xk333 Privacy Policy

1 Who We Are

xk333 ("xk333", "we", "us", "our") operates the online betting and casino platform accessible at https://xk333.io (the "Platform"). xk333 is the data controller responsible for the personal information collected from players who register and use the Platform.

This Privacy Policy applies to all personal data processed in connection with the Platform, including data collected during registration, during the use of betting and casino services, during financial transactions, and through any communications you have with our support team. It applies to all players based in Bangladesh and any other jurisdiction from which the Platform is lawfully accessed.

For all privacy-related enquiries, players may contact xk333 at: [email protected] (plain text — not a clickable link).

2 Personal Data We Collect

xk333 collects the following categories of personal data from players. The specific data collected in each category depends on the services you use and the features you interact with on the Platform.

3 How We Collect Your Data

xk333 collects personal data through the following channels:

• Direct interactions: When you complete the registration form, update your account profile, submit identity documents for KYC verification, make a deposit or withdrawal, contact customer support, or respond to surveys or promotions.
• Automated technologies: As you navigate and use the Platform, we automatically collect Technical Data via cookies, web server logs, pixel tags, and similar tracking technologies. This data helps us maintain platform security and improve the user experience.
• Payment providers: When you transact via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank, these providers share transaction confirmation data with xk333 for the purpose of crediting or debiting your xk333 account balance.
• Identity verification partners: xk333 may use third-party KYC service providers to verify identity documents. These providers return a verification status and risk score to xk333; they do not store your documents on our behalf beyond what is required for regulatory compliance.
• Fraud prevention services: xk333 works with fraud detection partners that may provide risk scores based on device fingerprinting, IP reputation, and behavioural analysis to protect both you and the platform from fraudulent activity.

4 How We Use Your Personal Data

xk333 uses the personal data we hold about you for the following purposes:

• Account creation and management: To register your account, authenticate your identity at login, maintain your account profile, and communicate important account notifications to you.
• Identity verification (KYC): To verify your identity, age, and address in compliance with anti-money laundering (AML) obligations and to ensure all players meet the minimum age requirement of 18 years (21+ recommended).
• Payment processing: To process deposits and withdrawals via your chosen payment method, to detect and prevent payment fraud, and to maintain accurate financial records for each account.
• Providing betting and casino services: To enable you to place bets, play casino games, track your gaming history, calculate and award winnings, and apply promotional bonuses to your account.
• Responsible gaming: To monitor gaming behaviour patterns that may indicate problem gambling, to enforce self-exclusion requests, deposit limits, and cooling-off periods, and to proactively reach out to players who may need support.
• Customer support: To respond to your queries, resolve disputes, investigate complaints, and improve our support processes based on interaction histories.
• Platform security and fraud prevention: To detect and investigate suspicious activity, prevent account takeovers, identify collusion or bonus abuse, and protect the integrity of the Platform for all players.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and event information relevant to your interests — only where you have explicitly opted in to receive such communications. You may withdraw consent at any time via Account Settings.
• Platform analytics and improvement: To analyse aggregated usage data, understand how players interact with the Platform, and inform decisions about new features, game offerings, and user experience improvements.
• Legal and regulatory compliance: To fulfil our obligations under applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required by financial compliance obligations.

5 Legal Basis for Processing

xk333 processes your personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual necessity: Processing required to fulfil the contract we have with you as a registered player — including account management, payment processing, and provision of betting and casino services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for xk333's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and product improvement — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for which you have given your explicit, freely given, informed, and unambiguous consent — including the receipt of personalised marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

xk333 does not sell or rent your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks receive the minimum transaction data necessary to execute deposits and withdrawals. These partners operate under their own privacy policies and regulatory obligations.
• Identity verification providers: Third-party KYC and AML compliance vendors receive identity document images and personal details solely for the purpose of completing required verification checks.
• Game software providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier and game session data necessary to deliver and log game outcomes. These providers do not receive your full name, financial data, or contact details.
• Fraud prevention services: Risk assessment vendors receive Technical Data (IP address, device fingerprint, session metadata) to generate fraud risk scores. No identity or financial data is shared beyond what is operationally required.
• Legal and regulatory authorities: xk333 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, a valid court order, or a lawful regulatory request. xk333 will notify affected players of such disclosures where legally permitted to do so.
• Business transfers: In the event that xk333 undergoes a merger, acquisition, or sale of assets, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and any material change to the data controller's identity.

