Privacy Policy — os333

This Privacy Policy ("Policy") is published by os333, the online gaming platform accessible at os333.app and operated by its internationally licensed parent entity ("os333", "we", "our", or "us"). This Policy applies to all persons who access, register with, or use any service offered through the os333 Platform, including sports betting, live casino, slot games, fishing arcade titles, and all associated account management features.

os333 is committed to processing personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only the data that is genu inely necessary to deliver a safe, fair, and compliant gaming experience to our Members across Pakistan — from Karachi and Lahore to Islamabad, Faisalabad, and beyond.

By creating an os333 account or continuing to use the Platform after this Policy has been updated, you acknowledge that you have read and understood the terms of this Policy and consent to the processing of your personal data as described herein.

os333 collects personal data in the following categories, depending on how you interact with the Platform:

• Identity Data: Full legal name, date of birth, gender, and national identity information provided during registration and KYC verification.
• Contact Data: Email address, mobile phone number, and residential address, including city and postal code. Pakistani addresses are stored in their original format.
• Financial Data: Payment method details (JazzCash wallet IDs, EasyPaisa account references, HBL, UBL, and Meezan Bank account numbers as relevant), transaction history, deposit amounts, withdrawal requests, and account balance records. Full payment card numbers are never stored on os333 servers.
• Account Data: Your chosen username, encrypted password hash, account preferences, language settings, responsible gaming limits, and communication preferences.
• Gaming Activity Data: Game session records, bet history, wagering amounts, win/loss outcomes, bonus usage, and time-on-platform statistics.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and approximate geolocation derived from IP.
• Communications Data: Records of live chat conversations, support ticket contents, and email correspondence between you and os333 staff.
• KYC Documentation: Copies of government-issued identification (CNIC, passport, or driving licence), proof of address documents, and payment method verification materials submitted during the verification process.

os333 collects personal data through the following channels and mechanisms:

• Direct Submission: Information you provide when completing the os333 registration form, submitting KYC documents, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated Technologies: Cookies, web beacons, session tracking scripts, and server logs that record your interactions with the Platform automatically as you browse and play.
• Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when you initiate a deposit or withdrawal.
• Identity Verification Partners: Confirmation signals from third-party KYC and AML service providers engaged by os333 to validate identity documents and screen against sanctions lists.
• Responsible Gaming Systems: Self-reported information you provide when setting deposit limits, cooling-off periods, or self-exclusion requests via your account settings.

os333 processes personal data for the following specific and documented purposes:

os333 does not use your personal data for purposes beyond those listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.

os333 processes personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to fulfil our obligations to you under the os333 Terms and Conditions — including account management, payment processing, and service delivery — is carried out on the basis that it is necessary to perform the contract between us.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering legislation, age verification requirements, and licensing conditions imposed by os333's regulatory authority, is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for the purposes of fraud prevention, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of os333's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for promotional communications, personalised marketing, and certain cookie placements is carried out on the basis of your freely given, informed, and specific consent, which you may withdraw at any time via your account settings or by contacting support.

os333 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum financial data necessary to process your deposit and withdrawal transactions. Each processor is bound by their own data protection obligations.
• KYC and AML Providers: Regulated identity verification and anti-money laundering service providers receive identity and document data solely for the purpose of verifying your eligibility to use the os333 Platform. These providers operate under strict contractual data processing agreements.
• Technology Partners: Software providers, cloud hosting services, and platform infrastructure partners who process data on os333's behalf under data processing agreements that prohibit independent use of your data.
• Regulatory and Law Enforcement Authorities: os333 may disclose personal data to its licensing authority, relevant financial intelligence units, or law enforcement agencies where required to do so by a valid legal obligation, court order, or regulatory direction.
• Professional Advisers: Lawyers, accountants, and auditors engaged by os333 may access personal data to the minimum extent necessary to provide their professional services, subject to legal professional privilege and confidentiality obligations.

os333 uses cookies and similar tracking technologies to ensure the Platform functions correctly and to improve your experience as a Member. The categories of cookies used by os333 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to operate. They maintain your login session, remember your account preferences, and enable core gaming functionality. These cookies cannot be disabled without breaking the Platform.
• Analytical Cookies: These cookies collect anonymised information about how Members use the Platform — which games are most popular, where Members spend time, and how pages load. This data is used exclusively to improve Platform performance and user experience.
• Responsible Gaming Cookies: These cookies remember your responsible gaming settings, including session time reminders and deposit limit preferences, across browsing sessions.
• Preference Cookies: These cookies remember your language, display settings, and other personalisation choices so you do not need to re-enter them each visit.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the os333 Platform. os333 does not use third-party advertising cookies or place tracking pixels for external advertising networks.

