33pkr Privacy Policy — Your Data, Your Rights, Our Commitment

This Privacy Policy applies to 33pkr, the online gaming and betting platform accessible at 33pkr.ws ("33pkr", "we", "us", "our"). 33pkr operates as the data controller for all personal information collected through the platform — meaning we determine the purposes and methods by which your personal data is processed.

This policy applies to all users of the 33pkr platform including registered account holders, visitors who have not yet registered, and individuals who contact 33pkr through any support channel. If you are a Pakistani player using 33pkr in any capacity, this policy describes how we handle your personal information.

We take our responsibilities as a data controller seriously. Our commitment is simple: collect only what is necessary, use it only for stated purposes, protect it properly, and make it easy for you to exercise your rights. That is the standard we hold ourselves to every day on 33pkr.

33pkr collects personal data in several ways: information you provide directly when registering or contacting us, information generated automatically when you use the platform, and in some cases information we receive from payment processors to verify your transactions. The following table summarises the main categories of data we collect:

33pkr does not collect sensitive personal data such as health information, political opinions, religious beliefs or biometric data except where this is strictly required by applicable law or as part of an identity verification process that you initiate. We never collect more personal data than is necessary for the stated purposes of operating the 33pkr platform.

33pkr uses your personal data for the following specific purposes. We do not use your data for any purpose not listed here:

• Account creation and management — creating, maintaining and securing your 33pkr account, verifying your identity and age, processing your login and managing account settings.
• Processing PKR transactions — handling deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT and card networks; reconciling transaction records; investigating and resolving payment disputes.
• Delivering gaming services — providing access to casino games, live dealer tables, virtual sports and other features; recording game results and bet history; calculating and paying out winnings.
• Bonus and promotion management — tracking bonus eligibility, wagering requirement progress and promotion usage; preventing bonus abuse; distributing promotional rewards.
• Customer support — responding to your questions, complaints and requests; maintaining records of support interactions for quality assurance and dispute resolution.
• Legal and regulatory compliance — meeting anti-money-laundering (AML) obligations; responding to lawful requests from Pakistani law enforcement or regulatory authorities; maintaining records as required by applicable law.
• Fraud prevention and security — detecting and preventing fraudulent activity, account compromise, money laundering and other misuse of the 33pkr platform; monitoring for suspicious patterns.
• Platform improvement — analysing how players use 33pkr to identify technical issues, improve user experience and develop new features. This analysis is conducted on aggregated or anonymised data where possible.
• Responsible gaming — monitoring for signs of problem gambling patterns; enforcing deposit limits, cooling-off periods and self-exclusion; providing required notifications and interventions.
• Marketing communications — sending promotional offers, bonus notifications and platform updates to players who have opted in to receive them. You can withdraw marketing consent at any time.

33pkr processes your personal data under the following legal bases. For each purpose described in Section 3, the applicable legal basis is identified below:

• Contractual necessity — processing your registration data, payment data and gaming activity is necessary to perform the contract between you and 33pkr. Without this processing, we cannot provide the services you have signed up for.
• Legal obligation — identity verification, AML record-keeping and responses to law enforcement requests are required by applicable law. We have no discretion to avoid this processing.
• Legitimate interest — fraud detection, security monitoring, platform improvement and certain communications are processed on the basis of 33pkr's legitimate interest in operating a safe, effective platform. We conduct a balancing assessment to ensure this interest does not override your rights.
• Consent — marketing communications are sent only to players who have explicitly opted in. You may withdraw this consent at any time without affecting the operation of your account.

