hk333 Privacy Policy

hk333 is Bangladesh's trusted online betting and casino platform, providing sports betting, live dealer casino games, and 500+ slots to adult players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and beyond. We are committed to handling the personal data of every hk333 player with care, transparency, and respect.

This Privacy Policy applies to all personal data collected by hk333 through your use of the hk333.io website, any associated mobile web experience, and all related services including account registration, deposits, withdrawals, gameplay, and customer support interactions. It describes the categories of personal data we collect, the purposes for which we process that data, the conditions under which we may share it with third parties, and the rights available to you in relation to your personal information.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference and form part of the overall agreement governing your relationship with hk333. All terms not defined here carry the same meanings assigned to them in the Terms & Conditions.

For the purposes of this Privacy Policy, hk333 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. All data collected through the hk333.io platform is processed under the responsibility of the hk333 operating entity.

If you have any questions about the identity of the data controller, how your data is processed, or wish to exercise any of the rights described in this Privacy Policy, you may contact our data protection team directly at [email protected]. All data-related correspondence is handled confidentially and responded to within the timeframes specified in the "Your Privacy Rights" section below.

hk333 collects the following categories of personal data in the course of operating the platform and providing services to registered players:

hk333 does not intentionally collect sensitive special-category personal data (such as health information, political opinions, or religious beliefs) through normal platform operations. If any such data is incidentally disclosed during a support interaction, it is treated with heightened confidentiality and is not processed for any purpose beyond resolving the immediate issue.

hk333 collects personal data through three primary channels:

• Directly from you: When you complete the registration form, update your account profile, submit KYC verification documents, make deposits or withdrawal requests, contact our support team, respond to surveys, or participate in promotions. All data you provide directly is given voluntarily; however, certain fields are mandatory for account creation and ongoing platform access — these are clearly marked during the registration and verification processes.
• Automatically from your device: When you access the hk333 platform, our servers automatically receive and log technical information including your IP address, browser type, device identifiers, referral source, pages visited within the site, and the time and duration of your sessions. This data is collected using standard server logs, cookies, and similar tracking technologies — see the "Cookies & Tracking" section for full details.
• From third-party service providers: hk333 may receive personal data about you from our payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Sonali Bank, Islami Bank, Visa, Mastercard), KYC and identity verification service providers, fraud detection and risk management partners, and analytics service providers. Data received from these sources is used solely for the purposes described in this Privacy Policy and is handled in accordance with the agreements we hold with each third-party provider.

hk333 uses the personal data we collect for the following specific purposes:

• Account Creation and Management: To register your hk333 account, verify your identity and age (21+ policy), maintain your account records, and provide you with access to the full range of platform features including betting markets, casino games, and the account dashboard.
• Payment Processing: To process deposits made via bKash, Nagad, Rocket, Upay, bank transfer, or card, and to execute withdrawal requests to your verified payment method. Financial data is handled exclusively for transaction processing and fraud prevention purposes.
• KYC and Regulatory Compliance: To conduct identity and age verification checks in accordance with our obligations as a gaming platform, to comply with anti-money-laundering (AML) requirements, and to respond to lawful requests from regulatory or law enforcement authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and any other conduct that threatens the integrity of the platform or the safety of other players.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling behaviour, to enforce the responsible gaming tools you have set (deposit limits, cooling-off periods, self-exclusion), and to contact you proactively if our systems identify concerning patterns. hk333 takes responsible gaming seriously; data processing for this purpose is carried out in your best interests.
• Customer Support: To respond to your support enquiries, process complaints, and communicate the outcome of investigations or disputes. Support communications are retained as a record of interactions for quality assurance and dispute resolution purposes.
• Platform Improvement: To analyse aggregated, anonymised gameplay and usage data for the purpose of improving the hk333 platform, optimising performance, identifying technical issues, and developing new features. Individual player data is not used for product development decisions without anonymisation.
• Marketing Communications: To send you promotional offers, bonus notifications, seasonal promotions (BPL, IPL, T20 World Cup, Eid, Pohela Boishakh, Victory Day), and relevant platform updates — but only where you have provided explicit consent to receive marketing communications. See the "Marketing Communications" section for details on how to opt out at any time.

