c333 Privacy Policy – How We Protect Your Personal Data

This Privacy Policy applies to all users of the c333 platform, including visitors to the website who have not yet registered, registered account holders, and any individual whose data is processed in connection with a c333 account. By creating an account or using our services, you acknowledge that you have read this policy and consent to the processing of your personal data as described here.

c333 is the data controller responsible for the personal information collected through the platform. This means we determine the purposes for which your data is processed and the methods used to process it. Any third-party service providers we engage — such as payment processors and identity verification partners — act as data processors and are bound by contractual agreements that restrict their use of your data to the specific purpose for which it was shared.

c333 collects the minimum personal data necessary to provide a safe, legally compliant, and functional gaming and betting service to Pakistani players. Below is a summary of the categories of data we collect and typical examples within each.

c333 does not collect sensitive data such as religious beliefs, political opinions, or biometric data beyond what is strictly necessary for identity verification. Card numbers and IBANs are tokenised by our payment processor and are never stored in full on c333 servers.

Data is collected through several channels during your interaction with the c333 platform:

• Registration Form: When you create your c333 account, you provide your name, mobile number, date of birth, and chosen password directly. This information is submitted over an encrypted HTTPS connection.
• Deposit & Withdrawal Requests: When you initiate a payment via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or card, your payment method details and transaction amount are captured. Card numbers and IBAN details go directly to our payment processor — c333 only receives a token and the transaction status.
• Identity Verification: If your account triggers a KYC (Know Your Customer) check — due to withdrawal size, account activity patterns, or promotional eligibility — we will request a copy of your CNIC and, in some cases, a selfie for liveness verification. This is processed by a trusted identity verification partner.
• Gameplay Activity: Your bets, game sessions, and account activity are automatically logged by the c333 platform. This data is used to calculate bonuses, resolve disputes, and monitor for responsible gaming indicators.
• Device & Technical Data: Your IP address, device fingerprint, browser, and operating system are collected automatically when you connect to c333. This data is used for fraud detection, security, and to ensure the platform displays correctly on your device.
• Customer Support: If you contact c333's support team via live chat or email, the content of those conversations is recorded and linked to your account for audit and service quality purposes.

c333 uses your personal data for the following purposes, each grounded in a lawful basis under data protection principles:

• Account Management: To create, maintain, and secure your c333 account, including enabling login, processing password resets, and managing account preferences.
• Payment Processing: To process deposits and withdrawals in PKR through your chosen payment method, verify transaction amounts, and maintain accurate financial records.
• Identity Verification (KYC): To verify your identity in compliance with anti-money laundering (AML) obligations and to confirm that you meet the 18+ age requirement. KYC data is processed by our verification partner and the result (pass/fail) is recorded on your account.
• Fraud Prevention & Security: To detect and prevent unauthorised account access, duplicate accounts, bonus abuse, payment fraud, and any other activity that violates c333's Terms and Conditions.
• Service Delivery: To provide you with access to casino games, betting markets, promotions, and all other c333 features that you have signed up to use.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling — such as increasing bet sizes or long uninterrupted sessions — and to apply any self-set limits or exclusions you have activated in your account settings.
• Customer Support: To respond to your queries, resolve disputes, and improve the quality of support interactions.
• Marketing Communications: To send you information about promotions, new games, and platform updates — but only if you have opted in to receive them. You can opt out at any time from your account settings or by contacting support.
• Legal & Regulatory Compliance: To comply with applicable law, respond to legal requests, and cooperate with regulators or law enforcement where required.

c333 does not sell your personal data. We share data with third parties only where it is necessary to deliver the services you use, to comply with legal obligations, or to protect against fraud. The categories of third parties with whom your data may be shared are:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment gateways receive the transaction data necessary to process your deposit or withdrawal. These partners operate under their own privacy policies and are independently regulated.
• Identity Verification Partners: Where KYC is required, your CNIC and verification documents are processed by our identity verification partner. They receive only what is needed to complete the check and are contractually prohibited from using it for any other purpose.
• Cloud & Infrastructure Providers: c333's platform runs on hosted server infrastructure. Our infrastructure providers have access to servers where data is stored, but they cannot access encrypted data and are bound by strict data processing agreements.
• Fraud Prevention & Security Services: We use third-party fraud detection and device fingerprinting services to protect accounts. These services process technical data such as IP addresses and device identifiers.
• Legal Authorities: Where required by law, regulation, court order, or law enforcement request, c333 may disclose account data to the relevant authority. We will notify the account holder of such requests where permitted by law.

c333 applies multiple layers of technical and organisational security to protect your personal data. The key measures in place include:

