luky33 Privacy Policy —
Your Data, Your Rights, Our Responsibility

This Privacy Policy describes how luky33 ("we," "us," "our," or "the Platform") collects, uses, stores, and discloses personal information relating to individuals ("you," "your," or "the Player") who access and use the luky33 online casino and sports betting platform at https://luky33.games.

luky33 serves players across Pakistan, including but not limited to players in Karachi, Lahore, Islamabad, Rawalpindi, Multan, Peshawar, Quetta, and Faisalabad. When you register a luky33 account, make a PKR deposit, place a bet, or interact with any luky33 service, this Privacy Policy applies to the personal data generated by and associated with that activity.

By creating a luky33 account and using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, please stop using the luky33 platform and contact us to close your account.

luky33 collects personal data in the following categories when you register and use the platform:

2.1 Registration and Identity Data

2.2 Financial and Transaction Data

We collect data related to your PKR transactions on the luky33 platform including: deposit amounts and timestamps; withdrawal requests and processing status; payment method identifiers (Easypaisa mobile number, JazzCash account reference, bank account last four digits); transaction reference numbers; and PKR wallet balances. We do not store full debit/credit card numbers or complete bank account details. Payment tokenisation is handled by our certified payment processing partners.

2.3 Gaming Activity Data

luky33 records data about your gaming activity including: games played, bet amounts, win/loss outcomes, game session durations, bonus usage, and wagering progress. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement. Your gaming history is retained as part of your luky33 account record.

2.4 Technical and Device Data

When you access luky33, we automatically collect technical data including: IP address, device type, operating system, browser type, screen resolution, and approximate geolocation (country/city level). This data is used for fraud detection, platform optimisation, and compliance purposes. We do not use geolocation data to track your precise physical location in real time.

2.5 Communications Data

When you contact luky33 support via WhatsApp, Telegram, live chat, or email, we retain records of those communications. These records are used for quality assurance, dispute resolution, and to ensure continuity of service for ongoing support cases.

luky33 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your luky33 account including processing your luky33 Login, managing your PKR wallet, and applying account security features.
• Transaction Processing: To process PKR deposits and withdrawals via Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, and other supported Pakistan payment providers.
• Identity Verification (KYC): To verify your age (18+) and identity using your CNIC number and supporting documentation in compliance with our anti-money laundering and responsible gaming obligations.
• Game Delivery: To deliver the luky33 game library including Jackpot Slots, live Baccarat, Lightning Roulette, Cockfighting, sports betting, and all other game categories available on the platform.
• Customer Support: To respond to support queries, resolve disputes, and provide account assistance through our 24/7 English-speaking support team.
• Responsible Gaming: To monitor gaming patterns, enforce deposit limits and self-exclusion requests, send reality check notifications, and identify players who may need support.
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and other prohibited activities on the luky33 platform.
• Legal Compliance: To meet applicable legal, regulatory, and reporting obligations relevant to luky33's operations.
• Platform Improvement: To analyse usage patterns, test new features, and improve the luky33 platform experience for all Pakistan players.
• Marketing Communications: To send you relevant luky33 promotional offers, bonus notifications, and platform updates — subject to your marketing preferences. See Section 12 for how to opt out.

luky33 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to deliver the services you have registered for, including account management, game delivery, and payment processing.
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC verification, anti-money laundering checks, age verification, and tax reporting obligations.
• Legitimate Interests: Processing conducted in luky33's legitimate business interests including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and optional platform features where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

luky33 does not sell your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment Processors: We share the minimum necessary data with Easypaisa, JazzCash, SadaPay, Raast, and other Pakistan payment providers to process your PKR transactions. These providers are contractually bound to protect your data and may not use it for any purpose other than completing your transaction.
• Game Technology Providers: Our game software providers may receive session-level technical data (not personally identifiable) to deliver games and resolve technical issues.
• Identity Verification Services: We may use certified third-party KYC providers to assist with CNIC verification and anti-money laundering screening. These providers handle your data in accordance with their own certified privacy standards.
• Fraud and Security Partners: We use security analytics providers to detect and prevent fraudulent activity on the luky33 platform. Data shared is limited to technical identifiers and is not used for profiling.
• Legal and Regulatory Authorities: We may disclose your personal data to regulatory bodies, law enforcement, or courts where required by applicable law or valid legal process. We will notify you of such disclosure where legally permitted to do so.

All financial transactions on the luky33 platform are conducted in Pakistani Rupees (PKR). When you make a deposit via Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, or any other supported Pakistan payment method, your payment credentials are processed directly by the relevant payment provider using their own encrypted infrastructure. luky33 does not receive or store your full payment credentials.

luky33 does retain transaction reference numbers, PKR amounts, timestamps, and the payment method type (e.g., "Easypaisa") associated with each transaction. This information is necessary for account management, dispute resolution, and anti-money laundering compliance. Transaction records are retained for a minimum of five (5) years as required by applicable financial regulations.

If you dispute a transaction with luky33, we will use our transaction records — including communications with your payment provider — to investigate and resolve the dispute. These records are considered conclusive evidence of transaction details in the absence of evidence of system error on luky33's part.

The luky33 platform uses cookies and similar tracking technologies to enhance your experience, maintain your session state during luky33 Login, and analyse platform usage. The following cookie types are used:

• Essential Cookies: Required for the luky33 platform to function. These include your session authentication cookie and security tokens. They cannot be disabled without breaking core platform functionality.
• Performance Cookies: Used to collect anonymous information about how players use luky33 — page visits, time on page, error reports — to improve platform performance and stability.
• Preference Cookies: Used to remember your luky33 account settings, language preferences, and personalised lobby configurations between sessions.
• Analytics Cookies: Used with privacy-compliant analytics tools to understand aggregate usage patterns across the luky33 platform. Individual player data is anonymised before analysis.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use the luky33 platform normally.

luky33 retains your personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the lifetime of your luky33 account and for a minimum of five (5) years following account closure, to satisfy legal and regulatory obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial regulation requirements.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years following account closure or the last transaction, as required for anti-money laundering compliance.
• Support Communications: Retained for three (3) years from the date of the communication, or longer if the matter relates to an unresolved dispute.
• Marketing Preference Data: Retained for as long as you hold a luky33 account and until you withdraw your marketing consent, after which it is deleted within 30 days.

When your personal data is no longer required, luky33 will securely delete or anonymise it in accordance with our data retention procedures.

luky33 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and luky33 servers.
• Encryption of sensitive data at rest including CNIC numbers, hashed passwords, and financial identifiers.
• Access controls ensuring that luky33 employee access to personal data is restricted to those with a legitimate business need, on a role-based permission basis.
• Regular security audits and penetration testing of the luky33 platform infrastructure.
• Multi-factor authentication options for your luky33 Login, including 2FA via SMS to your Pakistan mobile number or via an authenticator app.
• Real-time login monitoring with automated alerts for suspicious access patterns, including logins from unrecognised devices or unusual geographic locations.
• Incident response procedures that include prompt notification to affected players in the event of a confirmed data breach affecting their personal information.

As a luky33 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the luky33 support team at [email protected].