hk333 processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and hk333 — specifically, to create and maintain your account, process payments, and deliver the betting and gaming services you have signed up to use. Without this processing, hk333 cannot provide its services to you.
• Legal Obligation: Processing is necessary for hk333 to comply with its legal obligations, including KYC and identity verification requirements, AML obligations, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing is necessary for the purposes of hk333's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. Legitimate interest grounds apply to fraud prevention, platform security, responsible gaming monitoring, and internal analytics for service improvement.
• Consent: Where hk333 relies on your consent as the legal basis for processing — specifically for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent for marketing does not affect your ability to continue using the hk333 platform.

hk333 does not sell, rent, or exchange your personal data with unaffiliated third parties for their own independent marketing or commercial purposes. Personal data is shared only in the following controlled circumstances:

• Payment Processors: When you make a deposit or withdrawal, relevant financial data is shared with the applicable payment service provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Sonali Bank, Islami Bank, Visa, Mastercard) solely for the purpose of completing the transaction. Each payment partner operates under its own privacy and data security obligations.
• KYC and Identity Verification Providers: To complete mandatory age and identity checks, hk333 shares relevant identity documents and data points with our contracted KYC verification partners. These providers are bound by strict confidentiality obligations and are prohibited from using your data for any purpose other than verification.
• Fraud Detection and Risk Management Partners: Anonymised or pseudonymised data may be shared with fraud prevention networks or risk scoring services to protect the platform and its players from fraudulent activity. Such sharing does not expose your full identity to third parties.
• Game Content Providers: Third-party game studios and live casino providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited technical and session data necessary to deliver their games through the hk333 platform. These providers do not receive your financial data or full identity profile.
• Legal and Regulatory Disclosure: hk333 will disclose personal data to courts, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or lawful authority request. hk333 will endeavour to notify affected players of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of hk333's business, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

hk333 uses cookies and similar technologies to ensure the platform functions correctly, to improve your experience, and to gather aggregated analytics data. A cookie is a small text file placed on your device by the hk333 server when you visit the site. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific sites. Please note that disabling strictly necessary cookies will impair or prevent access to certain features of the hk333 platform, including account login and payment processing. Disabling analytics or marketing cookies does not affect your ability to use the core platform features.

hk333 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy or as required by applicable legal obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the lifetime of your active account and for a minimum of 5 years following account closure, to comply with anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC Verification Documents: Retained for a minimum of 5 years from the date of verification or the date of account closure, whichever is later.
• Gameplay and Betting History: Retained for the lifetime of your active account and for up to 3 years following account closure for responsible gaming monitoring and dispute resolution purposes.
• Support Communications: Retained for up to 3 years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Analytics and Technical Data: Anonymised within 24 months of collection; anonymised data may be retained indefinitely for aggregate statistical analysis.
• Marketing Consent Records: Retained for the duration of your account and for up to 3 years following account closure as evidence of consent or withdrawal of consent.

Where data is no longer required and no legal obligation requires its continued retention, hk333 will securely delete or irreversibly anonymise that data. If you request account closure, your data will continue to be retained for the statutory minimum periods described above notwithstanding the closure.

hk333 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your browser or device and the hk333 platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon visible in your browser address bar confirms that an encrypted connection is active.
• Encrypted Data Storage: Sensitive stored data — including identity documents, payment information, and password hashes — is held on encrypted servers with access restricted to authorised personnel on a strict need-to-know basis.
• Access Controls: Internal access to player personal data is governed by role-based access controls. Staff members can only access the specific data categories required for their role. All internal access is logged and audited.
• Two-Factor Authentication (2FA): hk333 supports and strongly recommends enabling 2FA on your player account. 2FA adds a second verification step at login, significantly reducing the risk of unauthorised account access even if your password is compromised.
• Fraud Detection Systems: Automated fraud detection and anomaly monitoring systems operate continuously across the hk333 platform to identify unusual account activity, suspicious deposit patterns, and potential account takeover attempts in real time.
• Regular Security Reviews: hk333 conducts regular internal security reviews and works with external security consultants to assess and strengthen the platform's data protection posture on an ongoing basis.

