luky33 Privacy Policy – How We Handle Your Personal Data

1. Who We Are

This Privacy Policy applies to the luky33 platform, accessible at luky33.net ("luky33," "we," "us," or "our"). luky33 is an online casino and sports betting platform serving users including Pakistani players. For the purposes of this Privacy Policy, luky33 is the data controller responsible for the personal information collected through the platform.

Any questions regarding this Privacy Policy, or requests to exercise your data rights, should be directed to the luky33 support team at [email protected].

2. Data We Collect

luky33 collects personal data in the following categories:

2.1 Registration Data. When you create a luky33 account, we collect your full name, date of birth, Pakistani mobile number (typically in 03XX format), email address, and chosen username. This information is required to create and manage your account.

2.2 Identity Verification (KYC) Data. For accounts requiring identity verification — typically required before processing withdrawals above specified thresholds — luky33 may collect copies of government-issued identification such as your CNIC (Computerised National Identity Card), proof of address, and selfie verification images.

2.3 Financial Data. luky33 collects information about deposits and withdrawals processed through your account, including transaction amounts, dates, and the payment methods used (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, or other supported methods). Full card numbers or mobile wallet credentials are not stored by luky33 — these are handled by PCI-DSS compliant payment processors.

2.4 Gaming & Betting Activity. luky33 maintains records of your gaming and betting activity, including games played, bets placed, outcomes, wagering history, and bonus usage. This data is necessary for account management, dispute resolution, and responsible gaming monitoring.

2.5 Technical Data. luky33 automatically collects technical information when you access the platform, including your IP address, device type, operating system, browser type, screen resolution, session timestamps, and pages visited. This data is used for platform security, fraud detection, and performance optimisation.

2.6 Communications Data. If you contact luky33 support via live chat or email, we retain records of those communications including the content of messages and any attachments provided.

3. How We Use Your Data

luky33 uses personal data for the following purposes:

• Account management: creating, maintaining, and securing your luky33 account; processing deposits and withdrawals; verifying your identity when required
• Platform delivery: providing access to casino games, sports betting, live dealer tables, and all other luky33 services
• Fraud prevention and security: detecting and preventing fraudulent transactions, money laundering, unauthorised account access, and prohibited conduct as described in the luky33 Terms & Conditions
• Legal and regulatory compliance: meeting applicable legal obligations including anti-money laundering (AML) checks, know-your-customer (KYC) verification, and responding to lawful requests from competent authorities
• Responsible gaming: monitoring gaming behaviour to identify potential problem gambling indicators and, where appropriate, initiating responsible gaming interventions
• Customer support: responding to queries, resolving disputes, and maintaining records of support interactions
• Platform improvement: analysing anonymised usage data to improve platform performance, navigation, and game selection
• Promotional communications: sending relevant bonus offers and promotions to players who have opted in to receive marketing communications from luky33

4. Legal Basis for Processing

luky33 processes personal data on the following legal bases:

• Contractual necessity: processing necessary to fulfil the luky33 user agreement, including account registration, payment processing, and game delivery
• Legal obligation: processing required to comply with applicable laws, including AML regulations and identity verification requirements
• Legitimate interests: processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests do not override your fundamental rights
• Consent: processing for marketing communications, where you have provided explicit opt-in consent. Consent may be withdrawn at any time by contacting luky33 support or updating your account notification preferences

5. Sharing of Personal Data

5.1 luky33 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes under any circumstances.

5.2 Service Providers. luky33 shares personal data with trusted third-party service providers who assist in delivering the platform, including payment processors (such as the operators of JazzCash and Easypaisa gateway integrations), identity verification providers, fraud detection services, and cloud infrastructure providers. All service providers are bound by data processing agreements requiring them to protect your information and use it only for the purpose for which it was shared.

5.3 Game Providers. Game providers whose titles appear on the luky33 platform — including Pragmatic Play, JILI, PG Soft, and others — may receive anonymised or pseudonymised session data for the purpose of game certification, fairness auditing, and support. No directly identifiable personal data (such as your name or CNIC number) is shared with game providers.

5.4 Legal Authorities. luky33 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by a valid legal order or where luky33 reasonably believes disclosure is necessary to prevent a crime, comply with applicable law, or protect the rights and safety of luky33 or its users.

5.5 Business Transfers. In the event of a merger, acquisition, or sale of all or part of the luky33 business, personal data held by luky33 may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer via platform notification or email in advance.

