luck33 Privacy Policy

1 Overview & Data Controller

luck33 acts as the data controller for all personal data collected via the luck33.bio platform. As data controller, luck33 is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing complies with applicable data protection principles and international standards.

luck33 is an online gaming platform primarily serving Pakistani players. All data processing activities described in this Policy are carried out in connection with providing gaming services — including cricket betting, live casino, slots, arcade games, and racing — to eligible players in Pakistan and internationally authorised jurisdictions.

2 Personal Data We Collect

luck33 collects personal data through multiple touchpoints: at registration, during KYC verification, through your gaming activity, via payment processing, and automatically through your use of the platform. The categories of data we collect are set out in the table below.

luck33 does not collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, health data, political opinions, or biometric data, except where a scanned identity document incidentally reveals such information as part of mandatory KYC processes.

3 How We Use Your Personal Data

luck33 processes your personal data only for the purposes described in this Policy. We apply the principle of purpose limitation — meaning data collected for one stated purpose is not repurposed for unrelated activities without your explicit consent.

• Account Creation & Management: To register your luck33 account, verify your identity, maintain your account settings, and provide ongoing access to the platform.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT. Financial data is shared only with authorised payment processors.
• KYC & AML Compliance: To verify your age (21+), identity, and source of funds in compliance with applicable anti-money laundering obligations and responsible gaming requirements.
• Gaming Services: To operate the games, settle bets, calculate winnings, award bonuses, and maintain accurate records of your gaming activity on the luck33 platform.
• Customer Support: To respond to your queries, complaints, and requests submitted via Live Chat or email.
• Responsible Gaming: To monitor for signs of problem gambling, enforce self-exclusion requests, apply deposit limits, and comply with responsible gaming obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraud, cheating, collusion, multiple accounts, and other prohibited activities outlined in our Terms & Conditions.
• Platform Improvement: To analyse anonymised usage patterns and improve the luck33 platform experience for all users. No individual player is identified in this analysis.
• Legal Obligations: To comply with applicable laws, court orders, regulatory instructions, or licensing authority requirements where data disclosure is mandated.

4 Legal Basis for Processing

luck33 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and luck33 — i.e., to deliver the gaming services you have registered to use. This covers account management, payment processing, and game operation.
• Legal Obligation: Processing is required to comply with applicable law, including KYC verification, AML reporting, tax record-keeping, and responding to lawful regulatory requests.
• Legitimate Interests: Processing is necessary for luck33's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided these interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent — for example, for optional marketing communications — you may withdraw that consent at any time by contacting support via Live Chat. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5 Sharing Your Personal Data

luck33 does not sell personal data. We share personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment Processors: Financial data is shared with authorised payment service providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT processing partners — solely for the purpose of completing your transactions. These providers are bound by their own data protection obligations.
• KYC / Identity Verification Providers: Identity documents and verification data may be shared with licensed identity verification service providers to complete KYC checks as required under our operating obligations.
• Game Software Providers: Anonymised session data may be shared with our licensed third-party game providers for the purpose of operating RNG-certified casino games and resolving game disputes. No unnecessary personal identifiers are shared.
• Regulatory & Law Enforcement Authorities: luck33 may be required to disclose personal data to regulators, financial intelligence units, or law enforcement agencies where required by applicable law, a valid court order, or a lawful regulatory instruction. We will notify you of any such disclosure where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of the luck33 business, personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained.

All third parties to whom luck33 discloses personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the one for which it was disclosed.

6 Cookies & Tracking Technologies

luck33 uses cookies and similar technologies (such as local storage tokens and session identifiers) on the luck33.bio platform. Cookies are small text files stored on your device that help the platform function correctly and improve your experience.

luck33 does not use third-party advertising cookies, cross-site tracking pixels, or behavioural profiling technologies for the purpose of targeting you with ads on other websites. You may configure your browser to block or delete cookies, but doing so may affect the functionality of the luck33 platform — in particular, your login session and game preferences may not be retained.

7 Data Retention

luck33 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The table below sets out our standard retention periods for key data categories.

• Account & Identity Data: Retained for the duration of your active account, plus a minimum of 5 years following account closure to comply with financial record-keeping and AML obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of the last transaction on your account, in line with applicable AML record-keeping requirements.
• Transaction & Financial Records: Retained for a minimum of 5 years from the date of each transaction for financial audit and regulatory compliance purposes.
• Gaming Activity Logs: Retained for a minimum of 3 years from the date of each session for dispute resolution, fraud investigation, and responsible gaming monitoring purposes.
• Customer Support Records: Retained for 2 years from the date of the interaction unless the matter is subject to an ongoing dispute or investigation.
• Technical / Log Data: Retained for a maximum of 12 months, after which anonymised aggregated data may be retained indefinitely for statistical purposes.

When a retention period expires, personal data is securely deleted or anonymised. Where anonymisation is used, the resulting data can no longer be associated with any individual and is therefore no longer personal data within the scope of this Policy.

8 Your Privacy Rights

As a luck33 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via Live Chat on the luck33 platform. We will respond within 30 calendar days at no charge.

9 Data Security

luck33 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following controls:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive personal and financial data stored at rest.
• Multi-factor authentication (MFA) available for all player accounts.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular independent security audits and penetration testing of the luck33 platform.
• Automated fraud detection and anomaly monitoring systems operating 24/7.
• Secure data centres with physical access controls, redundant systems, and disaster recovery protocols.

While luck33 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials — username, password, and any MFA codes — confidential. If you suspect unauthorised access to your account, contact our support team via Live Chat immediately.

10 Minors — Strict 21+ Policy

The luck33 platform is strictly intended for adults aged 21 and over. luck33 does not knowingly collect personal data from any person under the age of 21. Our KYC verification process is designed specifically to identify and exclude underage players before they can access real-money gaming features.

If luck33 discovers or is notified that personal data has been submitted by a person under the age of 21 — whether at registration or at any later point — we will take the following immediate steps: (a) permanently suspend and close the relevant account; (b) securely delete all personal data associated with that account within 7 business days; (c) reverse any financial transactions where technically and legally possible; and (d) document the incident for regulatory reporting purposes.

11 Changes to This Policy

luck33 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer to Pakistani players. When we make material changes to this Policy, we will notify you by posting a prominent notice on the luck33 platform and — where we hold your email address — by sending you an email notification.

The updated Policy will display the revised "Last Reviewed" date at the top of this page. Your continued use of the luck33 platform after the effective date of any updated Policy constitutes your acceptance of the changes. If you do not agree with a revised Policy, you should cease using the platform and contact us to close your account and request deletion of your data.

We encourage all luck33 players to review this Privacy Policy periodically to stay informed about how we protect your data. Previous versions of this Policy are available on request by contacting our support team via Live Chat.

12 Contact Us — Privacy Queries

If you have any questions, concerns, or complaints about this Privacy Policy or the way luck33 handles your personal data, please reach out to our dedicated support team. We are committed to resolving all privacy-related queries promptly and transparently.