md333 Privacy Policy

1 Introduction

md333 ("the Company", "we", "us", "our") is committed to protecting the privacy of all individuals who interact with the md333 platform. This Privacy Policy sets out in clear terms what personal data we collect from players and visitors, why we collect it, how we use and store it, and the rights available to you in relation to your personal data.

This policy covers the md333 website available at md333.io, our mobile-optimised platform, and any customer communications channels operated by md333, including our support email at [email protected]. This policy does not extend to third-party websites or services that may be linked from our platform — we encourage you to review the privacy policies of any such third-party services independently.

We review and update this Privacy Policy periodically to reflect changes in our data practices, technology, and applicable legal requirements. The date of the most recent revision is shown at the top of this page. Where changes are material, we will notify registered players by email or by means of a prominent notice on the platform.

2 Personal Data We Collect

md333 collects personal data in several ways: directly from you when you register an account or contact support, automatically through your use of the platform, and from third-party payment providers in connection with financial transactions. The categories of personal data we collect include:

md333 does not collect or process special categories of sensitive personal data (such as health data, biometric data, or religious beliefs) except where strictly required for responsible gaming purposes (e.g., processing a self-exclusion request on medical grounds). In such cases, we will seek your explicit consent before processing.

3 How We Use Your Personal Data

md333 uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and administer your player account, verify your identity and age (21+ requirement), and ensure the integrity of the registration process;
• Transaction Processing: To process deposits, withdrawals, and refunds via supported payment channels including bKash, Nagad, Rocket, Upay, DBBL, City Bank, and BRAC Bank;
• Platform Delivery: To provide access to casino games, live dealer games, cricket betting markets, slots, and all other features of the md333 platform;
• Customer Support: To respond to your enquiries, resolve complaints, and provide assistance with account or payment-related issues;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other prohibited conduct;
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling, to apply self-exclusion or deposit limit requests, and to fulfil our duty of care obligations to players;
• Legal Compliance: To comply with applicable legal and regulatory obligations, including record-keeping requirements and responses to lawful requests from competent authorities;
• Platform Improvement: To analyse usage data and improve the functionality, performance, and user experience of the md333 platform;
• Marketing Communications: To send promotional offers, bonus notifications, and news updates to players who have opted in to receive such communications (see Section 11 for opt-out options).

md333 will not use your personal data for any purpose that is incompatible with the purposes listed above without providing you with prior notice and, where required, obtaining your consent.

4 Legal Basis for Processing

md333 processes your personal data only where a lawful basis exists for doing so. The legal bases we rely on are as follows:

• Contractual Necessity: Processing is necessary to perform the contract between md333 and the player — specifically, to operate your account, process transactions, and deliver the services you have requested;
• Legal Obligation: Processing is necessary to comply with applicable legal requirements, including age verification, anti-money laundering obligations, and responses to lawful authority requests;
• Legitimate Interests: Processing is necessary for the legitimate interests of md333, including fraud prevention, platform security, and the improvement of our services — provided that such interests are not overridden by your fundamental rights and freedoms;
• Consent: Where none of the above bases apply — in particular for optional marketing communications — we rely on your freely given, specific, and informed consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5 Data Sharing & Disclosure

md333 does not sell, rent, or trade your personal data to third parties. We may, however, share your data with the following categories of recipients where necessary to operate the platform and fulfil our obligations:

• Payment Service Providers: Mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (DBBL, City Bank, BRAC Bank) receive the minimum data necessary to process your deposit or withdrawal transactions. These providers are bound by their own privacy obligations and are not permitted to use your data for any other purpose;
• Technology & Infrastructure Partners: Third-party service providers who host, maintain, or support the md333 platform infrastructure, including cloud hosting providers and cybersecurity vendors. These providers act as data processors under contractual data processing agreements and may only process your data on our documented instructions;
• Game Studios & Content Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised session data necessary to deliver and audit game outcomes. These providers are not given access to your full identity or financial data;
• Identity Verification Services: Third-party KYC (Know Your Customer) verification providers may process your identity documents and biometric data solely for the purpose of verifying your eligibility to use the platform;
• Law Enforcement & Regulatory Authorities: md333 may disclose personal data to competent authorities where required to do so by law or in response to a valid legal order. We will notify you of such disclosures where we are legally permitted to do so.

6 Cookies & Tracking Technologies

md333 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit a website. They help us recognise you between sessions, maintain your login state, and understand how the platform is being used.

The types of cookies used by md333 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality;
• Functional Cookies: These cookies remember your preferences (such as language settings and display options) to provide a more personalised experience. Disabling them may reduce the quality of your experience;
• Analytics Cookies: These cookies collect anonymised information about how players use the platform — such as which pages are visited most frequently and how long players spend on particular features. This data is used to improve the platform over time;
• Session Cookies: Temporary cookies that are deleted when you close your browser. These are used to maintain your session while you are actively using the platform.

