at333 Privacy Policy — Your Data, Your Rights

1. Data We Collect

When you register, use, or interact with the at333 platform, we collect certain categories of personal information. The data collected depends on the actions you take and the features you use. Below is a detailed account of the categories of data at333 collects and the context in which each category arises.

at333 may also receive data about you from third-party sources in limited circumstances. These include identity verification service providers used during KYC, fraud detection partners who flag suspicious IP addresses or device fingerprints, and payment processors who confirm the status of financial transactions. Data received from third parties is treated with the same standard of care as data you provide directly.

2. How We Use Your Data

at333 uses personal data for specific, documented purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which at333 processes personal data are listed below, together with the legal basis for each processing activity.

• Account creation and management: Processing your registration details to create your at333 player account, authenticate your identity on login, and manage account preferences and security settings. Legal basis: performance of contract.
• Payment processing: Using your financial data and linked mobile wallet details to process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and connected banking institutions. Legal basis: performance of contract.
• KYC and fraud prevention: Verifying your identity against provided documents, cross-referencing information with third-party verification services, and detecting patterns consistent with fraud, account takeover, or bonus abuse. Legal basis: legal obligation and legitimate interests.
• Anti-money laundering (AML) compliance: Monitoring deposit and withdrawal activity for patterns consistent with money laundering or financial crime, and reporting suspicious activity to relevant authorities where legally required. Legal basis: legal obligation.
• Responsible gaming monitoring: Analysing account activity patterns to identify players who may be at risk of gambling-related harm, and reaching out proactively with responsible gaming information or intervention support. Legal basis: legitimate interests (player protection).
• Customer support: Using your contact data and account history to respond to support queries, resolve disputes, and communicate account-related updates. Legal basis: performance of contract.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players navigate at333, which games are most popular, and where the user experience can be improved. Legal basis: legitimate interests.
• Marketing communications: Sending you promotional offers, bonus notifications, and seasonal promotions (such as Eid or BPL cricket specials) via email or SMS, where you have opted in to receive such communications. Legal basis: consent. You may withdraw consent at any time.

3. Data Sharing & Third Parties

at333 does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

Categories of third parties with whom at333 may share your data:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other financial institutions involved in processing your deposits and withdrawals. These providers receive only the data necessary to complete your specific transaction and are bound by their own regulatory data protection obligations.
• Identity verification providers: Third-party KYC and document verification services that at333 engages to confirm the authenticity of identity documents and cross-reference player data against publicly available databases. These providers act as data processors under at333's instruction.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and limited technical identifiers necessary to deliver their game content within the at333 platform. They do not receive your full identity profile or financial details.
• Fraud and security providers: Specialised fraud detection services that analyse device fingerprints, IP addresses, and behavioural patterns to identify suspicious activity. Data shared is technical and pseudonymised where possible.
• Regulatory and law enforcement authorities: Where at333 is legally required to disclose data — for example, in response to a court order, a financial intelligence unit request, or a law enforcement investigation — we will provide the requested information. at333 does not voluntarily disclose player data to authorities beyond what is legally required.
• Professional advisers: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations and who access player data only to the extent necessary to provide their services to at333.

All third-party processors engaged by at333 are subject to written data processing agreements that require them to handle player data confidentially, to process it only for the stated purpose, to implement appropriate security measures, and to delete or return the data when the engagement ends.

4. Cookies & Tracking Technologies

at333 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your authenticated session, and understand how players use our site. A cookie is a small text file placed on your device when you visit at333. Cookies do not contain executable code and cannot access other files on your device.

Cookie categories used on at333:

at333 does not use advertising cookies, retargeting pixels, or social media tracking scripts. No third-party advertising network has access to cookies placed by at333.

You can manage cookie settings through your browser's privacy controls. Disabling strictly necessary cookies will prevent you from logging in and using real-money features on at333. Disabling functional or analytics cookies will not affect core platform access but may reduce the quality of your personalised experience.

5. Data Retention

at333 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following retention schedule summarises our standard approach.

When a retention period expires, at333 will securely delete or irreversibly anonymise the relevant personal data. Deletion processes follow industry-standard secure erasure protocols. Anonymised data derived from player activity — which can no longer be linked to an identifiable individual — may be retained indefinitely for aggregate statistical analysis.

If your account is subject to an ongoing investigation, dispute, or legal hold at the time a standard retention period expires, at333 will retain the relevant data until the matter is fully resolved, after which standard deletion procedures will apply.

6. Data Security

at333 implements a layered security architecture to protect personal and financial data against unauthorised access, accidental loss, disclosure, or destruction. Security is not a single measure but a combination of technical controls, operational procedures, and staff awareness practices.

Key security measures in place on the at333 platform:

• TLS/SSL encryption in transit: All data transmitted between your browser or device and the at333 servers is encrypted using TLS 1.2 or higher. Plain HTTP connections are automatically redirected to HTTPS.
• Encryption at rest: Sensitive data fields including identity document references, financial account identifiers, and KYC records are stored in encrypted form in at333's database systems. Encryption keys are managed through a separate key management service.
• Access controls: Access to player data within at333's internal systems is restricted on a need-to-know basis. Staff members can access only the data categories required for their specific role. All internal access is logged and auditable.
• Two-factor authentication (2FA): at333 offers optional 2FA for player accounts. All at333 staff accounts with access to production systems require mandatory 2FA.
• Intrusion detection and monitoring: at333's systems are monitored continuously for unusual access patterns, known attack signatures, and anomalous data egress. Security events trigger automated alerts for immediate review by the platform's security team.
• Regular security assessments: at333 conducts periodic security reviews of its platform infrastructure and data handling practices to identify and remediate vulnerabilities before they can be exploited.

