3xxw Privacy Policy

1. Data We Collect

When you register for a 3xxw account, use the platform, or contact our support team, we collect personal data in the following categories. The table below summarises each data type, its source, and whether it is mandatory for platform use.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity document photographs submitted for KYC), or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request. In such cases, the data is used solely to fulfil the self-exclusion request and is not shared for any other purpose.

Data from Third Parties

In certain circumstances, 3xxw may receive data about you from third-party sources to supplement what you have provided directly. These sources include:

• KYC Verification Providers: Identity verification services that cross-reference the documents you submit against official databases to confirm authenticity.
• Payment Processors: bKash, Nagad, Rocket, Upay, and affiliated banks confirm the successful completion of transactions and provide transaction reference identifiers.
• Fraud Detection Services: Automated systems that flag unusual account behaviour or IP address patterns associated with known fraudulent activity.
• Responsible Gaming Registers: Where applicable, self-exclusion registers that allow 3xxw to honour cross-platform exclusion requests.

2. How We Use Your Data

3xxw uses personal data only for specific, legitimate purposes. The following list sets out every primary purpose for which we process player data, along with the legal basis on which that processing rests.

• Account Creation and Management: We process your identity and contact data to open, maintain, and administer your 3xxw account. This processing is necessary for the performance of our contract with you.
• Identity Verification (KYC): We process identity documents and associated data to verify that you meet the eligibility criteria — particularly the 18+ age requirement 18+ — and to comply with anti-money laundering obligations. This is a legal obligation.
• Payment Processing: We process financial data to receive deposits and execute withdrawals via bKash, Nagad, Rocket, Upay, and partner banks. This is necessary for contract performance.
• Game Delivery and Personalisation: We use gaming activity data to deliver a functional, personalised experience — including saving your preferred game categories, maintaining your bet history, and applying VIP tier benefits. This is based on contract performance and legitimate interest.
• Fraud Prevention and Security: We process technical data, transaction patterns, and gaming activity to detect and prevent fraud, money laundering, multi-accounting, bonus abuse, and other prohibited conduct. This is a legitimate interest and, in some cases, a legal obligation.
• Responsible Gaming Compliance: We monitor gaming behaviour patterns and process self-exclusion data to fulfil our responsible gaming obligations and protect players who may be at risk of problem gambling. This is both a contractual and legal obligation.
• Customer Support: We process communications data to resolve support queries, disputes, and complaints. This is based on contract performance and legitimate interest.
• Marketing Communications: Where you have given your explicit opt-in consent, we use your contact data and marketing preferences to send you promotional offers, bonus alerts, and news about 3xxw events. You may withdraw this consent at any time via your account settings or by contacting support.
• Legal and Regulatory Compliance: We may process and retain personal data to comply with applicable laws, regulatory requests, court orders, or law enforcement enquiries. This is a legal obligation.

3. Data Sharing and Disclosure

3xxw does not sell your personal data. We share data with third parties only in the following limited and defined circumstances:

Service Providers

We engage carefully selected third-party service providers who process data on our behalf to support the operation of the 3xxw platform. These providers are bound by data processing agreements that require them to handle your data only as instructed by 3xxw and to maintain standards of security equivalent to our own. Categories of service providers include:

• KYC and identity verification platforms
• Payment processors and mobile money gateway operators (bKash, Nagad, Rocket, Upay)
• Game studios and software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others)
• Cloud infrastructure and server hosting providers
• Fraud detection and cybersecurity services
• Customer support platform providers
• Email and SMS communication service providers

Legal and Regulatory Disclosures

3xxw may disclose personal data to government bodies, regulatory authorities, law enforcement agencies, or courts where we are legally compelled to do so, or where disclosure is necessary to prevent serious harm, investigate criminal activity, or protect the rights and safety of 3xxw, its players, and the public. We will notify affected players of any such disclosure to the extent that we are legally permitted to do so.

Business Transfers

In the event that 3xxw undergoes a merger, acquisition, asset sale, or corporate restructuring, player data held by 3xxw may be transferred to the successor entity as part of that transaction. In such circumstances, 3xxw will notify affected players by email and will ensure that the successor entity is bound by terms no less protective than this Privacy Policy.

4. Cookies and Tracking Technologies

3xxw uses cookies and similar tracking technologies on the 3xxw.app website to ensure the platform functions correctly, to improve the user experience, and to support security and fraud prevention. This section explains what cookies we use and how you can control them.

Types of Cookies Used by 3xxw

3xxw does not use third-party advertising cookies or behavioural tracking cookies that share data with ad networks. Analytics data is aggregated and anonymised before analysis and is used solely to improve the 3xxw platform.

Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive notifications about cookies via the browser's privacy or security settings menu. Please note that disabling functional or analytics cookies may affect your 3xxw experience — for example, saved game preferences may not persist between sessions. Strictly necessary and security cookies cannot be disabled without preventing access to the platform entirely.