os333 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active Account Data: Identity, contact, financial, and gaming activity data is retained for the duration of your active membership with os333.
• Post-Closure Retention: Following account closure, os333 retains Member data for a minimum of five (5) years to comply with anti-money laundering regulations, licensing obligations, and to resolve any outstanding disputes or legal claims.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years from the date of verification, in accordance with AML regulatory requirements.
• Support Communications: Live chat transcripts, support ticket records, and email correspondence are retained for three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Technical Logs: Server and access logs containing IP addresses and session data are retained for twelve (12) months for security and fraud investigation purposes.

Where data is retained beyond the period of your active membership, it is stored in a restricted, access-controlled environment and is accessible only to authorised os333 compliance and legal personnel.

os333 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and the os333 Platform is encrypted using industry-standard TLS/SSL protocols, preventing interception in transit.
• Encrypted Data Storage: Sensitive data fields, including password hashes and financial account references, are encrypted at rest using AES-256 encryption.
• Access Controls: Access to Member personal data is restricted to authorised os333 personnel on a strict need-to-know basis. All access events are logged and reviewed periodically.
• Two-Factor Authentication: os333 offers and recommends two-factor authentication (2FA) for all Member accounts to provide an additional layer of protection against unauthorised access.
• Regular Security Audits: os333 undergoes periodic penetration testing and security audits conducted by independent cybersecurity specialists to identify and remediate vulnerabilities.
• Incident Response: os333 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, you will be notified in accordance with applicable legal requirements.

As a Member of os333, you hold the following rights with respect to your personal data. To exercise any of these rights, contact os333 support via live chat or email with your registered account details:

• Right of Access: You have the right to request a copy of all personal data os333 holds about you, along with information about how it is being processed. os333 will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data os333 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Most contact and preference data can be updated directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to os333's legal retention obligations under AML and gaming regulations.
• Right to Restrict Processing: You may request that os333 restricts its processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is carried out on the basis of consent or contractual necessity and by automated means, you have the right to receive your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of os333's legitimate interests or for direct marketing purposes. Objections to direct marketing will be actioned immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

os333 is an adult gaming platform and is strictly prohibited to persons under the age of 21. os333 does not knowingly collect personal data from any individual under the age of 21. Our registration process includes mandatory date-of-birth verification and KYC identity checks specifically designed to prevent underage access to the Platform.

If os333 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated data will be securely deleted to the extent permitted by AML regulations, and any deposited funds will be returned to the originating payment source without delay.

If you have reason to believe that a minor has created an os333 account, please contact us immediately at [email protected] so that we may investigate and act without delay.

os333 is operated by an internationally licensed gaming entity, and some of the third-party service providers engaged by os333 — including KYC verification partners, cloud infrastructure providers, and AML screening services — may be located outside Pakistan. Where personal data is transferred to a country that does not offer an equivalent level of data protection, os333 ensures that appropriate safeguards are in place, including:

• Contractual clauses in data processing agreements that bind recipients to equivalent data protection standards.
• Transfers only to processors that maintain recognised security certifications such as ISO 27001 or SOC 2 Type II.
• Regular due diligence reviews of third-party data processors to confirm ongoing compliance with agreed data protection standards.

os333 will not transfer personal data to a jurisdiction that presents unacceptable data protection risks and has no mechanism in place to adequately safeguard that data.

os333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. Where changes are material — meaning they affect your rights or the way we use your data in a significant way — os333 will notify you by email to your registered address and via a prominent notice on the Platform at least 7 days before the changes take effect.

The current version of this Policy, together with its effective date, is always available at os333.app/privacy-policy. Continuing to use the Platform after the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should cease using the Platform and contact support to arrange account closure before the update takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way os333 handles your personal data, please reach out through the following channels:

• Live Chat: Available 24/7 directly within your os333 account dashboard. This is the fastest route to our support team, with average response times under 60 seconds for data-related queries.
• Email: [email protected] — Please allow up to 48 hours for responses to detailed privacy enquiries. Mark your subject line as "Privacy Request" to ensure prompt routing to our data team.

When submitting a data rights request, please include your registered os333 username, a description of your request, and a copy of your government-issued ID to allow us to verify your identity before acting on the request. This verification step is required to protect your data from being accessed or deleted by unauthorised third parties.