Privacy Policy — How n333 Collects, Uses, and Protects Your Personal Data

01 Introduction

This Privacy Policy ("Policy") describes how n333 ("n333", "we", "us", "our") collects, uses, stores, and discloses personal data relating to individuals ("Player", "User", "you", "your") who access or use the n333 online casino and sports betting platform at https://n333.im and its associated mobile-optimised interfaces.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, all of which together constitute the full framework governing the relationship between n333 and its players. By registering for an n333 account or continuing to use the platform, you acknowledge that you have read and understood this Policy in full.

This Policy is written in English. The English version is the governing version. If any translated version conflicts with the English text, the English text shall prevail. This Policy is effective as of 1 January 2026 and supersedes all prior privacy notices issued by n333.

02 Data Controller

n333 is the data controller responsible for the personal data processed under this Policy. As data controller, n333 determines the purposes for which and the manner in which personal data is processed. All data processing activities carried out by n333 are conducted in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

Where n333 engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification providers, or fraud prevention agencies — those providers act as data processors under instruction from n333. n333 maintains appropriate contractual safeguards with all such processors to ensure that your data is handled with the same standard of care applied internally.

03 Data We Collect

n333 collects personal data in the following categories. We collect only data that is necessary for the specific purposes described in this Policy — we do not collect excessive or irrelevant data about our players.

We do not knowingly collect or process special categories of sensitive personal data (such as health data, biometric data, or political opinions) unless you have explicitly provided such information in the course of a support interaction, in which case it is processed solely for the purpose of resolving your specific query.

04 How We Collect Your Data

n333 collects personal data through the following channels and mechanisms:

• Direct provision by you: Data you enter during account registration, KYC verification submissions, deposit and withdrawal requests, support contact forms, live chat sessions, and promotional opt-ins.
• Automated technical collection: Data collected automatically when you access the n333 platform, including IP addresses, device fingerprints, browser characteristics, session identifiers, and in-page interaction patterns via server logs and analytics tools.
• Payment provider data: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our partner banking institutions when you initiate or complete a financial transaction on the platform.
• Third-party identity verification: Results and data outputs from KYC verification providers who validate the identity documents you submit as part of the account verification process.
• Fraud and AML screening services: Risk scores, sanctions screening results, and politically exposed person (PEP) flags generated by third-party compliance data providers in accordance with our anti-money-laundering obligations.
• Cookies and tracking technologies: Data collected via cookies, web beacons, and similar technologies as described in Section 10 of this Policy.

05 How We Use Your Data

n333 processes personal data for the following specific and documented purposes. We do not use your data for any purpose that is incompatible with the purposes described below without first obtaining your separate consent.

• Account creation and management: To register your account, verify your identity, maintain your account profile, and communicate essential account-related information.
• Platform operation and service delivery: To enable gameplay, process bets and wagers, calculate and credit winnings, manage bonus allocations, and deliver the core n333 gaming and betting services.
• Financial transactions: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other payment partners, and to maintain accurate financial records of all transactions associated with your account.
• Legal and regulatory compliance: To meet our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, to screen against sanctions lists, to detect and report suspicious activity, and to comply with any lawful requests from government or regulatory authorities.
• Security and fraud prevention: To monitor for and investigate suspected fraud, unauthorised account access, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor player behaviour for indicators of problem gambling, to apply account-level responsible gaming tools (deposit limits, session timers, self-exclusion), and to intervene where a player's pattern of play raises concern.
• Customer support: To receive, investigate, and resolve support queries, complaints, and disputes raised through our live chat, email, and WhatsApp channels.
• Platform improvement and analytics: To analyse aggregate, anonymised usage patterns to improve the performance, reliability, and user experience of the n333 platform.
• Marketing communications: To send promotional offers, bonus notifications, and relevant platform updates to players who have opted in to receive marketing communications. You may opt out at any time.

06 Legal Basis for Processing

n333 relies on the following legal bases for processing your personal data, depending on the purpose for which the data is used:

• Contractual necessity: Processing required to perform our obligations under the account agreement with you, including providing the gaming platform, processing transactions, and delivering customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML requirements, sanctions screening, and responses to lawful authority requests.
• Legitimate interests: Processing carried out in pursuit of n333's legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent for marketing at any time without affecting the lawfulness of processing carried out prior to withdrawal.

07 Data Sharing and Disclosure

n333 does not sell your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our partner banks receive the minimum financial data necessary to process your deposits and withdrawals. Each payment partner is subject to their own regulatory obligations and privacy standards.
• Identity verification providers: Third-party KYC service providers receive copies of identity and address documents you submit, solely for the purpose of verifying your identity on n333's behalf.
• Fraud and AML compliance services: Compliance data providers receive limited account and transaction data for the purpose of sanctions screening, PEP checks, and AML risk scoring.
• Game software providers: Game studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive anonymised session and gameplay data necessary for game operation and dispute resolution. These providers do not receive your identity or financial data.
• Law enforcement and regulatory authorities: n333 will disclose personal data to relevant authorities when required to do so by applicable law, court order, or a lawful request from a regulatory body with jurisdiction over n333's operations.
• Internal affiliates and group companies: Where n333 operates as part of a corporate group, limited personal data may be shared with affiliated entities for internal compliance, audit, and risk management purposes only.

