xk333 Privacy Policy

xk333 ("we", "us", "our", "Platform") is committed to protecting the privacy of all players who use xk333.ws. This Privacy Policy describes the types of personal data we collect, the purposes for which we use it, the conditions under which we may share it, and the rights available to you as a data subject. By registering an account with xk333 or by using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Privacy Policy should be read together with the xk333 Terms & Conditions, which are incorporated herein by reference. Capitalised terms used but not defined in this Privacy Policy have the meanings given to them in the xk333 Terms & Conditions. If you do not agree with any part of this Privacy Policy, you should not use the xk333 platform.

xk333 collects personal data from players through several channels, including account registration, gameplay activity, financial transactions, and automatic technical collection. The categories of personal data we collect are as follows:

Identity and contact data (collected at registration):

• Full name as it appears on your government-issued identification document.
• Date of birth, used to verify that you meet the minimum age requirement of 21 years.
• Mobile phone number registered in Bangladesh, used for account access, withdrawal verification, and support communications.
• Email address, if provided, used for account communications and promotional notifications (where the player has opted in).

Financial and transaction data (collected during platform use):

• bKash, Nagad, Rocket, or Upay mobile wallet account numbers or references used for deposits and withdrawals, retained for transaction reconciliation and fraud prevention purposes.
• Bank account details (where bank transfer is used as a payment method), including account holder name and account number, retained for the same purposes.
• Complete transaction history, including deposit amounts, withdrawal amounts, dates, times, and payment method references, retained for regulatory compliance, dispute resolution, and responsible gaming monitoring.

Technical and usage data (collected automatically):

• IP address and approximate geographic location, used for fraud detection, duplicate account identification, and to verify that the player is accessing the platform from Bangladesh.
• Device type, operating system, browser type and version, and screen resolution, used to optimise the platform experience for your specific device and diagnose technical issues.
• Session activity logs, including game rounds played, bets placed, session start and end times, and navigation patterns within the platform, used for responsible gaming monitoring, fraud detection, and platform improvement.

xk333 uses the personal data it collects only for the purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with those original collection purposes. The specific purposes for which we process your data are:

• Account creation and management: to create, maintain, and manage your xk333 player account, including processing registrations, handling login authentication, and managing account settings.
• Payment processing: to process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and bank transfer; to reconcile transactions; and to investigate and resolve any payment disputes or errors.
• Identity verification and KYC compliance: to verify your identity and age eligibility before processing withdrawals and in response to any regulatory or internal compliance requirement.
• Fraud prevention and security: to detect and prevent fraud, money laundering, multiple-account abuse, bonus abuse, and other prohibited conduct; to monitor for suspicious activity; and to protect the integrity of the platform and the security of all players.
• Responsible gaming: to monitor player activity for indicators of problem gambling; to administer deposit limits, session time limits, and self-exclusion features requested by players; and to provide personalised responsible gaming interventions where appropriate.
• Customer support: to respond to enquiries, investigate complaints, resolve disputes, and provide technical assistance — whether submitted by email, live chat, or any other support channel.
• Platform improvement and analytics: to analyse aggregated, anonymised usage data to understand how players use the platform, identify technical issues, and improve the quality and performance of xk333 games and features.

Where xk333 processes your data for legitimate interest purposes (such as fraud prevention and platform security), we have assessed that our legitimate interests are not overridden by your privacy rights. You may object to processing based on legitimate interests by contacting [email protected], and we will assess your request within 5 business days.

xk333 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing that is necessary to perform the contract between you and xk333 — this includes account creation, gameplay, payment processing, and customer support. Without this data, xk333 cannot provide you with its services.
• Legal obligation: processing that is required to comply with applicable law — this includes KYC and identity verification, anti-money-laundering (AML) record-keeping, and responding to lawful requests from regulatory authorities.
• Legitimate interest: processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics — where our interests in running a safe, fair, and well-functioning platform are balanced against your privacy rights.
• Consent: where you have specifically opted in to receive promotional communications from xk333, including bonus notifications, seasonal promotions (such as Eid, Pohela Boishakh, and BPL season offers), and platform news. You may withdraw consent at any time by contacting [email protected].

xk333 does not sell, rent, or trade your personal data to any third party. We share your personal data only in the limited circumstances described below, and only with parties that are bound by appropriate confidentiality and data protection obligations:

• Certified game providers: xk333 shares the minimum data necessary (typically a player identifier and session token) with certified game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to enable game sessions. These providers are subject to their own data protection obligations and do not receive your financial data.
• Payment processors: xk333 shares payment-related data with bKash, Nagad, Rocket, Upay, and partner banks solely to process your financial transactions. These entities are regulated financial service providers and are subject to their own strict data handling obligations under Bangladesh financial regulations.
• Regulatory and law enforcement authorities: xk333 may be required to disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required by applicable law or by a valid legal order. xk333 will disclose only the minimum data required to comply with such a legal obligation.
• Fraud prevention and security service providers: xk333 may share limited technical data (such as IP address, device fingerprint, and session logs) with specialist fraud detection and cybersecurity service providers engaged to protect the platform and its players. These providers act as data processors under strict contractual data protection terms.

