Luck 33 Privacy Policy

1. Introduction

This Privacy Policy explains how Luck 33 ("the Platform", "we", "us") collects, stores, uses and protects personal information submitted by users ("you") when you register an account, make deposits or withdrawals in PKR, place bets, play casino or slot games, use the Luck 33 Android app or otherwise interact with any part of the platform.

We take data privacy seriously. Luck 33 is used by a large number of Pakistani users who trust the platform with their personal and financial information — that trust is not something we take lightly. This policy is written in plain language rather than dense legal text precisely because we want you to actually understand what happens with your data.

By registering an account on Luck 33 or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how your data is handled as described here, please stop using the platform and contact customer support to close your account.

This policy applies to data collected through the Luck 33 website, the mobile app and any communication channels including live chat and email support. It does not apply to third-party websites or services that may be linked from the platform — those have their own privacy policies.

2. Data We Collect

Luck 33 collects personal information in two ways: data you provide directly when using the platform, and data collected automatically through your device and browsing activity.

Information you provide directly:

• Full name, email address and Pakistani mobile number provided during registration.
• Date of birth submitted for age verification purposes.
• Identity documents (such as CNIC) submitted during the account verification process.
• Payment-related details including your JazzCash or Easypaisa mobile wallet number, bank account details or card information used when making deposits or requesting withdrawals.
• Communications you send to Luck 33 customer support via live chat or email, including the content of those messages.
• Preferences and settings configured within your account, such as deposit limits and notification preferences.

Information collected automatically:

• IP address and approximate geographic location derived from it.
• Device type, operating system version and browser type.
• Pages visited on the Luck 33 platform, time spent on each page and navigation paths.
• Betting and gaming activity, including bet history, game sessions, deposit and withdrawal records.
• Session cookies and analytical data used for platform performance and security monitoring.
• App usage data collected through the Luck 33 Android app, subject to the permissions you grant during installation.

3. Why We Use Your Data

Every piece of data Luck 33 collects is used for a specific, defined purpose. We do not collect information speculatively or "just in case". The table below outlines the main purposes for which personal data is processed on this platform.

Luck 33 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Account suspension decisions based on fraud detection are reviewed by the compliance team before being finalised.

4. Payment Data & PKR Transactions

All financial transactions on Luck 33 are denominated in PKR. When you initiate a deposit via JazzCash, Easypaisa, Raast, bank transfer or a debit/credit card, the payment is processed through a secure payment gateway. Luck 33 does not store full card numbers, CVV codes or mobile wallet PINs on its own servers at any point.

Payment data is tokenised by the payment processor at the point of transaction, meaning only an anonymised reference token is stored by Luck 33. This token is used to match a withdrawal request back to your original deposit method — it cannot be used to initiate transactions independently.

• Transaction records including deposit amounts, dates and payment method types are stored as part of your account history.
• These records may be reviewed by the Luck 33 compliance team in the event of a dispute, suspected fraud or a large withdrawal request.
• Payment data is never shared with third-party marketers or data brokers.
• In cases where fraud is confirmed, transaction records may be shared with the relevant payment provider or financial institution for investigation purposes.

5. Sharing Your Data

Luck 33 does not sell or rent personal data. We do not share your information with third-party advertising networks, data brokers or marketing platforms. Data sharing is limited to the following specific scenarios:

• Payment processors: Your payment details are shared with the relevant payment gateway (JazzCash, Easypaisa, Raast, bank networks or card processors) solely to complete your requested transaction.
• Identity verification partners: Where document verification is required, your submitted documents may be passed to a trusted third-party identity verification service operating under strict data handling agreements.
• Fraud prevention services: Device fingerprint data, IP addresses and betting pattern indicators may be shared with anti-fraud technology partners to identify suspicious activity and protect the platform.
• Technology providers: Cloud hosting, platform infrastructure and analytics tools used by Luck 33 may process data on our behalf under contractual data processing agreements that prohibit independent use of the data.
• Legal and regulatory obligations: If Luck 33 is required by a court order or applicable legal process to disclose user data, we will comply with that requirement. Where permitted, we will attempt to notify the affected user prior to disclosure.

Any third party that receives data from Luck 33 is required to handle it in accordance with applicable privacy standards and is prohibited from using it for any purpose beyond what is strictly necessary for the specific service they are providing to Luck 33.

6. Cookies & Tracking Technologies

Luck 33 uses cookies and similar technologies to keep your session active, protect against certain types of attacks and understand how users interact with different parts of the platform. We do not use advertising cookies or cross-site tracking technologies.

• Session cookies: Essential for keeping you logged into your account during a browsing session. These expire when you close your browser.
• Security cookies: Used to detect unusual login behaviour and protect against CSRF attacks. These are strictly necessary and cannot be disabled without affecting platform functionality.
• Analytics cookies: Anonymised data about page visits, session durations and device types, used to improve platform performance and identify technical issues. This data is aggregated and does not identify individual users.
• Preference cookies: Store your language and display settings so you do not have to reconfigure them on every visit.

You can manage or disable cookies through your browser settings. Disabling essential session cookies will prevent you from logging in to your Luck 33 account. Disabling analytics cookies will not affect your ability to use the platform.