6. Cookies & Tracking Technologies

6.1 luky33 uses cookies and similar tracking technologies to deliver and improve the platform. Cookies are small text files stored on your device when you access luky33.net.

6.2 luky33 uses the following categories of cookies:

• Essential cookies: required for the luky33 platform to function, including session authentication and account security. These cannot be disabled without preventing the platform from operating correctly.
• Performance cookies: used to collect anonymised data on how users navigate the luky33 platform, helping identify usability improvements. No personally identifiable information is included in performance cookie data.
• Preference cookies: store your platform preferences such as language settings and display options to personalise your luky33 experience.

6.3 Most mobile and desktop browsers allow you to control cookie storage through browser settings. Blocking essential cookies will impair your ability to log in and use luky33. Performance and preference cookies may be disabled without affecting core platform functionality.

7. Data Retention

7.1 luky33 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.

7.2 Account data, including registration information and gaming history, is retained for a minimum of 5 years following account closure. This retention period reflects standard AML and financial record-keeping obligations applicable to online gaming platforms.

7.3 Identity verification documents (KYC documents such as CNIC copies) are retained for a minimum of 5 years following completion of the verification process.

7.4 Customer support communications are retained for 3 years following the resolution of the relevant query or dispute.

7.5 Marketing opt-in records are retained until you withdraw consent or close your account, plus a further 3 years for audit purposes.

7.6 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents its reconstruction.

8. Security Measures

luky33 implements technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and luky33 servers
• Encryption of sensitive data at rest, including identity documents and payment reference data
• Access controls limiting staff access to personal data on a need-to-know basis
• Automated fraud detection and suspicious activity monitoring systems
• Regular security audits and penetration testing of the luky33 platform infrastructure
• Two-factor authentication options for player accounts

No security system is impenetrable. In the event of a data breach that is likely to result in significant risk to affected users, luky33 will notify affected account holders and take all reasonable steps to mitigate harm.

9. Your Rights

You have the following rights in relation to your personal data held by luky33:

• Right of access: you may request a copy of the personal data luky33 holds about you
• Right to rectification: you may request correction of inaccurate or incomplete personal data
• Right to erasure: subject to legal retention obligations, you may request deletion of your personal data
• Right to object: you may object to processing based on legitimate interests, including direct marketing
• Right to withdraw consent: where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing
• Right to data portability: you may request a machine-readable export of your personal data in cases where processing is based on consent or contract

To exercise any of these rights, contact the luky33 support team. Requests will be acknowledged within 3 business days and resolved within 30 days where possible. Requests requiring identity verification may take longer.

10. Children's Privacy

luky33 is strictly for adults aged 18 and over. luky33 does not knowingly collect personal data from individuals under the age of 18. If luky33 becomes aware that personal data has been collected from a minor, that account will be closed immediately, all data will be deleted, and any deposited funds will be returned via the original payment method subject to verification.

If you believe a minor has registered on luky33, please contact us immediately at [email protected].

11. Payment Data

11.1 Payment transactions at luky33 are processed through third-party payment providers including the operators of JazzCash, Easypaisa, and banking gateway integrations. These providers operate under their own privacy policies and security standards.

11.2 luky33 stores a record of transaction amounts, dates, payment method types, and transaction reference numbers for financial reconciliation and legal compliance purposes. Full payment credentials (card numbers, mobile wallet PINs, internet banking passwords) are not stored by luky33.

11.3 If you believe an unauthorised payment transaction has occurred on your luky33 account, contact support immediately. luky33 will investigate and, where appropriate, escalate to the relevant payment provider.

12. Third-Party Services

The luky33 platform integrates with third-party services including game providers, payment processors, identity verification providers, and analytics tools. luky33 is not responsible for the privacy practices of these third parties. Where third-party integration is necessary, luky33 uses contractual data processing agreements to govern the handling of personal data shared with those parties.

13. Changes to This Privacy Policy

luky33 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered account holders via email or platform notification at least 14 days before the changes take effect. Continued use of luky33 following notification constitutes acceptance of the revised Privacy Policy. The version date at the top of this document will be updated with each revision.

14. Contact & Complaints

For any privacy-related queries, requests to exercise your data rights, or concerns about how luky33 handles your personal information, please contact our support team via live chat (available 24/7 on the platform) or by email at: [email protected]

We aim to resolve all privacy enquiries within 30 days. If you are dissatisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.