Privacy Policy — os333 Data Commitment

Who We Are

os333 is an internationally licensed online casino and sports betting platform accessible at os333.org. We provide cricket betting, live casino games, slots, instant games, and associated player account services to English-speaking players across Pakistan and other eligible jurisdictions. References in this Privacy Policy to "os333", "we", "us", or "our" refer to the os333 platform and its operating entity as registered under our international gaming license.

For the purposes of this Privacy Policy, os333 acts as the data controller in respect of the personal data you provide when registering an account, making deposits, placing bets, or otherwise interacting with the os333 platform. As data controller, we determine the purposes and means by which your personal data is processed, and we take full responsibility for ensuring that processing is carried out in compliance with applicable data protection principles.

Data We Collect

os333 collects personal data from players at different stages of the account lifecycle — at registration, during KYC verification, during gameplay and betting activity, and through ongoing platform interactions such as support communications. The categories of personal data we collect are described in detail below.

os333 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information, except where such data is incidentally disclosed during a responsible gaming interaction — for example, if a player discloses a health-related reason for requesting self-exclusion. Any such data disclosed in that context is treated with the highest level of confidentiality and processed solely for the purpose of providing appropriate responsible gaming support.

How We Use Your Data

os333 uses your personal data strictly for defined, legitimate purposes that are directly connected to the operation of the platform and the delivery of our services to you as a player. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected.

• Account Creation & Management: We use your identity and contact data to create and maintain your os333 player account, verify your identity during KYC, and manage your account settings including responsible gaming tools such as deposit limits and self-exclusion.
• Service Delivery: Your gaming and financial data is used to process your bets, settle your winnings in PKR, manage your wallet balance, and execute deposit and withdrawal transactions via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT TRC20.
• Legal & Regulatory Compliance: os333 is obligated under its international gaming license to conduct KYC verification, apply anti-money laundering (AML) controls, and maintain comprehensive transaction records. Your identity, financial, and gaming data is processed to fulfil these mandatory obligations.
• Fraud Prevention & Platform Security: Technical data including IP addresses, login timestamps, and device fingerprints is used to detect and prevent fraudulent activity, account takeovers, bot usage, and multi-accounting on the os333 platform.
• Customer Support: Communications data from live chat and email interactions is used to respond to your queries, resolve disputes, and improve the quality of our support service.
• Marketing Communications: With your consent, we may use your contact data to send you information about os333 promotions, PSL cricket betting offers, new slot releases, and bonus opportunities relevant to Pakistani players. You may withdraw this consent at any time from your account settings.
• Platform Improvement: Aggregated, anonymised technical and gaming data may be used to analyse player behaviour patterns, improve platform performance, and develop new features. This analysis does not identify you personally.
• Responsible Gaming: Your preference data, gaming history, and account activity may be reviewed by our responsible gaming team where there are indicators of potential problem gambling, in order to offer appropriate support tools or interventions.

Legal Basis for Processing

Every processing activity carried out by os333 on your personal data is supported by one or more recognised legal bases. The principal legal bases on which os333 relies are as follows:

• Performance of a Contract: Processing your registration data, KYC documents, financial transactions, and betting activity is necessary to fulfil the contractual relationship between you and os333 — specifically, to provide you with access to the gaming and betting services you have registered for.
• Legal Obligation: Processing for KYC verification, AML monitoring, and the maintenance of transaction records is required by the conditions of os333's international gaming license and applicable regulatory obligations. os333 cannot operate the platform without fulfilling these requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and anonymised analytics is carried out on the basis of os333's legitimate interest in operating a secure and fair gaming platform. os333 has assessed that these interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications is carried out on the basis of your freely given, specific, and informed consent, obtained at the time of registration or subsequently through your account settings. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Third Parties

os333 does not sell your personal data to any third party under any circumstances. We share your data only where it is strictly necessary for the delivery of our services or where we are legally required to do so. The categories of third parties with whom your data may be shared are described below.

