Data Protection & Privacy

Lucky33 Privacy Policy — How We Protect Your Data

At lucky33, your personal data is treated with the same seriousness as your funds. This policy explains exactly what we collect, why we collect it, how we protect it, and your rights as a player. We've written it in plain language so you don't need a lawyer to understand it.

Last Updated: June 2025  |  Applies to all Pakistani players
Privacy at a Glance — Our Core Commitments
We never sell your data
256-bit SSL encryption
No third-party advertising
Data export on request
Deletion rights respected
PKR payments only
24/7 support for privacy queries
lucky33

Six Ways Lucky33 Protects Your Privacy

A summary of the specific measures lucky33 takes to keep your personal data safe and under your control.

End-to-End Encryption

Every connection between your device and lucky33 is protected with 256-bit SSL/TLS encryption. This means your login credentials, payment details, and personal information are encrypted in transit and cannot be intercepted by third parties.

Zero Data Sales — Ever

Lucky33 does not sell, rent, or trade your personal information to any third party, including advertisers, data brokers, or marketing companies. Your data is collected solely to operate your account and process payments — nothing more.

Minimum Necessary Data Collection

Lucky33 collects only the personal data that is genuinely required to operate your account, verify your identity, process payments, and comply with applicable anti-money laundering obligations. We do not collect data speculatively or "just in case".

Secure Data Storage

Player data stored by lucky33 is held in access-controlled, encrypted databases. Internal access to personally identifiable data is restricted on a strict need-to-know basis and is logged. Regular security audits are conducted on our data infrastructure.

Your Right to Access and Delete

You have the right to request a full copy of the personal data lucky33 holds about you, correct any inaccuracies, or request that we delete your data, subject to our legal obligations. All such requests are handled within 30 days of receipt.

Marketing Opt-Out Respected

Lucky33 sends promotional emails and platform notifications only with your consent. You can opt out of all marketing communications at any time through your account settings or by contacting our support team. Opting out has no effect on your account or services.

01

Introduction

This Privacy Policy explains how lucky33 ("lucky33", "we", "us", "our") collects, uses, stores, protects, and shares personal information about players and visitors who use the lucky33 platform at lucky33.link and its related mobile interfaces ("Platform").

Lucky33 takes privacy seriously — not because it's required by policy, but because we believe our players deserve to know exactly how their data is handled. We've tried to write this policy in plain, straightforward language that's easy to understand for our Pakistani player base. If anything is unclear, please contact our support team and we'll explain it directly.

By creating an account or using the lucky33 platform, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy.

Key Point: Lucky33 is the data controller for all personal information collected through the lucky33 platform. We are responsible for how that data is handled, and your rights apply directly against us.

02

Personal Data We Collect

Lucky33 collects personal data in the following categories. We explain why each category is collected in Section 3.

2.1 Registration Data

When you create a lucky33 account, we collect: your full legal name, date of birth, residential address in Pakistan, mobile phone number, and email address. This data is required to create and maintain your account.

2.2 Identity Verification Data

To comply with anti-money laundering obligations and to verify that you are at least 18 years of age, lucky33 may collect: copies of your Computerised National Identity Card (CNIC) or passport, and proof of your payment method (such as a screenshot of your Easypaisa or JazzCash account linked to your mobile number). This data is collected during the KYC verification process.

2.3 Financial Transaction Data

Lucky33 records all deposits and withdrawals processed through your account, including the payment method used, the transaction amount in PKR, the date and time, and the transaction reference number. Payment method details such as your Easypaisa number, JazzCash number, or bank account details for IBFT transfers are stored securely to enable future transactions.

2.4 Gaming Activity Data

Lucky33 records your gameplay history, including bets placed, games played, bet amounts, outcomes, session durations, and bonus usage. This data is used for account management, responsible gaming monitoring, dispute resolution, and regulatory compliance.

2.5 Technical and Device Data

When you access lucky33, we automatically collect technical data including: your IP address, device type and operating system, browser type and version, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.

2.6 Communication Data

If you contact lucky33 support by email, live chat, or any other channel, we retain records of those communications, including your messages and our responses. These records are used to resolve queries, improve our service, and for training purposes.