33pkr does not sell your personal data. We share your personal data only in the following limited circumstances, and only with parties who are contractually required to protect it to an equivalent standard:

• Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank partners and card networks receive the transaction data necessary to process your deposits and withdrawals. These parties process your financial data under their own privacy policies and applicable financial regulations.
• Identity verification providers — where required, we may use third-party KYC (Know Your Customer) services to verify your identity documents. These providers are contractually bound to handle your documents securely and not to use them for any other purpose.
• Game technology providers — the companies whose games appear on 33pkr receive the transaction data necessary to operate game rounds and calculate results. They do not receive your full personal profile.
• IT and infrastructure providers — cloud hosting, database management and platform security providers may process your data as part of delivering their technical services to 33pkr. All such providers are subject to data processing agreements.
• Law enforcement and regulatory authorities — 33pkr will share personal data with Pakistani law enforcement, financial intelligence units or courts when required by law, court order or regulatory directive. We will inform you of such disclosures wherever legally permitted to do so.
• Anti-fraud networks — in cases of suspected fraud or money laundering, 33pkr may share relevant data with industry anti-fraud networks or other gaming operators to prevent harm to the industry and to other players.

33pkr uses cookies and similar tracking technologies to operate the platform effectively, maintain your session, prevent fraud and understand how players use the site. The following categories of cookies are used:

• Essential cookies — these are strictly necessary for the 33pkr platform to function. They maintain your login session, remember your preferences during a visit and prevent cross-site request forgery. These cannot be disabled without breaking the platform.
• Functional cookies — these remember choices you make on 33pkr such as your preferred language, game display settings and responsible gaming tool configurations. They are set only after you make a relevant choice.
• Analytics cookies — these collect aggregated information about how players navigate and use 33pkr, which pages are visited most, where users encounter difficulty and how long sessions last. This information is used to improve the platform. Analytics data does not identify you personally.
• Security cookies — these help detect and prevent fraud, bot activity and account compromise attempts. They analyse device fingerprints and behavioural signals to protect your account and the broader 33pkr platform.

You can manage cookie preferences through your browser settings. Disabling essential cookies will impair or prevent your use of 33pkr. Disabling analytics or functional cookies will not prevent you from playing but may affect personalisation features.

33pkr retains personal data for as long as it is needed for the purpose it was collected and for as long as legal obligations require. The approximate retention periods for the main data categories are as follows:

When data reaches the end of its retention period, 33pkr deletes or anonymises it in a secure manner. Anonymised data — from which you cannot be identified — may be retained for longer periods for statistical analysis and platform improvement.

Protecting the personal data of our Pakistani players is an operational obligation, not an afterthought. 33pkr implements the following security measures as standard across the platform:

• TLS/SSL encryption on all data transmission between your browser and 33pkr servers — your data cannot be read if intercepted in transit.
• Password hashing — your 33pkr password is never stored in plain text. It is converted into a one-way cryptographic hash before storage. Even 33pkr staff cannot see your actual password.
• Tokenised payment data — financial credentials are never stored on 33pkr servers in raw form. Payment tokens cannot be reverse-engineered to recover your actual payment details.
• Role-based access controls — staff members can only access the player data categories their role requires. Unnecessary access is not granted even within the 33pkr team.
• Regular security testing — the 33pkr platform undergoes regular penetration testing and vulnerability scanning to identify and resolve security weaknesses before they can be exploited.
• Two-factor authentication — 33pkr supports two-factor authentication for player accounts and enforces it for all internal staff access to systems containing personal data.
• Secure backup infrastructure — player data is backed up to geographically separate secure systems to protect against data loss from hardware failure or natural disaster.

As a 33pkr player, you hold the following rights over your personal data. These rights are meaningful and 33pkr will respond to valid requests within a reasonable timeframe — typically within 30 days:

• Right of Access: You may request a copy of all personal data 33pkr holds about you. We will provide this in a clear, readable format. There is no fee for a standard access request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For account details, many corrections can be made directly in your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing) or where processing was unlawful. Note that legal retention obligations may prevent full immediate deletion — in such cases we will explain what data must be retained and for how long.
• Right to Restrict Processing: In certain circumstances — for example, if you dispute the accuracy of your data or have objected to processing — you may request that we restrict how we use your data while the matter is being resolved.
• Right to Data Portability: For data you have provided to 33pkr on the basis of consent or contract, you may request a copy in a structured, machine-readable format (such as CSV or JSON) suitable for transfer to another service.
• Right to Object: You may object to data processing carried out on the basis of legitimate interest. 33pkr will stop such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — specifically marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

To exercise any of these rights, contact the 33pkr privacy team at support@33pkr.ws with the subject line "Privacy Rights Request". We may ask you to verify your identity before processing a request to ensure we are responding to the correct person.

