33dcom Privacy Policy

33dcom is committed to protecting the personal information of all individuals who interact with our Platform. This Privacy Policy sets out, in plain and transparent terms, how 33dcom collects, uses, stores, shares, and protects personal data in connection with the provision of our online gaming services to players across Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, and other cities nationwide.

The data controller responsible for your personal data in connection with the 33dcom Platform is the company operating 33dcom. All data-related queries, access requests, and complaints should be directed to the 33dcom support team using the contact details set out in Section 14 of this Policy.

This Policy should be read alongside the 33dcom Terms & Conditions, which govern the contractual relationship between 33dcom and registered Players. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a matter relating to personal data, this Privacy Policy shall prevail.

33dcom collects the following categories of personal data from Players and Platform visitors. The table below summarises each data type, along with the context in which it is typically collected:

33dcom collects personal data through the following methods:

• Direct Submission: Data you provide when registering an account, completing KYC, submitting a support request, or updating your account settings.
• Automated Technical Collection: Data collected automatically via server logs, cookies, and browser-based tracking technologies each time you access the Platform. This includes IP addresses, session data, and device identifiers.
• Transaction Processing: Data generated and recorded as part of deposit and withdrawal transactions processed through integrated payment providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, Visa, and Mastercard.
• Platform Behavioural Data: Data generated by your use of the Platform, including which games you play, betting patterns, session frequency, and responsible gaming tool usage. This data is collected for operational, fraud prevention, and service improvement purposes.
• Third-Party Identity Verification: Where 33dcom engages third-party KYC or identity verification providers, those providers may supply additional data points to assist in confirming a Player's identity. Such data is processed only to the extent necessary for verification purposes.

33dcom processes personal data only where a lawful basis exists for doing so. The following table identifies the primary purposes for which personal data is processed and the corresponding legal basis:

• Account Creation and Management: Processing necessary to enter into and perform the contract between 33dcom and the Player (the Terms & Conditions).
• Payment Processing: Processing necessary for the performance of the contract, including facilitating deposits and withdrawals in PKR via integrated payment providers.
• Identity Verification (KYC): Processing necessary to comply with legal obligations, including anti-money laundering (AML) and know-your-customer (KYC) regulatory requirements applicable to gaming operators.
• Fraud Prevention and Security: Processing carried out pursuant to 33dcom's legitimate interests in protecting the Platform, its players, and its financial integrity from fraudulent activity and security threats.
• Responsible Gaming Monitoring: Processing necessary to comply with legal obligations relating to responsible gaming, including age verification, self-exclusion enforcement, and monitoring for indicators of problem gambling.
• Customer Support: Processing necessary to fulfil contractual obligations and to serve the legitimate interests of 33dcom in resolving player queries and maintaining service quality.
• Platform Improvement and Analytics: Processing based on 33dcom's legitimate interests in understanding how the Platform is used and identifying opportunities to improve the player experience.
• Marketing Communications: Processing based on Player consent, where consent has been explicitly given. Players may withdraw this consent at any time (see Section 12).

33dcom does not sell personal data to third parties. However, in the course of operating the Platform and fulfilling legal obligations, personal data may be shared with the following categories of third parties:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, Visa processing networks, and Mastercard processing networks — for the purpose of processing deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and document verification services engaged by 33dcom to assist in confirming the identity and age of registered Players.
• Game Providers: Third-party casino game developers and live dealer studios whose games are accessible through the 33dcom Platform. These providers may receive anonymised or pseudonymised data necessary for game functionality and fairness auditing.
• Regulatory Authorities: Relevant governmental, regulatory, and law enforcement authorities where 33dcom is legally required to disclose personal data — for example, in connection with AML investigations, court orders, or official regulatory enquiries.
• IT and Security Service Providers: Technical service providers engaged to support the operation, security, and maintenance of the Platform's infrastructure, subject to strict data processing agreements.
• Professional Advisers: Legal, accounting, and compliance advisers engaged by 33dcom in the ordinary course of business, subject to confidentiality obligations.

The 33dcom Platform serves players primarily in Pakistan. In the course of providing its services, personal data may be transferred to and processed in jurisdictions outside Pakistan — for example, by game providers or cloud infrastructure providers whose servers are located in other countries.

Where personal data is transferred internationally, 33dcom takes appropriate measures to ensure that such transfers are conducted securely and that the receiving party is bound by data protection standards equivalent to those described in this Policy. Measures may include contractual safeguards in the form of standard data protection clauses, certification requirements, or equivalent mechanisms.