In all cases where xk333 shares data with third-party processors, we require those processors to implement appropriate technical and organisational security measures to protect your personal data, and to process it only in accordance with our documented instructions and this Privacy Policy.

xk333 takes the security of financial data with particular seriousness. All financial transactions are processed in Bangladeshi Taka (BDT) through regulated payment providers. xk333 does not store full payment card numbers, CVV codes, or full mobile banking PINs on its own servers. Payment credentials are transmitted directly to the respective payment processor using encrypted channels and are never stored in readable form on xk333 infrastructure.

The financial data that xk333 does retain includes:

• Masked payment method references (e.g., the last four digits of a bKash number or a partial bank account reference) for the purpose of transaction reconciliation and to verify that withdrawals are returned to the same payment method used for deposits.
• Transaction records showing deposit and withdrawal amounts, dates, times, and status, retained for a minimum of 5 years for regulatory compliance and dispute resolution purposes.
• KYC documentation (government-issued ID, proof of address, payment method ownership documents) uploaded during the verification process, retained for a minimum of 5 years post-account closure to comply with anti-money-laundering regulations.

xk333 uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device that help the platform function correctly, remember your preferences, and analyse usage patterns. xk333 uses the following categories of cookies:

• Essential cookies: strictly necessary for the platform to function. These include session authentication cookies that keep you logged in during your active session, security cookies used to detect and prevent fraudulent requests, and language preference cookies. Essential cookies cannot be disabled without rendering the platform non-functional.
• Analytics cookies: used to collect anonymised data about how players interact with the platform — including which pages are visited, how long sessions last, and which features are used most frequently. This data is processed in aggregate and is not linked to your individual player identity. xk333 uses this data solely to improve platform performance and user experience.
• Preference cookies: used to remember your platform settings, such as your chosen language version and display preferences, so that you do not need to re-enter them each time you visit.

xk333 does not use third-party advertising cookies, remarketing pixels, or social media tracking pixels. You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair core platform functionality and may prevent you from logging in or completing transactions.

xk333 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data (identity, contact, and preference data): retained for the full duration of your active account relationship with xk333, plus a minimum of 5 years post-account closure to comply with anti-money-laundering and KYC retention requirements.
• Transaction and financial records: retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping obligations. Transaction logs associated with a disputed transaction may be retained for longer, until the dispute is fully resolved.
• Technical and usage logs: retained for a rolling period of 12 months from the date of collection, after which they are either deleted or irreversibly anonymised. Anonymised aggregated analytics data may be retained indefinitely as it can no longer be linked to any individual player.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction methods. Players may request early deletion of their personal data (subject to mandatory legal retention obligations) by contacting [email protected].

As a player on xk333, you hold the following privacy rights with respect to your personal data. To exercise any of these rights, contact [email protected]. xk333 will respond to all verified privacy rights requests within 5 business days:

• Right of access: you have the right to request a copy of the personal data that xk333 holds about you, together with information about how that data is being used and with whom it has been shared.
• Right to rectification: if any personal data that xk333 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure (right to be forgotten): you have the right to request that xk333 delete your personal data. This right is subject to applicable legal retention obligations — for example, transaction records and KYC documentation must be retained for a minimum of 5 years post-account closure regardless of an erasure request.
• Right to restriction of processing: you have the right to request that xk333 restrict the processing of your personal data in certain circumstances — for example, while we are investigating a complaint you have raised about the accuracy of your data.
• Right to object: you have the right to object to xk333 processing your personal data on the basis of legitimate interest. If you object, xk333 will assess whether its legitimate interests are overridden by your privacy interests, and will stop processing if they are.

xk333 will not discriminate against any player who exercises their privacy rights. Exercising a privacy right will not result in account suspension, reduced service quality, or any other adverse treatment — unless the exercise of that right (such as a full erasure request) makes it technically impossible for xk333 to continue providing its services to you.

xk333 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: 256-bit SSL/TLS encryption for all data in transit; AES-256 encryption for all sensitive data stored at rest; role-based access controls restricting data access to authorised personnel on a strict need-to-know basis; multi-factor authentication required for all administrative access to systems containing personal data; regular security audits and penetration testing of the platform infrastructure; and real-time monitoring for suspicious access patterns.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, xk333 will notify affected players as promptly as practicable and will take immediate steps to contain the breach, assess its scope, and prevent recurrence. Notification will be provided via the mobile number or email address associated with your xk333 account.

xk333 is strictly an adults-only platform. The minimum age to register and use xk333 is 21 years. xk333 does not knowingly collect, use, or retain personal data from any person under the age of 21. If xk333 discovers that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account with xk333 or provided personal data to xk333, please contact us immediately at [email protected]. We will investigate promptly and take all necessary steps to delete the data and close the account.

xk333 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes to this Privacy Policy, we will notify registered players by displaying a prominent notice on the xk333 platform and, where practicable, by sending a notification to the mobile number associated with your account. The updated Privacy Policy will take effect from the date it is published at xk333.ws/privacy-policy.

The version of the Privacy Policy displayed at xk333.ws/privacy-policy at any given time is the current, operative version. Continued use of the xk333 platform following publication of a revised Privacy Policy constitutes acceptance of the revised policy. If you do not agree with any material change to this Privacy Policy, you must cease using the platform and contact [email protected] if you wish to close your account.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, wish to withdraw consent for promotional communications, or wish to report a concern about how xk333 handles your personal data, please contact the xk333 support team. Our team is available 24 hours a day, 7 days a week, including all Bangladesh public holidays, and will respond to all privacy-related requests within 5 business days.

Email (plain text, not a link): [email protected]