33pk Privacy Policy

This Privacy Policy ("Policy") sets out how 33pk ("we", "us", "our", the "Operator") collects, uses, stores, discloses and protects personal data relating to users ("you", "your", "User") of the 33pk platform at https://33pk.cam (the "Platform"). This Policy applies to all users of the Platform regardless of the device or location from which it is accessed.

We are committed to handling personal data responsibly and in a manner consistent with the data protection principles applicable to the operator's licensing jurisdiction. By registering for or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling policy, both of which form part of the overall agreement between you and 33pk.

The following terms carry the meanings set out below throughout this Policy:

We collect Personal Data in the following categories, depending on your interaction with the Platform:

3.1 Registration and Account Data

• Full legal name, date of birth and nationality.
• Email address, username and account password (stored in hashed form).
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar) and country.
• Phone number provided during registration or account updates.

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., CNIC, passport).
• Proof of address documentation.
• Proof of payment method ownership where required by the operator's compliance framework.
• Source of funds documentation where required for enhanced due diligence.

3.3 Financial and Transaction Data

• Deposit and withdrawal history, including PKR amounts and transaction references.
• Payment method identifiers (masked card numbers, mobile wallet references, bank account details) as submitted through the Platform's cashier.
• Betting and gaming activity records, including wager amounts, game selections, outcomes and bonus usage.

3.4 Technical and Device Data

• IP address and approximate geographic location derived therefrom.
• Device type, operating system, browser type and version.
• Session duration, page interaction data and navigation patterns within the Platform.
• Cookie identifiers and similar tracking technologies (see Section 9).

3.5 Communications Data

• Records of live chat interactions, email correspondence and support ticket exchanges.
• Content of any feedback, complaint or dispute submission made through the Platform.

We process your Personal Data only for specific, legitimate purposes. The table below sets out the primary purposes for which your data is used and the categories of data involved:

We do not use your Personal Data for purposes incompatible with those listed above without obtaining fresh consent or establishing another valid legal basis.

Where applicable data protection law requires a legal basis for processing Personal Data, we rely on the following grounds depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and 33pk, including account operations, payment processing and customer support.
• Legal Obligation: Processing required to comply with applicable laws, including AML obligations, KYC requirements and regulatory reporting duties.
• Legitimate Interests: Processing for fraud prevention, responsible gambling monitoring, Platform security and service improvement, where those interests are not overridden by your rights.
• Consent: Processing for optional marketing communications and non-essential cookies, where you have freely provided consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

We do not sell, rent or trade your Personal Data to third parties for their own marketing purposes. We may share your data with the following categories of recipient only where necessary and on a need-to-know basis:

• Payment Service Providers: To process your deposits and withdrawals. Payment method references (such as Easypaisa, JazzCash, Raast and bank transfers via HBL, UBL, Meezan Bank and Bank Alfalah) are provided to the relevant processor solely to facilitate your transaction. These providers are used for context only; their mention does not imply they endorse or support gambling activities.
• KYC and Identity Verification Providers: To verify your identity and age in accordance with our compliance obligations. These providers process your identity documents under strict data security and confidentiality terms.
• Regulatory and Law Enforcement Authorities: Where we are legally required to disclose data by a court order, regulatory direction or other binding legal instrument.
• Fraud Prevention and Security Services: To protect the Platform and its users from fraudulent activity, account takeovers and financial crime.
• Internal Group Entities: Where the operator forms part of a corporate group, data may be shared with affiliated entities for internal compliance, audit or service delivery purposes, subject to equivalent data protection standards.

We retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, regulation or the operator's licensing obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your account and for a period thereafter as required by regulatory and AML retention obligations (typically five years from the date of account closure, subject to applicable law).
• Transaction and Financial Records: Retained for a minimum of five years from the date of the relevant transaction in order to satisfy anti-money laundering and financial record-keeping requirements.
• KYC Documentation: Retained for the period required under the operator's licence conditions and applicable AML regulations, generally five years from last transaction.
• Communications Data: Retained for up to three years from the date of the last communication, unless longer retention is required in connection with a dispute or regulatory investigation.
• Cookie Data: Session cookies are deleted at the end of your browser session. Persistent cookies are retained for the period described in Section 9.

Upon expiry of the applicable retention period, your Personal Data will be securely deleted or anonymised in accordance with our data disposal procedures.

We implement appropriate technical and organisational measures to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Our security measures include, without limitation:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform.
• Access controls and role-based permissions limiting internal access to Personal Data to authorised personnel whose job responsibilities require it.
• Password hashing and salting to ensure account credentials are not stored in recoverable plain-text format.
• Regular security assessments and vulnerability reviews of Platform infrastructure.
• Incident response procedures to detect, contain and report data security incidents in accordance with applicable notification requirements.

While we take data security seriously and implement industry-standard protections, no data transmission over the internet or electronic storage system is wholly immune from risk. We cannot guarantee the absolute security of your Personal Data and accept no liability for security incidents that result from factors outside our reasonable control.

You also bear responsibility for the security of your own Account. Choose a strong, unique password and do not share your credentials with anyone. Report suspected unauthorised access immediately to our support team at [email protected].

The Platform uses cookies and similar tracking technologies to operate correctly and to improve user experience. A cookie is a small text file stored on your device by your web browser when you visit the Platform.

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to use core Platform features. Guidance on managing cookies is available through your browser's help documentation.

As an international online platform, 33pk may transfer your Personal Data to, and process it in, countries other than the country in which you are located, including the operator's licensing jurisdiction and the locations of third-party Data Processors engaged by us.

Where Personal Data is transferred outside of a jurisdiction with equivalent data protection standards, we take appropriate safeguards to ensure that your data continues to be protected to a standard consistent with this Policy. These safeguards may include standard contractual clauses, processor-specific data security requirements or reliance on recognised adequacy decisions where applicable.

Subject to applicable data protection law and the operator's licensing obligations, you may hold the following rights in respect of your Personal Data. To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe and in accordance with applicable law.

Please note that the exercise of certain rights may be subject to limitations where processing is required to comply with legal obligations or where other overriding interests apply. We will communicate any such limitations clearly when responding to your request.

The 33pk Platform is intended exclusively for individuals who are at least 18 years of age, or the higher minimum age required by the operator's licensing jurisdiction. We do not knowingly collect Personal Data from individuals under the applicable minimum age.

Age verification is conducted as part of the KYC process. Where we become aware that an Account has been registered by a person below the minimum eligible age, that Account will be suspended immediately, all associated Personal Data will be processed in accordance with applicable law and regulatory requirements, and any deposits will be returned subject to KYC completion.

If you are a parent or guardian and believe that a minor in your care has registered an Account on the Platform, please contact us immediately at [email protected].

The Platform may reference or interact with third-party services, including payment providers, game content suppliers and customer support tools. While we take care in the selection of Data Processors, we are not responsible for the privacy practices of third-party services that operate under their own independent privacy policies.

Any reference to payment method brands — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — on this Platform is made for contextual reference only in relation to familiar Pakistani payment rails. These brands operate independently and their own privacy policies govern the data they collect when you interact with their services. 33pk has no control over and accepts no responsibility for the data practices of these third parties.

We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the Platform.

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or operational requirements. Material changes to this Policy will be notified to registered users via a prominent notice on the Platform or by email to your registered address.

The "Last Updated" date displayed at the top of this page reflects the date on which the most recent revision was made. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and may request Account closure via customer support.

We recommend reviewing this Policy periodically to remain informed of how your Personal Data is being handled.

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the 33pk data team through the following channels. We aim to respond to all data-related enquiries within a reasonable period and in accordance with applicable law.