You can control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your md333 account. For full details of the cookies in use on the md333 platform, please contact our support team.

7 Data Retention

md333 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account Data: Retained for the duration of your active account relationship with md333, plus a further period of up to 5 years following account closure to comply with legal record-keeping obligations;
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction in accordance with anti-money laundering and financial record-keeping requirements;
• Identity Verification Documents: Retained for the duration of your account plus 5 years following account closure;
• Customer Support Correspondence: Retained for up to 3 years from the date of the relevant interaction, unless the correspondence relates to an ongoing dispute or legal matter;
• Technical & Usage Data: Typically retained in anonymised or aggregated form for up to 2 years for analytics and platform improvement purposes;
• Marketing Consent Records: Retained for the duration of your consent plus 1 year following withdrawal of consent, to demonstrate compliance.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

8 Data Security

md333 employs a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the md333 platform is encrypted using industry-standard Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols;
• Password Hashing: Account passwords are stored in hashed form using a strong cryptographic algorithm. md333 does not store passwords in plain text and cannot retrieve your password — only reset it;
• Access Controls: Access to personal data within md333's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific job functions;
• Regular Security Audits: The md333 platform undergoes periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited;
• Incident Response: md333 maintains a data breach response procedure. In the event of a security incident that poses a risk to your personal data, we will notify affected players without undue delay and take all reasonable steps to mitigate the impact.

While md333 takes all reasonable precautions to protect your data, no internet transmission or electronic storage system is completely secure. Players are also responsible for maintaining the security of their own account credentials and should use a strong, unique password and not share their login details with any third party.

9 Your Data Rights

As a player on the md333 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your request. We will respond within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data that md333 holds about you, together with information about how that data is being used;
• Right to Rectification: You have the right to request that any inaccurate or incomplete personal data held by md333 be corrected or updated. You may also update certain account information directly through your account settings;
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing on legitimate interests grounds. Note that this right is subject to legal retention obligations — we may be required to retain certain data even following an erasure request;
• Right to Restriction of Processing: You have the right to request that md333 restrict the processing of your personal data in certain circumstances, for example while an accuracy dispute is being resolved;
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another service provider where technically feasible;
• Right to Object: You have the right to object to the processing of your personal data where md333 relies on legitimate interests as the legal basis. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time;
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

md333 will not charge a fee for responding to data rights requests unless a request is manifestly unfounded, excessive, or repetitive. In such cases, we may charge a reasonable administrative fee or decline the request, with written reasons provided.

10 Children's Privacy

The md333 platform is strictly intended for adults aged 21 years and above. md333 does not knowingly collect, use, or store personal data from any individual under the age of 21. The platform employs age verification procedures during the registration process to prevent underage access.

If md333 becomes aware that personal data has been collected from a player who is under the age of 21, we will immediately suspend the relevant account, delete the associated personal data, and return any deposited funds to the original payment method. If you believe that a person under 21 has registered on the md333 platform, please notify us immediately at [email protected].

11 Marketing Communications

md333 may send you promotional emails, SMS notifications, and in-platform messages relating to bonuses, new games, seasonal promotions (such as Eid, Pohela Boishakh, or BPL season offers), and other md333 news where you have opted in to receive such communications at the time of registration or subsequently through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link included at the bottom of any promotional email from md333;
• Updating your communication preferences in your md333 account settings; or
• Contacting our support team at [email protected] and requesting removal from our marketing list.

Opting out of marketing communications will not affect your ability to continue using the md333 platform or to receive essential account and transaction notifications. Essential communications (such as account security alerts, withdrawal confirmations, and policy updates) are not subject to the opt-out mechanism and will continue to be sent while your account remains active.

md333 does not purchase marketing lists or send unsolicited communications to individuals who have not registered on the platform. If you receive a communication purporting to be from md333 that you did not opt in to, please report it to [email protected] as it may be a phishing attempt.

12 Changes to This Privacy Policy

md333 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, new platform features, or evolving legal requirements. When material changes are made, we will notify registered players by email or by posting a prominent notice on the md333 platform at least 14 days before the changes take effect.

The most recent version of this Privacy Policy is always available at md333.io/privacy-policy. The "Effective Date" displayed at the top of this page indicates when the current version was last revised. Your continued use of the md333 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the changes.

If you do not agree with any revision to this Privacy Policy, you should cease using the platform and may close your account by contacting our support team. Closing your account does not affect our right to retain data for the periods specified in Section 7 above.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way md333 processes your personal data, please contact our Data Support team using the details below. All correspondence should be submitted in English for the fastest response.

Email: [email protected]

Support Hours: 24 hours a day, 7 days a week, including all Bangladesh public holidays (Bangladesh Standard Time, UTC+6).

md333 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a full written response within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day window.