Privacy Policy
At 330k, your personal data is handled with the same care we apply to your gaming experience. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, and the rights you hold over your own data as a registered player on the 330k platform.
330k only collects personal data that is strictly necessary to operate your account, verify your identity, and process your transactions. We do not collect surplus information.
All personal data held by 330k is stored in encrypted form using AES-256 encryption at rest. Data in transit between your browser and our servers is protected by TLS 1.3.
You retain the right to access, correct, export, or delete your personal data at any time. Requests are handled within 14 days of receipt by our dedicated data team.
330k does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your data serves only your account and our legal obligations.
We use cookies solely to maintain your session, remember your preferences, and analyse platform performance. No third-party advertising cookies are placed on 330k.bio without your explicit consent.
You can manage your marketing communication preferences at any time from within your account dashboard. Withdrawing consent for marketing does not affect your ability to play on the platform.
Information We Collect
330k collects personal data through several channels: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and — in limited circumstances — information received from trusted third-party partners for identity verification purposes. Below is a complete account of each category.
Information You Provide Directly
When you create a 330k account, complete KYC verification, contact our support team, or engage with promotional offers, you may provide the following categories of personal data:
- Identity data: full legal name, date of birth, gender (optional), national identity card (NID) number, passport number
- Contact data: mobile phone number, email address, residential address (division, district, upazila)
- Financial data: mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account details for players using Dutch-Bangla Bank or BRAC Bank transfers, transaction history
- Verification documents: scanned copies or photographs of NID, passport, utility bills, and selfie photographs submitted during KYC
- Communications data: records of your conversations with 330k support agents via live chat or email, including timestamps and content
- Preferences data: your stated game preferences, bonus opt-in choices, language settings, and notification preferences
Information Collected Automatically
When you access the 330k platform, certain data is collected automatically by our systems. This data does not directly identify you by name but may constitute personal data under applicable privacy law when combined with other information we hold:
- Device data: device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and device identifiers
- Network data: IP address, internet service provider (ISP), approximate geographic location derived from IP (division-level resolution for Bangladesh), connection type
- Usage data: pages visited, games played, bet amounts, session duration, click paths, search queries entered within the platform, and timestamps of all activity
- Performance data: page load times, error logs, crash reports, and technical diagnostics generated during your sessions
Information from Third Parties
In limited circumstances, 330k receives personal data from third-party sources to fulfil its legal obligations and to protect the platform against fraud:
- Identity verification services: third-party KYC providers may return a verified identity score and flag potential document irregularities
- Payment processors: transaction confirmation data, including masked payment identifiers and status codes, from bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank
- Fraud detection partners: risk scoring data generated from device fingerprinting and behavioural analytics to detect automated or fraudulent account activity
How We Use Your Data
330k processes your personal data only for legitimate, specified purposes. The table below sets out the primary purposes for which your data is used, along with the legal basis that justifies each processing activity.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation and management | Identity data, contact data | Contract performance |
| Age and identity verification (KYC) | Identity data, verification documents | Legal obligation; responsible gaming |
| Processing deposits and withdrawals | Financial data, identity data | Contract performance |
| Fraud prevention and AML screening | Financial data, network data, device data | Legal obligation; legitimate interest |
| Platform security and abuse detection | Usage data, device data, network data | Legitimate interest |
| Customer support | Communications data, identity data | Contract performance |
| Personalised promotions and offers | Preferences data, usage data | Consent (opt-in) |
| Platform analytics and improvement | Usage data, performance data | Legitimate interest |
| Responsible gaming monitoring | Usage data, financial data, communications data | Legal obligation; player protection |
Marketing Communications
330k may send you promotional emails, SMS notifications, or in-platform messages about bonuses, game launches, cricket betting markets (including BPL, IPL, and T20 World Cup), and seasonal promotions (Eid, Pohela Boishakh, Durga Puja). These communications are sent only to players who have opted in during registration or from within their account settings. You may withdraw your consent for marketing at any time without affecting your ability to use the platform — simply update your notification preferences in the account dashboard or contact our support team at [email protected].
Automated Decision-Making
330k uses automated systems for certain decisions, including real-time fraud scoring, responsible gaming risk flagging, and bonus eligibility checks. Where an automated decision has a significant effect on your account — such as a temporary suspension triggered by a fraud alert — you have the right to request human review of that decision. Contact our support team to exercise this right.
Data Sharing & Disclosure
330k does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary to fulfil the stated purpose.
Service Providers and Processors
330k engages carefully vetted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These providers include:
- Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank — to authenticate and complete financial transactions
- KYC and identity verification providers: to cross-check submitted identity documents against authoritative data sources
- Cloud infrastructure providers: to host the 330k platform and store encrypted player data on secure servers
- Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi — receive a pseudonymised player session token to operate games; they do not receive your full identity or financial data
- Customer support software providers: to operate the live chat and ticketing system used by our support team
- Analytics providers: to process aggregated and pseudonymised usage data for platform performance analysis
All service providers are contractually prohibited from using your data for their own purposes and from sharing it with any further parties without 330k's express written authorisation.
Legal and Regulatory Disclosure
330k may disclose your personal data to competent authorities, law enforcement agencies, or financial intelligence units in Bangladesh where required to do so by applicable law, court order, or lawful request. Such disclosures are made narrowly and only to the extent compelled by the applicable legal instrument. Where permitted by law, 330k will notify you of any such disclosure request before complying.
Business Transfers
In the event that 330k undergoes a business restructuring, merger, acquisition, or transfer of substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to how your data is processed, with a minimum of 30 days' advance notice before the transfer takes effect.
