Privacy Policy

1. Introduction

33pkr ("33pkr", "we", "us", "our") operates the online platform accessible at https://33pkr.cam and any associated applications or services (collectively, the "Platform"). We respect your privacy and are committed to protecting the personal data you share with us.

This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure and protection of your personal information. It applies to all users ("you", "User") who access or register on the Platform, regardless of their location, including users in Pakistan and users accessing the Platform from cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.

By using the Platform, you confirm that you have read and understood this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately. This Policy is incorporated into and forms part of the Terms & Conditions.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably identify a living individual, either directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
• "Controller" means the entity that determines the purposes and means of Processing Personal Data. 33pkr is the Controller of data collected through the Platform.
• "Processor" means a third party that Processes Personal Data on behalf of the Controller under a written agreement.
• "KYC" means Know Your Customer identity verification procedures applied under applicable anti-money-laundering standards.
• "Cookies" means small text files placed on your device by the Platform to collect and store certain information about your browsing behaviour.
• "Platform" means the 33pkr website, applications and related services as defined in Section 1.
• "Sensitive Data" means Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, health information or financial details, which attract a higher standard of protection.

3. Data We Collect

33pkr collects several categories of Personal Data from Users, depending on how you interact with the Platform. The categories below describe the information we may hold about you:

3.1 Identity & Registration Data

• Full name as it appears on your official identity document;
• Date of birth (for age verification purposes);
• National identity number (e.g., CNIC, NICOP or equivalent);
• Gender (where required for account purposes);
• Country of residence and, where provided, city (e.g., Karachi, Lahore, Islamabad).

3.2 Contact Data

• Email address;
• Mobile phone number;
• Correspondence address or proof of address document.

3.3 Account & Activity Data

• Username and encrypted password (passwords are never stored in plain text);
• Login timestamps, session duration and device information;
• Betting history, game activity, deposit and withdrawal records;
• Bonus and promotion usage history;
• Account balance and transaction logs denominated in PKR or applicable currency.

3.4 Financial & Payment Data

• Payment method identifiers (e.g., partial account numbers or wallet IDs associated with Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah or other payment instruments);
• Deposit and withdrawal transaction records;
• Source-of-funds information where required by KYC/AML procedures.

3.5 Technical & Device Data

• IP address and approximate geolocation (country/city level);
• Device type, operating system and browser version;
• Referring website or marketing source;
• Cookie identifiers and session tokens (see Section 8).

3.6 Communications Data

• Support tickets, live chat transcripts and email correspondence;
• Feedback, survey responses and complaint records.

4. How We Collect Data

We collect your Personal Data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support or completing any form on the Platform.
• Automated collection: Technical data collected automatically when you access the Platform, including via Cookies, web beacons and similar tracking technologies (see Section 8).
• Third-party sources: Identity verification agencies, fraud-prevention databases and payment processors may provide or confirm information about you in connection with KYC/AML compliance obligations.
• Public sources: Publicly available registers or databases may be consulted as part of sanctions screening or AML checks.

5. Data Processing & Purpose

We process your Personal Data only for defined, legitimate purposes. The table below summarises the primary purposes for which we process your data:

6. Legal Basis for Processing

We process your Personal Data on one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity: Processing required to perform the contract between you and 33pkr — including account registration, managing your balance and processing transactions.
• Legal obligation: Processing required to comply with applicable KYC, AML and data retention obligations imposed by applicable law or regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring and analytics, where our legitimate business interests are not overridden by your fundamental rights.
• Consent: Where you have given us express, freely given and informed consent — for example, to receive marketing communications. You may withdraw consent at any time without affecting prior lawful processing.

7. Data Sharing & Disclosure

33pkr does not sell your Personal Data to unaffiliated third parties. We may share your data with the following categories of recipients, strictly as necessary:

7.1 Payment Service Providers

We share necessary transaction data with payment processors and gateway providers in connection with deposit and withdrawal processing. These providers are subject to contractual data-processing obligations and may not use your data for their own purposes.

7.2 Identity Verification Agencies

KYC and AML verification may involve sharing identity documents and personal details with specialist third-party verification agencies. These agencies process data solely for verification purposes and under strict confidentiality agreements.

7.3 Technology & Infrastructure Providers

Cloud hosting, database management and platform software providers may process your data as Processors acting on our documented instructions. All such providers are contractually bound to apply appropriate security measures.

7.4 Legal & Regulatory Authorities

We may disclose your Personal Data to law enforcement, regulatory authorities, courts or government bodies where required by law, a valid court order, or where disclosure is necessary to protect the rights, property or safety of 33pkr, its users or the public.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring or sale of assets, your Personal Data may be transferred to a successor entity as part of that transaction, subject to equivalent privacy protections and notification to you.

