Privacy Policy — m333

1. Introduction

m333 ("the Platform", "we", "us", "our") operates the online gaming platform available at m333.cam. We are committed to protecting the personal data of all individuals ("Users", "you") who access or use the Platform. This Privacy Policy explains what personal data we collect, how we use it, with whom we share it and how we keep it secure.

This Privacy Policy forms part of our overall agreement with you and should be read alongside the Terms & Conditions and the Responsible Gambling Policy. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy.

m333 is an English-language platform serving users internationally, including users based in Pakistan. We recognise that our Pakistani users — whether in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar — have specific needs, and we are committed to handling their data with the same care and transparency we apply globally.

2. Definitions

Term	Meaning
"Personal Data"	Any information relating to an identified or identifiable natural person, including name, email address, date of birth, payment details, IP address and device identifiers.
"Processing"	Any operation performed on personal data, including collection, recording, storage, use, disclosure and deletion.
"Data Controller"	The entity that determines the purposes and means of processing personal data — in this case, m333.
"Data Processor"	A third party that processes personal data on behalf of m333 under a written agreement.
"Consent"	A freely given, specific, informed and unambiguous indication of the User's agreement to the processing of their personal data for a stated purpose.
"KYC"	Know Your Customer — identity verification procedures required to comply with anti-money laundering and fraud-prevention obligations.
"Cookie"	A small text file placed on your device by the Platform to support essential functionality, security and service improvement.

3. Data Controller

m333 acts as the Data Controller in respect of personal data collected through the Platform. All data processing activities described in this Policy are conducted by m333 or by third-party Data Processors operating under written data processing agreements that restrict their use of your data to the specific purposes we authorise.

For all data protection enquiries, requests to exercise your rights or formal complaints, please contact us at [email protected] (plain text — not a clickable link). We aim to acknowledge all data-related requests within five (5) business days.

4. Personal Data We Collect

4.1 Data You Provide Directly

When you register, verify your account or interact with Platform features, we collect:

• Full legal name, date of birth and gender;
• Email address and, where provided, a contact phone number;
• Residential address and country of residence;
• Government-issued identity documents and proof of address submitted for KYC verification;
• Payment method details (e.g., bank account or e-wallet identifiers — we do not store full card numbers);
• Communications you send to our support team via Live Chat or email.

4.2 Data Collected Automatically

When you use the Platform, our systems automatically record:

• IP address and approximate geolocation derived from it;
• Device type, operating system, browser type and version;
• Session data including pages visited, time on page and navigation path;
• Betting and gaming activity, including wager amounts, game selections and transaction history;
• Cookie and similar tracking technology data as described in Section 10.

4.3 Data Received from Third Parties

We may receive information about you from third-party KYC and identity verification providers, fraud-prevention services, payment processors and, where applicable, responsible gambling self-exclusion registers. This data is used solely for verification, compliance and fraud-prevention purposes.

5. Purposes of Processing

Purpose	Description
Account Management	Creating, maintaining and administering your m333 account, including password recovery and security alerts.
KYC & Compliance	Verifying your identity and age in accordance with applicable anti-money laundering, fraud prevention and responsible gambling obligations.
Payment Processing	Facilitating deposits and withdrawals and reconciling transaction records. Familiar payment rails — including Easypaisa, JazzCash, Raast and bank transfers — may be used as references; availability subject to operator and provider configuration.
Platform Operation	Providing access to games, betting markets, promotions and all other Platform features.
Customer Support	Responding to your enquiries, resolving disputes and processing formal complaints.
Responsible Gambling	Monitoring account activity for indicators of problem gambling behaviour and enforcing deposit limits, self-exclusion requests and cooling-off periods.
Fraud & Security	Detecting and preventing fraud, money laundering, multi-accounting, bonus abuse and other prohibited conduct as defined in the Terms & Conditions.
Service Improvement	Analysing aggregated usage data to improve Platform performance, user experience and product offerings.
Marketing (with consent)	Sending promotional communications about bonuses, new games and Platform updates — only where you have opted in. You may unsubscribe at any time.
Legal Obligations	Retaining records and responding to lawful requests from regulatory or law enforcement authorities where legally required.

6. Lawful Bases for Processing

m333 processes your personal data under the following lawful bases:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including account management, payment processing and Platform access.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations and responses to lawful regulatory requests.
• Legitimate Interests: Processing for fraud prevention, Platform security, responsible gambling monitoring and service improvement, where these interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications, where you have expressly opted in. You may withdraw consent at any time by using the unsubscribe option in any marketing email or by contacting support.

