This Privacy Policy is published by Lucky33 Entertainment Group, operators of the online casino and sports betting platform at https://lucky33.run ("Lucky33", "we", "us", "our"). This policy applies to all Pakistani players and website visitors who interact with any part of the Lucky33 platform.
Lucky33 is serious about data privacy. Not because we have to write a policy — but because the players who trust Lucky33 with their real money and personal details deserve to know exactly what happens with that information. This policy is written in plain language because you shouldn't need a lawyer to understand how your data is being handled.
By registering an account or using the Lucky33 platform, you acknowledge that you have read and understood this Privacy Policy. This policy forms part of the Lucky33 Terms and Conditions and should be read alongside those terms, which are available at lucky33.run/terms-conditions.
Lucky33 collects only the personal data that is genuinely necessary for operating your account, processing your transactions, verifying your identity and providing the gaming services you have signed up for. We do not collect data for the sake of it.
Registration Data
- Full legal name (as it appears on your national identity document)
- Date of birth (to verify the minimum age requirement of 18 years)
- Pakistani mobile phone number (used for account authentication and communications)
- Email address (account management and communications)
- Residential address in Pakistan
- Username and encrypted password
Identity Verification (KYC) Data
- Government-issued identity document (National Identity Card, Passport or Driver's Licence — document number, name, date of birth and photograph)
- Proof of address documentation (utility bill, bank statement or similar)
- Proof of payment method ownership (as required under anti-money laundering obligations)
Transaction Data
- Deposit and withdrawal amounts, dates and method used (JazzCash account reference, Easypaisa reference, bank account details where applicable)
- Betting and gaming activity history — markets bet on, stake amounts, outcomes and winnings
- Bonus and promotional activity associated with your account
Technical and Behavioural Data
- IP address and approximate geographic location at time of login
- Device type, operating system and browser version
- Session duration and page interaction data
- Login history and authentication logs (for account security purposes)
Customer Support Data
When you contact Lucky33 via live chat or email, we retain the content of those communications. This is for quality assurance, dispute resolution, and to provide consistent support when you return with related queries.
Data Categories Overview
| Data Category | Examples | Purpose | Retention |
|---|---|---|---|
| Registration Data | Name, DOB, email, phone | Account creation & verification | Duration of account + 5 years |
| KYC Documents | CNIC, passport scan | Identity verification (AML) | 5 years after account closure |
| Transaction Data | Deposits, bets, withdrawals | Payment processing & audit | 7 years (financial records) |
| Technical Data | IP address, device info | Security & fraud prevention | 13 months rolling |
| Support Communications | Chat transcripts, emails | Dispute resolution, QA | 3 years |
Every piece of data Lucky33 collects has a specific, legitimate reason behind it. We don't collect anything without a proper basis. Here is why we collect what we collect:
- Contract performance: To operate your Lucky33 account, process your deposits and withdrawals in PKR, settle your bets, credit bonuses and provide all platform services you signed up for. Without this data, Lucky33 cannot operate your account.
- Legal obligation: Anti-money laundering (AML) obligations require Lucky33 to verify the identity of all players and maintain records of financial transactions. These are legal requirements, not discretionary choices. Lucky33 must collect and retain KYC data to comply with these obligations.
- Legitimate interests: Lucky33 has a legitimate interest in preventing fraud, protecting the integrity of betting markets, maintaining platform security and improving the services we offer to Pakistani players. Technical data and session data serve these purposes.
- Consent: Where Lucky33 uses your data for marketing communications (promotional emails, SMS about Lucky33 offers and bonuses), this is based on your consent, which you can withdraw at any time.
Here is a practical breakdown of how Lucky33 puts your data to use — written in straightforward terms rather than abstract legal categories.
Running Your Account
The most basic use: Lucky33 uses your registration data and transaction history to operate your account. Processing your JazzCash deposit, recording your PSL cricket bets, crediting winnings, managing your bonus wallet and keeping your account statement accurate all require us to use and store your data. This is the core of what Lucky33 does with your information and it is entirely expected when you register for an online gaming platform.
Identity Verification
Lucky33 uses the identity documents you submit during KYC to confirm that you are who you say you are, that you are at least 18 years old, and that your payment methods are registered in your own name. This is not about gathering information for its own sake — it is a legal requirement under anti-money laundering obligations and a fundamental part of running a responsible gaming platform. We do not use your CNIC or passport details for any purpose other than verification and the legally required record-keeping that flows from it.
Fraud Prevention and Security
Lucky33 uses login history, IP data and device information to detect unusual account activity — things like a login from an unexpected location, multiple failed password attempts, or patterns consistent with account-sharing or bonus abuse. This protects your account from unauthorised access and protects the integrity of Lucky33's betting markets. Automated checks flag anomalies for review by our security team — no punitive action is taken based on automated detection alone.
Customer Support
When you contact Lucky33 support, your account data and communication history allow our team to resolve your query without asking you to repeat information you've already provided. It also means that if a matter requires escalation, the full context is available to whoever handles the escalated case.