Cookies & Tracking Technologies
330k uses cookies and similar tracking technologies (including local storage objects and session tokens) on the 330k.bio platform. This section explains what these technologies are, what types we use, and how you can manage your preferences.
What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device across page loads within a session or across multiple visits, and to store information about your preferences and activity. Cookies themselves do not contain executable code and cannot access other files on your device.
Types of Cookies Used by 330k
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Maintain your login session, store authentication tokens, enable security features | Session / up to 24 hours | No — required for platform to function |
| Functional / Preference | Remember your language settings, game display preferences, and responsible gaming limits you have set | Up to 12 months | Yes — via account settings |
| Analytics | Collect pseudonymised data on page views, session duration, error rates, and feature usage to improve the platform | Up to 13 months | Yes — via cookie preferences |
| Fraud Prevention | Device fingerprinting to detect unusual login patterns, multiple account attempts, and bot activity | Up to 6 months | No — required for security |
Managing Your Cookie Preferences
You can control non-essential cookies through your account settings under "Privacy & Cookie Preferences". Additionally, most modern browsers allow you to block or delete cookies through their built-in settings. Please be aware that disabling functional cookies may affect your experience on the platform — for example, you may need to re-enter your preferences on each visit. Disabling strictly necessary or fraud-prevention cookies may prevent the platform from functioning correctly or may result in your session being flagged as suspicious.
Local Storage and Session Storage
In addition to cookies, 330k uses browser local storage to cache non-sensitive game assets and session state for performance purposes. Local storage data is cleared when you log out or clear your browser data. It is not transmitted to 330k's servers independently of normal platform communications and does not contain personally identifying information beyond an anonymous session identifier.
Data Retention
330k retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods below represent our standard schedule. Where a longer period is required by a specific legal obligation, that obligation takes precedence.
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account and identity data | Duration of account + 7 years | AML compliance and legal dispute resolution |
| KYC verification documents | Duration of account + 5 years | Regulatory record-keeping obligations |
| Transaction records | 7 years from transaction date | Financial record-keeping and tax compliance |
| Support communications | 3 years from last contact | Quality assurance and dispute evidence |
| Usage and analytics data | 13 months (rolling) | Platform performance analysis |
| Marketing preferences | Until withdrawn or account closure | Consent management |
| Self-exclusion records | Permanent (never deleted) | Responsible gaming — re-registration prevention |
Following the expiry of the applicable retention period, 330k will securely delete or irreversibly anonymise your personal data. Anonymised data — from which all identifying information has been permanently removed — may be retained indefinitely for aggregate statistical purposes and does not constitute personal data for the purposes of this policy.
Your Privacy Rights
As a 330k player, you have the following rights over your personal data. These rights may be exercised at any time by contacting the 330k data team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 3 working days and complete it within 14 calendar days, or notify you if an extension is required.
330k will not charge a fee for exercising any of the rights listed above unless a request is manifestly unfounded or repetitive, in which case a reasonable administrative charge may apply. We will notify you in advance if a charge is applicable before proceeding.
Data Security Measures
330k maintains a comprehensive information security programme designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include the following.
All 330k servers operate within isolated, firewalled network environments. Access to production infrastructure is restricted to authorised personnel using multi-factor authentication and is logged comprehensively for audit purposes.
Data at rest is encrypted using AES-256. All data in transit between your device and 330k's servers is protected by TLS 1.3. Passwords are stored as salted hashes using bcrypt — 330k staff cannot read your password in plain text.
330k employs continuous intrusion detection and security event monitoring across all platform components. Anomalous patterns — such as mass login attempts or unusual data access — trigger automatic alerts and are reviewed by our security team within one hour.
Access to personal data is granted to staff on a strict need-to-know basis and reviewed quarterly. All staff with access to personal data are bound by confidentiality obligations and receive regular data protection training.
Data Breach Response
In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, 330k will notify affected players without undue delay — and in any event within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories and approximate number of records affected, the likely consequences, and the measures 330k is taking to address the breach and mitigate its effects. If you suspect your 330k account has been compromised, please contact [email protected] immediately.
Updates to This Policy
330k reviews this Privacy Policy periodically and updates it when required — for example, in response to changes in applicable law, changes to the platform's data processing activities, or feedback from players. The version number and effective date at the top of this page indicate the current revision.
When material changes are made to this Privacy Policy — defined as changes that affect the legal basis for processing, introduce new categories of data collection, or materially alter your rights — 330k will notify registered players via email to their registered address and via a prominent in-platform notification no fewer than 14 days before the changes take effect. Continued use of the 330k platform after the effective date of any revised version constitutes acceptance of the updated policy.
For non-material changes — such as typographical corrections, clarifications that do not alter the substance of the policy, or updated contact details — the policy will be updated without advance notice. The version number will be incremented, and the updated date will be revised accordingly.
It is your responsibility to review this Privacy Policy from time to time. The most current version is always accessible at 330k.bio/privacy-policy. If you have questions about any aspect of this policy or wish to exercise any of the privacy rights described in Section 6, please contact the 330k data team at [email protected] with the subject line "Privacy Policy Enquiry". All enquiries are handled in English and will receive a response within 3 working days.
18+ The 330k platform is strictly for adults aged 18 and above. By using 330k, you confirm that you are of legal age in your jurisdiction to engage in online gambling. If you believe gambling is affecting your wellbeing, please visit our Responsible Gaming page for self-exclusion tools, deposit limits, and support resources.
Have Questions About Your Privacy?
Our support team is available around the clock to address any data or privacy concerns. You can also explore our FAQ for quick answers or head to the 330k Casino to start playing.