Privacy Policy
sa333 — Your Data, Protected

sa333 collects personal information from you in the following circumstances: when you register an account, when you make a deposit or withdrawal, when you contact our support team, when you participate in a promotion, and automatically when you browse or use the sa333 platform. The categories of personal data we collect are described below.

1.1 Registration and Account Data

When you create a sa333 account, we collect the following information:

• Full legal name — as it appears on your Bangladesh National Identity Card (NID) or passport.
• Date of birth — used to verify that you are 18 years of age or older.
• Email address — used for account communication, security alerts, and (where you have opted in) promotional messages.
• Residential address — your current address in Bangladesh, including district and division (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh).
• Username and hashed password — your login credentials. Passwords are stored in hashed form and are never accessible in plain text by sa333 staff.
• Phone number — used for two-factor authentication and, where required, for payment verification via bKash or Nagad.

1.2 Identity Verification (KYC) Data

Before processing your first withdrawal, sa333 is required to verify your identity under our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations. This process requires you to submit:

• A copy of your Bangladesh National Identity Card (NID) or a valid Bangladesh passport.
• Proof of your current residential address — such as a recent utility bill, bank statement, or official government letter dated within the last three months.
• Where applicable, confirmation of your registered bKash, Nagad, Rocket, or bank account details for payment method verification.

KYC documents are processed securely by sa333's compliance team. They are stored in an encrypted document management system with restricted access and are never shared with third parties except where required by applicable law or a lawful regulatory request.

1.3 Financial Transaction Data

Every deposit and withdrawal transaction processed on sa333 generates a transaction record. We retain the following financial data:

• Transaction reference numbers, amounts (in BDT), and timestamps.
• The payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank).
• The mobile number or account number associated with the payment method.
• Transaction status (pending, completed, failed, or reversed).

Financial transaction records are retained for a minimum of 5 years from the date of the transaction in compliance with anti-money laundering regulations applicable to sa333's operations.

1.4 Gameplay and Betting Activity Data

sa333 records all gameplay and sports betting activity conducted on the platform. This includes game session logs, bet history, wager amounts, game outcomes, and bonus usage. This data is used to resolve disputes, detect suspicious betting patterns, calculate promotional eligibility, and continuously improve the sa333 platform.

1.5 Technical and Device Data

When you access sa333, our servers automatically collect technical data about your connection and device, including:

• IP address and approximate geographic location (country and city level).
• Device type, operating system, and browser version.
• Session timestamps, page views, and navigation paths on the sa333 website.
• Referral source (the URL or platform that directed you to sa333, if applicable).

This technical data is used for platform security, fraud prevention, and analytics. It does not by itself identify you as a named individual but may be combined with your account data where necessary for security investigations.

1.6 Communication and Support Data

When you contact sa333's support team by email, live chat, or any other communication channel, we retain a record of the communication including the content of your messages, your contact details, and the outcome of any support interaction. These records are used to manage your support request, improve our customer service quality, and maintain an audit trail of account-related decisions.

sa333 processes your personal data only where we have a lawful basis to do so. The primary lawful bases on which sa333 relies are: (a) the performance of the contract between you and sa333 (i.e., providing the gaming and betting service you have signed up for); (b) compliance with a legal obligation (particularly AML and KYC regulations); and (c) our legitimate interests in operating a safe, fair, and commercially viable online casino and sportsbook for Bangladesh players.

Purpose of Processing	Data Categories Used	Lawful Basis
Account creation and management	Registration data, device data	Contract performance
Identity and age verification (KYC)	KYC documents, registration data	Legal obligation
Processing deposits and withdrawals	Financial data, registration data	Contract performance
Fraud detection and prevention	Technical data, financial data, gameplay data	Legitimate interests
Responsible gaming monitoring	Gameplay data, account data	Legal obligation / legitimate interests
Customer support	Communication data, account data	Contract performance
Promotional communications (opted-in players only)	Email address, account preferences	Consent
Platform analytics and improvement	Technical data, gameplay data	Legitimate interests
AML and regulatory compliance	Financial data, KYC data, transaction history	Legal obligation

2.1 Marketing Communications

sa333 will only send you promotional emails, bonus offers, or other marketing communications if you have explicitly opted in to receive them at the time of registration or subsequently through your account settings. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account settings or by emailing [email protected] with an opt-out request. Opting out of marketing communications will not affect your ability to use the sa333 platform or receive essential service communications such as transaction confirmations and account security alerts.

