td333 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Introduction & Data Controller Identity

1.1. This Privacy Policy ("Policy") describes how td333 ("we," "us," "our," or the "Operator") collects, processes, stores, and protects the personal data of individuals ("you," "your," or the "Player") who access or use the td333.biz website, mobile-optimised platform, and all associated gaming services (collectively, the "Platform").

1.2. td333 acts as the data controller in respect of all personal data collected through the Platform. This means td333 determines the purposes for which and the means by which your personal data is processed.

1.3. By registering an account on td333, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not use the td333 Platform.

1.4. This Policy should be read together with td333's Terms & Conditions, which govern the contractual relationship between you and the Operator.

1.5. For any privacy-related enquiries or to exercise your data rights, you may contact our data protection team at [email protected] or via the 24/7 live chat feature on the Platform. Support is available in both Urdu and English.

2 Personal Data We Collect

2.1. td333 collects personal data through multiple channels, including directly from you during registration and account usage, automatically through your use of the Platform, and from third-party service providers. The categories of personal data we collect include the following:

2.2. td333 does not collect any special categories of sensitive personal data (such as health data, biometric data, or political opinions) except where strictly necessary for responsible gaming compliance (e.g. information voluntarily provided during a self-exclusion or problem gambling assessment request).

3 Legal Basis & Purposes of Processing

3.1. td333 processes your personal data only where a valid legal basis exists under applicable data protection law. The following table sets out the primary purposes for which we process your data and the corresponding legal basis:

4 Cookies & Tracking Technologies

4.1. td333 uses cookies and similar tracking technologies (including local storage, session tokens, and device fingerprinting) to operate the Platform, remember your preferences, authenticate your td333 login session, and collect analytical data about Platform usage.

4.2. The types of cookies used on td333.biz include:

• Strictly Necessary Cookies: Required for the Platform to function. These enable your td333 login session, secure account access, and core payment processing. These cookies cannot be disabled without severely impairing Platform functionality.
• Functional Cookies: Remember your preferences (such as language settings, preferred deposit method, and game lobby layout) to personalise your td333 experience. These are not essential but significantly improve usability.
• Analytical Cookies: Allow td333 to understand how Pakistani players navigate the Platform — which games are most popular, where drop-offs occur, and how the mobile experience can be improved. This data is aggregated and does not identify individual players.
• Security Cookies: Used for fraud detection, bot prevention, and login security — helping td333 identify suspicious patterns and protect Player accounts from unauthorised access.

4.3. You may manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent access to the td333 Platform. Most modern mobile browsers on Pakistani devices (Chrome on Android, Safari on iOS) allow granular cookie management in the Privacy settings menu.

5 Sharing of Personal Data with Third Parties

5.1. td333 does not sell, rent, or trade your personal data to third-party advertisers, marketers, or data brokers under any circumstances. Personal data is shared with third parties only in the following limited circumstances:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and USDT TRC20 processing partners receive the financial data strictly necessary to process your deposits and withdrawals. These partners are contractually bound to use your data solely for payment processing.
• Game Studio Providers: Live casino and slot game providers (such as Evolution Gaming, Pragmatic Play, and others) may receive a pseudonymous player identifier to manage your game sessions, history, and wagering compliance. No name or direct contact data is shared with game studios without your consent.
• Identity Verification Partners: td333 may engage third-party KYC and anti-money laundering (AML) service providers to verify the identity documents you submit. These providers process your CNIC or passport data under strict data processing agreements and cannot use your data for any other purpose.
• Regulatory Authorities: td333 may be required by law, gaming license conditions, or court order to disclose personal data to regulatory bodies, law enforcement agencies, or judicial authorities. td333 will notify you of such disclosure requests where legally permitted to do so.
• Fraud Prevention Services: Aggregated or pseudonymised data may be shared with fraud detection platforms to identify suspicious patterns, protect the integrity of the Platform, and safeguard all Players' accounts and funds.

5.2. All third parties with whom td333 shares personal data are required to maintain appropriate security standards and to process your data only in accordance with td333's instructions and applicable data protection law.

