330k Privacy Policy
How We Protect Your Personal Data

1. Overview

This Privacy Policy ("Policy") describes how 330k ("we", "us", "our") — the operator of the online casino and sports betting platform accessible at 330k.io — collects, processes, stores, and protects the personal data of players and visitors ("you", "your") in connection with your use of the 330k platform. This Policy applies to all 330k services, including the website, any mobile-optimised version of the site, and all related support, payment, and communication channels.

By registering a 330k account or by continuing to use the 330k platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. This Policy is incorporated by reference into the 330k Terms & Conditions. If you do not agree with any part of this Policy, you must stop using the 330k platform and may request account closure by contacting the support team.

330k is committed to handling your personal information with the utmost care and transparency. We apply recognised data protection principles — including data minimisation, purpose limitation, storage limitation, and integrity and confidentiality — across all of our data handling activities. This Policy is reviewed and updated periodically to reflect changes in the platform, applicable regulations, or our data handling practices. The current version is always available at 330k.io/privacy-policy.

2. Data We Collect

330k collects personal data from you in several ways: directly when you register and use the platform, automatically when you browse or play, and from third-party service providers involved in payment processing and identity verification. The categories of personal data we collect are described below.

Registration & Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (to verify that you meet the 21+ age requirement).
• Registered mobile phone number (used for account access, OTP verification, and support communication).
• Email address (where provided during registration or KYC).
• National ID card (NID) number or passport number, submitted during KYC verification.
• Photograph or scanned copy of your identification document, submitted during KYC.
• Proof of address document (utility bill, bank statement, or equivalent), where requested.

Financial & Transaction Data

• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers) associated with deposits and withdrawals — stored in tokenised or masked form only.
• Transaction amounts, timestamps, reference numbers, and payment method used for each deposit and withdrawal.
• Account balance history and bonus wallet history.

Gameplay & Betting Data

• Bet history, game session records, wagering amounts, and game outcomes across all product categories (casino games, crash games, live dealer, sports betting).
• Session start and end times, session durations, and frequency of play data (used for responsible gaming monitoring).

Technical & Device Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser type, and browser version.
• Device fingerprint data collected for fraud prevention and account security purposes.
• Log data including page views, navigation paths, errors, and access timestamps.

Communication Data

• Records of support conversations conducted via WhatsApp or live chat, including message content, timestamps, and resolution status.
• Preferences for promotional communications, and records of opt-in and opt-out actions.

3. How We Use Your Data

330k uses the personal data it collects for the following purposes:

330k will not use your personal data for any purpose that is incompatible with the purposes stated above without first obtaining your explicit consent or having a separate legitimate legal basis for doing so.

4. Legal Basis for Processing

330k processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and 330k — specifically, to operate your account, process your transactions, deliver gameplay services, and provide customer support.
• Legal obligation: Processing is necessary for 330k to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, KYC requirements, and record-keeping mandates.
• Legitimate interests: Processing is necessary for 330k's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your data protection rights.
• Consent: Where processing is based on your consent — for example, sending you promotional communications about bonuses and offers — you may withdraw your consent at any time by contacting the support team or using the opt-out option in any communication you receive.

5. Data Sharing & Disclosure

330k does not sell, rent, or share your personal data with third parties for their own commercial or marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

Payment Service Providers

To process deposits and withdrawals, 330k shares the minimum necessary transaction data with bKash, Nagad, Rocket, and Upay. Each of these providers operates under its own privacy policy and data protection obligations. 330k does not store your full mobile wallet PIN or password at any point.

KYC and Identity Verification Providers

330k uses third-party KYC verification service providers to authenticate identity documents submitted during the account verification process. These providers act as data processors under contractual obligations that restrict them to processing your data solely for the purpose of identity verification on 330k's behalf.

Fraud Prevention and Security Providers

Device fingerprinting, IP analysis, and fraud detection data may be processed by specialist third-party security vendors. These vendors are bound by strict data processing agreements and may not use your data for any purpose other than the provision of fraud prevention services to 330k.

Legal and Regulatory Disclosures

330k may disclose your personal data to relevant authorities if required to do so by law, court order, or in response to a valid regulatory request. In such cases, 330k will disclose only the minimum data required to satisfy the legal obligation and will, where permitted by law, notify you of the disclosure.

6. Cookies & Tracking Technologies

The 330k platform uses cookies and similar tracking technologies to operate core platform functionality, remember your session, and analyse how players interact with the site. The categories of cookies used are as follows:

Essential Cookies

These cookies are strictly necessary for the platform to function. They maintain your login session, store your language and currency preferences, and ensure that the platform's security features operate correctly. Essential cookies cannot be disabled without preventing you from using the 330k platform.

Analytics Cookies

330k uses anonymised analytics data to understand how players navigate the platform, which games are most popular, and where technical issues occur. This data is used in aggregated form only and does not identify you personally. Analytics data helps 330k improve its product and user experience over time.

Fraud Prevention Cookies

Certain cookies and device-fingerprinting scripts are used solely to detect unusual access patterns, identify potential account takeover attempts, and flag fraudulent transaction behaviour. These cookies are a key component of 330k's account security infrastructure and are essential for protecting your funds.