As a data subject whose personal data is processed by hk333, you hold the following rights in relation to that data. To exercise any of these rights, contact our data protection team at [email protected] with the subject line "Data Rights Request" and include your registered account username and a clear description of the right you wish to exercise.

• Right of Access: You have the right to request a copy of the personal data hk333 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared. hk333 will respond to access requests within 30 days.
• Right to Rectification: If any personal data held by hk333 is inaccurate or incomplete, you have the right to request correction. For straightforward corrections (e.g., address or contact number updates), you may update these directly within your account settings panel.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing on legitimate interest grounds. Note that hk333 may be required to retain certain data for legal compliance purposes as described in the "Data Retention" section above — in such cases, erasure will be applied to all data not subject to mandatory retention.
• Right to Restrict Processing: You may request that hk333 restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you prefer restriction to erasure.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON).
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests. hk333 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests or the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal. See the "Marketing Communications" section for how to opt out.

hk333 aims to respond to all data rights requests within 30 calendar days of receipt. For complex requests, the response period may be extended by a further 30 days; in such cases, you will be informed of the extension and the reason for it within the initial 30-day period. There is no charge for exercising your data rights unless requests are manifestly unfounded or excessive.

hk333 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, seasonal offers (BPL, IPL, T20 World Cup, Eid, Pohela Boishakh, Victory Day), and new platform features where you have explicitly opted in to receive marketing communications during the registration process or subsequently via your account settings panel.

You may opt out of marketing communications at any time by:

• Updating your notification preferences in the hk333 account settings panel under "Communication Preferences".
• Clicking the unsubscribe link included in every marketing email sent by hk333.
• Contacting [email protected] with the subject line "Marketing Opt-Out" and your registered account username.

Opting out of marketing communications will not affect the delivery of transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, KYC request emails, and security alerts. These communications are sent on the basis of contractual necessity and cannot be disabled while your account is active.

The hk333 platform is strictly intended for adults aged 21 and above. hk333 does not knowingly collect personal data from individuals under the age of 21. Age verification checks are conducted during the registration process and at the point of first withdrawal to enforce this policy.

If hk333 becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted immediately, the associated account will be suspended, and any funds held in that account will be returned to the originating payment method following investigation. Parents and guardians who believe an underage individual may have registered on hk333 are encouraged to contact [email protected] immediately so the matter can be investigated and resolved promptly.

hk333 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they substantially affect how we collect, use, or share your personal data, or meaningfully alter your rights as a data subject — we will provide advance notice of at least 7 days via the email address registered to your account and/or a prominent notice on the hk333 platform before the revised policy takes effect.

Non-material changes, such as typographical corrections, clarifications that do not alter substantive meaning, or updates to contact information, may be made immediately without prior notice. The "Last Updated" date at the top of this Privacy Policy will always reflect the most recent revision.

Your continued use of the hk333 platform after the effective date of any revision to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Privacy Policy, you must cease using the platform and contact [email protected] to arrange account closure. Any personal data collected prior to the effective date of a revision will continue to be processed in accordance with the policy version that was in effect at the time of collection, unless you consent to processing under the revised policy.

For all privacy-related enquiries, data rights requests, or concerns about how hk333 processes your personal data, please use one of the following contact methods:

• Live Chat: Available 24/7 on the hk333 platform. For data rights requests, please state "Data Rights Request" at the start of the conversation. Average response time is under 2 minutes.
• Email: [email protected] — for formal data rights requests, please include "Data Rights Request" in the subject line, your registered account username, and a clear description of your request. Response within 2–6 hours for general queries; up to 30 calendar days for formal data rights requests, in accordance with the timelines described in Section 11.

All privacy correspondence is handled with strict confidentiality. hk333 will verify your identity before processing any data rights request to ensure that personal data is not disclosed to unauthorised individuals.