laky33 Privacy Policy

1. Data Controller

laky33 ("laky33", "we", "us", "our") is the data controller responsible for the personal information you provide when using the laky33 platform at laky33.app. As data controller, laky33 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable data protection principles under international gaming and privacy standards.

If you have any questions about how laky33 handles your personal data, or wish to exercise any of your data rights, please contact our dedicated data privacy support team via the contact details provided in Section 14 of this policy.

2. Data We Collect

laky33 collects personal data through several channels: directly from you during registration and account use, automatically through your use of the platform, and from third-party partners such as payment processors and identity verification providers. The categories of data we collect include:

laky33 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or biometric data unless specifically required by applicable law or regulatory directive. Where laky33 requests a CNIC or passport copy, this is solely for mandatory age (21+) and identity verification purposes.

3. Legal Basis for Processing

laky33 processes your personal data only where a valid legal basis exists. The legal bases on which laky33 relies are:

• Performance of a contract: Processing necessary to create and manage your laky33 account, process deposits and withdrawals in PKR, and deliver the gaming services you have signed up for.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) obligations, age verification requirements (21+ minimum), fraud prevention regulations, and lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing necessary for laky33's legitimate business interests, including platform security, fraud detection, analytics to improve the player experience, and responsible gaming monitoring — provided these interests are not overridden by your rights and interests.
• Consent: Where you have explicitly opted in to receive marketing communications from laky33 about promotions, new games, and PKR deposit bonuses. You may withdraw this consent at any time.

4. How We Use Your Data

laky33 uses the personal data we collect for the following specific purposes, each of which is tied to a lawful basis described in Section 3:

• Account creation and management: Setting up, verifying, and maintaining your laky33 player account, including processing KYC documentation to confirm your identity and age.
• Payment processing: Executing PKR deposits via JazzCash, EasyPaisa, SadaPay, HBL, UBL, Meezan Bank, and USDT TRC20, and processing withdrawals to your registered payment method.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and unauthorised access to the laky33 platform.
• Responsible gaming: Monitoring gameplay patterns to identify indicators of problem gambling behaviour, and enforcing self-exclusion, deposit limits, and cooling-off periods requested by players.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of your interactions with the laky33 support team.
• Platform improvement: Analysing aggregated usage data to understand player behaviour, improve game offerings, and enhance the laky33 user experience for Pakistani players.
• Marketing communications: Sending you information about laky33 promotions, bonuses, cricket betting markets, and new games — but only where you have provided explicit consent or where permitted by applicable rules.
• Legal compliance: Meeting laky33's obligations under applicable AML, KYC, gaming regulations, and responding to lawful requests from authorities.

5. Data Sharing & Third Parties

laky33 does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, SadaPay, HBL, UBL, Meezan Bank, and USDT TRC20 gateway providers receive the financial data necessary to process your transactions.
• Identity verification providers: Third-party KYC partners who assist laky33 in verifying your CNIC, passport, or other identity documents and confirming your age is 21 or above.
• Fraud prevention services: Specialist providers that cross-reference account and transaction data against known fraud patterns and databases to protect all laky33 players.
• Game content providers: Third-party game studios whose titles are integrated into the laky33 casino and slots lobby may receive aggregated, anonymised game data. They do not receive your personal identity or payment information.
• Regulatory and law enforcement authorities: Where laky33 is legally required to disclose information to regulatory bodies, financial intelligence units, or law enforcement agencies in connection with AML investigations or other legal proceedings.
• Corporate transactions: In the event of a merger, acquisition, or restructuring involving laky33, your data may be transferred to the relevant successor entity, subject to the same privacy protections described in this policy.

All third parties with whom laky33 shares personal data are bound by contractual data processing agreements that require them to process your data only for the specified purpose, maintain appropriate security standards, and refrain from any secondary use of your information.

6. Cookies & Tracking Technologies

laky33 uses cookies and similar tracking technologies on laky33.app. Cookies are small text files stored on your device that help us deliver a functional, secure, and personalised experience. The types of cookies laky33 uses are:

• Strictly necessary cookies: Essential for you to navigate laky33 and use its features — such as maintaining your login session, storing your PKR wallet balance display, and remembering your language and region preferences. These cannot be disabled without impairing the core functionality of the platform.
• Analytical cookies: Allow laky33 to measure how players interact with the platform — which games are most popular, where players encounter difficulties, and how pages are navigated. This data is used in aggregate form to improve the platform.
• Functional cookies: Remember your preferences and settings — such as your deposit method of choice or preferred game categories — so you do not need to re-enter them on each visit.

laky33 does not use third-party advertising or tracking cookies that follow you across other websites. You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies may prevent certain laky33 features from functioning correctly.

