Privacy Policy
for lucky33

§1 Who We Are

lucky33 (referred to in this Policy as "lucky33", "we", "us", or "our") operates the online casino and sports betting platform accessible at lucky33.ws. lucky33 is the data controller responsible for the personal data of registered players and website visitors collected through the Platform.

lucky33 holds an internationally recognised gaming licence and is required under the conditions of that licence to collect and process certain categories of personal data for the purposes of identity verification, anti-money laundering compliance, responsible gaming, and fraud prevention. The processing activities described in this Policy are conducted in accordance with those licence obligations.

If you have any questions or concerns about how lucky33 handles your personal data, you may contact our Data Support team at any time. Contact details are provided in Section 14 of this Policy.

§2 Personal Data We Collect

lucky33 collects the following categories of personal data from players and Platform visitors. The specific data points collected in each category depend on how you interact with the Platform:

Category	Examples	When Collected
Identity Data	Full name, date of birth, CNIC / passport number, nationality	Account registration & KYC verification
Contact Data	Email address, mobile number, residential address	Account registration & profile updates
Financial Data	Masked payment method references (JazzCash, EasyPaisa, HBL, UBL, card last 4 digits), transaction history in PKR	Deposits, withdrawals, KYC verification
Gaming Activity Data	Game sessions, bet history, win/loss records, bonus usage, wager amounts	Ongoing platform use
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Automatic collection on site visit
Communications Data	Live chat transcripts, support email correspondence, feedback submissions	When you contact support
Responsible Gaming Data	Deposit limits set, self-exclusion status, cooling-off periods, session limit preferences	When responsible gaming tools are used

§3 How We Collect Your Data

lucky33 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, use responsible gaming tools, contact our support team, or respond to surveys or promotions.
• Automatically — through cookies, log files, and analytics tools when you visit lucky33.ws or use the Platform. Technical data such as your IP address, device identifiers, and session behaviour are collected automatically during each visit.
• From third-party verification providers — when lucky33 conducts Know Your Customer (KYC) checks, identity data may be verified against third-party databases operated by identity verification and anti-money laundering compliance providers.
• From payment processors — transaction confirmation data, masked payment references, and fraud screening signals may be shared with lucky33 by our payment processing partners when you make a deposit or withdrawal.

§4 How We Use Your Personal Data

lucky33 uses the personal data we collect for the following purposes:

4.1 — Account Management

To create and maintain your lucky33 account, verify your identity, process deposits and withdrawals in PKR, manage bonuses and promotional credits, and provide you with access to all platform features including cricket betting, live dealer tables, Ezugi Live, WM Live, and slot games.

4.2 — Legal & Regulatory Compliance

To fulfil our obligations under our international gaming licence, including KYC identity verification, age verification (21+ requirement), anti-money laundering (AML) screening, politically exposed person (PEP) checks, and transaction monitoring. lucky33 is legally required to collect and retain this data and cannot operate its licensed platform without doing so.

4.3 — Fraud Prevention & Platform Security

To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, match-fixing, money laundering, and unauthorised access to player accounts. Technical data including IP addresses and device fingerprints are used for this purpose.

4.4 — Responsible Gaming

To administer and enforce responsible gaming tools you have activated, including deposit limits, session limits, cooling-off periods, and self-exclusion. lucky33 uses gaming activity data to identify patterns that may indicate problem gambling and, where appropriate, to proactively reach out to affected players.

4.5 — Customer Support

To respond to your support queries, resolve disputes, investigate complaints, and improve the quality of our customer service. Support communications are retained for quality assurance and regulatory audit purposes.

4.6 — Marketing Communications

With your explicit consent, to send you promotional offers, bonus notifications, PSL cricket betting promotions, and other marketing communications via email or SMS. You may withdraw your consent to marketing communications at any time by updating your account notification preferences or contacting our support team.

4.7 — Platform Improvement

To analyse aggregated, anonymised usage data to improve the performance, usability, and game selection of the lucky33 Platform. Individual players are not identifiable from the aggregated datasets used for this purpose.

§5 Legal Basis for Processing

lucky33 processes personal data on the following legal bases depending on the specific processing activity:

• Performance of a contract — processing necessary to register your account, accept deposits, settle bets, and provide the services you have requested as a lucky33 player.
• Legal obligation — processing required to comply with KYC, AML, age verification, and other regulatory requirements imposed by lucky33's gaming licence.
• Legitimate interests — processing carried out in the legitimate interests of lucky33 to prevent fraud, secure the Platform, and improve service quality, where those interests are not overridden by your privacy rights.
• Consent — processing for marketing communications, non-essential cookies, and any other activity where we have specifically asked for and received your consent. You may withdraw consent at any time.