7. Data Sharing & International Transfers

7.1 Categories of Recipients

m333 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• KYC and Identity Verification Providers: To verify your identity documents and age.
• Payment Processors: To facilitate deposits and withdrawals through supported payment methods.
• Fraud Prevention and AML Service Providers: To screen transactions against watchlists and identify suspicious activity patterns.
• IT and Hosting Infrastructure Providers: For secure data storage and Platform operation.
• Responsible Gambling Registers: To enforce self-exclusion requests where applicable.
• Legal and Regulatory Authorities: Where required by applicable law or in response to a lawful order or request.

7.2 No Sale of Personal Data

m333 does not sell, rent, barter or otherwise transfer your personal data to unaffiliated third parties for their independent marketing, advertising or commercial purposes.

7.3 International Transfers

Some of our service providers may be located in countries outside your country of residence. Where personal data is transferred internationally, m333 ensures that appropriate safeguards are in place — including contractual data protection clauses or other legally recognised transfer mechanisms — to maintain a level of protection consistent with this Policy.

8. Data Retention

m333 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Indicative retention periods include:

• Active Account Data: Retained for the duration of the account relationship.
• Closed Account & Transaction Records: Retained for a minimum of five (5) years following account closure to meet anti-money laundering and regulatory record-keeping obligations.
• KYC Documents: Retained for the period specified by applicable AML legislation — typically five (5) years from the end of the business relationship.
• Support Communications: Retained for three (3) years from the date of the communication for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained until consent is withdrawn, plus an additional period as required to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised, aggregated data may be retained indefinitely for analytical purposes.

9. Security Measures

m333 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest using industry-standard algorithms;
• Role-based access controls limiting internal data access to authorised personnel on a need-to-know basis;
• Two-factor authentication options for user accounts;
• Regular security assessments and vulnerability monitoring;
• Incident response procedures including User notification in the event of a material data breach where required by applicable law.

10. Cookies & Tracking Technologies

10.1 What Cookies We Use

m333 uses the following categories of cookies:

Cookie Type	Purpose	Required?
Essential / Session	Maintain your login session, prevent cross-site request forgery (CSRF) and ensure core Platform functionality.	Yes
Security	Detect fraud, identify suspicious login patterns and enforce session expiry rules.	Yes
Preferences	Remember your language preference, display settings and responsible gambling limit configurations.	Optional
Analytics	Collect anonymised usage statistics to help improve Platform performance and user experience.	Optional

10.2 Managing Cookies

You may configure your browser to refuse non-essential cookies or to alert you when cookies are being placed. Please note that disabling essential or security cookies may impair your ability to use the Platform effectively, including preventing successful login.

m333 does not deploy advertising cookies, retargeting cookies or cookies that share your profile with third-party ad networks.

11. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights in relation to your personal data held by m333. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]".

m333 will respond to all verified data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further two months, in which case we will notify you of the extension and the reasons for it.

12. Minors & Age Restrictions

The m333 Platform is strictly restricted to individuals aged 18 years or older — or the higher minimum age required by the operator's licence jurisdiction, whichever is greater. m333 does not knowingly collect or process personal data from minors. If we discover that personal data has been submitted by a person below the applicable minimum age, that account will be immediately suspended, all associated funds will be frozen pending investigation and the data will be deleted to the extent permitted by applicable law.

If you believe a minor has registered an account on the Platform, please contact us immediately at [email protected]. Parents and guardians in Pakistan are encouraged to use parental control software to restrict access to gambling platforms from devices accessible to minors.

13. Third-Party Links & Integrations

The m333 Platform may contain references or links to third-party services (such as payment provider portals accessed during deposit or withdrawal flows). These third-party services operate under their own privacy policies, which m333 does not control. We encourage you to review the privacy documentation of any third-party service you interact with. m333 is not responsible for the privacy practices of third-party services.

The mention of payment services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah on this Platform is for contextual reference only. These payment providers operate their own independent data privacy practices. Any data you share directly with a payment provider is governed by that provider's own privacy policy.

14. Changes to This Privacy Policy

m333 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a new category of data collection or a new category of third-party sharing — we will notify registered Users by email or through a prominent in-platform notice at least fourteen (14) days before the changes take effect.

The most current version of this Policy will always be accessible at m333.cam/privacy-policy. The "Last Updated" date at the top of this document will reflect when the Policy was most recently revised. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

15. Contact Us & Complaints

For all data protection queries, requests to exercise your privacy rights or concerns about how m333 handles your personal data, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link). Use subject line: "Privacy Enquiry — [Your Username]".
• Live Chat: Available 24/7 on the Platform. English and Urdu support available.
• Help Center: Visit the FAQ page for answers to common data and privacy questions.

If you are not satisfied with m333's response to a privacy complaint, you may have the right to lodge a complaint with the supervisory authority in m333's licensing jurisdiction. Details of the relevant supervisory authority will be provided upon request. m333 commits to cooperating with supervisory authorities and complying with their advice in the resolution of any dispute.