7. Data Retention

laky33 retains your personal data for as long as your account is active and for a period thereafter as required by applicable legal and regulatory obligations. Specific retention periods that apply to laky33 player data include:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Transaction records: All PKR deposit and withdrawal records are retained for a minimum of five (5) years from the date of the transaction.
• Gaming records: Bet history and game session records are retained for a minimum of three (3) years from the date of the relevant gaming activity.
• Support communications: Records of your interactions with the laky33 customer support team are retained for three (3) years from the date of the communication.
• Marketing consent records: Retained for as long as your consent remains active, and for two (2) years following any withdrawal of consent.

When retention periods expire and no other legal basis for continued retention exists, laky33 securely deletes or anonymises the relevant personal data. Anonymised data may be retained indefinitely for statistical and analytical purposes without further notice.

8. Security

laky33 takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and laky33.app is encrypted in transit using current TLS protocols.
• Encryption at rest: Stored personal and financial data is encrypted using industry-standard algorithms to protect against unauthorised access to storage systems.
• Access controls: Access to personal data within laky33 is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-factor authentication (2FA): laky33 strongly recommends — and for withdrawals may require — 2FA on your account. You can enable 2FA at any time from your account security settings.
• Regular security audits: laky33 conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential risks.

While laky33 takes every reasonable precaution, no internet-based platform can guarantee absolute security. You also have a responsibility to protect your laky33 account — never share your password and always log out of shared devices. Report any suspected unauthorised account activity to our support team immediately.

9. International Data Transfers

laky33 operates as an international online gaming platform. Certain third-party service providers involved in operating the laky33 platform — such as cloud hosting providers, KYC verification partners, and game content studios — may be located outside Pakistan. Where personal data is transferred internationally, laky33 ensures that appropriate safeguards are in place to protect your information.

These safeguards include binding contractual clauses in agreements with third-party processors that require them to process your data in accordance with internationally recognised privacy standards equivalent to those described in this policy. laky33 does not transfer data to any jurisdiction that does not offer an adequate level of data protection without first putting appropriate contractual protections in place.

10. Children & Minors

The laky33 platform is strictly intended for users aged 21 years and above. laky33 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. Age verification is a mandatory step in the laky33 registration process, and identity documents confirming age may be requested at any time.

If laky33 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account and securely delete the associated personal data. If you believe a minor has registered on laky33, please contact our support team immediately so we can take prompt action.

11. Your Data Rights

As a laky33 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the laky33 data privacy team using the details in Section 14. laky33 will respond to all verifiable requests within 30 calendar days of receipt.

• Right of access: You may request a copy of all personal data laky33 holds about you, including your account details, transaction history, and gaming records.
• Right to rectification: If any personal data laky33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right to erasure: You may request that laky33 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to laky33's legal retention obligations under AML and gaming regulations.
• Right to restrict processing: You may ask laky33 to temporarily halt the processing of your personal data while a dispute or correction request is being resolved.
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format to transfer to another service provider.
• Right to object: You may object to laky33 processing your personal data on the grounds of legitimate interests, including direct marketing. Where you object to marketing, laky33 will cease processing for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting laky33 support or updating your communication preferences in your account settings.

laky33 will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or refuse the request, with written explanation.

12. Marketing Communications

laky33 may send you promotional communications about PKR deposit bonuses, cricket betting markets including PSL, slot tournaments, and other laky33 platform updates. We will only send you marketing communications where you have given your explicit consent during registration or subsequently updated your preferences to opt in.

You can opt out of laky33 marketing communications at any time by:

• Clicking the "unsubscribe" link in any laky33 marketing email.
• Updating your marketing preferences in your laky33 account settings.
• Contacting laky33 customer support and requesting removal from all marketing lists.

Please note that opting out of marketing communications does not affect laky33's ability to send you important transactional and account-related messages, such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts. These communications are necessary for the operation of your account and cannot be opted out of while your account remains active.

13. Changes to This Privacy Policy

laky33 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, platform features, legal obligations, or regulatory requirements. When material changes are made, laky33 will notify registered players via email or via a prominent notice on laky33.app prior to the changes taking effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage all laky33 players to review this Privacy Policy periodically to stay informed about how we protect your data. Continued use of laky33 following publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related complaint, please contact the laky33 data privacy team using the details below. All requests and complaints are handled in strict confidence.

Email:
support at laky33.app

Response times:
General privacy enquiries — within 48 hours (PKT business hours).
Formal data rights requests — within 30 calendar days of receipt.
Data breach notifications (where applicable) — within 72 hours of laky33 becoming aware.

laky33 takes all privacy complaints seriously. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction.