td333 Privacy Policy — How We Handle Your Personal Data

01 Introduction

td333 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all users, including Pakistani players from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and across Pakistan. This Privacy Policy ("Policy") describes how td333 collects, uses, discloses, transfers, and stores personal data in connection with your use of the td333 website and all associated services.

This Policy should be read alongside td333's Terms & Conditions and Responsible Gaming Policy. Capitalised terms not defined in this Policy carry the meanings given to them in td333's Terms & Conditions.

td333 takes data privacy seriously. We do not sell your personal data to third parties for their independent marketing purposes. We collect only what is necessary to operate the Platform, comply with legal obligations, and provide you with a safe, functional betting and casino experience.

02 Data Controller

For the purposes of this Privacy Policy, td333 is the data controller — the entity that determines the purposes and means of processing your personal data. If you have any questions about how td333 handles your data, or wish to exercise any of your data rights, you may contact us at:

td333 will endeavour to respond to all data-related enquiries within a reasonable timeframe, generally within thirty (30) calendar days of receipt.

03 Personal Data We Collect

td333 collects personal data through several channels: directly from you when you register and use the Platform, automatically through your use of the Platform, and from third-party service providers such as payment processors and identity verification services.

td333 does not intentionally collect sensitive personal data beyond what is required for identity verification (CNIC) and responsible gaming compliance purposes.

04 How We Use Your Personal Data

td333 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your td333 account, including processing your login credentials and keeping your account details current;
• Identity Verification (KYC): To verify your identity and age (18+) in compliance with td333's regulatory obligations, preventing underage gambling and fraudulent account activity;
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, Easypaisa, and Pakistani bank transfers, and to verify that payment methods are registered in your name;
• Platform Operation: To operate, maintain, and improve the td333 betting and casino platform, including resolving disputes regarding bets and game outcomes;
• Responsible Gaming: To monitor gaming activity for signs of problem gambling behaviour, apply deposit limits and self-exclusion requests, and fulfil responsible gaming obligations;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the Platform;
• Legal Compliance: To comply with applicable laws, regulations, and lawful requests from competent authorities;
• Customer Support: To respond to your enquiries, resolve complaints, and provide assistance with your td333 account;
• Communications: To send you transactional messages related to your account activity — deposit confirmations, withdrawal notifications, security alerts, and promotional communications where you have not opted out.

td333 does not use your personal data to make automated decisions that have legal or similarly significant effects on you without human review.

05 Legal Basis for Processing

td333 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and td333 — account registration, payment processing, game operation, and withdrawal processing;
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC/AML requirements and responsible gaming regulations;
• Legitimate Interests: Processing carried out for td333's legitimate business interests, including fraud prevention, platform security, and service improvement — where those interests are not overridden by your data protection rights;
• Consent: Where td333 relies on your consent as the legal basis for processing — for example, for non-essential cookies or optional marketing communications — you have the right to withdraw that consent at any time.

06 Third-Party Data Sharing

6.1 Service Providers. td333 shares personal data with carefully selected third-party service providers who assist in operating the Platform. These providers are permitted to use your data only for the specific purpose for which it was shared, subject to appropriate data protection obligations. Categories of third-party service providers include:

• Payment processors — JazzCash, Easypaisa, and Pakistani banking partners (HBL, UBL, Meezan Bank, Bank Alfalah);
• KYC and identity verification service providers;
• IT infrastructure, hosting, and security service providers;
• Customer support platform providers;
• Game software providers whose titles are featured in the td333 casino lobby.

6.2 Legal Disclosures. td333 may disclose your personal data to competent authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or other binding legal process.

6.3 No Data Sales. td333 does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. This is a firm commitment and not subject to change without explicit notice and, where required, your consent.

07 Cookies & Tracking Technologies

td333 uses cookies and similar tracking technologies on the Platform to enable core functionality, maintain your logged-in session, and collect analytics data that helps us improve the Platform experience for Pakistani players.

7.1 Essential Cookies. These cookies are strictly necessary for the Platform to function. They manage your login session, maintain your cart/stake selections, and ensure the Platform operates securely. Essential cookies cannot be disabled without preventing the Platform from working correctly.

7.2 Analytics Cookies. td333 uses analytics tools to understand how users navigate the Platform — which pages are visited most often, where users encounter difficulties, and how the mobile experience performs. Analytics data is aggregated and does not identify individual users by name.

7.3 Managing Cookies. You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Note that blocking essential cookies will prevent you from logging in to your td333 account.

08 Data Retention

td333 retains your personal data for as long as your account remains active and for a period thereafter as required to comply with legal obligations, resolve disputes, and enforce td333's agreements. The general retention periods applicable to key data categories are as follows:

• Account and Identity Data: Retained for the duration of account activity, plus a minimum of five (5) years following account closure, in line with standard AML record-keeping requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• Gaming Activity Records: Retained for a minimum of three (3) years from the date of each activity record;
• Customer Support Communications: Retained for two (2) years from the date of the most recent interaction in a support thread;
• Technical / Log Data: Generally retained for six (6) to twelve (12) months.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

09 Data Security

td333 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Security measures deployed by td333 include:

• Encryption of data in transit using TLS (Transport Layer Security);
• Encryption of sensitive data at rest, including financial and identity data;
• Access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Two-factor authentication available to all td333 account holders;
• Automated fraud detection and account anomaly monitoring.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. td333 will notify affected users and relevant authorities in the event of a data breach, in accordance with applicable legal requirements.

You are responsible for maintaining the security of your td333 account credentials. Do not share your password with anyone. If you suspect unauthorised access to your account, contact td333 support immediately at [email protected].

10 Your Data Rights

As a td333 user, you hold the following rights with respect to your personal data. To exercise any of these rights, contact td333 at [email protected] with the subject line "Data Rights Request."

• Right of Access: You have the right to request a copy of the personal data td333 holds about you;
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. Some account details (such as date of birth after KYC verification) cannot be changed unilaterally and require td333 support assistance;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to td333's legal retention obligations — data required for AML compliance cannot be deleted on request;
• Right to Restrict Processing: You may request that td333 restrict processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests;
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, machine-readable format;
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time, with no exceptions. Objections to other processing based on legitimate interests will be assessed on a case-by-case basis;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

td333 will respond to all data rights requests within thirty (30) calendar days. Where a request is complex or numerous, td333 may extend this period by a further two months, notifying you of the extension and the reason.

11 Children's Privacy

The td333 platform is strictly for persons aged 18 years and above. td333 does not knowingly collect personal data from children under the age of 18. If td333 becomes aware that a person under 18 has provided personal data or created a td333 account, that account will be immediately closed, all associated data will be deleted, and any deposited funds will be returned to the verified source payment account.

If you are a parent or guardian and believe your child under 18 has registered with td333, please contact us immediately at [email protected].

12 Updates to This Privacy Policy

td333 reserves the right to update this Privacy Policy at any time to reflect changes in Platform features, applicable law, or data processing practices. When material changes are made, td333 will notify registered users by displaying a notice on the Platform or sending a notification to the registered email address on file. The "Last Updated" date at the top of this Policy will be revised accordingly.

Your continued use of the td333 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept a revised Privacy Policy, you must cease using the Platform and contact td333 to request account closure.

13 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or td333's data processing practices, please contact the td333 Data Privacy team:

td333 is committed to handling all privacy enquiries with care and within the timeframes stated in this Policy. If you are not satisfied with td333's response to your privacy concern, you may have the right to raise a complaint with a relevant data protection authority in your jurisdiction.