Privacy Policy — os333

1Introduction

This Privacy Policy ("Policy") is issued by os333.cam ("os333", "we", "our", "the Platform") and applies to all personal data collected from individuals ("you", "the User", "the Player") who access, browse, register on or otherwise use the services provided at os333.cam and associated subdomains or mobile interfaces.

os333 is an online entertainment platform providing sports betting, live casino and slot game services to adult players. In the course of providing these services, we collect and process certain categories of personal data. This Policy sets out what data we collect, why we collect it, how we use it, with whom we share it, and what rights you hold in relation to your information.

We are committed to handling your personal data responsibly, maintaining appropriate security standards and being transparent about our practices. This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy.

2Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

3Data Controller

The Data Controller responsible for personal data processed through os333.cam is the legal entity that operates the platform. For enquiries regarding how your personal data is processed, or to exercise any of your rights under this Policy, please contact us using the details provided in Section 16 of this Policy.

os333 has appointed a designated point of contact for data protection matters. All data subject requests, complaints and enquiries should be directed to the support contact listed in Section 16. We will acknowledge data-related requests within a reasonable timeframe and respond substantively as promptly as practicable.

4Data We Collect

We collect personal data in the following categories, depending on how you interact with the Platform:

4.1 Registration Data

When you create an Account, we collect:

• Full legal name
• Date of birth
• Email address
• Country of residence
• Username and encrypted password
• Mobile phone number (where provided)

4.2 Identity Verification (KYC) Data

To verify your identity and age, we may collect:

• A copy of a government-issued photo identity document (CNIC or passport). For Pakistani players, this typically means a scanned copy of your Computerised National Identity Card.
• A selfie photograph or short liveness video to confirm that the identity document belongs to you.
• Proof of residential address (such as a recent bank statement or utility bill) where applicable.
• Payment method verification documentation (such as a screenshot of your payment account).

4.3 Transaction & Financial Data

• Deposit amounts, withdrawal amounts and transaction history in PKR.
• Payment method identifiers (e.g., partial payment account references — full payment credentials are not stored by os333).
• Currency, timestamps and status of financial transactions.

4.4 Betting & Gaming Activity Data

• Sports wager history, casino game session records and outcome data.
• Game preferences, bet types, stake levels and win/loss records.
• Responsible gambling tool settings (deposit limits, session limits, self-exclusion status).

4.5 Technical & Device Data

• IP address and geolocation data (country/city level).
• Device type, operating system, browser type and version.
• Session timestamps, login records and platform interaction logs.
• Cookie and tracking technology data (see Section 10).

4.6 Communications Data

• Content of support chat transcripts and email exchanges with os333.
• Records of responsible gambling tool activations and self-exclusion requests.
• Account-related notification preferences.

5Legal Basis for Processing

We process your personal data on the following legal bases, depending on the purpose of processing:

6How We Use Your Data

os333 uses your personal data for the following specific purposes:

• Account Management: Creating and maintaining your Account, verifying your login credentials, and processing account updates.
• Identity & Age Verification: Confirming that you are the person you claim to be and that you meet the minimum age requirement of 18 years, or the higher minimum required by the operator's licence jurisdiction.
• Payment Processing: Facilitating PKR-denominated deposits and withdrawals through the payment methods available in the cashier. Payment method names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are referenced as context only; we process only the transaction data necessary for each operation.
• Fraud Prevention & AML Compliance: Monitoring transactions and account activity to detect suspicious patterns, prevent money laundering and enforce platform integrity controls.
• Responsible Gambling: Tracking responsible gambling tool settings (deposit limits, loss limits, session timers, self-exclusion status) and identifying patterns that may indicate problem gambling behaviour, in line with our Responsible Gambling Policy.
• Customer Support: Responding to account queries, complaints and technical issues submitted via live chat or email.
• Platform Security: Logging access events, detecting unauthorised account access and investigating security incidents.
• Service Improvement: Using aggregated and anonymised analytics data to improve Platform usability, game performance and overall user experience.
• Marketing Communications: Sending promotional emails, bonus notifications and platform updates to Players who have opted in to receive such communications. You may withdraw consent at any time by contacting support.
• Legal Compliance: Retaining records as required under applicable law and responding to lawful requests from competent authorities.

