dh333 Privacy Policy — How We Protect Your Data
At dh333, your privacy is a core commitment, not an afterthought. This Privacy Policy explains exactly what personal information we collect, why we collect it, how we use and safeguard it, and what rights you hold over your own data as a player on Bangladesh's most trusted betting platform.
Our Core Privacy Commitments
These cards summarise the principles behind dh333's approach to data privacy. They are provided for quick reference only — the full legal text below is the authoritative version of this policy.
Minimal Data Collection
dh333 collects only the personal data that is strictly necessary to operate your account, process transactions, verify your identity, and comply with applicable legal obligations. We do not collect data speculatively or for sale to third parties.
Bank-Grade Encryption
All data transmitted between your device and dh333 is protected by 256-bit SSL/TLS encryption. Stored passwords are hashed using bcrypt. Payment credentials are tokenised and never stored in plain text on our servers.
Your Data Rights
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a data request via our support team and we will respond within 30 days. We respect your right to control information that belongs to you.
No Sale of Personal Data
dh333 does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Data shared with service providers is strictly governed by contractual data-processing agreements that prohibit independent use.
Marketing Opt-Out
If you have consented to receive promotional communications from dh333, you may withdraw that consent at any time via your account notification settings or by contacting our support team. Opt-out requests are processed within 48 hours.
Defined Retention Periods
Personal data is retained only for as long as it is needed to fulfil the purposes for which it was collected, or as required by applicable law. Account data is typically retained for five years after account closure to satisfy anti-money laundering obligations.
Table of Contents
- Introduction and Scope
- Data Controller Identity
- Personal Data We Collect
- How We Use Your Personal Data
- Legal Bases for Processing
- Cookies and Tracking Technologies
- Sharing and Disclosure of Personal Data
- International Data Transfers
- Data Retention
- Security Measures
- Your Rights as a Data Subject
- Children and Minors
- Third-Party Links and Services
- Changes to This Privacy Policy
- Contact and Data Requests
Introduction and Scope
This Privacy Policy ("Policy") describes how dh333 ("dh333", "we", "us", "our") collects, uses, stores, discloses, and protects personal information relating to individuals ("you", "your", "User") who access or use the dh333 website at https://dh333.io and all associated products, features, and services (collectively, the "Platform").
This Policy applies to all personal data processed by dh333 in connection with the operation of the Platform, regardless of how that data is collected — whether via account registration, financial transactions, gameplay activity, customer support interactions, or your use of cookies and similar technologies on the Platform.
This Policy should be read together with dh333's Terms and Conditions and Responsible Gaming Policy, both of which are available on this website. By creating an account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.
Data Controller Identity
For the purposes of applicable data protection law, the data controller responsible for your personal information collected through the dh333 Platform is dh333, reachable at the contact details provided in Section 15 of this Policy.
As data controller, dh333 determines the purposes and means by which your personal data is processed. Where dh333 engages third-party service providers to process data on its behalf, those providers act as data processors and are contractually required to process data only on dh333's documented instructions and in accordance with appropriate security standards.