Where data is shared with a third-party processor, n333 maintains a data processing agreement that requires the processor to handle your data in accordance with applicable data protection standards and to use it only for the purposes specified by n333.

08 Data Retention

n333 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, and in any event for no longer than is required by applicable legal, regulatory, and accounting obligations.

After the applicable retention period expires, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised aggregate data may be retained indefinitely for analytical and reporting purposes.

09 Security Measures

n333 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our key security controls include:

• TLS/SSL encryption: All data transmitted between your device and the n333 platform is protected by 256-bit SSL/TLS encryption, ensuring that your credentials and financial data cannot be intercepted in transit.
• Encryption at rest: Sensitive personal and financial data stored in n333's databases is encrypted at rest using industry-standard symmetric encryption algorithms.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Internal systems enforce role-based access controls, and all access to production data is logged and audited.
• Two-factor authentication (2FA): All n333 employee accounts with access to player data are required to use multi-factor authentication. Players are encouraged to enable 2FA on their own accounts for additional security.
• Penetration testing and vulnerability management: n333's platform and infrastructure are subject to regular security assessments and penetration tests conducted by independent third-party security professionals.
• Incident response: n333 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected individuals, n333 will notify the relevant authorities and affected players in accordance with applicable regulatory requirements.

10 Cookies and Tracking Technologies

n333 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by the n333 web server when you visit the site. Cookies allow n333 to recognise returning users, maintain session state, and collect analytical data.

n333 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the basic operation of the n333 platform. These cookies enable session management, login state maintenance, and security functions. They cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, responsible gaming limits you have applied, and your preferred display options within the platform.
• Analytical cookies: Used to collect anonymised data about how players navigate and interact with the n333 platform, helping us identify areas for improvement and measure the effectiveness of new features.
• Security cookies: Used to detect and prevent fraudulent sessions, bot traffic, and other malicious activity on the n333 platform.

Most web browsers allow you to control cookie settings through the browser's privacy or settings menu. You may choose to disable non-essential cookies at any time; however, doing so may affect the functionality of some parts of the n333 platform. Strictly necessary and security cookies cannot be disabled as they are integral to the safe operation of the site.

11 Your Privacy Rights

As a player and data subject, you hold the following rights with respect to your personal data held by n333. You may exercise any of these rights at any time by contacting our support team via live chat or email:

• Right of access: You have the right to request a copy of the personal data n333 holds about you, along with information about how it is being used and on what legal basis.
• Right to rectification: You have the right to request that n333 correct any inaccurate or incomplete personal data held about you. You may update some of your contact details directly through your account profile page.
• Right to erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent and no other legal basis applies. This right is subject to n333's legal obligation to retain certain data for regulatory purposes.
• Right to restriction: You have the right to request that n333 restrict the processing of your personal data in specific circumstances, such as while the accuracy of your data is being contested.
• Right to data portability: You have the right to receive a copy of the personal data you provided to n333 in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing based on n333's legitimate interests, and to opt out of direct marketing communications at any time without providing any reason.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

n333 will respond to all verified privacy rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case n333 will notify you of the extension and its reason within the initial 30-day period. There is no fee for exercising any of the rights listed above in standard circumstances.

12 Minors and Age Restriction

If you are a parent or guardian and believe that a person under your care has created an n333 account or provided personal data to n333 without your knowledge, please contact our support team immediately at [email protected]. We will investigate and act on all such reports as a matter of priority. Age verification checks are applied at registration and may be repeated at any point during a player's account lifecycle at n333's discretion.

13 Changes to This Policy

n333 reserves the right to update or amend this Privacy Policy at any time. When changes are material — meaning they affect how your data is used in a way that could meaningfully impact your rights — n333 will provide advance notice of the changes via email to your registered address or via a prominent on-platform notification, at least 14 days before the changes take effect.

Minor changes (such as corrections of typographical errors, clarifications of existing practices, or formatting updates) may be made without prior notice. The effective date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how n333 handles your personal data.

Your continued use of the n333 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the platform and close your account before the revised Policy takes effect.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way n333 handles your personal data, please reach out to our team through any of the following channels. All privacy-related enquiries are handled with confidentiality and prioritised for prompt resolution.

• Email: [email protected] — subject line: "Privacy Enquiry"
• Live Chat: Available 24 hours a day, 7 days a week, directly from the n333 platform
• WhatsApp: +880 1700 000333 — available 08:00–24:00 Bangladesh Standard Time (BST, UTC+6)

n333 acknowledges all privacy enquiries within 24 hours and aims to provide a full response within 10 business days. For formal data subject access requests or erasure requests, please refer to the instructions in Section 11 of this Policy.