ex333 Privacy Policy
At ex333, your personal data is treated with the same care we apply to every aspect of the platform. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, and the controls you hold over your own data as a registered player.
Your Privacy at ex333
This Privacy Policy ("Policy") describes how ex333 ("we", "us", "our") collects, stores, processes and shares personal information in connection with your use of the ex333 platform at ex333.io, including all associated account, betting and support services. This Policy applies to all registered players, prospective players who visit the Platform without registering, and individuals who contact ex333 through any support channel.
By registering an account with ex333 or continuing to use the Platform after this Policy has been updated, you acknowledge that you have read and understood how your personal data will be handled. If you do not agree with any part of this Policy, you should discontinue your use of the Platform and may request account closure by contacting our support team.
This Policy should be read together with the Terms & Conditions and the Responsible Gaming Policy, both of which contain additional clauses relevant to the way ex333 manages your account data.
Bangladesh players: ex333 processes personal data in accordance with international data protection best practices. We do not sell, rent or trade your personal information to any third party for their own marketing purposes.
Table of Contents
- Information We Collect
- How We Use Your Information
- Legal Basis for Processing
- Data Sharing and Disclosure
- Cookies and Tracking Technologies
- Data Retention
- Your Rights and Controls
- Data Security
- Children and Minors
- Third-Party Services
- Changes to This Policy
- Contact and Complaints
Six Privacy Principles That Guide ex333
A plain-English summary of the core principles behind how ex333 handles your personal data.
Data Minimisation
ex333 collects only the personal data that is strictly necessary to operate your account, verify your identity, process payments and comply with our responsible gaming obligations. We do not collect data speculatively or beyond what is required for these defined purposes.
Security First
All data transmitted between your device and the ex333 Platform is encrypted using 256-bit SSL technology. Account passwords are stored as salted hashes and are never stored in plain text. Access to player data within ex333 is restricted to authorised personnel only, on a strict need-to-know basis.
No Data Sales
ex333 does not sell, rent, auction or otherwise transfer your personal information to third parties for their own independent marketing or commercial purposes. Data shared with third parties is limited to service providers operating strictly under contractual obligations to ex333.
Player Control
You retain meaningful rights over your personal data at all times, including the right to access a copy of your data, correct inaccurate records, request deletion where applicable, and withdraw consent for optional processing activities such as marketing communications.
Full Transparency
ex333 maintains clear records of what data is held, for how long, and on what legal basis. We communicate material changes to this Policy in advance and provide players with adequate time to review updated terms before those changes take effect on their account.
Purpose Limitation
Data collected for one defined purpose — such as identity verification — will not be repurposed for unrelated uses without a fresh legal basis and, where required, your explicit consent. ex333 conducts internal audits to ensure data use remains aligned with stated purposes.
Complete Privacy Policy
Please read each section carefully. This Policy forms part of your agreement with ex333 and governs how your personal data is handled.
1 Information We Collect
1.1 Information You Provide Directly
When you register an account, use the Platform or contact our support team, ex333 may collect the following categories of personal information:
- Identity data: Full legal name, date of birth, nationality, gender
- Contact data: Email address, registered mobile number, residential address
- Verification data: Government-issued ID (National ID card, passport), proof of address documents, selfies for liveness checks
- Financial data: bKash wallet number, Nagad account, Rocket account, Upay details, bank account number, transaction history, deposit and withdrawal records
- Account credentials: Username, encrypted password, security questions
- Communication data: Support chat transcripts, email correspondence, complaint records
1.2 Information Collected Automatically
When you access the ex333 Platform, certain technical data is collected automatically through standard web technologies:
- Device data: Device type, operating system, browser type and version, screen resolution
- Network data: IP address, internet service provider, approximate geolocation derived from IP
- Usage data: Pages visited, games played, bets placed, time spent on each section, click and scroll patterns
- Session data: Login timestamps, session duration, logout events, failed login attempts
- Cookie data: Preferences stored locally, session tokens, analytics identifiers (see Section 5)
1.3 Information from Third Parties
ex333 may receive personal data about you from third-party sources in limited circumstances, including:
- Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) confirming transaction status
- Identity verification service providers performing automated document checks
- Fraud prevention and anti-money-laundering screening databases
- Publicly available sources where we have a legitimate reason to cross-reference information you have provided
2 How We Use Your Information
ex333 uses your personal data for the following purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact, credentials | Contract performance |
| Identity verification (KYC) | Verification documents, financial data | Legal obligation |
| Processing deposits and withdrawals | Financial data, identity data | Contract performance |
| Fraud prevention and security | Device, network, usage, session data | Legitimate interest |
| Responsible gaming monitoring | Usage data, betting history, session data | Legal obligation / legitimate interest |
| Customer support | Communication data, account data | Contract performance |
| Platform improvement and analytics | Usage data, device data, cookie data | Legitimate interest |
| Marketing communications (opt-in only) | Contact data, preferences | Consent |
| Anti-money-laundering compliance | Financial data, identity data, transaction history | Legal obligation |
You may opt out of marketing communications at any time by contacting our support team or adjusting your account preferences. Opting out of marketing will not affect your ability to use the Platform or your account services.