• TLS 1.3 Encryption in Transit: Every connection between your device and c333 is secured using TLS 1.3, the current industry standard for transport security. Data cannot be intercepted in transit.
• AES-256 Encryption at Rest: Personal data stored on c333's servers — including identity records and transaction data — is encrypted at rest using AES-256. Even in the unlikely event of a server breach, the data cannot be read without the decryption keys.
• Payment Tokenisation: Card numbers, IBANs, and mobile wallet identifiers are tokenised at the point of capture. c333 stores only the token — the actual payment credentials are held by the payment processor and are inaccessible to c333 staff.
• Access Controls: Access to personal data within c333's internal systems is restricted on a strict need-to-know basis. Support agents can see only the account information necessary to assist you — they cannot view your full CNIC number, payment credentials, or password.
• Two-Factor Authentication: c333 supports two-factor authentication (2FA) for all player accounts. We strongly recommend enabling it in your account settings for an additional layer of protection.
• Security Monitoring: c333's platform is monitored 24/7 for unusual access patterns, brute-force login attempts, and other indicators of compromise. Suspicious activity triggers automated alerts and human review.

c333 retains personal data for as long as necessary to fulfil the purposes described in this policy, or as required by applicable legal and regulatory obligations. The retention periods for key data categories are as follows:

• Account and Identity Data: Retained for the lifetime of your c333 account and for 5 years following account closure. This is required to comply with anti-money laundering regulations and to respond to any retrospective legal requests.
• Transaction Records: Financial transaction data — including deposit and withdrawal history in PKR — is retained for a minimum of 5 years after the date of each transaction in accordance with financial record-keeping standards.
• Gameplay Data: Your individual game and bet history is retained for 3 years following your last activity on the platform or 5 years following account closure, whichever is later. This data may be required to resolve disputes or comply with regulatory inquiries.
• KYC Documents: Identity verification documents such as your CNIC are retained for 5 years following account closure, or longer if required by a specific regulatory obligation applicable to your account.
• Customer Support Records: Support chat transcripts and email correspondence are retained for 2 years after the last interaction. Records related to formal complaints or disputes may be retained longer if they are subject to ongoing proceedings.
• Technical & Device Data: IP address logs and device fingerprint data used for security and fraud prevention are retained for 12 months.

Following the expiry of the applicable retention period, your data is securely deleted or anonymised. Anonymised data — from which you cannot be identified — may be retained indefinitely for aggregate analytics and platform improvement purposes.

c333 uses cookies and similar technologies — including local storage and session tokens — to make the platform function correctly, improve your experience, and understand how the site is used. The categories of cookies we use are:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit, security tokens, and cookies that remember your display preferences. These cannot be disabled without affecting how the site works.
• Functional Cookies: Remember your preferences such as preferred games, language settings, and bonus notification status across sessions.
• Analytics Cookies: Collect anonymised information about how players navigate the platform — which pages are visited most, where users encounter errors, and how long typical sessions last. This data helps c333 improve the user experience. These cookies do not identify you personally.
• Security Cookies: Used by fraud detection systems to identify unusual browsing patterns or to flag device fingerprints associated with known fraudulent behaviour.

c333 does not use advertising or retargeting cookies. We do not place third-party advertising pixels or tracking scripts on our platform. You can manage cookie preferences through your browser settings, though disabling essential cookies may prevent certain platform features from working correctly.

As a player on the c333 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@c333.cash with your registered account details and a clear description of your request. We will respond within 30 days.

c333 is strictly an adult platform for players aged 18 and above. We do not knowingly collect personal data from anyone under 18. If a c333 account is discovered to belong to a person under 18, the account will be closed immediately, all deposits will be returned, and the personal data will be securely deleted as soon as legally permissible.

If you are a parent or guardian and believe that a minor has registered an account at c333, please contact us immediately at support@c333.cash with the relevant account details so we can take appropriate action without delay.

c333 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to the policy, we will:

• Send a notification to the mobile number or email address registered on your account.
• Display a notice on the c333 platform for a minimum of 7 days before the updated policy takes effect.
• Update the "Last updated" date at the top of this page.

Your continued use of c333 after the effective date of any policy update constitutes your acceptance of the revised terms. If you do not agree with the changes, you should close your account and withdraw any remaining balance before the effective date.

Minor changes — such as updating contact details, correcting typographical errors, or making the language clearer without changing its meaning — may be made without formal notice. The "Last updated" date on this page will always reflect the most recent revision.

If you have any questions about this Privacy Policy, about how c333 processes your data, or if you wish to exercise any of your data rights described in Section 9, please contact us using the details below.

If you believe c333 has not handled your personal data correctly and are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant data protection authority. c333 will cooperate fully with any such investigation.

For questions about your account, payments, or bonuses rather than privacy-specific matters, please visit our FAQ page or contact the general support team.