested self-exclusion, their exclusion record and the data supporting the exclusion decision are retained indefinitely to prevent the player from re-registering on the Platform in violation of their self-exclusion request.
• Support Communications: Customer support records, including email correspondence and chat transcripts, are retained for three (3) years from the date of the most recent interaction, after which they are archived and subsequently deleted.
• Technical & Log Data: Server logs, IP address records, and session data are retained for up to thirteen (13) months for security audit and fraud investigation purposes, then automatically purged.
• Marketing Data: Marketing preference data (opt-in records) is retained for the duration of your consent, plus one (1) year following withdrawal of consent for audit purposes.

Data Security

bl333 implements a robust, multi-layered approach to data security. We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include but are not limited to:

• 256-Bit SSL Encryption: All data transmitted between your browser and the bl333 Platform is encrypted using industry-standard 256-bit Secure Socket Layer (SSL) / TLS technology. Look for the padlock icon and "https://" in your browser address bar when using bl333.
• Encrypted Data Storage: Personal data and financial records stored on bl333 servers are encrypted at rest. We do not store full card numbers or mobile wallet PINs on our own servers — payment-sensitive data is handled exclusively within the secure infrastructure of our licensed payment partners.
• Access Controls: Access to personal data within bl333 is restricted on a strict need-to-know basis. Staff and contractors with access to personal data are bound by confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication (2FA): bl333 strongly recommends that all players enable two-factor authentication on their accounts. 2FA adds a second layer of security by requiring a one-time verification code in addition to your password when logging in.
• Intrusion Detection & Monitoring: Our systems are continuously monitored for suspicious activity, attempted breaches, and anomalous access patterns. Automated alerts are in place to trigger immediate investigation of any potential security incident.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, bl333 will notify affected players and the relevant supervisory authority within the timeframes required by applicable law, and will take immediate steps to contain and remediate the incident.

Your Rights

As a bl333 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us in writing at [email protected]. We will respond to all valid requests within a reasonable timeframe (typically 30 days), and at no charge unless the request is manifestly unfounded or excessive.

• Right to Access: You have the right to request a copy of all personal data bl333 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic contact details (email address, phone number), you may be able to update these directly in your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that bl333 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and there is no other legal basis for processing), or where the data has been processed unlawfully. This right is subject to our legal retention obligations — for example, AML regulations may require us to retain certain financial records for up to five years after account closure.
• Right to Restriction: You have the right to request that bl333 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and a determination is pending.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interests, in which case bl333 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal. To withdraw consent for marketing communications, you may use the unsubscribe link in any bl333 marketing email or contact [email protected] directly.
• Right Not to Be Subject to Automated Decision-Making: bl333 uses automated systems for fraud detection and responsible gaming monitoring. Where an automated decision produces a significant legal or similarly significant effect on you (such as account suspension or withdrawal restriction), you have the right to request human review of that decision by contacting our support team.

Children & Minors

bl333 operates an adult-only gaming platform. The minimum age to register and use the Platform is 21 years. We do not knowingly collect or process personal data from any individual under the age of 21. Age verification is a mandatory step in our account registration and KYC process, and accounts found to belong to individuals under 21 will be suspended immediately, with all associated balances voided in accordance with our Terms & Conditions.

If you are a parent or guardian and you believe that a minor under your care has registered a bl333 account or provided personal data to the Platform without your knowledge, please contact us immediately at [email protected]. We will investigate the matter promptly, close the account, and securely delete all personal data associated with it as quickly as practicable, subject to any mandatory legal retention obligations.

Third-Party Links

The bl333 Platform does not contain links to external third-party websites for browsing or entertainment purposes. However, when you interact with our payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) or game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others), you may be interacting with services or interfaces that are governed by those parties' own privacy policies.

bl333 is not responsible for the privacy practices, content, or data security of any third-party payment gateway, game studio interface, or identity verification portal. We encourage you to review the privacy policies of any third-party service with which you interact as part of your use of the Platform. Our contractual obligations with these providers require them to handle your data securely and in accordance with applicable data protection standards, but their independent data practices remain outside our direct control.

Policy Updates

bl333 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing activities, or the services we offer. When material changes are made, we will notify registered players via their registered email address and/or by displaying a prominent notice on the Platform before the changes come into effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was published. We encourage you to review this Policy periodically to remain informed about how bl333 handles your personal data. Your continued use of the Platform after an updated Policy has been notified and published constitutes your acceptance of the revised terms. If you do not agree with any update, you must cease using the Platform and may request account closure by contacting our support team.

Previous versions of this Privacy Policy may be requested from our support team for reference purposes.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bl333 has handled your personal data, please contact our Data & Privacy Support team. We are committed to addressing all privacy enquiries promptly and transparently.

If you are not satisfied with our response to your privacy complaint, you have the right to escalate your concern to the competent data protection supervisory authority in your jurisdiction. bl333 will cooperate fully with any such regulatory investigation.