p333 Privacy Policy

p333 is the data controller responsible for the personal information processed in connection with your use of the p333 Platform, accessible at p333.games. As data controller, p333 determines the purposes for which and the manner in which personal data is processed.

p333 operates under internationally recognised gaming authority standards and is committed to handling your personal data in a manner consistent with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

p333 collects only the personal data that is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect are set out below.

p333 does not intentionally collect any special categories of sensitive personal data (such as health data, biometric data, or political opinions) unless specifically required to do so by applicable law or regulatory mandate.

p333 collects personal data through the following channels and mechanisms:

• Account Registration: When you create a p333 Account, you provide identity, contact, and credential data directly via the registration form.
• KYC Verification: When you submit identity documents (CNIC, passport, proof of address, selfies) in response to a verification request, we collect and store those documents securely.
• Deposits and Withdrawals: Financial data is captured when you initiate payment transactions via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank through the p333 payment interface.
• Platform Usage: Your gaming activity, betting patterns, and session data are recorded automatically as you use the Platform, including in-play cricket markets and PSL betting sessions.
• Cookies and Tracking Technologies: p333 uses cookies and similar technologies to collect technical data as described in Section 8 of this Policy.
• Support Interactions: When you contact p333's support team via live chat or email, the content of those communications is recorded for quality assurance and compliance purposes.
• Third-Party Verification Providers: p333 may receive identity verification results from licensed KYC and anti-fraud service providers engaged to assist with regulatory compliance.

The table below sets out the purposes for which p333 processes your personal data and the legal basis relied upon for each processing activity.

Where p333 relies on consent as the legal basis for processing (for example, sending marketing emails about PSL promotions or new slot releases), you may withdraw that consent at any time by updating your communication preferences in your Account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

p333 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

p333 engages trusted third-party service providers to support Platform operations, including payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank gateways), KYC and identity verification providers, cloud hosting and data storage providers, anti-fraud and security analytics firms, and customer support platform operators. All service providers are bound by data processing agreements requiring them to handle your data only on p333's instructions and to maintain appropriate security standards.

p333 may disclose personal data to governmental bodies, regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory mandate. p333 will notify you of such disclosures where legally permitted to do so.

In the event that p333 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred as part of that transaction. p333 will provide notice prior to any such transfer and ensure that the recipient entity is bound by privacy commitments no less protective than those set out in this Policy.

p333 may share your data with third parties for purposes not listed above if you have provided your explicit, informed consent to such sharing. You may revoke this consent at any time by contacting the p333 support team.

p333 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The general retention periods applied by p333 are as follows:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five years following Account closure, to satisfy anti-money-laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction in accordance with applicable financial regulations.
• KYC Documents: Retained for a minimum of five years following the conclusion of the business relationship, or longer if required by a specific regulatory obligation.
• Gaming Activity Data: Retained for three years from the date of the activity for Responsible Gaming monitoring purposes, and up to five years for compliance and dispute resolution purposes.
• Support Communications: Retained for three years from the date of the communication to support complaint resolution and quality assurance.
• Marketing Preferences and Consent Records: Retained for three years from the date consent was last confirmed or updated.
• Cookie and Technical Data: Session cookies are deleted when you close your browser. Persistent cookies and analytics data are retained for up to 13 months from the date of collection.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

p333 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the p333 Platform is encrypted using TLS 1.2 or higher. This applies to all page loads, login sessions, and financial transactions.
• Encryption at Rest: Sensitive personal data stored on p333's servers, including identity documents and financial records, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within p333's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
• Two-Factor Authentication: p333 offers and encourages two-factor authentication for all player Accounts to reduce the risk of unauthorised Account access.
• Penetration Testing: p333's Platform infrastructure is subject to regular independent security assessments and penetration testing.
• Incident Response: p333 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights, p333 will notify affected users and relevant authorities within the timeframes required by applicable law.

p333 uses cookies and similar tracking technologies (such as pixel tags and local storage objects) to operate, secure, and improve the Platform. The categories of cookies used by p333 are as follows:

These cookies are essential for the Platform to function. They include session management cookies that keep you logged in, security tokens, and cookies that remember your preferences during a single session. These cookies cannot be disabled as they are required for Platform operation.

Functional cookies remember your preferences across sessions, such as your preferred language, currency display (PKR), and game lobby layout. These cookies improve your experience but are not strictly required for the Platform to function.

p333 uses privacy-respecting analytics tools to understand how players interact with the Platform, which game categories are most popular, and where technical issues occur. Analytics data is aggregated and does not directly identify individual users. You may opt out of analytics cookies via the cookie consent manager accessible from the Platform footer.

When you first visit the p333 Platform, you will be presented with a cookie consent notice that allows you to accept, reject, or customise non-essential cookies. You can update your cookie preferences at any time by accessing the cookie settings panel. Please note that disabling certain cookies may affect the functionality of some Platform features.

As a p333 user, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact p333's support team via live chat or email. p333 will respond to all valid rights requests within 30 days.

Where processing is based on your consent (for example, marketing communications about new p333 promotions or PSL bonus offers), you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal can be completed via Account settings or by contacting support.

p333 enforces a strict 21+ age policy. The Platform is not directed at, and is not intended to be used by, individuals under the age of 21. p333 does not knowingly collect or process personal data from any person under 21 years of age.

As part of the account registration and KYC process, p333 requires all users to confirm that they are 21 or older and to submit valid government-issued identity documentation (such as a CNIC or passport) to verify this. Where p333 discovers or reasonably suspects that an Account is held by a minor, the Account will be immediately suspended, any funds deposited will be returned to the originating payment method, and the data associated with that Account will be securely deleted in accordance with applicable legal requirements.

p333 primarily processes and stores personal data on servers located within data centres operating under internationally recognised security and compliance standards. In some circumstances, personal data may be transferred to, or accessed by, service providers and infrastructure partners located outside Pakistan — for example, cloud hosting providers or KYC verification platforms operating regional processing centres.

Where personal data is transferred internationally, p333 ensures that appropriate safeguards are in place to protect that data, including contractual obligations on the receiving party that meet the standards required by applicable data protection law. p333 does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without first implementing appropriate transfer mechanisms.

You may request further information about the safeguards applied to international data transfers by contacting the p333 support team.

p333 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date at the top of this page will always reflect the date of the most recent revision.

Where changes to this Policy are material — for example, where we introduce a new purpose for processing your data or change the categories of third parties with whom data is shared — p333 will notify you by posting a prominent notice on the Platform and/or by sending a notification to the email address registered on your Account. Your continued use of the p333 Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how p333 is protecting your information.

If you have any questions, concerns, or complaints about this Privacy Policy or about how p333 processes your personal data, please contact us through one of the following channels:

• Live Chat: Available on all pages of the p333 Platform, 24 hours a day, 7 days a week. This is the fastest way to reach the support team for routine privacy queries.
• Email: [email protected] — for formal data subject requests (access, erasure, portability, etc.), please submit your request by email with the subject line "Data Subject Request" and include your registered Account email address for verification.

p333 will acknowledge all privacy-related complaints within 24 hours and will provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, p333 may extend the response period by a further 30 days and will notify you of this extension.

If you are not satisfied with p333's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority or the dispute resolution body associated with p333's gaming licence authority.