Personalisation and Platform Improvement
Lucky33 uses aggregated, anonymised behavioural data to understand how Pakistani players use the platform — which sports attract the most bets, which live casino games run most smoothly, where players encounter friction in the deposit process. This data is used at an aggregate level to improve the platform. Individual player data is not used for personalisation or profiling without explicit consent.
Lucky33 does not sell your personal data. We never have and we never will. We are an online gaming platform, not a data broker. Your information is shared only in the specific, limited circumstances described below.
Payment Processors
To process your deposits and withdrawals in PKR via JazzCash, Easypaisa, NayaPay, SadaPay, bank IBFT or Visa/Mastercard, Lucky33 must pass the necessary transaction details to the relevant certified payment processor. These processors receive only the information required to execute the specific transaction. They are contractually prohibited from using your data for any purpose beyond completing the transaction, and all are subject to their own security and compliance standards.
Live Casino Game Providers
Lucky33's live casino games are served by third-party studio providers. These providers receive a session token to identify your Lucky33 account within the game environment. They do not receive your full personal details — only the session identifier necessary to connect your Lucky33 account to the game instance.
Identity Verification Services
Where Lucky33 uses a third-party KYC verification service to assist with document checking, that service receives the documents you submit for the specific purpose of verification. Once verification is complete, no further data flows occur between Lucky33 and the verification service in relation to your account.
Legal and Regulatory Requirements
Lucky33 may be required to disclose account information and transaction records to law enforcement, regulatory bodies or other authorities where required by applicable law. In such cases, Lucky33 will disclose only what is specifically required by the relevant legal instrument. Where legally permitted, Lucky33 will notify affected players of such disclosures.
Given that Lucky33 handles real PKR transactions for hundreds of thousands of Pakistani players, payment data security is a top priority. Here is exactly how we handle it.
What Lucky33 Does Not Store
Lucky33 does not store raw payment card numbers, full JazzCash or Easypaisa account credentials, or any other sensitive payment authentication data. When you make a deposit via any method, the transaction is handled directly by the certified payment processor — Lucky33 receives a transaction reference and confirmation, not the underlying payment credentials.
Encryption in Transit
All data transmitted between your device and Lucky33's servers — including login credentials, account data, deposit submissions and withdrawal requests — is encrypted using SSL/TLS (Transport Layer Security). This means that even if data were intercepted in transit, it would be unreadable without the decryption key. The padlock symbol in your browser address bar confirms this encryption is active.
Encryption at Rest
Personal data stored on Lucky33's servers — including KYC documents, account registration details and transaction history — is stored with encryption at rest. This provides an additional layer of protection even in the event of an attempted breach of our server infrastructure.
Access Controls
Access to player account data within Lucky33 is restricted to authorised staff members who require it for their specific role — customer support agents, compliance officers, payment operations staff. Access is logged and audited. Staff cannot access player data outside their role scope. All Lucky33 employees with access to personal data are trained in data handling obligations and are bound by confidentiality agreements.
Lucky33 uses cookies and similar tracking technologies on the platform. This section explains what we use, why we use it and how you can control it.
What Are Cookies?
Cookies are small text files stored on your device by your browser when you visit a website. They serve various purposes — keeping you logged in, remembering your preferences, helping the platform load faster on repeat visits, and providing analytics data about how the platform is used. Cookies do not contain executable code and cannot transmit viruses.
Types of Cookies Used on Lucky33
- Essential cookies: Required for the Lucky33 platform to function. These include session cookies that keep you logged in during a gaming session and security cookies that help detect fraudulent login attempts. These cannot be disabled without breaking core platform functionality.
- Performance cookies: Used to collect anonymised data about how the platform performs — page load times, error rates, session durations. This data helps Lucky33 identify and fix technical issues. No personally identifiable information is collected by performance cookies.
- Preference cookies: Remember your language and display preferences so you don't need to re-set them every visit.
- Analytics cookies: Help Lucky33 understand how Pakistani players navigate the platform — which sections are most visited, where users encounter problems, how they arrive at the deposit page. This data is aggregated and anonymised.
Managing Cookies
You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling essential cookies will affect your ability to use the Lucky33 platform normally — you may not be able to log in or process transactions. Disabling non-essential cookies will not affect your ability to use the core platform.
Lucky33 retains personal data only for as long as it is needed for the purpose it was collected. Once data is no longer needed and there is no legal obligation to retain it, it is securely deleted or anonymised.
Retention Periods by Data Type
- Account registration data: Retained for the duration of your active Lucky33 account plus 5 years after permanent account closure. The post-closure retention period exists to allow Lucky33 to respond to any late-arising disputes or regulatory inquiries relating to your account.
- KYC identity documents: Retained for 5 years after account closure, in line with anti-money laundering retention obligations. After this period, documents are securely and permanently deleted.
- Transaction and betting records: Retained for 7 years from the date of the transaction. This reflects financial record-keeping standards and allows Lucky33 to respond to any dispute or audit relating to historical transactions.
- Technical and session data (IP logs, device data): Retained on a rolling 13-month basis. This period allows Lucky33 to investigate security incidents, while avoiding indefinite retention of technical metadata that is no longer operationally relevant.
- Customer support communications: Retained for 3 years from the date of the most recent communication in each case. This allows Lucky33 to reference previous interactions when a player returns with a related issue.
