Privacy Policy – 33dd Casino

1. Introduction and Scope

This Privacy Policy ("Policy") describes how 33dd ("33dd", "we", "us", "our") collects, uses, discloses, and safeguards personal information obtained from users ("you", "Player", "User") of the website https://33dd.asia and all associated services, features, and content (collectively, the "Platform").

By registering an account on 33dd, depositing funds, placing wagers, or otherwise accessing the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy applies to all users of the 33dd Platform, including registered account holders and unregistered visitors. Where this Policy refers to "personal data", it means any information that identifies or could reasonably be used to identify you as an individual.

2. Data Controller

33dd acts as the data controller in respect of personal data collected through the Platform. As data controller, 33dd determines the purposes and means of processing your personal data. For all data-related enquiries, contact us at [email protected].

3. Personal Data We Collect

33dd collects personal data in the following categories, depending on how you interact with the Platform:

33dd does not collect special category personal data such as health information, racial or ethnic origin, or religious beliefs except where directly relevant to a responsible gaming assessment and with your explicit consent.

4. How We Use Your Personal Data

33dd processes your personal data for the following purposes:

• Account Management: Creating and maintaining your 33dd account, verifying your identity and age, and managing your login credentials.
• Service Delivery: Processing PKR deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, and other approved methods; settling bets; crediting winnings; and providing access to casino games and sports betting markets.
• Security and Fraud Prevention: Detecting and preventing fraudulent transactions, money laundering, account sharing, and unauthorised access to your 33dd account.
• Legal and Regulatory Compliance: Meeting anti-money-laundering (AML), know-your-customer (KYC), and responsible gaming obligations applicable to the jurisdictions in which 33dd operates.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, enforcing self-exclusion requests, and administering deposit and session limit tools.
• Platform Improvement: Analysing usage data in aggregate to understand how the Platform is used and to improve game selection, cashier performance, and user experience for Pakistani players.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have consented to receive them. You may opt out at any time.
• Customer Support: Responding to support requests, resolving disputes, and maintaining records of communications for quality assurance.

5. Legal Bases for Processing

33dd processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract established when you register a 33dd account — including account creation, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements, and responsible gaming mandates.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and optional data collection, where we have obtained your explicit consent. Consent may be withdrawn at any time.

6. Data Sharing and Third Parties

33dd does not sell your personal data. We share personal data only in the following circumstances and only to the extent necessary:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers receive transaction data necessary to process deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial regulations.
• Identity Verification Services: Third-party KYC providers may receive identity documents and personal details to verify your age and identity as required by our compliance obligations.
• Fraud Prevention Services: Analytical and fraud detection services may receive technical data including IP addresses and device fingerprints for the purpose of detecting and preventing fraudulent activity.
• Legal and Regulatory Authorities: 33dd will disclose personal data to law enforcement, regulatory bodies, or other authorities where required to do so by applicable law, court order, or regulatory directive.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data held by 33dd may be transferred to the successor entity, subject to equivalent privacy protections.

7. Cookies and Tracking Technologies

33dd uses the following types of cookies and similar tracking technologies on the Platform:

• Essential Cookies: Required for the Platform to function. These include session cookies that keep you logged in to your 33dd account during a browsing session. Disabling these cookies will impair your ability to use the Platform.
• Analytical Cookies: Used to understand how users navigate the Platform — which pages are visited most frequently, where users encounter friction, and how game sessions are structured. This data is used in aggregate form to improve the 33dd experience for Pakistani players. These cookies do not identify individual users by name.
• Preference Cookies: Store your display preferences and session settings so you don't need to reconfigure them on each visit.

You can manage cookie settings through your browser. Note that disabling all cookies may affect the functionality of certain Platform features, including maintaining your login session.

8. Data Retention

33dd retains personal data for the following periods, after which data is securely deleted or anonymised:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following account closure, as required by applicable AML and financial record-keeping regulations.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for three years from the date of the last communication in a given support thread.
• Analytical and usage data: Retained in aggregated or anonymised form indefinitely for platform improvement purposes. Individually identifiable usage data is retained for up to 24 months.
• Self-exclusion records: Retained for the duration of the exclusion period and for a minimum of five years thereafter to prevent re-registration in breach of self-exclusion terms.

9. Security Measures

33dd implements technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the 33dd Platform.
• Encrypted storage of sensitive account and payment data at rest.
• Access controls limiting personnel access to personal data to those with a demonstrated operational need.
• Regular security assessments and vulnerability monitoring of Platform infrastructure.
• Automated fraud and anomaly detection systems monitoring for unusual account activity.

While 33dd applies robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 33dd login credentials and for reporting any suspected unauthorised access promptly.

10. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by 33dd:

• Right of access: Request a copy of the personal data 33dd holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to our legal retention obligations.
• Right to restriction: Request that processing of your data be restricted in certain circumstances.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request" and your registered email address. 33dd will respond within 30 days. We may require identity verification before processing data rights requests.

11. Children and Minors

The 33dd Platform is strictly for users aged 18 and above. 33dd does not knowingly collect personal data from individuals under 18 years of age. If we become aware that a minor has registered an account or provided personal data, we will immediately close the account and delete the associated data. If you believe a minor has accessed 33dd, please contact us immediately at [email protected].

12. Changes to This Policy

33dd reserves the right to update this Privacy Policy at any time. Material changes — those that significantly affect how we collect or use your personal data — will be communicated via email to your registered address or via a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or 33dd's data handling practices, please contact us:

33dd aims to respond to all privacy-related enquiries within 5 business days and to complete formal data rights requests within 30 days of verified receipt.