Your Privacy Matters at l3333 — Here Is How We Protect It

Who We Are

l3333 (referred to in this Privacy Policy as "l3333", "we", "us", or "our") operates the online sports betting and casino platform accessible at https://l3333.io. l3333 is the data controller responsible for the personal information collected from registered players and visitors to our platform.

This Privacy Policy applies to all individuals who access, register on, or use the l3333 platform, including players located across Bangladesh — in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions. It governs all personal data collected through the l3333 website, mobile interface, customer support channels, and any other interaction you have with our services.

By creating an account or using the l3333 platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should discontinue use of the l3333 platform and may close your account by contacting our support team.

Personal Data We Collect

l3333 collects personal data from you in a number of ways — directly when you register or use our services, automatically when you interact with our platform, and occasionally from third-party sources as part of our verification procedures. The categories of personal data we collect are set out below.

2.1 Registration & Identity Data

When you create an l3333 account, we collect the information you provide in the registration form, including:

• Full legal name as it appears on your government-issued identity documents
• Date of birth (used to verify that you are aged 21 or above)
• Residential address, including city, district, and postal code
• Mobile phone number registered in Bangladesh
• Email address
• Username and hashed password credentials

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations, we may collect copies of the following documents when processing withdrawals or when your account activity triggers a verification review:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Valid passport (biographical data page)
• Proof of address documents (utility bill, bank statement, or similar official document dated within three months)
• Evidence of payment method ownership (screenshot or confirmation of your bKash, Nagad, Rocket, or Upay account registered in your name)

2.3 Financial Transaction Data

When you make deposits or withdrawals, l3333 records the following financial data associated with each transaction:

• Transaction amount in BDT (Bangladeshi Taka)
• Payment method used (bKash, Nagad, Rocket, Upay, or other approved methods)
• Transaction reference number and timestamp
• Mobile banking account number or wallet identifier associated with the transaction
• Account balance at the time of each transaction

2.4 Gaming Activity Data

l3333 maintains records of all gaming activity conducted through your account, including:

• Bets placed, including market, stake amount, odds, and settlement outcome
• Casino game sessions, including game title, provider, stake, result, and session duration
• Bonus claims, wagering requirement progress, and promotional participation history
• Responsible gaming settings applied to your account (deposit limits, session limits, cooling-off periods)

2.5 Technical & Usage Data

When you access the l3333 platform, our servers and analytics systems automatically record certain technical information, including:

• IP address and approximate geographic location derived from IP data
• Device type, operating system, and browser version
• Pages visited, links clicked, time spent on each page, and navigation path
• Session start and end timestamps
• Error logs and crash reports where applicable

2.6 Customer Support Communications

When you contact l3333's customer support team via email or live chat, we retain records of those communications, including the content of messages, timestamps, and any attachments or screenshots you provide. These records are used to resolve your query, to train support staff, and to maintain a history of interactions for quality assurance purposes.

How We Use Your Personal Data

l3333 uses the personal data it collects for the following purposes. We collect and process data only to the extent necessary for each stated purpose.

Legal Basis for Processing

l3333 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing that is necessary to perform the contract between you and l3333 — including creating your account, processing bets, and executing financial transactions — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable legal obligations — including KYC identity verification, anti-money-laundering (AML) screening, and the retention of financial records — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, abuse detection, improving our services, and maintaining the integrity of l3333's gaming environment is based on our legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing of your personal data for direct marketing purposes — including promotional emails and SMS notifications about bonuses, tournaments, and new games — is carried out on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

Cookies & Tracking Technologies

l3333 uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, and gather analytics data about how players interact with our services. A cookie is a small text file placed on your device by our web server when you visit the l3333 platform.

5.1 Types of Cookies Used

• Essential Cookies: These cookies are strictly necessary for the l3333 platform to function. They enable session management, keep you logged in during an active gaming session, and maintain your security settings. Essential cookies cannot be disabled without impairing core platform functionality.
• Analytics Cookies: These cookies collect anonymised or pseudonymised data about how players navigate the l3333 platform — including which pages are visited most frequently, session durations, and navigation paths. This data is used to improve platform design and user experience. Analytics data is not linked to your personally identifiable information.
• Preference Cookies: These cookies remember your platform preferences, such as language settings and display options, so that you do not need to reconfigure them each time you visit.
• Security Cookies: These cookies support fraud detection and account security processes, including the identification of unusual login patterns or suspicious transaction activity.

5.2 Managing Cookies

You may configure your web browser to refuse or delete cookies. However, please note that disabling essential cookies will impair your ability to log in, place bets, or use core l3333 functionality. Browser-level cookie management instructions are available through your browser's help documentation. l3333 does not respond to "Do Not Track" browser signals as there is currently no universally accepted standard for such signals.

Sharing Your Personal Data

l3333 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

6.1 Service Providers

l3333 engages carefully selected third-party service providers who process personal data on our behalf as data processors. These providers are contractually obligated to process data only in accordance with our instructions and to implement appropriate technical and organisational security measures. Categories of service providers include:

• Identity verification and KYC service providers
• Payment processing partners including bKash, Nagad, Rocket, and Upay
• Casino game software providers including Pragmatic Play, Evolution Gaming, Spribe, Microgaming, NetEnt, and Ezugi (game-level data required to run game sessions)
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Fraud detection and cybersecurity service providers
• Analytics platform providers (receiving anonymised or aggregated data only)

6.2 Legal & Regulatory Disclosures

l3333 may disclose personal data to competent authorities, regulatory bodies, law enforcement agencies, or courts where such disclosure is required by applicable law, a valid legal order, or a regulatory investigation. Where legally permitted to do so, l3333 will notify you of any such disclosure.