33pkr is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. Our registration process requires players to confirm their date of birth and agree that they are at least 18 years old.

Where 33pkr discovers or has reasonable cause to believe that a user account belongs to a person under 18, we will immediately:

• Suspend the account and prevent further access to gaming features
• Request identity verification documents to confirm the player's age
• If the player is confirmed to be under 18, permanently close the account
• Return any real-money balance to the payment method used for deposits, after deducting any winnings derived from gameplay (which cannot be retained by an under-18 player)
• Delete the personal data associated with the underage account in accordance with our retention obligations

If you believe a person under 18 has created an account on 33pkr, please contact us immediately at support@33pkr.ws. We treat such reports as high-priority and will investigate and act promptly.

Some of the third-party providers used by 33pkr — including cloud infrastructure providers, game technology companies and security services — may process data outside Pakistan. Where such transfers occur, 33pkr ensures that appropriate safeguards are in place to protect your personal data to an equivalent standard to the protections described in this Privacy Policy.

Safeguards used for international transfers include: contractual data processing agreements incorporating standard data protection clauses; transfers to countries or organisations that provide adequate data protection as assessed by recognised standards; and additional technical security measures applied at the point of transfer.

If you would like more information about the specific safeguards applied to any international transfer of your data, please contact us at support@33pkr.ws.

33pkr sends marketing communications — including bonus offers, new game announcements, promotional campaigns and platform updates — only to players who have opted in to receive them during registration or through their account settings.

We may use email and/or SMS to send marketing messages to opted-in players. We do not send unsolicited marketing communications ("spam") and we do not share your contact details with third parties for marketing purposes.

You can withdraw your marketing consent and unsubscribe from 33pkr promotional communications at any time through the following methods:

• Click the "Unsubscribe" link included at the bottom of every marketing email from 33pkr
• Update your communication preferences in your 33pkr account settings
• Contact 33pkr support at support@33pkr.ws with a request to remove you from marketing lists

Withdrawing marketing consent does not affect your ability to continue using your 33pkr account. You will still receive essential service communications — such as deposit confirmations, withdrawal notifications, responsible gaming alerts and security messages — as these are not marketing and are necessary for the operation of your account.

33pkr reviews and updates this Privacy Policy periodically to reflect changes in how we process data, changes to applicable law, or improvements to our privacy practices. The "Last Updated" date at the top of this page shows when the policy was most recently revised.

Where changes to this Privacy Policy are material — meaning they significantly affect how we collect, use or share your personal data — we will notify registered 33pkr players by email to their registered address and/or by a prominent notice on the platform before the changes take effect.

For minor or clarificatory updates that do not materially change your privacy rights, we may update the policy without individual notification. We recommend bookmarking this page and reviewing it periodically. Your continued use of 33pkr after updated privacy terms take effect constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy, how 33pkr handles your personal data, or if you wish to exercise any of your data rights, please get in touch:

• Email: support@33pkr.ws — use the subject line "Privacy Rights Request" for data rights requests or "Privacy Complaint" for complaints. We aim to respond within 5 business days for rights requests and within 24 hours for urgent privacy concerns.
• Live Chat: Available 24/7 on the 33pkr website — suitable for general privacy questions and to be directed to the appropriate team.

If you raise a privacy concern or complaint with 33pkr and are not satisfied with our response, you have the right to escalate your complaint through our formal dispute resolution process as described in the 33pkr Terms and Conditions. We are committed to resolving privacy concerns promptly and fairly.