33dd Privacy Policy —
Your Data, Your Rights, Our Commitment

This Privacy Policy ("Policy") describes how 33dd ("we," "us," "our," or "33dd") collects, processes, stores, shares, and protects the personal information of individuals who access or use the 33dd platform, including the website at 33dd.lat, the 33dd mobile application, and all associated betting, gaming, and support services (collectively, the "Platform").

This Policy applies to all registered account holders, visitors browsing the Platform without an account, and any individual whose personal data is processed by 33dd in connection with the services we provide. By creating a 33dd account or continuing to use the Platform, you confirm that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. Where there is a conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall take precedence.

33dd collects personal data from you in three primary ways: information you provide directly, information generated automatically by your use of the Platform, and information received from third parties in limited circumstances. The table below summarises the categories of data collected:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation. If any such data is incidentally disclosed to us during a support communication, it will not be stored beyond the resolution of the relevant query.

33dd uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent:

• Account Creation & Management: To register your 33dd account, verify your identity, manage your profile, and process your login credentials securely.
• Service Delivery: To provide the betting, casino gaming, and slot services you have requested, including processing wagers, settling bets, and managing your real-money and bonus wallet balances.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment methods. Financial data is handled in compliance with applicable payment processing regulations.
• Identity & Age Verification (KYC): To verify that you are who you say you are, that you are at least 21 years of age, and that your payment methods are legitimately yours. KYC is a legal obligation under our gaming licence conditions.
• Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, match manipulation, and other illegal conduct. This includes automated monitoring of transaction patterns and betting behaviour.
• Customer Support: To respond to your queries, complaints, and support requests via live chat, email, or other channels.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling and to administer the responsible gaming tools you have activated on your account, including deposit limits, self-exclusion, and cooling-off periods.
• Legal & Regulatory Compliance: To comply with our obligations under our gaming licence, applicable data protection laws, anti-money laundering regulations, and any lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse usage patterns and technical data to improve the functionality, performance, and user experience of the 33dd Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about 33dd — but only where you have opted in to receive such communications. You may withdraw consent at any time.

Every instance of personal data processing carried out by 33dd is grounded in one of the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between 33dd and the Player (i.e., to provide the gaming services you have registered to use).
• Legal Obligation: Processing required for 33dd to comply with its legal and regulatory obligations, including KYC, AML reporting, responsible gaming requirements, and gaming licence conditions.
• Legitimate Interests: Processing carried out in pursuit of 33dd's legitimate business interests, including fraud prevention, platform security, and service improvement — provided that these interests are not overridden by the Player's privacy rights.
• Consent: Processing carried out on the basis of your explicit consent, including the sending of marketing communications. Where consent is the basis, you retain the right to withdraw it at any time without affecting the lawfulness of prior processing.

33dd does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the specified purpose:

• Payment Service Providers: Financial data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and approved cryptocurrency processors solely to facilitate deposits and withdrawals.
• Identity Verification Providers: Identity and age verification data may be shared with licensed KYC service providers who assist 33dd in verifying CNIC, passport, and other identity documents.
• Game Software Providers: Usage data relating to specific games may be shared with our licensed game providers (such as Evolution Gaming, Pragmatic Play, and similar studios) for technical support and game integrity purposes.
• Fraud & AML Detection Services: Transaction and behavioural data may be shared with fraud detection and anti-money laundering screening services to fulfil our compliance obligations.
• Regulatory & Law Enforcement Authorities: 33dd may be legally required to disclose personal data to gaming regulators, financial intelligence authorities, or law enforcement agencies in response to lawful orders. We will notify you of such disclosures where legally permitted to do so.
• IT Infrastructure Providers: Technical data may be processed by our hosting, cloud infrastructure, and cybersecurity providers, all of whom are contractually bound to process data only on 33dd's instructions and to maintain appropriate security standards.

All third parties to whom 33dd discloses personal data are required to maintain the confidentiality and security of that data and to process it only for the purposes for which it was disclosed. 33dd does not authorise third parties to use your data for their own marketing or commercial purposes.

33dd uses cookies and similar tracking technologies to enhance your experience on the Platform, to remember your preferences, and to gather analytical data that helps us improve our services. The cookies we use fall into the following categories:

• Essential Cookies: Required for the Platform to function correctly. These include session management cookies, authentication tokens, and security cookies. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, preferred sports markets, and previously viewed games.
• Analytics Cookies: Used to collect anonymised data about how players interact with the Platform, including pages visited, session duration, and navigation paths. This data helps 33dd identify areas for improvement.
• Responsible Gaming Cookies: Used to support session time reminders and to maintain the active state of any responsible gaming restrictions you have applied to your account.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform, although some features may operate with reduced functionality. 33dd does not use cookies to serve third-party advertising on the Platform.