§6 Sharing Your Personal Data

lucky33 does not sell, rent, or trade your personal data to any third party. We may share your data with the following categories of recipients only where necessary and subject to appropriate data protection obligations:

• Payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, 1LINK, Raast, Visa, and Mastercard processing partners, solely to facilitate your deposits and withdrawals in PKR.
• KYC & AML providers — third-party identity verification and anti-money laundering compliance services used to verify your identity and screen transactions as required by our gaming licence.
• Game content providers — providers of live dealer, slot, and sports data feeds (such as Ezugi and WM) may receive your player ID and gaming session data to facilitate gameplay. These providers do not receive your full identity or financial data.
• IT & infrastructure providers — cloud hosting, security, and platform infrastructure providers who process data solely on lucky33's instructions and under strict contractual confidentiality obligations.
• Regulatory & law enforcement authorities — where lucky33 is legally required to disclose data under applicable law, court order, or gaming licence conditions, including disclosures to gaming regulators and financial intelligence units.

§7 International Data Transfers

As an internationally licensed platform serving players primarily based in Pakistan, lucky33 may process or store personal data on servers located outside of Pakistan. Where personal data is transferred to a country that does not provide the same level of data protection as Pakistan's applicable data protection framework, lucky33 implements appropriate safeguards including contractual data protection clauses with the receiving party.

By registering an account with lucky33, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan as described in this Policy.

§8 Data Retention

lucky33 retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required by applicable law and our gaming licence conditions. The following retention periods apply as a general guide:

• Account and identity data — retained for the duration of your active account plus a minimum of five (5) years following account closure, as required for AML and regulatory compliance purposes.
• Transaction and financial data — retained for a minimum of five (5) years following the date of the transaction, as required by anti-money laundering regulations.
• Gaming activity data — retained for a minimum of three (3) years following account closure for responsible gaming monitoring and dispute resolution purposes.
• Marketing communications data — retained until you withdraw your consent to receive marketing, after which it is deleted or anonymised within 30 days.
• Technical and log data — typically retained for up to twelve (12) months for security monitoring and fraud detection purposes.

Where data is no longer required for any active purpose and no legal retention obligation applies, lucky33 will securely delete or anonymise that data.

§9 Cookies & Tracking Technologies

lucky33 uses cookies and similar tracking technologies on the lucky33.ws Platform. Cookies are small text files stored on your device that help us deliver a functional, personalised, and secure experience.

9.1 — Types of Cookies We Use

• Essential cookies — required for the Platform to function correctly, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional cookies — used to remember your preferences such as language settings and game display options.
• Analytics cookies — used to collect aggregated, anonymised data about how visitors interact with the Platform, helping us identify performance issues and improve the user experience.
• Security cookies — used to detect and prevent fraudulent activity, bot traffic, and unauthorised account access attempts.

9.2 — Managing Cookies

You may configure your browser to refuse or delete non-essential cookies at any time. Please note that disabling essential cookies will impair your ability to log in and use the lucky33 Platform. Detailed instructions for managing cookies in popular browsers are available through your browser's help documentation.

§10 Your Privacy Rights

As a lucky33 player, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data lucky33 holds about you at any time.
• Right to rectification — you may request correction of inaccurate or incomplete personal data. You can update basic profile information directly within your lucky33 account settings.
• Right to erasure — in certain circumstances, you may request that lucky33 delete your personal data. Note that legal retention obligations (such as AML requirements) may prevent full erasure of some data categories.
• Right to restriction of processing — you may request that lucky33 restrict the processing of your data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to data portability — you may request a copy of the personal data you have provided to lucky33 in a structured, machine-readable format.
• Right to object — you may object to the processing of your personal data based on legitimate interests, including for direct marketing purposes.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the lucky33 Data Support team via live chat or email as described in Section 14. We will respond to verified requests within thirty (30) calendar days. We may need to verify your identity before processing any data rights request.

§11 Children's Privacy

The lucky33 Platform is strictly intended for adults aged 21 years and over. lucky33 does not knowingly collect personal data from any individual under the age of 21. If lucky33 becomes aware that personal data has been collected from an under-age individual, that data will be deleted immediately and the associated account will be permanently closed with all balances forfeited.

§12 Security Measures

lucky33 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and the lucky33 Platform.
• Encryption of sensitive data at rest within lucky33's secure database infrastructure.
• Role-based access controls that limit employee access to personal data to only those individuals who require it to perform their job functions.
• Regular security audits, penetration testing, and vulnerability assessments of Platform infrastructure.
• Fraud detection systems that monitor for suspicious login behaviour, unusual transaction patterns, and multi-account activity.
• PCI-DSS compliant payment processing to protect your financial data.

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, lucky33 will notify affected players in accordance with applicable data breach notification requirements.

§13 Updates to This Privacy Policy

lucky33 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or gaming licence requirements. The effective date shown at the top of this Policy indicates when the current version was last updated.

Where a material change is made to this Policy, lucky33 will notify registered players via the email address associated with their account or via a prominent notice on the Platform prior to the change taking effect. Non-material clarifications may take effect immediately upon publication. Your continued use of the lucky33 Platform following any update constitutes your acceptance of the revised Privacy Policy.

§14 Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact the lucky33 Data Support team through the following channels:

• Live Chat: Available 24/7 directly on the lucky33 Platform
• Email: [email protected]

We aim to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within thirty (30) calendar days of receipt. For complex requests involving large volumes of data, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension before the initial deadline expires.