hd333 Privacy Policy
How We Handle Your Personal Data

This Privacy Policy ("Policy") describes how hd333 ("the Platform", "we", "us", "our") collects, processes, stores, and protects personal data belonging to individuals ("Player", "User", "you", "your") who access or use the hd333 website and associated services.

hd333 is committed to handling your personal data responsibly and transparently, in accordance with applicable data protection principles. This Policy applies to all personal data collected through registration, platform use, customer support interactions, payment processing, and any other touchpoint between you and hd333.

By registering an account or otherwise using the hd333 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform and request account closure.

For the purposes of applicable data protection law, hd333 acts as the data controller in respect of personal data collected from players who register and use the platform. As data controller, hd333 determines the purposes and means by which your personal data is processed.

Where hd333 engages third-party service providers — such as payment processors, game studios, identity verification services, or customer support technology providers — those third parties act as data processors on behalf of hd333, processing your data only according to documented instructions and under contractual data protection obligations.

hd333 collects the following categories of personal data from players:

hd333 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data (beyond selfie-based identity matching), or health data, except where strictly required to comply with a legal obligation.

hd333 collects personal data through the following means:

• Direct submission: Data you actively provide when creating an account, completing identity verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated collection: Technical data captured automatically when you visit the hd333 platform, including IP address, browser fingerprint, session duration, pages visited, and device characteristics. This data is collected via server logs, cookies, and similar technologies.
• Third-party sources: Identity and address verification data received from licensed Know Your Customer (KYC) verification services and fraud prevention databases. Payment confirmation data received from payment processors such as bKash, Nagad, Rocket, and Upay. We use this data solely to validate the information you have provided and to comply with anti-money-laundering obligations.
• Inferred data: Risk scores, responsible gaming indicators, and player preference profiles derived from your gameplay patterns and platform behaviour. This inferred data is used solely for platform operation, responsible gaming enforcement, and fraud prevention — never for sale to third parties.

hd333 processes personal data only where a valid lawful basis exists. The following table summarises the primary purposes for which we process your data and the corresponding legal basis for each:

hd333 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction data necessary to process deposits and withdrawals on your behalf.
• KYC and identity verification providers: Licensed third-party services that perform document validation, liveness checks, and database screening to verify your identity and comply with anti-money-laundering regulations.
• Game software providers: Studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive a unique player identifier and relevant session data to enable you to play their games. These providers operate under their own licences and data protection frameworks.
• Customer support technology: Our live chat and support ticket platform provider, who processes communication data on our behalf under a data processing agreement.
• Fraud and risk management services: Specialist fraud detection platforms that cross-reference player behaviour, device fingerprints, and transaction patterns against known fraud indicators.
• Law enforcement and regulatory authorities: Where required by applicable law, court order, or regulatory direction, hd333 may disclose player data to competent authorities without prior notice to the player.
• Business successors: In the event of a merger, acquisition, or sale of hd333 assets, player data may be transferred to the acquiring entity, subject to the same data protection commitments described in this Policy.

All third-party recipients are required to maintain appropriate technical and organisational security measures and to process your data only for the specific purposes for which it was shared.

hd333 retains personal data for as long as necessary to fulfil the purposes outlined in this Policy and to comply with applicable legal and regulatory obligations. Specific retention periods are guided by the following principles:

• Active account data is retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, in accordance with standard anti-money-laundering record-keeping obligations.
• Identity verification documents are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction records are retained for a minimum of five (5) years from the date of each transaction to satisfy financial record-keeping requirements.
• Customer support records are retained for a minimum of three (3) years from the date of the support interaction, or longer where relevant to an ongoing dispute or legal matter.
• Technical and gameplay logs are retained for up to two (2) years for platform security, dispute resolution, and responsible gaming monitoring purposes.
• Marketing consent records are retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance.