33dd retains personal data for the periods set out below, after which data is securely deleted or anonymised unless a longer retention period is required by law:

• Active Account Data: Retained for the full duration of your account relationship with 33dd and for a period of five (5) years following account closure.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in accordance with AML record-keeping obligations.
• KYC & Identity Verification Documents: Retained for five (5) years from account closure or from the date of the last relevant transaction, whichever is later.
• Customer Support Communications: Retained for three (3) years from the date of the communication, or until the relevant matter is fully resolved if that period is longer.
• Technical & Usage Data: Aggregated and anonymised after twelve (12) months. Non-anonymised usage logs are retained for up to twelve (12) months for security and fraud detection purposes.
• Responsible Gaming Records: Retained for five (5) years to support our duty of care obligations and to prevent circumvention of self-exclusion arrangements.

33dd implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 33dd servers.
• AES-256 encryption for sensitive data stored at rest, including financial data and identity documents.
• Multi-factor authentication options for player accounts to prevent unauthorised login.
• Role-based access controls ensuring that 33dd employees can access personal data only to the extent required for their specific job functions.
• Regular third-party penetration testing and vulnerability assessments of the Platform infrastructure.
• Automated real-time monitoring for unusual access patterns, data exfiltration attempts, and other security incidents.
• Secure data deletion procedures applied when data reaches the end of its retention period.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed as 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 33dd will notify you and the relevant regulatory authorities in accordance with applicable breach notification obligations.

33dd operates an internationally licensed platform, and some of the third-party service providers we use (including game providers, KYC services, and cloud infrastructure providers) may process personal data in jurisdictions outside of Pakistan. Where such international transfers occur, 33dd ensures that appropriate safeguards are in place, including:

• Contractual clauses binding the receiving party to data protection standards equivalent to those applied by 33dd.
• Use of service providers that operate in jurisdictions with recognised data protection frameworks.
• Data transfer impact assessments where required by applicable law.

By using the 33dd Platform, you acknowledge and consent to your personal data being transferred internationally in accordance with the safeguards described above. If you have concerns about international data transfers relating to your account, please contact our support team.

33dd respects your rights as a data subject. The following rights are available to all 33dd account holders and may be exercised by contacting our support team via live chat or by email:

• Right of Access: You have the right to request a copy of all personal data 33dd holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. You can update most account information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 33dd's legal retention obligations (see Section 07).
• Right to Restriction: You have the right to request that 33dd restricts the processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to 33dd in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data on the basis of legitimate interests, and to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

All data rights requests will be acknowledged within 5 business days and resolved within 30 calendar days. Identity verification will be required before any data access, rectification, or deletion action is taken. There is no charge for exercising your data rights unless requests are manifestly unfounded or excessive.

The 33dd Platform is strictly intended for adults aged 21 years and over. 33dd does not knowingly collect personal data from individuals under the age of 21. Where 33dd discovers or has reasonable grounds to believe that personal data has been collected from an individual under the minimum age, the relevant account will be immediately suspended, all data will be securely deleted, and any deposits or funds associated with the underage account will be handled in accordance with our Terms & Conditions.

33dd implements age verification checks as part of the registration and KYC process. Players may be required to submit a copy of their CNIC or passport to confirm their date of birth. Accounts remain in a restricted state until age verification is satisfactorily completed.

33dd may send you promotional emails, SMS notifications, and in-app messages about bonuses, new games, PSL betting promotions, and other 33dd offers. We will only do so where you have explicitly opted in to receive such communications during registration or through your account settings.

• You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, by adjusting your notification preferences in your account settings, or by contacting our support team.
• Opting out of marketing communications does not affect the sending of transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent as part of the service and cannot be disabled.
• 33dd does not share your contact details with third-party marketers. All marketing communications originate from 33dd directly.

33dd reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or our services. When we make material changes, we will notify you by email to the address registered on your account and by displaying a prominent notice on the Platform for a minimum of 30 days before the changes take effect.

Your continued use of the 33dd Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to an updated Policy, you should discontinue use of the Platform and may request account closure. The date of the most recent revision is displayed at the top of this Policy.

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how 33dd has handled your personal data, please contact us using the details below. Our data protection team will respond to all privacy-related enquiries within 5 business days.

• Live Chat: Available 24/7 inside your 33dd account dashboard. This is the fastest way to reach our support and compliance team.
• Email: [email protected] — for privacy-related queries, please include "Privacy Request" in the subject line.

If you are not satisfied with 33dd's response to your privacy concern, you have the right to escalate the matter to the relevant data protection authority or gaming regulator in the jurisdiction under which your complaint falls. 33dd will cooperate fully with any such regulatory investigation.