7. Data Retention

Luck 33 retains personal data only for as long as it is necessary for the purposes described in this policy, or as required to meet standard record-keeping obligations. The following general retention periods apply:

• Active account data (profile, preferences, communication history) is retained throughout the lifetime of the account.
• Financial transaction records including deposit and withdrawal history are retained for a minimum of five years from the date of each transaction.
• Identity verification documents are retained for the duration of the account and for a period after account closure as required by anti-money-laundering obligations.
• Customer support communications are retained for up to two years from the date of the last message in a support thread.
• Analytical and behavioural data is aggregated and anonymised after 12 months and retained in anonymised form thereafter.

When an account is voluntarily closed by a user, Luck 33 will delete or anonymise personal profile data within a reasonable period, subject to the retention requirements listed above for financial and identity records. Accounts closed due to confirmed fraud or Terms violations may have their data retained for longer to support ongoing investigations.

8. Data Security

Luck 33 implements technical and organisational security measures appropriate to the nature of the data processed on the platform. These include:

• TLS encryption for all data transmitted between your device and Luck 33 servers.
• Encryption at rest for databases containing personal and financial data.
• Access controls that restrict internal staff access to personal data on a need-to-know basis.
• Regular security assessments of platform infrastructure and third-party integrations.
• Two-factor authentication options for user accounts to reduce the risk of unauthorised access.
• Automated monitoring for unusual account activity, including unusual login locations and atypical withdrawal patterns.

While Luck 33 takes security seriously and implements reasonable technical safeguards, no platform can guarantee absolute protection against all possible security threats. Users are responsible for maintaining the security of their own account credentials. If you believe your account has been compromised, contact customer support immediately to request a security freeze.

9. Your Rights Over Your Data

Luck 33 respects your right to understand and control how your personal data is used. As a registered user, you have the following rights which can be exercised by contacting customer support:

• Right of access: You can request a copy of the personal data Luck 33 holds about you, including account profile data, transaction history and communication logs.
• Right to correction: If any personal information on your account is inaccurate or out of date, you can request that it be corrected. For basic profile details such as email address or phone number, you may be able to update these directly through account settings.
• Right to deletion: You can request deletion of your account and associated personal data. Deletion requests are subject to mandatory retention requirements for financial records and identity documents. Data that must be retained by law cannot be deleted on request.
• Right to opt out of marketing: You can opt out of promotional communications at any time through your account notification settings or by informing customer support. Opting out of marketing does not affect essential account notifications.
• Right to raise a concern: If you believe Luck 33 has handled your personal data in a way that is inconsistent with this Privacy Policy, you have the right to raise a formal complaint with the customer support team.

Luck 33 will respond to data rights requests within a reasonable timeframe. Complex requests, such as full data access exports, may take up to 30 days to fulfil. We will keep you updated on the progress of your request.

10. Minors & Under-18 Users

Luck 33 is strictly an adults-only platform for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If, following an age verification check or a report from a third party, Luck 33 determines that an account has been created by someone under 18, the account will be immediately closed, all betting activity will be voided and any deposited funds will be returned to the originating payment method after identity checks are completed.

If you are a parent or guardian and you believe your child has registered an account on Luck 33 without your knowledge, please contact our customer support team immediately. We will investigate the matter promptly and take appropriate action, including account closure and data deletion where required.

11. Third-Party Services & Links

The Luck 33 platform may reference or link to third-party services in limited contexts, such as payment processors or app download sources. These external services operate under their own privacy policies, which Luck 33 does not control and is not responsible for.

Specifically in the context of PKR payments, when you complete a JazzCash or Easypaisa transaction, you will interact briefly with that provider's own interface or API. Your interaction with those services at the point of payment is governed by their respective privacy policies in addition to this one.

• Luck 33 does not embed third-party social media tracking pixels on the platform.
• Luck 33 does not use Google Ads remarketing tags or any equivalent cross-site advertising technology.
• Any analytics tools used by Luck 33 are configured in anonymised or privacy-safe modes that do not transmit personally identifiable information to the analytics provider.

12. Changes to This Privacy Policy

Luck 33 may update this Privacy Policy from time to time to reflect changes in the platform's features, data practices or applicable requirements. When material changes are made, the "Last updated" date at the top of this page will be revised accordingly.

For significant changes that affect how your personal or payment data is used, Luck 33 will make reasonable efforts to notify active users via email or an in-platform notification before the changes take effect. Continued use of the platform after a revised policy has been published constitutes your acceptance of the updated terms.

We encourage you to review this page periodically, particularly if you are a regular Luck 33 user. The most current version of the Privacy Policy will always be available at this URL. Archived versions of the policy are available on request through customer support.

13. Contact Us About Privacy

If you have questions or concerns about how Luck 33 handles your personal data, want to exercise any of your data rights, or wish to report a potential data privacy issue, please get in touch with the customer support team.

When contacting support about a data privacy matter, please include your registered email address and a brief description of your request or concern. For data deletion requests, you will be asked to complete an identity verification step before the request is actioned, to ensure account data is only deleted at the request of the verified account holder.

For general platform enquiries, bet queries or payment issues, the same support email address applies. Our team handles all user communications professionally and in confidence.