8. Cookies & Tracking Technologies

The Platform uses Cookies and similar technologies to improve your experience, maintain session security and gather analytical data about how the Platform is used. The following types of Cookies may be placed on your device:

• Essential Cookies: Required for the Platform to function correctly — including maintaining your logged-in session, security tokens and account preferences. These cannot be disabled without affecting Platform functionality.
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate the Platform — pages visited, session duration and device type. Used to improve Platform performance and content.
• Functional Cookies: Remember your preferences such as language settings, display options and notification choices.
• Marketing Cookies: Used where consent is given to deliver relevant promotional information and measure campaign effectiveness.

You may manage Cookie preferences through your browser settings. Disabling certain Cookies may affect Platform functionality. Where consent is required for non-essential Cookies, we will request it through an appropriate consent mechanism.

9. Data Retention

We retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention principles are:

• Active accounts: Personal Data is retained for the duration of your account relationship with 33pkr and for a reasonable period following account closure.
• KYC & AML records: Identity verification documents and transaction records are retained for the period required under applicable anti-money-laundering regulations, typically a minimum of five years from the date of the relevant transaction or account closure.
• Support communications: Correspondence and support tickets are retained for a reasonable period to assist with dispute resolution and quality assurance.
• Technical and log data: Server logs and technical data are retained for security and fraud-prevention purposes, typically up to twelve months unless longer retention is required.

After the applicable retention period, data is securely deleted or anonymised in accordance with our internal data governance procedures.

10. Data Security

33pkr implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Industry-standard HTTPS/TLS encryption for all data transmitted between your browser and our servers;
• Encrypted storage of passwords — plain-text passwords are never stored;
• Access controls and role-based permissions limiting staff access to Personal Data on a need-to-know basis;
• Two-factor authentication options for account security;
• Regular security assessments and monitoring of Platform infrastructure;
• Contractual security obligations imposed on all third-party Processors.

No method of electronic transmission or storage is 100% secure. While we apply robust security practices, we cannot guarantee absolute security. In the event of a data breach affecting your rights and freedoms, we will notify affected Users and relevant authorities in accordance with applicable law.

11. Your Rights

Subject to applicable law, you have the following rights in relation to your Personal Data held by 33pkr. To exercise any of these rights, contact us using the details in Section 17.

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected or updated.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose collected, where consent is withdrawn, or where processing is unlawful — subject to our legal retention obligations (particularly KYC/AML records).
• Right to Restrict Processing: You may request that we limit processing of your data in certain circumstances — for example, while the accuracy of data is contested.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used and machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We will respond to valid rights requests within a reasonable period in accordance with applicable data protection standards. We may need to verify your identity before processing a request to prevent unauthorised disclosure.

12. Minors & Age Verification

Age verification is conducted as part of the KYC process using submitted identity documents. Where we discover that a minor has registered an account, the account will be immediately closed, all funds returned (net of bonus credits) and the Personal Data of the minor securely deleted, subject only to any mandatory retention obligations.

If you believe a minor has accessed the Platform using falsified information, please contact us immediately at the details provided in Section 17.

13. Payment Data

Payment transactions on the Platform are processed by third-party payment service providers. 33pkr does not store full payment card numbers or full mobile wallet credentials on its own servers. We retain only the minimum transaction reference data necessary for accounting, dispute resolution and AML compliance.

Local payment references familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are mentioned solely as contextual guides to help users understand available payment types. None of these institutions endorse, partner with or support online gambling services through this Platform. Payment availability is subject to operator and provider terms and may change without notice.

14. International Data Transfers

The Platform may operate infrastructure, use service providers or store data in jurisdictions outside Pakistan. Where Personal Data is transferred internationally, 33pkr takes steps to ensure that appropriate safeguards are in place, such as:

• Transferring data only to countries with an adequate level of data protection as recognised under applicable standards;
• Implementing contractual data processing agreements incorporating standard data protection clauses with international service providers;
• Applying technical and organisational security measures commensurate with the sensitivity of the data transferred.

By using the Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Pakistan and that such processing is carried out in accordance with this Policy.

15. Pakistan Context

This Policy is written to be accessible to users in Pakistan, including those in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. Pakistan does not currently have a comprehensive general data protection law equivalent to those in force in some other jurisdictions. However, 33pkr applies the data handling standards described in this Policy as a matter of internal governance and user trust, irrespective of the jurisdictional minimum.

The Prevention of Electronic Crimes Act 2016 (PECA) and other applicable Pakistani regulations may be relevant to the processing of electronic data concerning Pakistani residents. 33pkr does not claim to be regulated or supervised by any Pakistani authority in respect of data protection, and this Policy does not constitute legal advice on Pakistani law.

16. Policy Amendments

33pkr reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or operational requirements. Where amendments are material, we will provide reasonable notice via the Platform — for example, through a notice displayed on the homepage or by email to your registered address.

The effective date at the top of this Policy will be updated each time a revision is made. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically.

17. Contact Us

If you have questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact us through the Help Centre accessible from within your account dashboard, or by email:

Support is available in English and, upon request, in Urdu. For urgent account security concerns, please use the Live Chat feature available within your account.