TD333 Privacy Policy

1. Introduction

TD333 ("we", "us" or "our") operates the online betting and gaming platform at td333.cam (the "Platform"). This Privacy Policy describes how TD333 collects, processes, stores, shares and protects the personal data of individuals ("you" or "your") who register accounts, access the Platform, or otherwise interact with our services (the "Services").

This Policy applies to all users of TD333, including users located in Pakistan. By registering an account or continuing to use the Platform following notification of any update to this Policy, you acknowledge that you have read and understood how your personal data is handled as described herein.

This Privacy Policy should be read alongside TD333's Terms & Conditions and Responsible Gambling Policy, which together form the complete framework governing your relationship with the Platform.

2. Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, financial account details and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, TD333.
• "Data Processor" means a third party that processes Personal Data on TD333's behalf under a binding data processing agreement.
• "KYC" means Know Your Customer — identity verification procedures required before processing withdrawals or when mandated by anti-money laundering obligations.
• "AML" means Anti-Money Laundering — regulatory obligations designed to prevent the use of financial services for money laundering or terrorist financing.
• "Cookies" means small text files placed on your device by the Platform to support functionality, session management and analytics.
• "PKR" means Pakistani Rupee — the sole account and transaction currency on the Platform.

3. Personal Data We Collect

3.1 Registration Data

When you create a TD333 account, we collect:

• Full legal name.
• Date of birth (for age verification purposes).
• Residential address (including city, e.g. Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar).
• Email address.
• Mobile phone number (used for account verification and two-factor authentication where applicable).
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

To comply with AML obligations and process withdrawal requests, we may collect:

• Copies of government-issued identity documents (e.g. Pakistani CNIC or equivalent).
• Proof of residential address documents (utility bills, bank statements no older than three months).
• Payment method verification documents (e.g. screenshots of mobile wallet accounts or bank statements).
• Source of funds declarations where required by applicable AML policy.

3.3 Financial Transaction Data

In connection with deposits and withdrawals in PKR, we collect:

• Transaction amounts, dates and reference numbers.
• Payment method identifiers (partial account numbers, wallet IDs or bank references — full card numbers are not stored on TD333 systems).
• Account balance history and ledger records.

3.4 Betting and Gaming Activity Data

• Bet history, stake amounts, odds accepted and settlement outcomes.
• Casino game play history, session durations and game categories accessed.
• Responsible gambling tool settings (deposit limits, session limits, self-exclusion records).

3.5 Technical and Device Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser type and version.
• Session timestamps and log-in/log-out records.
• Cookies and similar tracking technologies (see Section 10).

3.6 Communications Data

• Records of your support interactions (live chat transcripts, email correspondence).
• Feedback, complaints and dispute records.
• Marketing preference settings and opt-in/opt-out records.

4. How We Use Your Personal Data

TD333 processes your personal data for the following specific purposes:

5. Legal Basis for Processing

TD333 processes your personal data under one or more of the following legal bases:

• Contract performance: Processing necessary to provide the Services you have contracted for, including account management, bet settlement and payment processing.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements and any regulatory reporting mandated by TD333's licensing jurisdiction.
• Legitimate interests: Processing necessary for TD333's legitimate interests, such as fraud detection, platform security, responsible gambling monitoring, analytics and general business operations — provided these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific and informed consent — principally for direct marketing communications and any non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6. Data Sharing & Disclosure

6.1 Service Providers (Data Processors)

TD333 shares personal data with carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These providers are permitted to use the data only for the specific purposes for which it is disclosed. Categories of service provider include:

• Payment processing and fraud screening partners.
• Identity verification and KYC solution providers.
• Cloud hosting and data storage infrastructure providers.
• Customer support platform providers.
• Analytics and platform performance monitoring tools.
• Responsible gambling technology providers.

6.2 Legal and Regulatory Disclosure

TD333 may disclose your personal data to regulatory authorities, law enforcement agencies or courts where required to do so by applicable law, court order or binding regulatory demand. Where legally permissible, TD333 will notify you of such a disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of TD333's business, personal data held by TD333 may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any material change to how your data is processed.

7. International Data Transfers

TD333's Platform infrastructure and some of its service providers are located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to, stored in, and processed in countries that may have different data protection standards from those applicable in your home jurisdiction.

Where such transfers occur, TD333 takes appropriate steps to ensure that your personal data receives an adequate level of protection, including through the use of contractual safeguards (such as standard contractual clauses) or by transferring data only to countries or entities that provide a comparable standard of data protection.

