dl333 Privacy Policy
Your Data. Our Responsibility.
At dl333, protecting the personal data of our players across Bangladesh is a core commitment — not a checkbox exercise. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and the rights you hold over your own data when you use the dl333 platform.
How dl333 Protects You
The summary cards below highlight the key principles of our privacy approach. They are provided for orientation only and do not replace the full legal text. In any conflict between a summary card and the corresponding section, the full text governs.
End-to-End Encryption
All data transmitted between your device and dl333's servers is protected by 256-bit SSL/TLS encryption. This applies to registration, login, deposits via bKash and Nagad, withdrawals, and all in-platform communications. Your connection is always secure.
We Never Sell Your Data
dl333 does not sell, rent, lease, or broker your personal data to any third party for marketing or commercial purposes. Your information is used exclusively to operate and improve the dl333 platform and to fulfil our legal compliance obligations.
Your Rights, Your Control
Registered dl333 players hold clear rights over their personal data — including the right to access, correct, port, and in eligible cases erase their data. You can exercise any of these rights at any time by contacting our privacy team at [email protected].
Minimal Data Collection
dl333 collects only the personal data that is strictly necessary to provide the service, process payments through bKash, Nagad, Rocket, and Upay, and meet our KYC and AML compliance obligations. We do not collect data speculatively or for purposes we cannot justify.
Transparent Cookie Use
dl333 uses cookies and similar technologies solely to keep your session active, remember your preferences, and analyse aggregate platform performance. We do not use third-party advertising cookies or behavioural tracking networks that profile you across other websites.
Defined Retention Periods
dl333 keeps your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Once a retention period expires, data is securely deleted or anonymised in accordance with our internal data lifecycle policy.
01 Data We Collect
When you interact with the dl333 platform — whether during registration, account verification, gameplay, or customer support — we collect certain categories of personal data. The specific data collected depends on the nature of your interaction. Below is a comprehensive overview of the personal data dl333 may collect and hold about you.
1.1 Registration & Account Data
When you create a dl333 account, we collect the information you provide during the registration process, including:
- Full legal name as it appears on your government-issued identity document.
- Date of birth (used to verify that you meet the 18+ age requirement).
- Email address and Bangladesh mobile phone number.
- Residential address within Bangladesh or your country of residence.
- Username and hashed (never plain-text) account password.
- Preferred currency (Bangladeshi Taka, BDT) and preferred payment method (bKash, Nagad, Rocket, Upay, or bank transfer).
1.2 Identity Verification (KYC) Data
To comply with our Know Your Customer (KYC) obligations and to confirm player age, we collect:
- Copies of government-issued identity documents, such as your Bangladesh National Identity Card (NID), passport, or driving licence.
- Proof of address documentation (utility bill, bank statement, or equivalent), where requested.
- Source-of-funds documentation in cases where a compliance review is triggered by deposit activity.
- Selfie or live photograph for biometric identity confirmation, where required.
1.3 Financial Transaction Data
For every deposit and withdrawal processed through the dl333 platform, we collect and retain:
- Transaction amount in BDT, transaction date and time (Bangladesh Standard Time, UTC+6), and transaction reference number.
- Payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard, or other supported method).
- Mobile wallet number or bank account identifier associated with the transaction (stored in masked format where possible).
- Transaction status (pending, completed, failed, or reversed) and any associated processor reference codes.
1.4 Technical & Usage Data
When you access the dl333 platform, our servers and analytics systems automatically collect the following technical data:
- IP address and approximate geographic location derived from IP.
- Device type, operating system, browser type and version.
- Pages visited, features accessed, games played, session duration, and clickstream data.
- Referring URL and search terms used to reach the platform (where applicable).
- Error logs and crash reports generated during your session.
1.5 Communications Data
If you contact dl333's customer support team via email or live chat, we retain records of those communications, including the content of messages and any attachments, to enable us to resolve your query and improve service quality.
