Privacy Policy —
Your Data at luky33, Explained Clearly

1 Who We Are

luky33 operates luky33.win, an online entertainment platform offering sports betting, casino games, live casino, slots and bingo, primarily serving players in Pakistan. For the purposes of this Privacy Policy, luky33 is the data controller responsible for personal information collected through this website.

If you have any questions about this policy or how your data is handled, contact us at [email protected] or via live chat within your account. We aim to respond to data-related enquiries within 5 business days.

2 Data We Collect

luky33 collects personal data through two main channels: information you provide directly, and information collected automatically when you use the platform.

We do not collect sensitive personal data such as biometrics, health information or religious beliefs. Identity documents submitted for verification are used solely for that purpose and handled with strict access controls.

3 How We Use Your Data

Every piece of data luky33 collects has a defined purpose. We do not use your information for anything beyond what is described in this policy.

• Account management: Creating, maintaining and securing your luky33 account. This includes authentication, password resets and account communications.
• Processing transactions: Handling PKR deposits via JazzCash, Easypaisa, Raast, bank transfer and cards, and processing withdrawal requests to your registered payment method.
• Identity verification: Confirming your age and identity as required before withdrawals and as part of standard compliance procedures to prevent fraud and underage use.
• Platform operation: Delivering games, sports betting markets, live casino streams and bingo. Ensuring the right odds, game states and balances are displayed accurately.
• Responsible gaming: Monitoring usage patterns to identify potential problem gaming behaviour and providing appropriate tools and support.
• Platform improvement: Analysing aggregated usage data to improve platform features, game selection, payment options and mobile performance.
• Customer support: Responding to your queries, resolving account issues and processing complaints.
• Legal compliance: Retaining records as required by applicable anti-money laundering, fraud prevention and financial record-keeping obligations.
• Communications: Sending service-related notifications such as deposit confirmations, withdrawal updates and important policy changes.

4 Legal Basis for Processing

luky33 processes your personal data under the following legal bases:

• Contract performance: Processing is necessary to deliver the services you have signed up for — operating your account, running games, processing payments in PKR and handling withdrawals.
• Legal obligation: Certain data must be retained for compliance with anti-money laundering regulations, financial crime prevention and identity verification requirements.
• Legitimate interest: Platform security, fraud detection, technical improvements and responsible gaming monitoring are pursued as legitimate interests that do not override your rights.
• Consent: Where we seek your consent — such as for optional marketing communications — you can withdraw that consent at any time without affecting your account or service access.

5 Sharing Your Data

luky33 may share your personal data with the following categories of third parties, under strict data processing agreements:

• Payment processors: JazzCash, Easypaisa, Raast and banking partners receive the minimum data necessary to process your PKR deposits and withdrawals securely.
• Identity verification providers: Third-party KYC services may process identity documents to confirm your age and identity before withdrawals are approved.
• Game content providers: Casino game and live casino providers receive anonymised session data to deliver game content. They do not receive your financial or registration details.
• IT and hosting providers: Platform infrastructure partners who store and process data strictly under contractual data security requirements.
• Fraud and security services: Providers who assist with detecting and preventing fraudulent activity, account takeovers and money laundering.
• Legal authorities: Where required by law, court order or legitimate authority request, luky33 will comply with lawful demands for data disclosure.

All third parties who handle your data are contractually bound to protect it, use it only for the stated purpose and not retain it beyond what is necessary. luky33 does not transfer your data to parties in jurisdictions with inadequate data protections without appropriate safeguards in place.

6 Payment Data and PKR Transactions

When you make a deposit or withdrawal through luky33 using JazzCash, Easypaisa, Raast or bank transfer, your payment credentials are handled directly by the relevant payment processor. luky33 does not store full payment account numbers, card numbers or sensitive authentication details on its own servers.

luky33 retains transaction records — amounts, dates, payment methods used and reference numbers — for account management and legal compliance purposes. These records are visible in your account transaction history and are used to resolve any payment disputes.