Personal Data We Collect
3.1 Registration and Account Data
When you create a dh333 account, we collect the following information:
- Full legal name
- Date of birth (to verify you are aged 21 or above)
- Mobile phone number and/or email address
- Username and encrypted password
- Residential address (city and district, e.g., Dhaka, Chittagong, Sylhet, Khulna)
- Preferred language and currency (BDT)
3.2 Identity Verification (KYC) Data
To comply with our Know Your Customer ("KYC") obligations and to prevent fraud and underage gambling, we may request:
- National Identity Card (NID) number and scan
- Passport or driving licence copy
- Selfie or live facial recognition check for identity matching
- Proof of address (utility bill, bank statement dated within 90 days)
- Source of funds documentation for high-value accounts
3.3 Financial Transaction Data
When you make deposits or request withdrawals, we process:
- Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers)
- Bank account or card details (tokenised — full card numbers are never stored)
- Transaction amounts, dates, reference numbers, and statuses
- Deposit and withdrawal history associated with your account
3.4 Gameplay and Betting Activity Data
The Platform automatically records:
- Bets placed, game sessions, wager amounts, and outcomes
- Game preferences, favourite categories, and session duration
- Bonus usage, wagering progress, and promotion participation records
- Cricket, slots, casino, and other game interaction logs
3.5 Technical and Device Data
When you access the Platform, our systems automatically collect:
- IP address and approximate geolocation (country/district level)
- Device type, operating system, browser type, and version
- Screen resolution and device identifiers
- Referring URL, pages visited, and clickstream data
- Session timestamps, login history, and access logs
3.6 Customer Support Data
When you contact our support team via live chat, WhatsApp, or email, we collect:
- The content of your communications
- Your account details referenced in the interaction
- Support ticket history and resolution records
- Any documents or screenshots you share with our agents
How We Use Your Personal Data
dh333 uses the personal data we collect for the following purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, KYC documents |
| Identity verification and age checks (21+) | NID, passport, date of birth, selfie |
| Processing deposits and withdrawals | Financial transaction data, wallet identifiers |
| Delivering and personalising game content | Gameplay data, session history, preferences |
| Fraud detection and prevention | Technical data, transaction patterns, IP address |
| Anti-money laundering compliance | KYC documents, transaction history, source of funds |
| Customer support and dispute resolution | Support communications, account data |
| Responsible gaming monitoring | Gameplay patterns, session duration, deposit frequency |
| Sending service communications (account alerts, security notices) | Contact details, account data |
| Sending promotional communications (with your consent) | Contact details, preferences, gameplay history |
| Platform analytics and performance improvements | Technical data, clickstream, session logs |
| Legal compliance and regulatory reporting | All categories as required by applicable law |
Legal Bases for Processing
dh333 processes your personal data on the following legal bases:
- Contractual necessity: Processing required to create and manage your account, process deposits and withdrawals, and deliver the services you have requested from dh333.
- Legal obligation: Processing required to comply with applicable law, including KYC identity verification, anti-money laundering screening, age verification (21+), and mandatory reporting obligations.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, analytics, and service improvement — where such interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing of personal data for direct marketing communications, non-essential cookies, and any other processing activity for which dh333 has explicitly obtained your consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Cookies and Tracking Technologies
6.1 What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your actions and preferences over a period of time, so you do not have to re-enter them whenever you return to the site or navigate between pages.
6.2 Types of Cookies We Use
- Strictly Necessary Cookies: Essential for the operation of the Platform — enabling login sessions, maintaining account security, and processing financial transactions. These cannot be disabled.
- Functional Cookies: Remember your preferences such as language, display settings, and recently played games to improve your Platform experience.
- Analytics Cookies: Help us understand how players use the Platform, which pages are most visited, and where users encounter difficulties, so we can make improvements. Analytics data is aggregated and anonymised wherever possible.
- Marketing Cookies: Used only with your explicit consent to deliver relevant promotional content and track the effectiveness of dh333 marketing campaigns.
6.3 Managing Cookies
You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, and to receive alerts before a cookie is placed. Please note that disabling certain cookies may affect the functionality of the dh333 Platform — for example, you may not be able to remain logged in across sessions if session cookies are blocked.
Sharing and Disclosure of Personal Data
dh333 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate safeguards:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to facilitate deposits and withdrawals. Each provider processes your data under its own privacy policy.
- Identity verification providers: Third-party KYC and age-verification services engaged to verify your identity documents and confirm you meet the 21+ age requirement.
- Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers to deliver their game content through the Platform.
- Cloud infrastructure and hosting providers: Secure cloud service providers that host the Platform and store data under strict data-processing agreements.
- Fraud and AML screening services: Specialist providers that assist with transaction monitoring, risk scoring, and anti-money laundering compliance.
- Legal and regulatory authorities: Where required by applicable law, court order, or regulatory directive, dh333 may disclose personal data to law enforcement or other competent authorities.