5. Data Retention

3xxw retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of player data:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five years after account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, as required for financial record-keeping and AML compliance.
• Gaming Activity Logs: Retained for three years from the date of activity. Aggregated, anonymised betting history may be retained indefinitely for statistical and responsible gaming research purposes.
• KYC Documents: Retained for the active account period plus five years post-closure. Original document images are deleted at the end of this period; only a verified status record is maintained.
• Customer Support Communications: Retained for two years from the date of the interaction, or longer if the matter relates to an ongoing dispute, investigation, or legal proceeding.
• Marketing Consent Records: Retained from the date of opt-in until consent is withdrawn, plus an additional one year as evidence of consent status.
• Self-Exclusion Records: Retained for the duration of the exclusion period plus five years post-exclusion, to prevent re-registration during the exclusion window and to comply with responsible gaming record-keeping obligations.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a way that makes re-identification impossible. 3xxw conducts scheduled data audits to ensure that retention schedules are applied consistently and that no data is held beyond its intended retention window.

6. Your Privacy Rights

As a 3xxw player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the 3xxw support team via live chat or by emailing [email protected]. All rights requests will be acknowledged within 5 business days and fulfilled within 30 days of receipt, unless the complexity of the request requires an extension (in which case you will be notified).

• Right of Access: You have the right to request a copy of all personal data that 3xxw holds about you. We will provide this in a structured, commonly used, machine-readable format (JSON or CSV) upon request.
• Right to Rectification: If any personal data held by 3xxw is inaccurate or incomplete, you have the right to request that it be corrected. For most account data, you can update information directly in your account profile settings.
• Right to Erasure: You may request that 3xxw delete your personal data. This right is subject to legal retention obligations — for example, financial transaction records required for AML compliance cannot be deleted early. Where deletion is not possible, 3xxw will explain why and confirm what data is retained and for how long.
• Right to Restrict Processing: In certain circumstances (for example, while a data accuracy dispute is being resolved), you may request that 3xxw restrict processing of your data. During a restriction, we may store your data but will not process it for other purposes.
• Right to Data Portability: You have the right to receive your personal data in a portable format and to request that it be transmitted directly to another service provider where technically feasible.
• Right to Object to Marketing: You may withdraw your consent to marketing communications at any time by updating your preferences in your 3xxw account settings, by clicking the unsubscribe link in any marketing email, or by contacting our support team.
• Right to Human Review of Automated Decisions: Where 3xxw has made a significant automated decision affecting your account (such as a fraud flag or withdrawal restriction), you have the right to request that a human member of the 3xxw team reviews that decision.

3xxw will never penalise you for exercising your privacy rights. Exercising these rights has no effect on your ability to use the platform, subject only to the platform's operational requirements (for example, KYC verification remains mandatory for withdrawal regardless of a data access request).

7. Data Security Measures

3xxw applies a layered security architecture to protect personal data at every stage of its lifecycle — from the moment it is submitted on the 3xxw.app platform to the point at which it is securely deleted. Our security measures include the following:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the 3xxw platform is encrypted in transit using industry-standard TLS 1.2 or 1.3 protocols, preventing interception by any third party.
• AES-256 Encryption at Rest: Personal data stored on 3xxw servers is encrypted at rest using AES-256, the same standard used by financial institutions and government systems worldwide.
• Access Controls: Access to production data environments is restricted to a defined list of authorised personnel. Access is granted on a least-privilege basis — meaning each team member can only access the data strictly necessary for their role. All access events are logged and audited.
• Multi-Factor Authentication: Administrative access to 3xxw systems requires multi-factor authentication. Players are also strongly encouraged to enable two-factor authentication (2FA) on their own accounts via the security settings menu.
• Penetration Testing: 3xxw conducts scheduled independent penetration tests of the platform's infrastructure and application layer to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: 3xxw maintains a formal data breach response plan. In the event of a confirmed data breach affecting player personal data, 3xxw will notify affected players within 72 hours of confirming the breach, provide a clear description of what data was affected, and outline the steps taken to contain and remediate the incident.
• Vendor Security Standards: All third-party service providers with access to 3xxw player data are required to demonstrate security standards equivalent to those described here, and are subject to periodic security reviews as a condition of their ongoing engagement with 3xxw.

8. Policy Updates and Contact

3xxw reviews this Privacy Policy on a regular basis and may update it to reflect changes in our data practices, applicable laws, regulatory requirements, or the services we offer. The effective date at the top of this document is updated each time a material change is made. Where a change is significant — for example, a new category of data collection or a new purpose for processing — 3xxw will notify all registered players by email at least 14 days before the change takes effect.

Your continued use of the 3xxw platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with a material change, you have the right to close your account before the change takes effect. Contact 3xxw support to initiate account closure and any applicable balance withdrawal.

This Privacy Policy is governed by and construed in accordance with the laws applicable to the operation of 3xxw. It is intended to reflect best practice in data protection for online gaming platforms serving the Bangladesh market and to align with internationally recognised privacy frameworks.

How to Contact Us About Privacy

If you have any question, concern, or request relating to this Privacy Policy or the way 3xxw handles your personal data, please contact our privacy support team through any of the following channels:

• Live Chat: Available 24/7 directly on the 3xxw.app platform — average response time 2–5 minutes.
• Email: [email protected] — please use the subject line "Privacy Request" for fastest routing.
• Response Commitment: All privacy-related enquiries are acknowledged within 1 business day (Bangladesh Standard Time, UTC+6) and resolved within 30 days.

For questions about the full legal terms governing your use of the 3xxw platform, please also review the Terms & Conditions and the Responsible Gaming policy, both of which form part of your agreement with 3xxw.