• Payment Processors: To process your PKR deposits and withdrawals, os333 shares the minimum necessary financial data with our payment partners — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. Each payment partner processes this data under their own privacy policy and applicable financial regulations. os333 does not store full bank account numbers or full card details on its own servers.
• Game Providers: Live casino, slot, and instant game content on os333 is provided by licensed third-party game studios. These providers may receive a session token and anonymised player reference when you launch a game, as technically required to initialise the game session. They do not receive your name, CNIC details, or financial information.
• KYC & Identity Verification Partners: os333 uses licensed identity verification service providers to assist with the KYC process. These providers process the identity documents you submit — such as CNIC scans and proof of address — on our behalf and under strict confidentiality agreements. They are not permitted to use your data for any purpose other than KYC verification for os333.
• Regulatory & Law Enforcement Authorities: os333 is legally obligated to report certain types of suspicious financial activity to relevant regulatory and law enforcement authorities under its international gaming license obligations. We may also disclose player data in response to a valid legal order, court order, or regulatory direction. os333 does not make such disclosures voluntarily or without proper legal authority.
• Professional Advisors: os333 may share limited personal data with legal counsel, auditors, or compliance consultants where strictly necessary for the provision of professional advice relating to the operation of the platform. All such advisors are bound by professional confidentiality obligations.

Cookies & Tracking Technologies

os333 uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and collect anonymised usage analytics. By continuing to use os333.org after being presented with our cookie notice, you consent to the use of cookies as described in this section.

You may manage your cookie preferences at any time through the cookie settings panel accessible from the footer of any page on os333.org. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. Disabling functional or analytics cookies will not prevent you from gaming but may affect your platform experience.

Data Retention

os333 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by the regulatory obligations attached to our international gaming license. The retention periods applicable to the main categories of data we hold are summarised below.

• Account & Identity Data: Retained for the lifetime of your os333 account plus a minimum of five years following account closure, as required for AML and gaming license compliance.
• KYC Documents: Retained for a minimum of five years from the date of submission, or longer where specifically required by the conditions of our gaming license or a regulatory direction.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, in compliance with international AML record-keeping requirements.
• Gaming & Betting History: Retained for the lifetime of your account plus three years following account closure, for dispute resolution, audit, and responsible gaming assessment purposes.
• Support Communications: Live chat transcripts and email records are retained for two years from the date of the interaction, to support quality assurance and dispute resolution processes.
• Marketing Consent Records: Records of your marketing consent (or withdrawal of consent) are retained for the lifetime of your account plus two years, to demonstrate compliance with consent requirements.
• Technical Logs: IP address logs, login records, and device data are retained for 12 months from the date of generation, after which they are deleted or fully anonymised.

When your data reaches the end of its retention period, os333 will securely delete or anonymise it in accordance with our internal data disposal procedures. Where data is anonymised rather than deleted, the anonymised data no longer constitutes personal data and may be retained indefinitely for statistical purposes.

Security Measures

os333 implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security programme is designed in accordance with internationally recognised information security principles and is reviewed regularly to address evolving threats.

• Encryption in Transit: All data transmitted between your device and os333.org is encrypted using industry-standard TLS (Transport Layer Security) protocols. This applies to your login credentials, personal data, financial transaction data, and all other communications with the platform.
• Encryption at Rest: Sensitive personal data stored on os333's servers — including identity documents and payment method references — is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to player personal data is restricted on a strict need-to-know basis. os333 staff are granted access only to the data categories required for their specific job function. All data access is logged and monitored.
• Two-Factor Authentication: os333's internal systems require two-factor authentication for all staff accessing player data. We also make two-factor authentication available to players for their own account security.
• Regular Security Audits: os333's platform and data infrastructure are subject to regular independent security audits and penetration testing. Findings are addressed on a risk-prioritised basis.
• Data Breach Procedures: os333 maintains a documented data breach response procedure. In the event of a security incident that is likely to result in a risk to your rights, os333 will notify affected players and relevant regulatory authorities within the timeframes required under applicable law.