Data Categories Summary
Data CategoryExamplesCollected AtRetention
Registration Name, DOB, address, mobile, email Account creation Account lifetime + 5 years
Identity (KYC) CNIC / passport copy First withdrawal / review 5 years post-closure
Financial Deposit/withdrawal records, wallet numbers Each transaction 7 years (AML requirement)
Gaming Activity Bet history, session logs, outcomes Each session Account lifetime + 3 years
Technical IP address, device type, browser Each login / page visit 90 days rolling
Communications Support chat and email records Each contact 3 years from last contact
lucky33
03

How Lucky33 Uses Your Personal Data

Lucky33 uses the personal data we collect for the following specific purposes:

  • Account creation and management — To set up, maintain, and verify your lucky33 account, and to authenticate your identity when you log in.
  • Payment processing — To process your deposits and withdrawals in PKR through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard. Your payment details are used to direct funds correctly and to apply withdrawal methods consistent with your deposit method.
  • Identity and age verification — To confirm that you are 18 years of age or older and to comply with Know Your Customer (KYC) obligations. Lucky33 has a strict no-underage-gambling policy and cannot operate without this verification.
  • Fraud prevention and security — To identify and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other security threats. Technical data including IP addresses and login patterns are analysed for anomalies.
  • Responsible gaming — To monitor your gaming activity for signs of problem gambling, apply deposit limits and self-exclusion decisions you have set, and comply with our responsible gaming obligations.
  • Customer support — To respond to your queries, resolve disputes, and improve our support service based on interaction history.
  • Platform improvements — To understand how players use the lucky33 platform and improve performance, game selection, and user experience. This uses aggregated, anonymised data wherever possible.
  • Marketing communications — To send you promotional offers, bonus announcements, and platform news where you have given your consent. You can opt out at any time.
  • Legal and regulatory compliance — To meet our obligations under applicable anti-money laundering laws and respond to lawful requests from competent authorities.

Our Commitment: Lucky33 does not use your personal data for any purpose not listed above. If we ever intend to use data for a new purpose, we will update this Privacy Policy and notify you before doing so.

04

Legal Basis for Processing

Lucky33 processes your personal data on the following legal grounds:

  • Contract performance — Processing your registration data, payment data, and gaming activity data is necessary to operate your lucky33 account and fulfil our contractual obligations to you as a player.
  • Legal obligation — Processing your identity verification and financial transaction data is required by applicable anti-money laundering and counter-terrorism financing laws.
  • Legitimate interests — Processing technical data for fraud prevention and security monitoring is in the legitimate interests of lucky33 and its player community, provided those interests are not overridden by your fundamental rights.
  • Consent — Processing your data for marketing communications and optional analytics cookies is based on your explicit consent, which you may withdraw at any time without affecting your account.
05

Data Sharing and Third Parties

Lucky33 does not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

5.1 Payment Processors

To process your deposits and withdrawals, lucky33 shares the minimum necessary transaction data with payment providers such as Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners for IBFT transfers. These providers receive only what is required to execute the transaction and are bound by their own data protection obligations.

5.2 Identity Verification Services

Lucky33 may use third-party KYC verification services to authenticate your identity documents. These services process your verification data securely and do not retain it beyond the verification process.

5.3 Game Studios and Software Providers

The game studios whose titles appear in the lucky33 lobby may receive anonymised session data for the purpose of game performance analytics. No personally identifiable information is shared with game studios.

5.4 Legal and Regulatory Disclosure

Lucky33 may disclose personal data to competent authorities, law enforcement, or regulatory bodies where required by applicable law, or in response to a valid legal order. We will notify affected players of such disclosures wherever legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of lucky33's assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the new controller before the transfer takes effect.

Important: Lucky33 will never share your personal data with any third-party advertiser, marketing company, or data broker. If you receive marketing from a third party claiming to be associated with lucky33 without having provided your details directly to that party, please report it to us immediately at support@lucky33.link.

06

Cookies and Tracking Technologies

Lucky33 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. Below is a breakdown of the cookie categories we use:

You can manage optional cookies through your lucky33 account settings or your browser's cookie preferences. Disabling optional cookies will not affect your ability to play games, make deposits, or request withdrawals. Disabling required cookies will prevent you from logging in.

No Third-Party Ad Tracking: Lucky33 does not use advertising network cookies. You will not see lucky33 advertisements following you around the internet based on your activity on our platform.

lucky33
07

Data Retention

Lucky33 retains personal data for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law — whichever is longer. Specific retention periods are shown in the Data Categories Summary table in Section 2.

Financial transaction records, including deposit and withdrawal history, are retained for a minimum of seven years from the date of the transaction to comply with anti-money laundering regulations. Identity verification documents are retained for five years following the closure of your account.

When data is no longer required and there is no legal obligation to retain it, lucky33 will securely delete or anonymise it. Technical logs (IP addresses and session data) are retained on a rolling 90-day basis for security monitoring purposes.

If you request account deletion and there is no outstanding legal hold on your data, lucky33 will delete your personally identifiable account information within 30 days of your request, subject to retaining the financial and identity records required by law.