6.3 Business Transfers

In the event that l3333 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, l3333 will take reasonable steps to ensure that the acquiring entity provides privacy protections equivalent to those set out in this Privacy Policy, and you will be notified of any material change in data controller identity.

Data Retention

l3333 retains your personal data for as long as your account is active and for such additional period as is required to fulfil the purposes described in this Privacy Policy or to comply with applicable legal and regulatory retention obligations. The following retention periods apply as a general guideline:

• Account and identity data: Retained for the duration of your account plus a minimum of five years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, as required by applicable financial regulations.
• KYC verification documents: Retained for a minimum of five years following the completion of the verification process or account closure, whichever is later.
• Gaming activity logs: Retained for a minimum of three years from the date of each activity record, used for dispute resolution, responsible gaming monitoring, and regulatory audit purposes.
• Customer support communications: Retained for a minimum of two years from the date of the final communication in each support interaction, used for quality assurance and dispute resolution.
• Marketing consent records: Retained from the date consent is given until withdrawal of consent plus one additional year for compliance audit purposes.
• Technical and usage data (analytics): Retained in anonymised or aggregated form only, with no defined maximum retention period. Personally identifiable technical data (e.g., IP address logs) is retained for a maximum of 12 months.

Following expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data no longer constitutes personal data and may be retained indefinitely for analytical and statistical purposes.

Data Security

l3333 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the l3333 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that your account credentials, financial data, and personal information cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive personal data stored on l3333 servers — including passwords (which are stored as salted cryptographic hashes and never in plain text), KYC documents, and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within l3333's internal systems is restricted on a need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific role. All internal data access is logged and subject to periodic audit.
• Intrusion Detection & Monitoring: l3333 operates 24/7 network monitoring, intrusion detection systems, and automated anomaly alerting to identify and respond to potential security threats promptly.
• Two-Factor Authentication (2FA): l3333 offers optional 2FA via SMS OTP for player accounts. Players are strongly encouraged to enable this feature to provide an additional layer of protection against unauthorised account access.
• Incident Response: In the event of a data security incident that poses a risk to your rights and freedoms, l3333 will notify affected players promptly and will take all reasonable steps to contain, investigate, and remediate the incident.

Your Privacy Rights

As an l3333 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details provided in Section 13. l3333 will respond to all verified requests within 30 days of receipt. We may ask you to verify your identity before processing a data rights request to protect against fraudulent or unauthorised access to your information.

• Right of Access: You have the right to request a copy of the personal data that l3333 holds about you, along with information about how that data is being used.
• Right to Rectification: You have the right to request that any inaccurate or incomplete personal data held by l3333 is corrected or updated. You may update certain account details directly from your account settings panel.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent and there is no other legal basis for processing. Please note that erasure requests may not be fulfilled in full where l3333 is required to retain data to comply with legal or regulatory obligations (for example, AML record-keeping requirements).
• Right to Restrict Processing: You have the right to request that l3333 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
• Right to Object: You have the right to object to the processing of your personal data where that processing is carried out on the basis of legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that l3333 transmit that data to another controller where technically feasible.
• Right to Withdraw Consent: Where l3333 processes your personal data on the basis of consent (including consent to receive marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Children & Minors

l3333 employs age verification as a mandatory component of our KYC process. All players are required to confirm their date of birth at registration and to provide documentary evidence of age upon request. Parents or guardians who believe that their child may have registered an l3333 account are encouraged to contact our support team immediately at [email protected] so that the matter can be investigated and resolved without delay.

Third-Party Links

The l3333 platform may contain references to or integrations with third-party services, such as payment providers including bKash, Nagad, and Rocket, and game software provided by studios including Pragmatic Play, Evolution Gaming, and Spribe. When you interact with third-party services, you are subject to the privacy policies of those respective third parties, which l3333 does not control and is not responsible for.

l3333 encourages you to review the privacy policies of any third-party services you interact with when using our platform. l3333's Privacy Policy applies solely to the data collected and processed directly by the l3333 platform and its controlled systems.

Changes to This Privacy Policy

l3333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made to this Privacy Policy, l3333 will notify registered players via email to their registered address and/or by displaying a prominent notice on the platform. The revised Privacy Policy will display the updated effective date at the top of this page.

Your continued use of the l3333 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Privacy Policy, you must cease using l3333 and may close your account by contacting our support team. We encourage you to review this page periodically to stay informed about how l3333 protects your personal data.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data l3333 holds about you, please reach out to our support team using the contact details below. All support channels are available 24 hours a day, seven days a week, on Bangladesh Standard Time (BST, UTC+6).

l3333 is committed to handling all data-related queries fairly, transparently, and with respect for your privacy rights. If you believe that your privacy rights have not been adequately addressed, you may also seek recourse through the appropriate regulatory or supervisory authority in your jurisdiction.