International Data Transfers
dh333 operates primarily to serve players in Bangladesh. However, some of the third-party service providers we engage — including cloud infrastructure, game content providers, and fraud prevention platforms — may process data in jurisdictions outside Bangladesh. Where such transfers occur, dh333 ensures that appropriate safeguards are in place, including:
- Contractual clauses that require the recipient to process data to a standard equivalent to the protections afforded by this Policy
- Transfers only to service providers operating in jurisdictions with recognised adequate data protection standards
- Technical controls limiting the scope of data shared to the minimum required for the relevant service function
By using the dh333 Platform, you acknowledge that your data may be transferred, stored, and processed outside Bangladesh in accordance with the safeguards described above.
Data Retention
dh333 retains personal data only for as long as necessary to fulfil the purposes set out in this Policy, or as required or permitted by applicable law. The following general retention guidelines apply:
| Data Category | Retention Period |
|---|---|
| Account registration and KYC data | Duration of active account + 5 years after closure (AML obligation) |
| Financial transaction records | 5 years from the date of the transaction |
| Gameplay and betting history | 3 years from the date of the session or bet |
| Customer support records | 3 years from the date of the last interaction |
| Marketing consent records | Until consent is withdrawn, plus 1 year for audit purposes |
| Technical/access logs | 90 days for routine logs; 12 months for security incident logs |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.
Security Measures
dh333 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, and destruction. These include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
- bcrypt password hashing — your password is never stored in plain text
- Payment tokenisation — card and wallet credentials are replaced with secure tokens; raw payment details are never written to our databases
- Role-based access controls — internal staff access to personal data is restricted to those with a documented, job-specific need
- Two-factor authentication available for all user accounts to add an additional layer of login security
- Regular penetration testing and vulnerability assessments conducted by independent security specialists
- Automated fraud and anomaly detection monitoring transaction patterns and login activity in real time
- Secure, access-controlled data infrastructure with encrypted backups stored in geographically separated facilities
Your Rights as a Data Subject
Subject to applicable law, you have the following rights with respect to your personal data held by dh333. To exercise any of these rights, please contact our support team using the details in Section 15. We will respond to all valid requests within 30 days of receipt.
- Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is used and with whom it has been shared.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations that may require us to keep certain records.
- Right to Restrict Processing: You may request that dh333 limit the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
- Right to Data Portability: You may request that personal data you have provided to dh333 be delivered to you in a structured, commonly used, machine-readable format.
- Right to Object: You may object to the processing of your personal data where that processing is based on legitimate interests or is used for direct marketing purposes. Objections to marketing will be actioned immediately.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
Children and Minors
The dh333 Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Account registration requires confirmation of age, and identity verification checks are applied to detect and prevent underage access.
If dh333 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and any funds held in the account will be handled in accordance with our Terms and Conditions and applicable law.
If you are a parent or guardian and believe that a minor in your care has registered an account on the dh333 Platform, please contact our support team immediately at [email protected] so that we can take prompt remedial action.
Third-Party Links and Services
The dh333 Platform may contain references to third-party services, payment providers, or game content studios. These third parties operate independently and maintain their own privacy policies. dh333 is not responsible for the data practices of any third-party service, and we encourage you to review the privacy policies of any third-party providers you interact with in connection with your use of the Platform.
Specifically, when you complete a payment via bKash, Nagad, Rocket, Upay, or any banking partner, your transaction data is handled in part by that payment provider under its own terms and privacy policy. dh333 receives only the data necessary to credit or debit your dh333 account balance.
Changes to This Privacy Policy
dh333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify registered users by email, in-platform notification, or by posting a prominent notice on the Platform at least 14 days before the changes take effect.
The "Last Updated" date at the top of this Policy will always reflect when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how dh333 protects your personal data. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.
Contact and Data Requests
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or want to report a potential privacy concern, please contact dh333's support team through any of the following channels. All privacy-related enquiries are handled with strict confidentiality.
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/7 via the in-platform chat widget — mention "Privacy Request" when initiating the conversation
- WhatsApp: Available 24/7 — contact details provided after login
- Response Time: We aim to respond to all privacy-related requests within 5 business days, and to complete data subject rights requests within 30 calendar days of identity verification
Questions About Your Privacy?
Our support team is available around the clock to address any data privacy concerns , answer your questions, and help you exercise your data rights. You can also explore our other policy pages for a complete picture of how dh333 operates.