While at333 applies rigorous security measures, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their at333 account, to enable 2FA where available, and to contact support immediately if they suspect their account has been accessed without their authorisation.

7. Your Privacy Rights

As a registered player on at333, you hold specific rights in relation to your personal data. at333 is committed to honouring these rights promptly and without unnecessary barriers. The following rights are available to all at333 players.

• Right of access: You may request a copy of the personal data at333 holds about you. at333 will provide this in a structured, commonly used format (typically PDF or CSV) within a reasonable timeframe of receiving your verified request.
• Right to rectification: If any personal data at333 holds about you is inaccurate or incomplete, you may request that it be corrected. Where the data relates to your identity, at333 may request updated verification documents before making the change.
• Right to erasure: In certain circumstances you may request that at333 delete your personal data. This right is not absolute — at333 may be required to retain data for legal, regulatory, or compliance reasons even after your account is closed. We will inform you clearly of any data we are legally obligated to retain.
• Right to restrict processing: You may request that at333 restricts the processing of your personal data in specific circumstances — for example, while a rectification request is being resolved, or where you contest the legal basis for processing.
• Right to data portability: Where at333 processes your personal data on the basis of your consent or a contract with you, you may request a portable copy of that data in a machine-readable format.
• Right to withdraw consent: Where at333 processes your data based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to object to marketing: You may opt out of receiving marketing emails or SMS messages from at333 at any time by updating your communication preferences in account settings or by contacting support.

To exercise any of the above rights, contact at333 at [email protected] with the subject line "Privacy Request" and a clear description of the right you wish to exercise. at333 will acknowledge your request promptly and respond within a reasonable timeframe. at333 may need to verify your identity before processing a privacy rights request to ensure the security of your account data.

8. Minors & Age Verification

at333 is strictly an adults-only platform. 18+ Registration and use of at333's real-money casino, sports betting, and payment features is permitted only to individuals who are 18 years of age or older. at333 does not knowingly collect personal data from anyone under the age of 18.

at333 takes age verification seriously and applies the following measures to enforce the 18+ requirement:

• Date of birth is collected at registration and cross-checked against the age eligibility threshold before the account is activated for real-money use;
• KYC document verification confirms the account holder's age against a government-issued photo ID prior to the first withdrawal;
• at333's fraud and compliance team monitors for registration patterns that may indicate an attempt to circumvent age verification controls;
• Any account found to belong to a person under 18 will be closed immediately, all real-money balances will be frozen pending parental or guardian contact, and the matter will be escalated to at333's compliance team.

at333 recommends that adults who share devices with minors use device-level parental controls and browser-based filtering tools to prevent unauthorised access to online gambling platforms. at333 is not responsible for unauthorised access to the platform from shared family devices where parental controls were not in place.

9. Updates to This Policy

at333 reviews this Privacy Policy periodically to ensure it accurately reflects our current data processing practices, any changes to applicable regulations, and feedback from our player community. The "Effective" date displayed at the top of this page indicates when the current version of the policy was last reviewed and approved.

When at333 makes material changes to this Privacy Policy — changes that meaningfully affect how we collect, use, or share your personal data — we will take the following steps before the updated policy takes effect:

• The updated Privacy Policy will be published on this page at at333.app/privacy-policy with a revised effective date;
• Registered players with an active account will receive an email notification at their registered address summarising the key changes and directing them to the full updated policy;
• Where a material change involves new consent-based processing (such as a new marketing channel), at333 will request fresh consent rather than assuming continuation of existing consent.

Minor updates — such as clarifications of existing practices, corrections of typographical errors, or changes to contact details — may be made without individual notification. The effective date on this page will always reflect the most recent revision, whether major or minor.

Players who continue to use the at333 platform after a revised Privacy Policy has been published and notified are considered to have acknowledged the updated terms. If you do not agree with a material change to this policy, you should discontinue use of at333 and may request account closure by contacting [email protected].

10. Contact & Data Enquiries

at333 takes privacy enquiries seriously. If you have a question about this Privacy Policy, a concern about how your personal data is being handled, or a privacy rights request you wish to submit, please contact the at333 support and compliance team using the details below.

• Email (preferred): [email protected] — use the subject line "Privacy Enquiry" or "Privacy Rights Request" for faster routing to the correct team.
• Response time: at333 aims to acknowledge all privacy-related enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 14 calendar days for standard requests.
• Complex requests: For requests involving large volumes of data or complex legal considerations, at333 may extend the response period and will notify you of the extended timeline in the acknowledgement email.
• Identity verification: For privacy rights requests (access, erasure, portability), at333 may ask you to verify your identity before processing the request. This is a protective measure to ensure we do not disclose your data to an unauthorised party.

at333 is committed to resolving privacy concerns directly with players in the first instance. If you remain dissatisfied after engaging with at333's privacy team, you may explore independent resolution channels available to online consumers in your jurisdiction, as noted in at333's Terms & Conditions.