md333 Privacy Policy
Your privacy matters to us. This policy explains exactly what personal data md333 collects, why we collect it, how it is protected, and the rights you hold as a player on our platform.
1. Introduction
md333 is committed to protecting the privacy of all players. We operate under SSL encryption and take a privacy-by-design approach — we collect only the data that is genuinely necessary to deliver our services, verify player identity as required, prevent fraud, and comply with anti-money-laundering obligations. We do not sell, rent, or trade your personal data with third parties for their own marketing purposes.
This Policy applies to all players who access md333 from Bangladesh, including from Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, and Mymensingh, as well as any player accessing our platform from any other location. The Policy covers personal data collected through the md333 website, mobile browser interface, and all associated support channels.
Privacy at a Glance
2. Information We Collect
When you register for and use an md333 account, we collect the following categories of personal information. The basis for collecting each category is described alongside it. All collection is limited to what is necessary for the stated purpose.
- Registration data: mobile phone number, chosen username, and date of birth. This is required to create your account, verify you are aged 21 or above, and associate your account with a unique Bangladesh-based mobile number for payment purposes.
- KYC verification data: government-issued identity document (such as National ID card or passport) and a proof-of-address document when requested for withdrawal processing above threshold amounts. KYC documents are stored securely and deleted when no longer required by applicable regulations.
- Transaction data: deposit amounts, withdrawal amounts, payment method identifiers (e.g. last four digits of a bKash or Nagad wallet number), transaction timestamps, and transaction status. This data is required to process payments and to maintain mandatory financial records.
- Gameplay and betting data: game session records, bet amounts, game outcomes, and bonus usage history. This data is used to calculate balances accurately, detect fraud or bonus abuse, and resolve disputes. Game session data is logged with timestamps in Bangladesh Standard Time (BST, UTC+6).
- Technical and device data: IP address, device type, operating system, browser type and version, and session duration. This data is collected automatically when you access md333 and is used for security monitoring, fraud prevention, and aggregate analytics to improve platform performance.
3. How We Use Your Information
md333 uses the personal information we collect strictly for the purposes listed below. We do not use your data for purposes beyond those stated here without obtaining your prior consent.
- Account creation and management: to register your player account, maintain your account profile, and process your login sessions securely. This is the primary basis for collecting registration data and is necessary to provide you with access to md333 services.
- Payment processing: to process deposits via bKash, Nagad, Rocket, Upay, and supported bank transfers, and to process withdrawal requests back to the same payment method. Transaction records are maintained for the period required by applicable financial regulations.
- Identity verification and regulatory compliance: to verify that players are aged 21 or above, to conduct KYC checks when required, and to comply with anti-money-laundering obligations. Compliance data is retained for the minimum period prescribed by applicable regulations.
- Fraud prevention and security: to detect and prevent fraudulent account activity, bonus abuse, duplicate accounts, money laundering, and unauthorised access. Technical and device data, together with gameplay records, form part of our fraud-detection monitoring.
- Customer support and dispute resolution: to respond to your support queries, investigate complaints, and resolve disputes about game outcomes or payment transactions. Support correspondence and relevant account data are retained for the period needed to fully resolve each matter.
4. Sharing of Your Information
md333 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial use. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.
- Payment service providers: md333 shares transaction data with the mobile banking providers you use (bKash, Nagad, Rocket, Upay) and with bank partners solely to process your deposits and withdrawals. These providers operate under their own privacy policies and security standards.
- Game technology providers: certified game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Ezugi, Spribe, Microgaming) receive session data necessary to deliver game content and to verify game outcomes. These providers process this data as our data processors under data processing agreements.
- Regulatory and law enforcement authorities: md333 will disclose personal data to regulatory bodies or law enforcement agencies when required to do so by applicable law, court order, or legitimate legal process. We will notify affected players of such disclosures where we are legally permitted to do so.
- Fraud prevention services: anonymised or pseudonymised data may be shared with industry fraud-prevention networks to identify and block fraudulent patterns across multiple platforms. No personally identifiable information is shared in this context beyond what is strictly necessary.
