en333 Privacy Policy
At en333, protecting the personal data of our players in Bangladesh is a fundamental responsibility, not an afterthought. This Privacy Policy explains exactly what information we collect, why we collect it, how it is stored and secured, and what rights you hold over your own data. We are committed to full transparency in every aspect of how we handle your information.
en333 gives you meaningful control over your personal information. You can request access to your data, ask for corrections, request deletion, or withdraw consent for marketing communications at any time through your account settings or by contacting support.
All data transmitted between your device and en333 is protected by TLS 1.3 SSL encryption. Payment information processed via bKash, Nagad, Rocket, and Upay is handled through secure tokenised gateways and is never stored in plain text on our servers.
en333 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Data shared with third parties is limited strictly to what is necessary to operate the platform and fulfil our legal obligations.
We collect only the minimum personal information required to operate the en333 platform safely and compliantly. Every data point we collect has a documented purpose, a legal basis, and a defined retention period. We do not hold data longer than necessary.
en333 uses cookies and similar technologies only for essential platform functionality, session management, fraud prevention, and optional analytics to improve the platform experience. You can manage non-essential cookie preferences through your browser settings.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a potential data incident, our dedicated support team responds to all privacy-related enquiries within 2–6 hours (Bangladesh Standard Time, UTC+6).
1. Information We Collect
en333 collects personal information through several channels: directly from you during account registration and ongoing platform use, automatically through your interactions with the platform, and from third-party service providers where necessary for verification or payment processing purposes. The categories of personal data we collect are set out below.
Information You Provide Directly:
- Registration data: Full legal name, date of birth, email address, mobile number, and a self-selected username and password at the time of account creation.
- Identity verification (KYC) documents: Government-issued photo ID (National ID Card, Passport, or Driving Licence), proof of address (utility bill or bank statement), and payment method ownership documentation where required.
- Payment information: Mobile banking account numbers (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are not stored; only tokenised references are retained.
- Communications: Content of any messages sent to en333 support via live chat, email, or WhatsApp, including any attachments you choose to submit.
- Responsible gaming self-declarations: Deposit limits, loss limits, time-out preferences, and self-exclusion requests you submit through the platform.
Information Collected Automatically:
- Device and technical data: IP address, browser type and version, operating system, device identifier, screen resolution, and time zone settings.
- Usage data: Pages visited, games played, bets placed, session duration, click-path data, and features accessed within the en333 platform.
- Transaction data: Deposit and withdrawal amounts, timestamps, payment method used, transaction reference numbers, and account balance history.
- Geolocation data: Approximate geographic location derived from your IP address, used to detect access from restricted jurisdictions and to comply with responsible gaming obligations.
- Cookie and tracking data: Session identifiers, preference cookies, and analytics data as described further in the Cookies section of this Policy.
2. How We Use Your Data
en333 processes your personal data for the following specific, documented purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent.
| Purpose | Description |
|---|---|
| Account Management | Creating and maintaining your en333 account, verifying your identity, managing login sessions, and enabling account security features such as 2FA via SMS OTP. |
| Payment Processing | Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, including fraud screening, transaction verification, and currency handling in BDT. |
| Platform Delivery | Providing access to casino games, sports betting markets (cricket BPL, IPL, T20, football, kabaddi), live casino, and other platform features. |
| Legal Compliance | Meeting obligations under applicable AML, KYC, and responsible gaming frameworks, including age verification, identity checks, and transaction monitoring. |
| Responsible Gaming | Monitoring gameplay patterns to identify signs of problem gambling, enforcing deposit and loss limits, processing self-exclusion requests, and sending responsible gaming reminders. |
| Customer Support | Responding to queries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance purposes. |
| Fraud & Security | Detecting and preventing unauthorised access, bonus abuse, multi-accounting, match-fixing activity, money laundering, and other prohibited conduct. |
| Marketing Communications | Sending promotional offers, bonus notifications, BPL season promotions, Eid and Pohela Boishakh specials, and platform updates — only where you have consented or where legitimate interest applies. |
| Platform Improvement | Analysing aggregated usage data to improve site performance, user experience, game selection, and betting market availability for Bangladeshi players. |
You may opt out of marketing communications at any time by updating your communication preferences in your account settings or by contacting support at [email protected]. Opting out of marketing does not affect your ability to use the platform or receive transactional and security notifications.
3. Legal Basis for Processing
en333 processes personal data on the following legal grounds, depending on the specific purpose of the processing activity:
- Contractual Necessity: Processing that is necessary to perform our contractual obligations to you as an account holder, including account creation, payment processing, game access, and withdrawal management. Without this processing, en333 cannot provide the platform to you.
- Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including identity verification (KYC), anti-money laundering (AML) monitoring, age verification, and tax reporting where applicable.
- Legitimate Interests: Processing that is necessary for the legitimate business interests of en333, where those interests are not overridden by your rights and freedoms. This includes fraud detection, security monitoring, platform analytics, and responsible gaming risk assessment.
- Consent: Processing that is based on your freely given, specific, and informed consent. This applies to marketing communications and the use of non-essential cookies. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
4. Data Sharing & Third Parties
en333 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. We share personal data with third parties only in the following limited and controlled circumstances:
- Game Software Providers: To deliver casino games and live dealer experiences, en333 shares a session token and, where required by the provider's platform, a pseudonymised player identifier with our licensed game providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate their own certified and audited platforms and process only the minimum data necessary to run the relevant game session.
- Payment Processors: Transaction data is shared with payment gateway operators for bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely for the purpose of processing deposits and withdrawals. en333 does not store full card numbers; payment tokenisation is applied at the gateway level.
- Identity Verification Services: Where third-party KYC or age verification providers are used to verify submitted identity documents, the relevant documents and personal data are shared with those providers under strict data processing agreements.
- Fraud Prevention and AML Partners: Aggregated or flagged transaction data may be shared with fraud detection services and AML screening databases to identify suspicious activity and meet regulatory obligations.
- Analytics Providers: Anonymised and aggregated usage data may be shared with platform analytics tools to support performance monitoring and improvement. No directly identifiable personal data is shared for analytics purposes.
- Legal and Regulatory Authorities: en333 will disclose personal data to law enforcement agencies, regulators, or courts where required to do so by applicable law, a valid legal order, or to protect the rights, property, or safety of en333, its players, or the public.
All third parties with whom en333 shares personal data are required to handle that data in accordance with applicable data protection obligations and are prohibited from using it for any purpose beyond the specific service they provide to en333.
5. Cookies & Tracking Technologies
en333 uses cookies — small text files placed on your device — and similar tracking technologies to ensure the platform functions correctly, to protect your account, and to understand how players interact with our services. The table below describes the categories of cookies we use.
| Cookie Category | Purpose | Required? |
|---|---|---|
| Essential Cookies | Maintain your login session, remember account preferences, enable platform security checks, and prevent cross-site request forgery (CSRF). Without these cookies, the platform cannot function. | Yes — always active |
| Security Cookies | Detect fraudulent login attempts, flag unusual account access patterns, support two-factor authentication (2FA) flows, and enforce responsible gaming restrictions. | Yes — always active |
| Functional Cookies | Remember your language and display preferences, game lobby layout, and recently played games to personalise your en333 experience. | Optional |
| Analytics Cookies | Collect anonymised data on page visits, session duration, navigation paths, and feature usage to help en333 understand how the platform is used and identify areas for improvement. | Optional |
| Marketing Cookies | Track referral sources and promotional campaign performance to understand which marketing channels are effective. No cross-site tracking profiles are built on individual users. | Optional — consent required |
You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear existing cookies, or receive a notification when a cookie is set. Please note that disabling essential or security cookies will impair your ability to log in and use the en333 platform.
6. Data Retention & Storage
en333 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention guidelines apply:
- Active account data: Retained for the full duration of your account's active status, plus a minimum post-closure retention period of 5 years to meet AML and financial record-keeping obligations.
- KYC and identity documents: Retained for a minimum of 5 years from the date of verification completion, or from the date of account closure, whichever is later, in line with AML best practices.
- Transaction records: Retained for a minimum of 5 years from the date of each transaction to satisfy financial audit and regulatory reporting requirements.
- Customer support communications: Retained for 3 years from the date of the most recent interaction in a support thread, to support dispute resolution and quality assurance.
- Marketing consent records: Retained for as long as your consent remains active, plus 1 year following withdrawal of consent, as evidence of the original consent and its revocation.
- Session and analytics data: Anonymised and aggregated after 90 days; raw session logs are not retained beyond 90 days.
Upon expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised. en333 conducts periodic data audits to ensure that data holdings remain within defined retention limits and that obsolete data is promptly removed.
Storage Location: en333 stores personal data on secured servers. Where data is processed or stored by third-party service providers, en333 ensures that appropriate contractual safeguards are in place to protect your data to an equivalent standard as it would receive under en333's own data protection practices.
7. Your Data Rights
As a user of en333, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the en333 support team at [email protected] with the subject line "Data Rights Request — [Your Username]". We will respond to all verified requests within 30 days.
- Right of Access: You have the right to request a copy of the personal data en333 holds about you, along with information about how it is processed, where it is stored, and with whom it has been shared.