2.2 Automated Decision-Making

sa333 uses automated systems to assist with fraud detection, responsible gaming monitoring, and bonus abuse prevention. In certain circumstances, these automated systems may result in a decision that affects your account — for example, temporarily flagging a transaction for manual review or triggering a responsible gaming intervention. Where an automated decision has a significant effect on your account, you have the right to request a manual review of that decision by contacting [email protected].

sa333 does not sell or rent your personal data to any third party. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

3.1 Payment Processors

To process your deposits and withdrawals, sa333 must share relevant financial and identity data with our payment processing partners, including the operators of bKash, Nagad, Rocket, and Upay mobile financial services, as well as Dutch-Bangla Bank, City Bank, and BRAC Bank where applicable. This sharing is limited to the data strictly necessary to authenticate and complete each transaction. Payment processors are contractually bound to use your data only for payment processing purposes and may not use it for any other commercial purpose.

3.2 Game Providers

sa333's casino games are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To facilitate your access to these games, technical session data (such as a session token and your account's player ID) is shared with the relevant game provider when you launch a game. Game providers do not receive your full name, NID number, home address, or financial data. Game providers process session data in accordance with their own privacy policies, which are available on their respective websites.

3.3 Regulatory and Law Enforcement Authorities

sa333 is required by applicable anti-money laundering law and financial crime regulations to disclose certain player information to competent authorities when requested to do so under a lawful order. This may include sharing transaction records, identity documents, and account history with relevant government bodies or law enforcement agencies. sa333 will comply with all lawful requests for data disclosure and will notify the relevant authority if we are legally prevented from informing the affected player of the disclosure.

3.4 Fraud Prevention and Security Services

sa333 may share technical and behavioural data (such as IP addresses, device fingerprints, and transaction patterns) with specialist fraud prevention and security service providers. This sharing is limited to what is strictly necessary to identify and prevent fraudulent activity, protect the integrity of the sa333 platform, and safeguard the interests of all registered players.

3.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of sa333's business, player data may be transferred to the acquiring or successor entity as part of the transaction. In such circumstances, sa333 will ensure that the acquiring entity is bound by privacy obligations at least equivalent to those described in this Privacy Policy, and registered players will be notified of any material change to data controller identity via email.

sa333 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit a website. They allow us to recognise your browser, remember your preferences, keep you logged in to your account, and understand how players navigate the sa333 site.

Cookie Category	Purpose	Can Be Disabled?
Strictly Necessary	Session management, login authentication, CSRF protection, shopping cart (deposit flow)	No — required for the site to function
Functional	Remembering your language preference, game display settings, responsible gaming tool configuration	Yes — disabling may affect your experience
Analytics	Understanding page traffic, popular games, navigation paths — used to improve the sa333 platform	Yes — data is aggregated and anonymised
Security	Fraud detection, bot prevention, detecting unusual login behaviour	No — required for account security

4.1 Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your browser settings. Most modern browsers (including Chrome, Firefox, Safari, and Edge) allow you to block or delete cookies through their privacy or settings menus. Please note that disabling strictly necessary or security cookies may prevent you from accessing the sa333 platform or logging in to your account. Disabling functional cookies may result in your preferences not being saved between sessions.

4.2 Third-Party Analytics

sa333 may use privacy-respecting analytics tools to collect aggregated, anonymised data about how players use the platform. This data does not identify individual players and is used solely to improve the sa333 user experience, identify technical issues, and prioritise platform development. Analytics data is not shared with advertisers or third-party marketing platforms.

sa333 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable law. The table below sets out our standard retention periods by data category:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	AML compliance, dispute resolution
KYC identity documents	Duration of account + 5 years after closure	AML / regulatory legal obligation
Financial transaction records	Minimum 5 years from transaction date	AML compliance, tax records
Gameplay and betting history	Duration of account + 2 years after closure	Dispute resolution, responsible gaming
Customer support communications	3 years from date of communication	Service quality, dispute management
Marketing opt-in preferences	Until you withdraw consent	Consent-based processing
Technical / device logs	13 months on a rolling basis	Security, fraud prevention, analytics

When the applicable retention period expires, sa333 will either securely delete the relevant data or anonymise it so that it can no longer be associated with you as an individual. Where data cannot be deleted immediately due to backup schedules or technical constraints, it will be quarantined and protected from further active processing until deletion is complete.