By using the TD333 Platform, you acknowledge that your personal data may be transferred internationally as described in this section.

8. Data Retention

TD333 retains personal data only for as long as is necessary for the purposes for which it was collected, or for such longer period as is required by applicable legal, regulatory, tax or accounting obligations.

As a general guide:

• Active account data is retained for the duration of your account relationship with TD333.
• Transaction and financial records are retained for a minimum of five (5) years following the relevant transaction, in line with standard AML and financial record-keeping requirements.
• KYC documents are retained for a minimum of five (5) years following account closure or the completion of the last transaction, whichever is later.
• Support communications are retained for up to three (3) years following the resolution of the relevant interaction.
• Marketing preference records are retained indefinitely to demonstrate compliance with your opt-in or opt-out choices.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

9. Data Security

TD333 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the Platform.
• Encryption at rest for sensitive stored data, including identity documents and financial information.
• Access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security assessments of Platform infrastructure and third-party integrations.
• Incident response procedures to detect, contain and report data security incidents in accordance with applicable legal obligations.

No online platform can guarantee absolute security. You are also responsible for maintaining the security of your own account credentials. If you believe your account has been compromised, you must contact TD333 support immediately.

10. Cookies & Similar Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the Platform to recognise your device across sessions, store your preferences and collect usage data. TD333 also uses similar technologies including local storage, session storage and web beacons where appropriate.

10.2 Types of Cookies We Use

• Essential / Strictly Necessary Cookies: Required for the Platform to function correctly — including session management, login authentication and security controls. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your preferences such as language settings, display options and responsible gambling tool configurations between sessions.
• Analytical / Performance Cookies: Collect anonymised data about how users interact with the Platform to help us improve navigation, performance and user experience. These do not identify you personally.

10.3 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be alerted when a new cookie is set. Please note that disabling essential cookies will impair your ability to use the Platform's core functions, including logging in and placing bets.

11. Your Data Rights

Depending on applicable data protection legislation, you may have some or all of the following rights in relation to the personal data TD333 holds about you:

• Right of Access: The right to request a copy of the personal data TD333 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected — subject to TD333's legal retention obligations (e.g. AML records cannot be deleted on request).
• Right to Restriction: The right to request that TD333 restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: The right to receive a copy of certain personal data in a structured, machine-readable format.
• Right to Object: The right to object to processing based on TD333's legitimate interests, and to opt out of direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, please submit a written request to [email protected]. TD333 aims to respond to data rights requests within 30 days. In some cases — particularly complex requests — we may require up to an additional 60 days, in which case we will notify you of the extension.

TD333 may need to verify your identity before fulfilling a data rights request to ensure personal data is not disclosed to or altered by an unauthorised party.

12. Protection of Minors

TD333's Services are strictly restricted to individuals aged 18 and over, or the higher minimum age required by the applicable operator/license jurisdiction. TD333 does not knowingly collect personal data from individuals under the minimum eligible age.

Where TD333 discovers or has reasonable grounds to believe that an account has been registered by or on behalf of an individual below the minimum age, the account will be immediately suspended, all data will be handled in accordance with applicable legal requirements, and any balance — including deposits and winnings — will be dealt with in accordance with TD333's underage gambling policy as set out in the Terms & Conditions.

If you have reason to believe that a minor has registered or is using a TD333 account, please notify us immediately at [email protected].

13. Third-Party Links & Services

The TD333 Platform does not contain outbound links to external third-party websites. Where third-party game content or technology is integrated into the Platform (such as live casino streams or slot game engines), those providers operate under separate privacy frameworks to which TD333 is not a party as the primary data controller.

TD333 is not responsible for the privacy practices of any third-party technology provider whose software or content is accessed via the Platform. If you have concerns about data processing by a specific game provider, please contact TD333 support and we will direct your query appropriately.

14. Changes to This Privacy Policy

TD333 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, business practices or Platform features. When material changes are made, TD333 will notify registered users via a prominent notice on the Platform and/or by email to the address registered to your account.

The revised Policy will display an updated "Last Updated" date at the top of this page. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not accept the revised terms, you should cease using the Platform and may request account closure.

We recommend bookmarking this page and revisiting it periodically to remain informed of how TD333 handles your personal data.

15. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by TD333, please contact us using the details below:

This Privacy Policy was last reviewed and updated in January 2026.