7Data Sharing & Disclosure

os333 does not sell, rent, lease or trade your personal data to third parties for marketing or commercial purposes. Your data may be shared in the following limited circumstances:

• KYC & Identity Verification Providers: Third-party service providers engaged to perform identity verification, liveness checks and document authentication as part of the KYC process.
• Payment Processors: Payment infrastructure providers that facilitate deposit and withdrawal transactions. These providers process only the minimal transaction data necessary to complete the payment.
• Game Technology Providers: Licensed game studios and live dealer providers whose games are made available on the Platform. These providers may receive session and outcome data necessary to operate the game.
• Fraud & AML Detection Services: Third-party compliance platforms used to screen transactions and account activity for potential money laundering, fraud or sanctions list matches.
• Regulatory & Law Enforcement Authorities: Where we are required by a court order, regulatory directive or lawful request from a competent authority to disclose your information, we will do so to the extent required by applicable law.
• Business Transfers: In the event of a merger, acquisition, asset sale or restructuring of the business operating os333, your personal data may be transferred to the acquiring or successor entity as part of that transaction, subject to equivalent data protection commitments.

8International Data Transfers

os333 operates internationally and your personal data may be transferred to and stored on servers located outside of Pakistan. Such transfers may be to jurisdictions that have different data protection standards from those applicable in your country of residence.

Where personal data is transferred internationally, os333 applies appropriate safeguards — such as standard contractual clauses or equivalent protective mechanisms — to ensure that your data receives an adequate level of protection regardless of where it is stored or processed.

By using the Platform and providing your personal data, you acknowledge that your data may be transferred to and processed in countries outside Pakistan. If you have questions about the safeguards applied to international transfers of your data, please contact us using the details in Section 16.

9Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes set out in this Policy, or for as long as required by applicable legal obligations — whichever is longer. Our general retention principles are:

• Active Accounts: Personal data is retained for the duration of your Account relationship with os333.
• Closed Accounts: Following Account closure, we retain your data for a minimum period consistent with applicable legal, regulatory and AML retention requirements — typically a period of five (5) years from Account closure, though this may be longer where required by law or an ongoing investigation.
• KYC & Identity Documents: Retained for the period required under applicable AML legislation, typically five (5) years from the end of the business relationship.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Marketing Consent Records: Retained for as long as consent remains valid, plus a reasonable period to demonstrate consent in the event of a complaint.

At the end of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10Cookies & Tracking Technologies

os333.cam uses cookies and similar tracking technologies to maintain session integrity, analyse Platform usage and support fraud prevention. The following categories of cookies may be present on the Platform:

Most web browsers allow you to control cookies through browser settings. However, blocking essential cookies will prevent the Platform from functioning correctly. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

11Security Measures

os333 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These include:

• SSL/TLS Encryption: All data transmitted between your device and os333.cam is encrypted using 256-bit SSL/TLS protocols, protecting it from interception during transit.
• Password Security: Account passwords are stored using one-way cryptographic hashing. We do not store passwords in plain text. os333 staff will never ask you for your password.
• Access Controls: Access to personal data within our systems is restricted on a need-to-know basis. Staff with access to sensitive data are subject to confidentiality obligations.
• Infrastructure Security: Server environments are protected by firewalls, intrusion detection systems and regular security audits.
• Incident Response: We maintain a documented data breach response procedure. In the event of a material data breach affecting your rights and freedoms, we will notify affected users within a reasonable period in accordance with applicable obligations.

12Your Rights in Relation to Personal Data

Subject to applicable law and certain limited exceptions, you hold the following rights in relation to the personal data os333 processes about you. To exercise any of these rights, contact us using the details in Section 16.

13Children's Privacy

os333 is strictly an adults-only platform. Access is prohibited for any individual under the age of 18, or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect or process personal data from individuals below the applicable minimum age.

If we become aware that personal data has been collected from an underage individual, we will close the relevant Account, void all associated activity, return any deposited funds through the original payment method where possible, and delete all associated personal data as promptly as practicable.

If you are a parent or guardian and believe that a minor has registered an Account on os333, please contact us immediately at the address in Section 16.

14Third-Party Links & Services

os333.cam may contain references to third-party game studios, sports data providers and payment infrastructure services. These third parties operate their own websites and services, which are governed by their own privacy policies. os333 is not responsible for the privacy practices or content of any third-party service.

When you use a payment method to deposit or withdraw funds, the relevant payment provider (such as a bank or mobile wallet service) processes your transaction data in accordance with their own privacy and data retention policies. os333 receives only the confirmation data necessary to credit or debit your Account.

15Updates to This Privacy Policy

os333 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or platform functionality. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they could significantly affect how your personal data is processed — we will provide reasonable notice by email to registered Account holders and/or by displaying a prominent notice on the Platform. Continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes.

We encourage you to review this Policy periodically to stay informed about how your data is handled.

16Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the personal data we process, please contact us through the following channels:

We acknowledge data rights requests within a reasonable period and aim to provide a substantive response within 30 days. Complex requests may take longer; we will communicate any extension with an explanation.

If you are dissatisfied with our response to a data-related complaint, you may have the right to escalate to a relevant supervisory authority in the jurisdiction applicable to your data rights.