02 How We Use Your Data
dl333 uses the personal data it collects for clearly defined purposes. We do not use your data for any purpose that is incompatible with the reason for which it was originally collected. The table below sets out our primary processing purposes alongside the legal basis on which we rely for each.
| Processing Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Creating and managing your dl333 account | Registration data, KYC data | Contract performance |
| Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer | Financial transaction data, registration data | Contract performance |
| Verifying player identity and age (18+) in compliance with KYC obligations | KYC data, registration data | Legal obligation |
| Detecting and preventing fraud, money laundering, and account abuse | All categories | Legal obligation / Legitimate interest |
| Delivering customer support and resolving disputes | Communications data, account data | Contract performance / Legitimate interest |
| Personalising the platform experience and recommending relevant games | Usage data, account preferences | Legitimate interest |
| Sending transactional notifications (deposit confirmations, withdrawal updates) | Registration data, transaction data | Contract performance |
| Sending promotional communications about dl333 offers (where opted in) | Registration data, usage data | Consent |
| Analysing platform performance and improving dl333 services | Technical data, usage data (aggregated) | Legitimate interest |
| Responsible gaming monitoring and intervention | Usage data, financial data, communications data | Legal obligation / Legitimate interest |
Where dl333 relies on legitimate interest as the legal basis for processing, we have assessed that our interest is not overridden by your rights and freedoms, given the nature of the processing, the reasonable expectations of players on a gambling platform, and the safeguards we apply.
Where dl333 relies on consent as the legal basis — specifically for marketing communications — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
03 Cookies & Tracking
dl333 uses cookies and similar technologies (such as local storage and session tokens) on the dl333.club website. A cookie is a small text file placed on your device by a website server. Cookies allow the dl333 platform to function correctly, remember your preferences, and gather aggregate usage analytics.
Types of Cookies We Use:
- Strictly Necessary Cookies: These are essential for the platform to function. They maintain your login session, remember items in your account queue, and ensure that security tokens are transmitted correctly. You cannot opt out of strictly necessary cookies while using the platform.
- Functional Cookies: These remember your preferences, such as your selected language, preferred payment method (bKash or Nagad), and display settings. They improve your experience but are not essential to the core service.
- Analytics Cookies: dl333 uses internal analytics tools to understand aggregate usage patterns — such as which games are most popular and where players encounter friction. Analytics data is aggregated and cannot be used to identify individual players.
What We Do NOT Use: dl333 does not use third-party advertising cookies, cross-site tracking pixels, or behavioural profiling networks. We do not share cookie data with advertising networks or data brokers.
Managing Your Cookie Preferences: You may adjust your browser settings to refuse, block, or delete cookies at any time. Please note that disabling strictly necessary cookies will affect the platform's ability to maintain your login session and may prevent you from accessing certain features. Instructions for managing cookies are available in your browser's help documentation.
04 Data Sharing & Third Parties
dl333 does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.
4.1 Payment Processing Partners
To process your deposits and withdrawals, dl333 shares the minimum necessary financial and identity data with our payment processing partners, including mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, and others). These partners are contractually bound to process your data only for the purpose of completing the requested transaction and in accordance with applicable data protection standards.
4.2 Identity Verification Providers
dl333 may use third-party KYC and identity verification service providers to assist with processing your identity documents. These providers are data processors acting under our instruction and are prohibited from using your data for their own purposes.
4.3 Legal and Regulatory Disclosure
dl333 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of dl333, our players, or the public.
4.4 Anti-Fraud and AML Screening
dl333 may share data with specialist anti-fraud and anti-money-laundering (AML) screening services to detect and prevent financial crime. Any data shared for this purpose is subject to strict confidentiality obligations.
4.5 Business Transfers
In the event that dl333 undergoes a merger, acquisition, or sale of all or part of its business assets, personal data held about players may be transferred to the acquiring entity as part of that transaction. We will notify registered players of any such change via their registered email address prior to the transfer taking effect, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.