08

Data Security

Lucky33 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

  • 256-bit SSL/TLS encryption on all data transmitted between your device and the lucky33 platform
  • Encrypted database storage for all personally identifiable player data at rest
  • Role-based access control — internal staff access to personal data is restricted to those with a specific operational need and is fully logged
  • Regular security audits conducted on our platform infrastructure and data handling processes
  • Two-factor authentication available for player accounts to provide an additional layer of login security
  • Automatic session timeouts to protect inactive accounts from unauthorised access

No online system can guarantee absolute security. While lucky33 takes data security very seriously and invests in protecting player data, we cannot provide an absolute guarantee against all possible security threats. In the unlikely event of a data breach that poses a risk to affected players, lucky33 will notify affected players as quickly as possible.

Your Role in Security: You can significantly improve your lucky33 account security by using a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with anyone. If you suspect your account has been accessed without your permission, contact support immediately.

09

Your Privacy Rights

As a lucky33 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@lucky33.link.

Right of Access

Request a complete copy of all personal data lucky33 holds about you. We will provide this within 30 days of your request in a readable format.

Right to Rectification

Request correction of any inaccurate or incomplete personal data we hold. Most registration details can be updated directly in your account settings.

Right to Erasure

Request deletion of your personal data where there is no longer a legitimate basis for retaining it. Note that some data must be retained by law (see Section 7).

Right to Restrict Processing

Request that lucky33 restrict how we process your data in certain circumstances, for example while a dispute about data accuracy is being resolved.

Right to Data Portability

Request your personal data in a structured, machine-readable format so you can transfer it to another service. Applies to data you provided to us under contract or consent.

Right to Withdraw Consent

Withdraw consent for any processing based on consent (such as marketing emails) at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

How to Exercise Your Rights: Email support@lucky33.link with "Privacy Rights Request" in the subject line. We will acknowledge your request within 48 hours and complete it within 30 days. We may need to verify your identity before processing the request to protect your data from unauthorised access.

10

Children's Privacy

Lucky33 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you believe that a minor has registered an account on lucky33, please contact us immediately at support@lucky33.link. Upon confirmation, we will close the account and delete all associated personal data without delay.

Lucky33 uses age verification procedures during registration and KYC to prevent underage access. Despite these measures, if a minor has circumvented our age verification by providing false information, their account will be closed and any deposits or winnings will be handled in accordance with our Terms and Conditions and applicable law.

18+ Only: Lucky33 takes underage gambling extremely seriously. Our age verification is applied rigorously and any account belonging to a person under 18 will be closed immediately upon identification.

11

Third-Party Links

The lucky33 platform may contain links to third-party websites or services in limited contexts, such as links to payment provider help pages. This Privacy Policy applies exclusively to lucky33 and does not cover the privacy practices of any third-party sites you may visit by following a link from our platform.

Lucky33 is not responsible for the privacy practices of any third party. We recommend reviewing the privacy policy of any third-party site you visit. Our own platform is designed to minimise third-party integrations, and we do not embed third-party advertising or tracking scripts in our player-facing pages.

12

Updates to This Privacy Policy

Lucky33 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform functionality. When material changes are made, we will notify registered players via email or prominent in-platform notification at least 7 days before the updated policy takes effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We recommend checking this page periodically to stay informed about how lucky33 handles your data. Continued use of the platform after the effective date of an update constitutes your acceptance of the revised Privacy Policy.

Stay Informed: Keep your registered email address current so you receive notifications of any privacy policy updates. You can verify or update your email address in your lucky33 account settings at any time.

13

Contact Us About Privacy

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how lucky33 handles your personal information, please contact our dedicated privacy team:

  • Email: support@lucky33.link — please include "Privacy Policy" in your subject line
  • Live Chat: Available 24/7 within your logged-in lucky33 account dashboard
  • Response Time: We aim to acknowledge all privacy queries within 48 hours and resolve them within 30 days

Our support team handles privacy matters in both English and Urdu and is available every day of the year. We treat all privacy concerns seriously and will provide you with a clear, direct response — not an automated holding reply.

Your Data Is Yours

Lucky33 will never use your personal data as a product. You have the right to access, correct, export, or delete your data at any time by contacting support@lucky33.link. These rights cost nothing to exercise and have no effect on your account. This Privacy Policy is reviewed and updated regularly to ensure it reflects our current practices. Our full Terms and Conditions and Responsible Gaming Policy are also available for your reference.

🔒

Play on Lucky33 — Where Your Privacy Comes First

You've seen exactly how lucky33 handles your data — with transparency, security, and respect. Register in under two minutes, deposit in PKR, and play with confidence on Pakistan's most trusted online casino platform.

18+ only. Gambling involves risk. Please play responsibly. Responsible Gaming tools available.