7 Cookies and Tracking Technologies

xk333 uses cookies and similar tracking technologies on the Platform to deliver core functionality, maintain session security, analyse usage patterns, and support responsible gaming monitoring. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. Essential cookies cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Remember your preferences such as language selection, display settings, and last-visited game categories to provide a more personalised experience on subsequent visits.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the Platform — including which pages are visited most frequently, where users drop off, and how long sessions last. This data is used solely to improve the Platform's design and performance.
• Responsible gaming cookies: Track session duration and activity frequency to support the delivery of session time reminders and to identify patterns that may warrant a responsible gaming intervention.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling essential cookies will prevent certain Platform features from working correctly. xk333 does not use third-party advertising cookies or behavioural advertising tracking technologies.

8 Data Retention

xk333 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulation. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

9 Data Security

xk333 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or app and the xk333 servers.
• Encryption at rest for all stored personal and financial data using industry-standard AES-256 encryption.
• Access controls: Strict role-based access policies ensure that xk333 staff can only access the personal data categories necessary for their specific job function. Access to sensitive data requires multi-factor authentication.
• Segregated player funds: Player account balances are held in accounts that are kept separate from xk333 operational funds, providing an additional layer of financial protection.
• Regular security audits: The Platform undergoes periodic penetration testing and vulnerability assessments conducted by independent security professionals.
• Incident response: xk333 maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay and take all practicable steps to contain and remediate the breach.

10 Your Data Rights

As a data subject, you have the following rights with respect to the personal data xk333 holds about you. To exercise any of these rights, contact xk333 at [email protected] with the subject line "Data Rights Request".

• Right of access: You may request a copy of all personal data xk333 holds about you, along with information about how it is processed. xk333 will respond to access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Many details can be updated directly via your account profile settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis exists for continued processing. Note that certain data must be retained for regulatory and legal compliance purposes and cannot be deleted on request.
• Right to restriction: You may request that xk333 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request that xk333 provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another controller.
• Right to object: You have the right to object to processing based on legitimate interests at any time. You may also withdraw consent for marketing communications at any time via Account Settings or by contacting support.
• Right not to be subject to automated decision-making: Where xk333 makes decisions that significantly affect you using solely automated processes (such as automated fraud risk assessment), you have the right to request human review of that decision.

xk333 will acknowledge all data rights requests within five (5) business days and complete them within thirty (30) days, subject to identity verification and any applicable legal restrictions on the exercise of specific rights.

11 Children's Privacy

The xk333 Platform is strictly intended for adults. xk333 does not knowingly collect personal data from any individual under the age of 18. The Platform employs age verification measures at registration to prevent underage access.

If xk333 discovers or is informed that personal data has been collected from a person under 18 years of age, we will immediately suspend the relevant account, delete all associated personal data, and return any deposited funds to the payment method used, where technically possible.

Parents or guardians who believe that a minor has accessed the Platform and provided personal data should contact xk333 immediately at [email protected]. xk333 also strongly recommends that households with minors install appropriate parental control software on shared devices to prevent access to gambling platforms.

12 Updates to This Privacy Policy

xk333 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, business practices, or the services offered on the Platform. The date of the most recent revision is displayed at the top of this document.

When material changes are made to this Privacy Policy — particularly changes that affect how your personal data is used or shared — xk333 will notify registered players by email to the address on record and/or by displaying a prominent notice on the Platform prior to the changes taking effect. We encourage you to review this page periodically to stay informed of how xk333 protects your data.

Your continued use of the xk333 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the Platform and contact [email protected] to discuss account closure.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data xk333 holds about you, please contact our data team using the details below. All privacy enquiries are handled confidentially and we aim to respond within five (5) business days, Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request"
• Subject line for privacy concerns: "Privacy Enquiry"
• Response target: Within 5 business days for acknowledgement; within 30 days for full resolution
• Support hours: 24 hours a day, 7 days a week

For responsible gaming related matters — including self-exclusion requests, deposit limit adjustments, or gambling support referrals — please use the subject line "Responsible Gaming Request" for priority handling. Additional information is available on our Responsible Gaming page.