05 Data Retention
dl333 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML / legal compliance |
| KYC identity documents | Duration of account + 5 years post-closure | Regulatory obligation |
| Financial transaction records | 7 years from transaction date | Financial record-keeping requirements |
| Customer support communications | 3 years from date of last communication | Dispute resolution / service improvement |
| Technical / usage logs | 13 months from collection date | Platform security and analytics |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent audit trail |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gaming obligations |
Once a retention period has expired, personal data is either securely and permanently deleted from our systems or anonymised in a manner that makes re-identification impossible. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.
Where you request erasure of your personal data and dl333 is not under a legal obligation to retain it, we will complete the deletion within 30 days of receiving your verified request.
06 Your Privacy Rights
As a dl333 player, you hold a set of clearly defined rights in relation to the personal data we hold about you. These rights are outlined below. To exercise any of these rights, please contact our privacy team at [email protected] with the subject line "Privacy Rights Request" and your registered account details. We will respond within 30 days of receiving a complete and verified request.
- Right of Access: You have the right to request a copy of all personal data that dl333 holds about you, along with information about how it is being used and the legal basis for processing.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may also update certain account details directly via your account settings in the dl333 platform.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where we no longer have a lawful basis for retaining it. This right is subject to any overriding legal retention obligations (for example, AML record-keeping requirements).
- Right to Restrict Processing: In certain circumstances, you may request that dl333 restrict the processing of your personal data — for example, while the accuracy of the data is being contested.
- Right to Data Portability: Where processing is carried out by automated means and on the basis of your consent or contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: Where dl333 processes your personal data on the basis of legitimate interest, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
07 Data Security
dl333 takes the security of your personal data seriously and maintains a range of technical, organisational, and procedural safeguards designed to protect your data from unauthorised access, loss, alteration, or destruction.
Technical Safeguards:
- All data in transit is encrypted using 256-bit SSL/TLS protocols. Any connection to dl333.club that is not over HTTPS is rejected automatically.
- Account passwords are stored using strong one-way hashing algorithms. dl333 never stores or transmits plain-text passwords.
- Player financial data, including bKash and Nagad mobile wallet numbers, is stored in masked format and access is restricted to authorised personnel on a need-to-know basis.
- dl333's servers are hosted in secure data centres with physical access controls, intrusion detection systems, and regular security patching schedules.
- Regular penetration testing and vulnerability assessments are conducted by qualified security professionals.
Organisational Safeguards:
- All dl333 staff and contractors with access to personal data are subject to strict confidentiality agreements and data handling training.
- Access to personal data is governed by the principle of least privilege — employees are granted access only to the data required to perform their specific role.
- dl333 maintains an internal data breach response procedure. In the event of a breach that is likely to result in a risk to player rights and freedoms, affected players will be notified promptly.
While dl333 takes all reasonable steps to protect your data, no internet-based service can guarantee absolute security. You are also responsible for maintaining the security of your account credentials. Never share your dl333 password with anyone, and contact [email protected] immediately if you suspect your account has been compromised.
08 Policy Updates & Contact
Policy Updates: dl333 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or the services we offer. When material changes are made, we will post a notice on the dl333.club platform and update the "Last Updated" date at the top of this page. Where changes are particularly significant, we may also notify registered players directly via their registered email address.
Continued use of the dl333 platform after the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically. The version currently published at dl333.club/privacy-policy is the authoritative and current version.
Contact & Privacy Enquiries: If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to raise a concern about how dl333 handles your personal data, please contact our privacy team:
- Email: [email protected] (subject line: "Privacy Enquiry" or "Privacy Rights Request")
- Response time: Within 1 business day for general enquiries; within 30 days for formal rights requests (Bangladesh Standard Time, UTC+6).
- Support hours: 24 hours a day, 7 days a week.
This Privacy Policy was last reviewed and updated on 1 January 2026 and supersedes all prior versions of dl333's privacy notice.
Questions About Your Privacy?
Our support team is available around the clock to help with any privacy concerns. You can also explore our FAQ for quick answers, review our full Terms & Conditions, or head directly to the dl333 platform.