Managing Your Cookie Preferences

You may configure your browser to block or delete cookies at any time. Please note that disabling essential cookies will prevent you from logging into and using the 330k platform. For instructions on managing cookies in your specific browser (Chrome, Firefox, Samsung Internet, etc.), please refer to your browser's official help documentation.

7. Data Retention

330k retains your personal data only for as long as is necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required or permitted by applicable law. The general retention periods that apply to the main categories of data we hold are as follows:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following permanent account closure, to satisfy anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations.
• Gameplay and betting history: Retained for a minimum of two (2) years for responsible gaming monitoring and dispute resolution purposes.
• Support communication records: Retained for two (2) years from the date of the last interaction, to support quality assurance and dispute review.
• Technical and device data: Retained for up to twelve (12) months from the date of collection, after which it is aggregated and anonymised.

When personal data is no longer required, it is securely deleted or anonymised using industry-standard data sanitisation methods. Anonymised or aggregated data that no longer identifies you as an individual may be retained indefinitely for statistical and analytical purposes.

8. Security Measures

330k implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 330k's servers.
• Encryption at rest for all stored personal data, including identity documents and financial records.
• Multi-factor authentication (MFA) for all 330k staff who access player data systems.
• Role-based access controls that restrict employee access to personal data strictly to those whose job function requires it.
• Regular third-party security audits and penetration testing of the 330k platform infrastructure.
• Automated anomaly detection systems that flag unusual login attempts, transaction patterns, and data access requests in real time.
• Secure, geographically redundant data centre infrastructure with physical access controls.

While 330k takes every reasonable precaution to protect your data, no internet-based system can guarantee absolute security. If you have reason to believe your 330k account has been compromised, please contact the support team immediately via WhatsApp so that precautionary measures can be taken without delay.

9. Your Privacy Rights

As a 330k player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the 330k support team via WhatsApp or email as described in Section 14 of this Policy.

• Right of Access: You have the right to request a copy of the personal data that 330k holds about you. We will provide this within 30 days of receiving a valid request.
• Right to Rectification: You have the right to request that 330k correct any inaccurate or incomplete personal data held about you. Corrections to name, date of birth, or contact details may require documentary evidence.
• Right to Erasure: You may request that 330k delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to 330k's legal obligations to retain certain records as described in Section 7.
• Right to Restriction: You may request that 330k restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being verified following a rectification request.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to 330k's ability to demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to 330k in a structured, commonly used, machine-readable format, where technically feasible.

330k will respond to all privacy rights requests within 30 days. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it. There is no charge for making a privacy rights request unless the request is manifestly unfounded or excessive.

10. Protection of Minors

330k strictly prohibits the use of its platform by any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. All account registrations are subject to KYC age verification, and accounts where the registered player is found to be under 21 will be immediately closed.

If you are a parent or guardian and you believe that a minor in your care has registered a 330k account or otherwise submitted personal data to the platform, please contact the 330k support team immediately. Upon verification of the report, 330k will promptly close the account, delete all associated personal data, and return any deposited funds to the payment method on file.

330k encourages parents and guardians to make use of third-party parental control tools and content filtering software to prevent minors from accessing online gambling content. Organisations such as GamCare and BeGambleAware also provide guidance and resources on protecting young people from gambling-related harm.

11. Third-Party Links & Services

The 330k platform integrates with third-party services — including bKash, Nagad, Rocket, and Upay for payments, and game studios such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, and Ezugi for the delivery of casino and live dealer content. When you interact with these third-party services, you may be subject to the privacy policies of those providers in addition to this Policy.

330k is not responsible for the privacy practices, data handling, or content of third-party services integrated into or accessible through the platform. We encourage you to review the privacy policies of any third-party service you interact with. The inclusion of a third-party service on the 330k platform does not constitute an endorsement of that provider's privacy practices.

12. International Data Transfers

330k's primary data infrastructure is designed to serve Bangladesh players. In certain operational contexts — including the use of global game studio content delivery networks and fraud prevention services — your personal data may be processed on servers located outside Bangladesh. When such transfers occur, 330k ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements with all relevant third-party processors.

330k will not transfer your personal data to any jurisdiction that does not provide an adequate level of data protection without first implementing appropriate technical and contractual safeguards. If you have questions about the specific safeguards in place for international transfers of your data, please contact the support team.

13. Changes to This Policy

330k reserves the right to update this Privacy Policy at any time to reflect changes in our data handling practices, applicable law, or the services we provide. When we make material changes to this Policy, we will publish the updated version at 330k.io/privacy-policy with a revised effective date. Where changes are significant, we may also notify active players via their registered mobile number or through an in-platform notification upon next login.

Your continued use of the 330k platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must stop using the platform and request account closure before the revised Policy takes effect. We recommend reviewing this page periodically to stay informed of how 330k protects your personal data.

14. Contact & Privacy Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data that 330k holds about you, please contact the 330k data privacy support team through the channels listed below. All contact details are displayed as plain text only and are not clickable links.

When submitting a privacy rights request, please include your registered mobile number or username, a clear description of your request (e.g., access, rectification, erasure), and a copy of a valid identification document so that 330k can verify your identity before processing the request. This verification step is necessary to protect your data from unauthorised third-party requests.