When personal data is no longer required and no legal obligation mandates its retention, hd333 will securely delete or anonymise that data using industry-accepted data destruction methods.

hd333 implements a layered approach to data security, combining technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or device and the hd333 platform is encrypted using current TLS standards. This applies to account login, registration, payment flows, and all authenticated API communications.
• Access controls: Access to personal data within hd333's internal systems is strictly limited on a need-to-know basis. Staff access is governed by role-based permissions, multi-factor authentication requirements, and activity audit logging.
• Password security: Account passwords are stored using one-way cryptographic hashing with salt. hd333 does not store plaintext passwords and cannot retrieve your password — only reset it.
• Data storage security: Personal data is stored in access-controlled, encrypted data stores with regular backups. Storage infrastructure is maintained in data centres with physical security controls, environmental monitoring, and redundant systems.
• Regular security testing: hd333's platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: hd333 maintains a documented data breach response procedure. In the event of a breach likely to result in risk to affected individuals, hd333 will notify relevant authorities and, where required, affected players, within applicable regulatory timeframes.

hd333 uses cookies and similar technologies — including local storage, session storage, and pixel tags — to maintain the integrity of user sessions, remember player preferences, and understand how the platform is used in aggregate. The following cookie categories are in use:

hd333 does not use third-party advertising cookies, retargeting pixels, or behavioural tracking technologies that would monitor your browsing activity across websites unrelated to hd333.

You may manage cookie settings through your browser's privacy controls. Disabling strictly necessary cookies will impair your ability to log in and use the platform. Disabling functional or analytics cookies will not prevent you from playing games or accessing your account.

Subject to applicable law, you have the following rights in respect of personal data that hd333 holds about you:

• Right of Access: You may request a copy of the personal data hd333 holds about you, together with information about how it is processed. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Note that some data — such as verified identity details — may require re-verification before changes can be accepted.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interest. This right is subject to override where retention is required by legal obligation — particularly anti-money-laundering record-keeping requirements, which take precedence over erasure requests.
• Right to Restriction: In certain circumstances, you may request that hd333 restrict the processing of your data — for example, while a rectification request is being assessed — rather than deleting it outright.
• Right to Data Portability: Where processing is based on your consent or on performance of a contract, and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object at any time to processing of your data based on legitimate interest grounds. hd333 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

To exercise any of the above rights, please contact hd333 at [email protected] with a clear description of your request. We may need to verify your identity before processing your request. We aim to respond to all valid data subject requests within thirty (30) calendar days.

The hd333 platform is strictly intended for individuals aged 21 years and above. hd333 does not knowingly collect, process, or retain personal data belonging to any person under the age of 21 under any circumstances.

Age verification is performed as part of the account registration and KYC process. Any account found to belong to a person under the age of 21 will be suspended immediately, no winnings will be paid out, and any deposits made may be returned to the original payment source following investigation.

If a parent or guardian becomes aware that their child has registered on the hd333 platform or submitted personal data to hd333 without authorisation, they should contact us immediately at [email protected]. hd333 will take prompt action to close the account and delete the associated data to the fullest extent possible consistent with our legal record-keeping obligations.

hd333 operates as an internationally licensed gaming platform and may process or store personal data in jurisdictions outside Bangladesh. Where personal data is transferred to countries that may not provide the same level of data protection as your home jurisdiction, hd333 ensures that appropriate safeguards are in place.

• Where data is transferred to third-party service providers located outside Bangladesh, those transfers are governed by contractual data protection clauses requiring the recipient to maintain security and processing standards consistent with this Policy.
• Game software providers based in licensed gaming jurisdictions — including Malta, Gibraltar, Isle of Man, Curaçao, and others — may process gameplay data as part of normal game operation. These providers operate under their own regulatory frameworks which include data protection requirements.
• hd333 does not transfer personal data to jurisdictions known for inadequate data protection standards without appropriate contractual or technical safeguards in place.

If you have specific concerns about how your data is handled when transferred internationally, please contact us at [email protected] for further information.

hd333 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. Where changes are material, we will provide reasonable advance notice to registered players via the email address associated with their account or through a prominent notice displayed on the platform.

The effective date shown at the top of this Policy indicates when the current version came into force. Continued use of the hd333 platform following publication of an updated Policy constitutes acceptance of the revised terms. Players who do not accept the updated Policy should cease using the platform and contact support to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data hd333 holds about you, please contact our data protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Use "Privacy Policy Enquiry" or "Data Subject Request" so your message is routed to the correct team promptly.
• Response time: We aim to acknowledge all enquiries within two (2) business days and to provide a substantive response within thirty (30) calendar days.
• Language: Enquiries may be submitted in English. Responses will be provided in English.

hd333 takes all data protection enquiries seriously. If you are not satisfied with our response to your request, you have the right to escalate your concern to a competent supervisory authority or seek legal remedy through courts of competent jurisdiction in your territory.