Your Data Rights

As a player on os333, you hold meaningful rights over the personal data we hold about you. os333 is committed to honouring these rights promptly and without unnecessary friction. The rights available to you are described below.

• Right of Access: You have the right to request a copy of all personal data that os333 holds about you. We will respond to verified access requests within 30 days. Requests can be submitted via live chat or by emailing [email protected].
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For basic account data such as your email address or phone number, corrections can be made directly from your account settings panel.
• Right to Erasure: You may request that os333 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other legal basis for processing. Please note that this right is subject to os333's legal obligations to retain certain data categories (such as KYC and financial records) for minimum statutory periods.
• Right to Restriction: You may request that os333 restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you may request that os333 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of os333's legitimate interests, including processing for fraud prevention and platform analytics. os333 will assess your objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — principally marketing communications — you may withdraw that consent at any time from your account settings. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, please contact os333 support via live chat on the platform, or in writing at [email protected]. os333 will verify your identity before processing any data rights request to ensure that personal data is not disclosed to an unauthorised party. We will respond to all verified requests within 30 calendar days.

Children & Minors

os333 applies multiple layers of age verification during the registration and KYC process specifically to prevent access by minors. Our KYC process requires submission of a government-issued identification document — such as a Pakistani CNIC — which confirms both identity and date of birth. Accounts where the KYC documents confirm an age below 21 will not be activated for real money gaming.

Parents and guardians in Pakistan who are concerned about minors accessing online gaming platforms are encouraged to make use of parental control software available for mobile and desktop devices. If you believe a minor is using or attempting to use os333, please contact our support team immediately via live chat so that appropriate action can be taken without delay.

Cross-Border Data Transfers

os333 is an internationally licensed platform, and the operation of our services may involve the transfer of your personal data to servers or service providers located outside Pakistan. Such transfers may be required, for example, when your data is processed by our KYC verification partner, our game providers, or our cloud infrastructure providers.

Where your data is transferred outside Pakistan, os333 takes steps to ensure that an adequate level of data protection is applied to that transfer. These steps may include:

• Transferring data only to service providers located in jurisdictions that are recognised as providing an adequate level of data protection under applicable international standards.
• Entering into contractual clauses with recipient service providers that require them to protect your data to a standard equivalent to the protections described in this Privacy Policy.
• Conducting due diligence on all third-party service providers to confirm that they maintain appropriate technical and organisational security measures for personal data in their possession.

If you wish to obtain further information about the safeguards in place for cross-border transfers of your data, please contact os333 support at [email protected].

Policy Updates

os333 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes to the services we offer, or changes in applicable regulatory requirements. When we make material changes to this Policy — meaning changes that significantly affect how we process your personal data or your rights in respect of that data — we will notify you through one or more of the following channels: a notice displayed prominently on the os333 platform, an email sent to the registered email address on your account, or a notification within your account inbox.

The "Last Updated" date displayed at the top of this Privacy Policy indicates when the current version came into effect. We encourage you to review this Policy periodically so that you remain informed about how os333 processes your data. Your continued use of the os333 platform after any update has been notified constitutes your acknowledgement of the revised Privacy Policy.

If you do not agree to any material change in this Privacy Policy, you should discontinue your use of os333 and may request account closure by contacting our support team.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how os333 has handled your personal data, please contact us through one of the following channels:

• Live Chat: Available 24/7 directly on the os333 platform. Live chat is the fastest channel for data queries — our team typically responds within three minutes and can escalate your query to our data protection team where required.
• Email: For formal data rights requests and privacy complaints, please write to us at [email protected]. Please include your registered username and account ID to help us locate your records efficiently. We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days.

If you are not satisfied with os333's response to your privacy complaint, you have the right to escalate the matter to the independent dispute resolution body designated under os333's international gaming license. Details of this body are available on request from our support team.