Privacy Policy – Lucky33 Me | How We Protect Your Data in Pakistan

Lucky33 Me operates the online gaming and sports betting platform at lucky33me.net (the "Platform"). In this Privacy Policy, "Lucky33 Me", "we", "us" and "our" refer to the operator of this Platform. "You", "your" and "player" refer to the person accessing the Platform and using its services.

This Privacy Policy explains what personal information Lucky33 Me collects when you register, deposit funds, place bets or interact with any part of the Platform. It explains why we collect that information, how we use it, with whom we share it, how long we keep it and what rights you have over it.

By registering an account on Lucky33 Me and accepting our Terms and Conditions, you confirm that you have read and understood this Privacy Policy. If you do not agree with how Lucky33 Me handles your data, please do not create an account or use the Platform.

This policy applies to all services offered on Lucky33 Me, including cricket betting, sports betting, casino games, slots, roulette, Aviator, jackpot slots and all promotional activities. It applies to data collected via the website, mobile browser access and any Lucky33 Me apps.

Lucky33 Me collects the following categories of personal data:

Lucky33 Me collects personal data through the following channels:

• Registration form: When you create your Lucky33 Me account, you provide your name, date of birth, email and contact number directly.
• Deposit and withdrawal requests: When you initiate a PKR transaction via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, the relevant payment reference and account details are captured.
• Identity verification: When Lucky33 Me requests verification documents (such as a CNIC copy), these are uploaded by you directly through the secure account portal.
• Platform activity: Your bets, game sessions, login times and account activity are automatically recorded by Lucky33 Me's systems as part of normal platform operation.
• Device and browser: Technical data including your IP address, device model, browser type and operating system is collected automatically when you access Lucky33 Me.
• Cookies and tracking technologies: Lucky33 Me uses cookies and similar tools on the platform. See Section 11 for full cookie details.
• Third-party sources: Lucky33 Me may receive data from identity verification partners, fraud prevention services and payment processors for the purpose of verifying accounts and processing PKR transactions securely.

Lucky33 Me uses your personal data only for the purposes described below. We do not use your data in ways that would be unexpected given the context in which it was collected:

• Running your account: Creating, maintaining and securing your Lucky33 Me player account. This includes login authentication, balance management and communication.
• Processing PKR transactions: Handling all deposits and withdrawals in Pakistani Rupees through the payment methods you use on Lucky33 Me.
• Regulatory compliance: Fulfilling our legal obligations under gaming licence requirements, including age verification (18+), anti-money-laundering (AML) checks and know-your-customer (KYC) processes.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, unauthorised access, bonus abuse and other prohibited conduct on Lucky33 Me.
• Responsible gaming monitoring: Tracking usage patterns to identify players who may be showing signs of problem gambling, and enabling the account-level protection tools Lucky33 Me provides.
• Customer support: Using your account history, transaction records and communication logs to resolve support queries, settle bet disputes and handle complaints.
• Platform improvement: Analysing aggregated, anonymised usage data to improve Lucky33 Me's products, odds, game selection and platform performance.
• Marketing communications: Sending promotional offers, bonus notifications and platform updates to players who have opted in to receive them. You can opt out at any time from your account settings or by contacting support.

Lucky33 Me processes your personal data under the following legal bases:

• Contract performance: Processing your data is necessary to provide the Lucky33 Me gaming service you signed up for — including managing your account, processing PKR deposits and withdrawals, and settling bets.
• Legal obligation: Lucky33 Me is required by its gaming licence to carry out age verification, KYC checks and AML monitoring. This data processing is mandatory, not optional.
• Legitimate interests: Lucky33 Me has a legitimate interest in preventing fraud, protecting platform security and improving its services — provided those interests do not override your fundamental rights.
• Consent: For marketing communications and optional cookies, Lucky33 Me relies on your freely given consent, which you can withdraw at any time.

Lucky33 Me does not sell your personal data to any third party for their own marketing or commercial purposes. We share data only in the following limited and controlled circumstances:

• Payment processors: PKR transaction data is shared with the relevant payment service (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking providers, Visa/Mastercard processors) solely for the purpose of completing your deposit or withdrawal.
• Game providers: Your player ID and session data may be shared with certified game providers (Pragmatic Play, NetEnt, Spribe, Evolution Gaming etc.) to enable you to access their games on Lucky33 Me. These providers do not receive your full personal profile.
• Identity verification partners: Where Lucky33 Me uses third-party KYC or AML verification services, your identification documents and data points are shared securely for the sole purpose of regulatory compliance.
• Regulatory authorities: Lucky33 Me will disclose data to gaming regulators, law enforcement agencies or other authorities when legally required to do so.
• Fraud prevention services: Aggregated or flagged account data may be shared with fraud prevention networks to protect Lucky33 Me and its players from organised fraud and money laundering.
• Business transfers: In the event of a merger, acquisition or asset sale involving Lucky33 Me, player data may be transferred as part of that transaction. You would be notified before any such transfer takes effect.

All financial transactions on Lucky33 Me are denominated in Pakistani Rupees (PKR). When you make a deposit or withdrawal, Lucky33 Me captures the minimum data necessary to process the transaction — this typically includes a payment reference number and the account identifier for the payment method you used.

Lucky33 Me does not store full credit or debit card numbers on its own servers. Card payments are processed through PCI-DSS-compliant third-party gateways. The partial card number (last four digits) retained in your transaction history is for your own reference and cannot be used to initiate a transaction.

For mobile wallet payments (Easypaisa, JazzCash, NayaPay, SadaPay), Lucky33 Me stores the wallet account number associated with your confirmed transactions. This is required to process withdrawals back to your wallet and to meet anti-money-laundering traceability requirements under our gaming licence.

Transaction records — amounts in PKR, timestamps, payment method and confirmation references — are retained for a minimum of five years as required by our regulatory obligations. This retention is mandatory regardless of account status.

Lucky33 Me retains personal data for only as long as necessary for the purpose for which it was collected, subject to legal minimum retention obligations. The following general periods apply:

• Active account data: Retained for the full duration of your Lucky33 Me account and for a minimum of five years after account closure, as required by our gaming licence and AML obligations.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum of five years from the transaction date.
• KYC and verification documents: Retained for five years post-account-closure unless a longer period is required by law.
• Communication records (support chats, emails): Retained for three years from the date of communication to enable dispute resolution.
• Technical and usage logs: Retained for 12 months for security and fraud analysis purposes.
• Marketing preference records: Retained for the duration of your account and three years post-closure to document consent history.

Once the relevant retention period expires and there is no overriding legal reason to keep the data, Lucky33 Me securely deletes or anonymises it.

Lucky33 Me applies the following security measures to protect your personal data and PKR account balance:

• 256-bit SSL/TLS encryption on all pages and all data transmissions between your device and Lucky33 Me's servers.
• Encrypted data storage for sensitive fields including passwords (hashed), identity documents and payment references.
• PCI-DSS compliant payment processing — card payment data is handled exclusively by certified third-party gateways; full card numbers never pass through Lucky33 Me's own systems.
• Two-factor authentication (2FA) options for player account logins on Lucky33 Me.
• Session timeout controls that automatically end inactive sessions.
• Continuous monitoring of account activity for patterns consistent with unauthorised access or fraud.
• Restricted internal access — only authorised Lucky33 Me personnel with a legitimate operational need can access player account data.