3 Legal Basis for Processing
ex333 processes personal data on one or more of the following legal bases:
- Contract performance: Processing is necessary to provide the services you have requested when registering an account, making a deposit, placing bets or requesting a withdrawal.
- Legal obligation: Processing is required to comply with applicable legal requirements, including know-your-customer (KYC) rules, anti-money-laundering obligations and responsible gaming regulations.
- Legitimate interest: Processing is necessary for ex333's legitimate business interests, such as fraud prevention, platform security, abuse detection, and improving the quality and performance of the Platform — provided those interests are not overridden by your privacy rights.
- Consent: Where processing is not required for contract performance, legal compliance or legitimate interest, ex333 will seek your explicit consent. You may withdraw consent at any time by contacting our support team.
4 Data Sharing and Disclosure
4.1 Service Providers
ex333 shares personal data with third-party service providers who process data on our behalf under binding contractual obligations. These providers are permitted to use your data only for the specific purpose for which it was shared and may not use it for their own commercial ends. Categories of service providers include:
- Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard network operators)
- Identity and document verification providers
- Fraud detection and risk management platforms
- Cloud infrastructure and data hosting providers
- Customer support software vendors
- Analytics and platform performance monitoring tools
4.2 Legal Disclosures
ex333 may disclose your personal data to law enforcement agencies, regulatory bodies, courts or other government authorities where required to do so by applicable law, court order or regulatory direction. We will notify you of such disclosures where we are legally permitted to do so.
4.3 Business Transfers
In the event of a merger, acquisition, restructuring or sale of all or part of ex333's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the data protection terms applicable to the new arrangement before the transfer takes effect.
We do not sell your data. ex333 will never sell, lease or trade your personal information to advertisers, data brokers or any other third party for their own independent commercial use.
5 Cookies and Tracking Technologies
5.1 What Are Cookies
Cookies are small text files placed on your device when you visit a website. ex333 uses cookies and similar tracking technologies (such as local storage and session tokens) to enable essential Platform functionality, remember your preferences, maintain your login session and analyse Platform usage patterns.
5.2 Types of Cookies We Use
- Strictly necessary cookies: Required for the Platform to function. These include session management cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled.
- Functional cookies: Remember your preferences such as language settings, display options and notification choices to improve your experience on return visits.
- Analytics cookies: Collect anonymised data on how visitors interact with the Platform — which pages are visited most, where users spend time, and which features are used. This data helps us improve Platform performance.
- Security cookies: Used to detect and prevent fraudulent activity, identify suspicious login patterns and protect your account from unauthorised access attempts.
5.3 Managing Cookies
You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the ex333 Platform, including your ability to stay logged in or access personalised features. Strictly necessary cookies cannot be disabled as they are essential to Platform operation.
6 Data Retention
ex333 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:
- Account data: Retained for the duration of your active account relationship with ex333, and for a minimum of 5 years following account closure to satisfy legal and compliance obligations.
- Financial transaction records: Retained for a minimum of 5 years from the date of each transaction in accordance with standard record-keeping requirements applicable to financial services.
- KYC verification documents: Retained for a minimum of 5 years following account closure or the completion of the relevant KYC process, whichever is later.
- Support communications: Retained for up to 3 years following resolution of the relevant support interaction, or longer where the matter relates to an ongoing dispute or legal proceeding.
- Marketing preferences and consent records: Retained for as long as you hold an active account and for 2 years following account closure.
- Usage and analytics data: Retained in aggregated, anonymised form indefinitely for Platform improvement purposes; individually identifiable usage data is retained for up to 2 years.