33dcom retains personal data only for as long as necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by law. The following general retention periods apply:

• Account Data: Retained for the duration of the Player's account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering and gaming regulatory requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following submission, or longer if required by applicable regulation at the time of the document's submission.
• Customer Support Records: Retained for a period of three (3) years from the date of the most recent interaction, for the purpose of dispute resolution and service quality management.
• Technical and Log Data: Typically retained for a period of twelve (12) months, after which it is anonymised or deleted unless specific circumstances require extended retention for security or fraud investigation purposes.
• Marketing Preferences: Retained until a Player withdraws consent or closes their account, whichever occurs first.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 33dcom's internal data management procedures.

33dcom uses cookies and similar tracking technologies to support the operation of the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session management cookies that maintain your logged-in status during a session. These cookies cannot be disabled without causing the Platform to malfunction.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming configurations, to provide a more personalised experience on return visits.
• Analytical Cookies: Used to collect anonymised data about how Players use the Platform — which pages are visited most frequently, where users encounter errors, and how navigation flows are used. This data helps 33dcom improve the Platform experience.
• Security Cookies: Used to assist in fraud detection and prevention, including identifying unusual access patterns or suspicious login behaviour.

Most web browsers allow you to control cookie settings through the browser's privacy preferences. Disabling strictly necessary cookies will affect the functionality of the Platform. You can manage your cookie preferences through your browser settings at any time.

33dcom implements a range of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data in transit between your device and 33dcom servers is encrypted using 256-bit SSL/TLS protocols. This applies to all pages of the Platform, not only the login and payment pages.
• Access Controls: Personal data held by 33dcom is accessible only to authorised staff members with a legitimate operational need. Role-based access controls are enforced, and all internal access to personal data is logged.
• Two-Factor Authentication: Players are offered two-factor authentication for their 33dcom accounts to reduce the risk of unauthorised account access arising from compromised credentials.
• Regular Security Audits: The Platform and its infrastructure undergo regular security assessments and penetration testing by qualified security professionals.
• Incident Response: 33dcom maintains a documented data breach response procedure. In the event of a data breach that poses a risk to Player rights and interests, 33dcom will notify affected Players and relevant authorities in accordance with applicable regulatory requirements.

While 33dcom takes all reasonable precautions to protect personal data, no internet-based system is completely immune to security threats. Players are encouraged to use strong, unique passwords for their 33dcom accounts and to enable two-factor authentication where available.

As a Player on the 33dcom Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact 33dcom support via live chat or email with your account details and a description of your request:

• Right of Access: You have the right to request a copy of the personal data that 33dcom holds about you. 33dcom will respond to access requests within 30 days of receipt.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by 33dcom. Certain corrections may require identity verification before they are actioned.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Note that this right is subject to 33dcom's legal obligations to retain certain data for regulatory compliance purposes.
• Right to Restrict Processing: In certain circumstances, you may request that 33dcom restrict the processing of your personal data — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have an absolute right to object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The 33dcom Platform is strictly for individuals aged 21 years and above. 33dcom does not knowingly collect personal data from persons under the age of 21. If 33dcom becomes aware that personal data has been submitted by a person under the age of 21, the associated account will be immediately suspended, all funds will be returned in accordance with the Terms & Conditions, and all personal data collected from the minor will be securely deleted.

If you believe that a minor has registered an account on the 33dcom Platform, please contact our support team immediately with the relevant account details so that the matter can be investigated and resolved promptly.

33dcom may send marketing communications to Players who have provided explicit consent to receive such communications at the time of registration or through their account settings. Marketing communications may include information about new games, promotions, bonuses, and platform updates.

• Opt-Out: Players may withdraw consent for marketing communications at any time by updating their account notification preferences or by contacting 33dcom support. Opt-out requests are processed within 5 business days.
• Transactional Communications: Opting out of marketing communications does not affect transactional messages, which include account confirmations, transaction receipts, security alerts, and mandatory regulatory notifications. These communications are sent as necessary for the operation of your account and cannot be disabled.
• No Third-Party Marketing: 33dcom does not share your contact details with third parties for the purpose of marketing their products or services to you.

33dcom reserves the right to update or amend this Privacy Policy from time to time in response to changes in data protection law, regulatory guidance, or the way in which the Platform operates. Any material changes to this Policy will be communicated to registered Players via email or through a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent version was published. We recommend that Players review this Policy periodically to stay informed about how 33dcom handles personal data. Continued use of the Platform following any update to this Policy constitutes acceptance of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about the way in which 33dcom processes your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the 33dcom Platform. This is the fastest route for urgent privacy queries.
• Email: support@33dcom.org — please include "Privacy Query" in the subject line for fastest routing to our data team.

33dcom aims to acknowledge all privacy-related queries within 48 hours and to provide a substantive response within 30 days. For complex access requests or erasure requests, the response period may be extended by a further 30 days where necessary, in which case 33dcom will notify you of the extension and the reason for it.