sa333 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes the following controls:

• SSL/TLS Encryption: All data transmitted between your browser or device and the sa333 platform is encrypted using industry-standard TLS protocols. This ensures that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive personal data — including KYC documents, payment method details, and identity records — is stored in encrypted form on sa333's servers. Encryption keys are managed under strict access control policies.
• Password Security: Player passwords are stored as salted cryptographic hashes. sa333 staff cannot retrieve or view your password in plain text. If you forget your password, a reset process is available — we will never email you your existing password.
• Access Controls: Access to systems that hold personal data is granted on a strict need-to-know basis. sa333 employees and contractors who handle player data are subject to confidentiality obligations and receive regular data protection training.
• Fraud Monitoring: sa333 operates continuous automated monitoring systems that detect unusual login activity, suspicious transaction patterns, and potential account takeover attempts. Anomalies trigger automatic alerts and, where necessary, temporary account holds pending investigation.
• Regular Security Reviews: sa333's technical infrastructure is subject to periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

6.1 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of sa333 players, sa333 will take immediate steps to contain the breach, assess its scope and impact, and notify affected players as soon as practicable. Notification will be sent to the email address registered on your sa333 account and will include a description of the breach, the categories of data affected, the likely consequences, and the steps sa333 has taken or will take in response. Players who suspect their account has been compromised should immediately change their password and contact [email protected].

As a sa333 player, you hold a number of rights in relation to your personal data. sa333 is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Privacy Rights Request" and a description of the right you wish to exercise. sa333 will respond to all valid privacy rights requests within 30 days of receipt.

7.1 Right to Access

You have the right to request a copy of all personal data that sa333 holds about you. We will provide this in a structured, commonly used format. Please note that where your request is manifestly unfounded or excessive, sa333 may charge a reasonable administrative fee for fulfilling the request or may decline to comply, with written reasons given.

7.2 Right to Rectification

If any personal data that sa333 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections such as email address updates, you may be able to make changes directly through your account profile. For corrections to identity or KYC data, please contact [email protected] with supporting documentation.

7.3 Right to Erasure

You have the right to request that sa333 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Please note that this right is not absolute: sa333 is legally required to retain certain categories of data (particularly KYC and transaction records) for a minimum of 5 years under AML regulations, regardless of a deletion request. Where erasure is not possible in full, sa333 will explain which data must be retained and why.

7.4 Right to Restrict Processing

You may request that sa333 restricts the processing of your personal data in certain circumstances — for example, while a rectification request is under review, or while you contest the legal basis on which sa333 is processing your data. During a restriction period, sa333 will continue to store your data but will not process it for any purpose other than storage.

7.5 Right to Data Portability

Where sa333 processes your personal data on the basis of consent or contract performance, you have the right to receive a copy of the data you have provided to us in a structured, machine-readable format, and to transmit that data to another service provider if you choose to do so.

7.6 Right to Object to Marketing

You have the right to object to sa333 processing your personal data for direct marketing purposes at any time. To opt out of marketing communications from sa333, update your notification preferences in your account settings or email [email protected] with an opt-out request. Marketing opt-outs will be processed within 5 business days.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way in which sa333 handles your personal data, please contact us using the details below. Our support team is available 24 hours a day, 7 days a week, and will acknowledge all privacy-related enquiries within one business day.

Email: [email protected] (please use the subject line "Privacy Enquiry" or "Privacy Rights Request")

Support Hours: 24/7 — English language support available at all times

Coverage: Serving players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.

8.1 Complaints Process

If you are not satisfied with sa333's response to a privacy enquiry or rights request, you may escalate your complaint by emailing [email protected] with the subject line "Formal Privacy Complaint". sa333 will conduct a full review of your complaint and provide a written response within 15 business days. We take all privacy complaints seriously and will work to resolve them fairly and transparently.

8.2 Updates to This Policy

sa333 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the sa333 platform itself. When we make a material change to this Privacy Policy, we will update the "Last Updated" date at the top of the page and, where the change significantly affects your rights, notify registered players by email. We encourage you to review this Privacy Policy periodically to stay informed about how sa333 protects your data. Continued use of the sa333 platform following any update to this Privacy Policy constitutes your acceptance of the revised terms.