6 Data Retention & Deletion

6.1. td333 retains your personal data for the following periods, after which data is securely and permanently deleted or anonymised:

• Account Data: Retained for the duration of your active td333 account, plus a minimum of five (5) years following account closure — to satisfy gaming license regulatory obligations and anti-money laundering compliance requirements.
• Transaction & Financial Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with applicable financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, or longer where required by gaming license or AML regulatory obligations.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction, to enable us to reference relevant history in the event of future disputes or enquiries.
• Cookies & Technical Data: Session cookies expire when your td333 browser session ends. Persistent cookies and analytical data are retained for up to twenty-four (24) months from collection.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years thereafter as evidence of consent compliance.

6.2. Where you request deletion of your personal data and no overriding legal obligation requires us to retain it, td333 shall process your deletion request within thirty (30) days.

7 Your Data Protection Rights

7.1. As a td333 Player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact td333 support via live chat or at [email protected]. td333 will respond to all valid requests within thirty (30) days.

8 Security of Your Personal Data

8.1. td333 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL encryption of all data transmitted between your device and td333's servers — the same standard used by major Pakistani financial institutions;
• Encryption at rest for all stored personal and financial data on td333's database infrastructure;
• Role-based access controls limiting staff access to personal data to those with a genuine operational need;
• Regular security audits and penetration testing of the td333 Platform and infrastructure;
• Multi-factor authentication requirements for all internal staff accessing Player data systems;
• Automatic session expiry for td333 Player accounts after periods of inactivity;
• Continuous monitoring of login attempts, transaction patterns, and system access for suspicious activity.

8.2. Notwithstanding the above measures, no internet transmission or electronic storage system is entirely secure. td333 cannot guarantee absolute security of your personal data against all possible threats. In the event of a data breach that poses a high risk to your rights and freedoms, td333 will notify affected Players without undue delay.

8.3. You also play an important role in your own data security. td333 strongly recommends enabling two-factor authentication (2FA) on your account, using a unique and strong password for your td333 login, and not sharing your account credentials with any third party.

9 Marketing Communications & Opt-Out

9.1. With your consent at the time of registration or subsequently, td333 may send you promotional communications regarding bonuses, new games, PSL special offers, seasonal promotions, and platform news. These communications may be sent via SMS to your Pakistani mobile number or by email.

9.2. You may withdraw your consent to receive marketing communications from td333 at any time by:

• Updating your communication preferences in the td333 account settings panel;
• Clicking the unsubscribe link included in any marketing email;
• Contacting td333 customer support via live chat and requesting removal from all marketing lists.

9.3. Withdrawal of marketing consent does not affect td333's right to send you service-related communications (such as deposit confirmations, withdrawal notifications, account security alerts, or material changes to these policies), which are sent on the basis of contract performance rather than consent.

10 International Data Transfers

10.1. td333's gaming infrastructure and some third-party service providers may operate from jurisdictions outside Pakistan. As a result, your personal data may be transferred to, stored, and processed in countries other than Pakistan. Where such transfers occur, td333 takes steps to ensure appropriate safeguards are in place, including contractual data transfer mechanisms equivalent to standard contractual clauses.

10.2. Payment data shared with JazzCash and EasyPaisa is processed within Pakistan by those respective providers and is subject to the data protection obligations of those entities under Pakistani financial regulation.

11 Changes to This Privacy Policy

11.1. td333 reserves the right to modify this Privacy Policy at any time. Material changes — such as new categories of data collected, new purposes of processing, or changes to your rights — will be communicated to registered Players via email or in-platform notification at least fourteen (14) days before the changes take effect.

11.2. Continued use of the td333 Platform after the effective date of any Privacy Policy update constitutes acceptance of the revised Policy. If you do not agree with the changes, you should cease using the Platform and request account closure before the effective date.

11.3. The date of the most recent revision is always displayed at the top of this Privacy Policy page. We encourage you to review this Policy periodically to stay informed about how td333 protects your personal data.