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
7 Your Rights and Controls
As an ex333 account holder, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team using the contact details provided in Section 12 of this Policy.
Right of Access
Request a copy of all personal data ex333 holds about you, including how it is used and with whom it has been shared.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held about you without undue delay.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to overriding legal obligations.
Right to Restriction
Request that ex333 restrict processing of your data while accuracy is contested or a legitimate interest objection is assessed.
Right to Portability
Receive your personal data in a structured, machine-readable format where processing is based on consent or contract performance.
Right to Object
Object to processing carried out on legitimate interest grounds, including profiling for responsible gaming monitoring where not required by law.
ex333 will respond to all data subject requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days and will inform you of the extension and reason within the initial 30-day window.
8 Data Security
ex333 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:
- Encryption in transit: All data exchanged between your browser or device and the ex333 servers is encrypted using TLS 1.2 or higher (256-bit SSL).
- Encryption at rest: Sensitive data fields including financial records and verification documents are encrypted at the database level.
- Password hashing: Account passwords are stored as bcrypt-hashed values with per-record salting. Plain-text passwords are never stored or logged.
- Access controls: Internal access to player data is governed by role-based access control (RBAC). Only authorised personnel with a documented business need may access personal account data.
- Intrusion detection: Network traffic is monitored continuously for anomalous patterns. Automated alerting systems flag unusual access attempts in real time.
- Security audits: ex333 conducts periodic internal security reviews and engages independent third parties to perform vulnerability assessments on Platform infrastructure.
No transmission method is 100% secure. While ex333 takes all reasonable steps to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, please contact our support team immediately and change your password as a precaution.
9 Children and Minors
The ex333 Platform is strictly intended for adults aged 21 years and above. ex333 does not knowingly collect, process or store personal data from individuals under the age of 21. If we become aware that personal data from an underage individual has been collected, we will delete it promptly and close the associated account.
If you believe that a minor has registered an account on the ex333 Platform, please contact our support team immediately with the relevant account details so that we can investigate and take appropriate action.
Parents and guardians are encouraged to use parental control software to restrict access to online gambling platforms on devices used by minors. ex333 supports industry-level age verification initiatives and will continue to strengthen its age verification processes.
10 Third-Party Services
The ex333 Platform integrates with third-party technology providers — including game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi — to deliver game content. When you play a game hosted by a third-party studio within the ex333 environment, that studio's software may process certain gameplay data necessary to operate the game. Game studios are contractually prohibited from using this data for any purpose other than operating and improving the game experience.
ex333 also integrates with payment processors including bKash, Nagad, Rocket and Upay. These processors operate under their own privacy policies and data protection frameworks when handling your financial transaction data. ex333 recommends that you review the privacy policies of your chosen payment provider before completing transactions.
ex333 is not responsible for the privacy practices of third-party websites, platforms or services that are not operated by ex333. Links to third-party services are provided solely for the purpose of enabling Platform functionality; ex333 has no control over the data practices of those third parties.
11 Changes to This Policy
ex333 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection or a new purpose for processing — we will provide reasonable advance notice to active account holders via the email address registered to their account and/or through a prominent notice displayed upon login.
We encourage you to review this Policy periodically. The "Last reviewed" date at the top of this page will always reflect when the most recent version was published. Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy.
Version history: ex333 maintains an internal archive of all previous versions of this Privacy Policy. If you wish to compare the current version with a prior version, please contact our support team and we will provide the relevant historical document.
12 Contact and Complaints
If you have any questions, concerns or requests relating to this Privacy Policy or the way ex333 handles your personal data, please contact our support team:
- Email: support at ex333.io (plain text — not a clickable link)
- Response time: We aim to acknowledge all privacy-related enquiries within 2 business days and provide a full response within 30 days.
- Language: All formal privacy requests should be submitted in English to ensure accurate processing.
If you are not satisfied with ex333's response to a privacy complaint, you have the right to escalate the matter through appropriate channels available in your jurisdiction. ex333 takes all privacy complaints seriously and will make every reasonable effort to resolve disputes fairly and promptly.
For account-related queries that are not privacy-specific — such as deposit issues, withdrawal status, bonus questions or game queries — please visit our FAQ page for quick guidance before contacting support.
Ready to Explore the ex333 Platform?
Now that you understand how ex333 protects your data, explore cricket betting, live casino games and slots — all secured with industry-standard encryption. 21+ only. Please play responsibly.