- Right to Rectification: If any personal data en333 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
- Right to Erasure ("Right to be Forgotten"): You may request that en333 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. This right is subject to overriding legal retention obligations.
- Right to Restriction of Processing: You may request that en333 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed, or where you contest the legal basis for processing.
- Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to processing based on legitimate interests, including profiling for responsible gaming risk assessment. en333 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal is effective from the date of receipt by en333 and does not affect prior lawful processing.
8. Data Security Measures
en333 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes the following safeguards:
- TLS 1.3 SSL Encryption: All data in transit between your device and the en333 platform is encrypted using TLS 1.3, the current industry standard for secure web communications. Our SSL certificate status is publicly verifiable via your browser's connection indicator.
- Encrypted Data Storage: Sensitive personal data stored on en333 servers, including password hashes and payment tokens, is encrypted at rest using AES-256 encryption. Plain-text passwords are never stored under any circumstances — all passwords are salted and hashed before storage.
- Two-Factor Authentication (2FA): en333 offers SMS OTP-based two-factor authentication for all player accounts. We strongly encourage all players to enable 2FA from their account security settings to add a critical second layer of protection.
- Access Controls: Access to personal data within en333's operational systems is restricted on a strictly need-to-know basis. Staff access is role-based, logged, and subject to regular audit. No en333 staff member will ever request your password.
- Fraud Monitoring: en333 operates continuous automated monitoring for suspicious login attempts, unusual transaction patterns, and account takeover signals. Suspicious activity triggers automatic account protection measures and alerts.
- Penetration Testing: en333's platform undergoes periodic security testing to identify and remediate vulnerabilities before they can be exploited.
Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, en333 will notify affected users promptly and take all reasonable steps to contain and remediate the incident.
9. Minors & Privacy Protection
en333 is strictly an 18+ platform. We do not knowingly collect personal data from any individual under the age of 18. Age verification is applied at the point of registration and during the KYC process to prevent underage individuals from accessing the platform.
If en333 discovers or is notified that personal data has been collected from a person under the age of 18, the following steps will be taken immediately:
- The relevant account will be suspended and access to all platform features will be blocked.
- All personal data associated with the underage account will be securely deleted from en333 systems, except where retention is required by law to report the access incident.
- Any funds deposited by the underage account holder will be returned via the original payment method following identity and age verification of the account holder or their legal guardian.
- The incident will be reviewed internally and, where required by law, reported to the relevant authorities.
If you are a parent or legal guardian and believe that a minor under your care has accessed or registered an en333 account, please contact us immediately at [email protected] with the subject line "Underage Access Report". We will treat this as a high-priority matter and respond within 2 hours (BST).
en333 also supports the use of parental control software and browser-level content filtering tools to prevent minors from accessing gambling websites. We encourage parents and guardians in Bangladesh to make use of such tools as an additional safeguard.
10. Updates to This Policy
en333 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made — those that significantly affect how we collect, use, or share your personal data — we will notify you via your registered email address and/or a prominently displayed notice on the platform at least 7 days before the changes take effect.
Non-material changes, such as typographical corrections, clarifications that do not alter the substance of any section, or updates required to reflect minor operational adjustments, may be made without prior notice and will take effect upon publication.
The "Effective Date" at the top of this page reflects when the current version was last reviewed and approved. We recommend that you review this Privacy Policy periodically. The most current version is always available at https://en333.app/privacy-policy. Your continued use of en333 after any amendment constitutes your acknowledgement of the updated Policy.
11. Contact & Data Enquiries
For all privacy-related enquiries, data rights requests, or concerns about how en333 handles your personal data, please contact our support team using the details below. All privacy correspondence is treated with strict confidentiality and is handled by staff who are trained in data protection responsibilities.
- Email: [email protected] (plain text — not a clickable link; copy this address manually)
- Subject line format: "Privacy Enquiry — [Your Username]" or "Data Rights Request — [Your Username]"
- Response time: Within 2–6 hours for general support queries; within 30 days for formal data rights requests
- Support hours: 24/7 Live Chat available on the platform; email support operates on Bangladesh Standard Time (BST, UTC+6)
When submitting a privacy enquiry, please include your registered username, a clear description of your request or concern, and any relevant transaction IDs or dates that may help us locate the relevant records quickly. We may ask you to verify your identity before processing your request, in order to protect your account security.
en333 is committed to resolving all privacy concerns promptly and fairly. If you are not satisfied with how en333 has handled your privacy concern after following the process above, you retain the right to seek further recourse through any applicable regulatory or legal channel available in your jurisdiction.
Questions About Your Data? We Are Here to Help.
Our English-language support team handles all privacy and data protection enquiries around the clock. You can also review our FAQ for quick answers, or explore the full en333 platform.