5. Cookies and Tracking Technologies
md333 uses cookies — small data files stored on your device — to operate the platform effectively. We use three categories of cookies: (1) Essential cookies, which are required for the platform to function and cannot be disabled; these include session authentication cookies that keep you logged in during a game session. (2) Preference cookies, which remember your language and display settings between visits. (3) Analytics cookies, which collect anonymised aggregate data about how players navigate the platform, allowing us to identify and fix usability issues.
md333 does not use advertising tracking cookies or sell cookie data to advertising networks. If you wish to disable non-essential cookies, you may do so through your mobile browser's cookie settings. Please note that disabling essential cookies will prevent you from logging into your md333 account. md333 does not use pixel tags, web beacons, or cross-site tracking scripts.
6. Data Retention
md333 retains personal data only for as long as it is necessary for the purposes for which it was collected, or for as long as required by applicable legal, regulatory, or financial record-keeping obligations. The following retention periods apply: active player account data is retained for the lifetime of the account plus five years after account closure; KYC documents are retained for five years after the account relationship ends; transaction records are retained for seven years to meet financial record-keeping requirements; support correspondence is retained for two years after the matter is resolved.
When your personal data is no longer required, md333 will securely delete or anonymise it. Anonymised aggregate data (where all identifying information has been removed) may be retained indefinitely for platform analytics and service improvement purposes. Players who close their accounts and wish to confirm data deletion may contact [email protected] with a written data deletion request.
7. Data Security
md333 applies industry-standard security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include SSL/TLS encryption for all data in transit; encrypted storage for sensitive account and payment data at rest; access controls that limit internal access to personal data on a need-to-know basis; regular security audits of platform infrastructure; and two-factor authentication options for player accounts.
Despite these measures, no data transmission over the internet or electronic storage system is completely secure. md333 cannot guarantee absolute security of your data. In the event of a data security incident that affects your personal data, md333 will notify affected players as soon as practicable and take all reasonable steps to mitigate the impact. Players can reduce their own security risk by keeping their md333 login credentials confidential, using a strong unique password, and contacting support immediately if they suspect unauthorised access to their account.
8. Your Rights
As a player on md333, you have the following rights in relation to your personal data. To exercise any of these rights, please contact md333 support at [email protected] with your registered mobile number and a description of your request. All requests are handled within 14 business days.
- Right of access: you have the right to request a copy of the personal data md333 holds about you. We will provide a summary of your account data, transaction history, and any KYC documents on file within 14 business days of a verified request.
- Right of rectification: if any personal data md333 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. We will action verified correction requests within 14 business days.
- Right of erasure: you may request deletion of your personal data and closure of your md333 account at any time. We will delete your data to the extent permitted by our legal and regulatory retention obligations. Some data must be retained for the minimum periods described in Section 6 even after account closure.
- Right to object: you have the right to object to the use of your personal data for any purpose beyond what is strictly necessary to operate your account and comply with legal obligations. To exercise this right, contact [email protected] with the specific processing activity you wish to object to.
9. Third-Party Services
The md333 platform integrates third-party game content, payment processing, and analytics services in order to deliver a complete online casino and sports betting experience. When you interact with game content provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Ezugi, Spribe, or Microgaming, your game session data is processed by those providers as our data processors under contractual data processing agreements that require them to protect your data and use it only for the purpose of delivering the game service.
md333 is not responsible for the privacy practices of third-party providers in respect of data those providers collect independently through their own platforms or services outside the md333 integration. Players who have concerns about how a specific game provider handles data may review that provider's own privacy policy directly. md333 does not link to external sites, and all games are delivered through the md333 platform interface — players do not leave md333 to access game content.
10. Amendments to This Policy
md333 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via their registered contact details — typically through an in-platform notification. The revised Policy will display the updated effective date at the top of the document. Your continued use of the md333 platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must stop using the platform and contact [email protected] to request account closure.
11. Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how md333 handles your personal data, please contact our privacy team by email at [email protected]. Include your registered mobile number and a clear description of your query or request. We aim to respond to all privacy-related enquiries within 14 business days. For general account support, the same email address applies.