- Marketing consent records: Retained for as long as you remain opted in, plus 3 years after opt-out to provide evidence of the consent history.
When any data category reaches the end of its retention period, it is either securely deleted (if it contains personal identifiers) or fully anonymised (if it retains analytical value at an aggregate level). Anonymised data cannot be re-linked to individual players.
You have meaningful rights over the personal data Lucky33 holds about you. These rights can be exercised at any time by contacting Lucky33 support via live chat or email at support@lucky33.run. Lucky33 aims to respond to all data rights requests within 30 days.
Right of Access
You can request a copy of all personal data Lucky33 holds about you. This is sometimes called a Subject Access Request (SAR). Lucky33 will provide a structured summary of your data within 30 days of a valid request.
Right to Correction
If any data Lucky33 holds about you is inaccurate or outdated, you have the right to have it corrected. Contact support with the correction request and any supporting documentation — we will update our records promptly.
Right to Deletion
You can request deletion of your personal data. Lucky33 will delete all data that is not required to be retained under legal obligations. Data subject to mandatory retention periods (KYC, financial records) cannot be deleted before those periods expire, but will be isolated from active use.
Right to Object
You can object to Lucky33 processing your data for marketing communications, personalised content or profiling. Objections to marketing can be acted on immediately — simply contact support or use the unsubscribe option in any Lucky33 marketing email.
Right to Restriction
You can request that Lucky33 restrict how your data is processed — for example, while a correction request is under review, or while you contest whether Lucky33 has a legitimate basis to process certain data. During a restriction period, your data is stored but not actively used.
Right to Portability
You can request that Lucky33 provide your account data in a structured, machine-readable format that you can transfer to another service. This right applies to data you have provided directly (registration data, contact preferences) and data generated through your use of Lucky33.
Lucky33 is strictly an adults-only platform. The minimum age for registration and use of any Lucky33 service is 18 years. Lucky33 does not knowingly collect or process personal data from individuals under 18 years of age.
During registration, Lucky33 collects date of birth and uses it to verify age eligibility. Players who are found to be under 18 years of age will have their accounts closed immediately, all funds will be returned to the source payment method, and all gaming activity will be voided. Lucky33 may request identity document verification specifically to confirm the age of a player where there is any doubt.
If you believe that a minor has created a Lucky33 account or that Lucky33 has collected personal data from someone under 18, please contact us immediately at support@lucky33.run. We will investigate and take immediate corrective action.
Lucky33 sends marketing communications — emails, SMS messages and in-platform notifications about promotions, bonuses, new games and platform updates — to players who have opted in to receive them.
Opt-In
You can choose to receive Lucky33 marketing communications during registration or at any time by updating your communication preferences in your account settings. Lucky33 will not send you marketing communications without your explicit opt-in.
Opting Out
Opting out of Lucky33 marketing communications is straightforward. Every marketing email from Lucky33 contains an unsubscribe link at the bottom — clicking it will remove you from all marketing lists immediately. You can also opt out via your account settings or by contacting support at support@lucky33.run. Lucky33 will process opt-out requests within 48 hours.
Transactional Communications
Opting out of marketing does not affect transactional communications — messages about your account activity such as deposit confirmations, withdrawal notifications, account security alerts and identity verification requests. These are operational communications that Lucky33 must send regardless of marketing preferences, and they cannot be opted out of while your account remains active.
Self-Excluded Players
Players who have self-excluded from Lucky33 under the responsible gaming tools described in our Terms and Conditions are removed from all marketing communications immediately upon self-exclusion. Lucky33 does not send promotional communications to self-excluded players. If a self-excluded player receives a marketing communication from Lucky33, this represents an operational error — please contact support immediately so we can investigate and prevent recurrence.
Lucky33 reserves the right to update this Privacy Policy at any time. When changes are made, we will update the "Last Updated" date shown at the top of this page and, where the changes are material, we will notify registered Lucky33 players by email or by displaying a notice on the platform at login.
Material changes include: changes to the types of data we collect, changes to the purposes for which we use your data, new data-sharing arrangements, or any change that materially reduces your rights as a Lucky33 player. Non-material changes — clarifications to language, corrections of typographical errors, updates to contact details — may be made without active notification.
Your continued use of Lucky33 after notification of updated Privacy Policy terms constitutes your acceptance of the revised policy. If you do not agree with any changes to this policy, you have the right to close your account and request deletion of your data in accordance with Section 9 above.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how Lucky33 has handled your personal data, please contact us through the following channels:
- Live Chat: Available 24/7 at lucky33.run — the fastest way to reach our team for any privacy query or urgent data concern
- Email: support@lucky33.run — for formal data rights requests, please include "Privacy Request" in the subject line along with your registered account email address
Lucky33 aims to acknowledge all privacy-related enquiries within 24 hours and to resolve them fully within 30 days. For data rights requests (access, correction, deletion), the 30-day timeline begins from the date Lucky33 receives a valid, complete request.
If you feel that Lucky33 has not adequately addressed your privacy concern, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction. Lucky33 will cooperate fully with any regulatory investigation related to our data handling practices.