All payments at luky33 are denominated in PKR. No currency conversion is applied to your transactions, and no exchange rate data is collected about you personally.

7 Cookies and Tracking Technologies

luky33 uses cookies and similar technologies to provide a functioning, personalised and secure experience on the platform. Here is what each type does:

• Essential cookies: Required for the platform to function. These maintain your login session, remember your language preferences and keep your betting slip active during a session. Without these, the site cannot work properly.
• Analytics cookies: Help luky33 understand which pages are visited most, how long players spend in different sections and where technical issues occur. This data is aggregated and anonymised — it is not linked to your individual account.
• Preference cookies: Remember your display settings, game view preferences and notification choices between sessions.
• Security cookies: Support fraud detection and help identify unusual login patterns or suspicious account activity.

You can manage or disable cookies through your browser settings. Disabling essential cookies will affect the functionality of your account — you may not be able to stay logged in or access certain features. Non-essential cookies can be turned off without affecting core platform access.

luky33 does not use third-party advertising cookies or allow advertisers to track you across other websites via cookies placed on luky33.win.

8 Data Retention

luky33 retains your personal data for as long as your account is active and for a defined period after account closure. Retention periods are based on the type of data and the purpose for which it was collected:

• Account and registration data: Retained for the lifetime of your account plus a minimum of 5 years after account closure, in line with standard anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years after the transaction date for financial compliance and dispute resolution purposes.
• Identity verification documents: Retained for the duration of your account and a minimum of 5 years after closure.
• Support communications: Retained for 3 years after the conversation closes, to allow for follow-up queries and dispute resolution.
• Technical and usage data: Retained for 12–24 months in aggregated form for platform improvement purposes. Individual session data is typically anonymised after 90 days.

After the relevant retention period, your personal data will be securely deleted or anonymised so that it can no longer be linked to you individually.

9 Data Security

luky33 applies multiple layers of security to protect your personal data from unauthorised access, loss, disclosure or misuse.

• Transport encryption: All data transmitted between your browser and luky33.win uses 256-bit TLS encryption. Any connection that does not meet this standard is refused.
• Password hashing: Account passwords are stored as salted cryptographic hashes — the actual password is never stored in readable form.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. Staff with access to sensitive data undergo background checks and are bound by confidentiality obligations.
• Penetration testing: The platform undergoes regular security reviews to identify and address vulnerabilities before they can be exploited.
• Fraud monitoring: Automated systems monitor account activity for patterns consistent with fraud, account takeover attempts or money laundering.

No digital system can guarantee complete security against all threats. If you suspect your account has been compromised, contact luky33 support immediately and change your password. If a security breach affecting your data were to occur, luky33 will notify affected users promptly and take corrective action.

10 Your Rights Over Your Data

As a luky33 player, you have the following rights over your personal data. To exercise any of these rights, contact [email protected] with your account details and a clear description of your request.

luky33 will respond to data rights requests within 30 days. Where a request is complex, we may extend this by a further 60 days and will inform you of the extension. Some requests — particularly deletion — may be limited where data must be retained for legal compliance reasons. We will always explain any limitations clearly.

11 Children's Privacy

During registration, you confirm that you are at least 18 years of age. Identity verification before withdrawals provides a further check on age. If you believe a minor is using luky33, please contact support immediately at [email protected].

Parents and guardians are encouraged to use parental controls on shared devices to prevent minors from accessing online gaming platforms. For more on responsible gaming tools available to all registered players, visit the Responsible Gaming page.

12 Changes to This Privacy Policy

luky33 may update this Privacy Policy from time to time to reflect changes in platform features, legal requirements or best practice. When meaningful changes are made, registered users will receive a notification to their registered email address before the update takes effect.

The date at the top of this page reflects when the policy was last updated. We recommend reviewing this page periodically. Continued use of luky33 after an update is published constitutes your acceptance of the revised policy. If you disagree with any changes, you may close your account by contacting support.

13 Contact Us

For any privacy-related questions, data access requests or complaints about how luky33 handles your personal information, reach us through the following channels: