01 Data Controller Identity
For the purposes of this Privacy Policy, lak33 (operated under international gaming regulations at the domain lak33.org) is the Data Controller responsible for the personal information of players and visitors interacting with the lak33 platform and its associated services.
As Data Controller, lak33 determines the purposes for which your personal data is processed and the means by which that processing is carried out. lak33 is responsible for ensuring that all data processing activities comply with applicable data protection legislation and the commitments made in this Privacy Policy.
If you have any questions about this Privacy Policy, about lak33's data practices, or about your individual data rights, please contact the lak33 Privacy team using the contact details provided in Section 15 of this document.
Policy Scope: This Privacy Policy applies to all personal data collected from players, prospective players, and website visitors through the lak33.org platform, mobile applications, customer support channels, and any other touchpoints through which lak33 interacts with individuals.
02 Categories of Personal Data We Collect
lak33 collects the following categories of personal data in the course of providing gaming and betting services to Pakistani players:
| Data Category |
Specific Data Items |
Purpose |
| Identity Data |
Full legal name, date of birth, CNIC/passport number, nationality |
Account registration, KYC verification, age confirmation |
| Contact Data |
Pakistani mobile number, email address, city of residence |
Account communication, OTP delivery, support correspondence |
| Financial Data |
JazzCash/EasyPaisa wallet references, bank account details, transaction history, PKR balances |
Payment processing, AML compliance, withdrawal verification |
| Technical Data |
IP address, device type, browser type, operating system, session duration, login timestamps |
Security monitoring, fraud prevention, platform optimisation |
| Gaming Activity Data |
Game history, betting history, wagering amounts, win/loss records, bonus usage |
Responsible gaming monitoring, dispute resolution, loyalty programme administration |
| Communication Data |
Customer support chat logs, email correspondence, complaint records |
Service delivery, dispute resolution, quality assurance |
| Preference Data |
Marketing consent status, notification settings, game preferences |
Personalisation, targeted promotions (where consent given) |
Sensitive Data: lak33 does not intentionally collect sensitive personal data (such as health information, religious beliefs, or political views) from players. Where responsible gaming interactions indicate potential vulnerability, only the minimum necessary information is recorded for the purpose of providing appropriate support.
03 How lak33 Collects Your Personal Data
lak33 collects personal data through the following channels:
- Direct registration: When you create a lak33 account, you provide identity, contact, and preference data voluntarily through the registration form.
- KYC verification submissions: When you complete identity verification, you provide government-issued identification documents and, in some cases, selfie or proof-of-address documentation.
- Financial transactions: When you make deposits or request withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, USDT, or other supported payment methods, lak33's payment processing systems capture the relevant transaction reference data.
- Platform usage: As you use the lak33 platform — browsing games, placing bets, accessing live casino tables, or interacting with the Money Coming loyalty section — technical and activity data is collected automatically by lak33's server infrastructure.
- Customer support interactions: When you contact lak33 support via live chat, email, or any other channel, records of that communication are created and retained.
- Cookies and tracking technologies: lak33 uses cookies and similar technologies on the lak33.org platform to maintain session state, detect fraud, and analyse platform performance. See Section 7 for full details.
- Third-party verification providers: For KYC and age verification purposes, lak33 may receive data from regulated identity verification service providers. This data is cross-referenced with the information you have provided directly.
04 Purposes of Processing & Legal Basis
lak33 processes your personal data for the following specific purposes, each grounded in a legitimate legal basis:
- Account management and service delivery: Processing necessary for the performance of the contract between lak33 and you as a registered player — including managing your account, processing bets, crediting winnings, and administering bonus offers.
- Identity and age verification (KYC): Processing necessary for lak33's compliance with international gaming regulatory requirements and anti-money laundering obligations. lak33 is legally required to verify the identity and age of all players before permitting real-money transactions.
- Payment processing and anti-money laundering: Processing necessary for legal compliance with AML regulations, including monitoring of transaction patterns and reporting of suspicious financial activity as required by applicable law.
- Fraud prevention and platform security: Processing based on lak33's legitimate interests in maintaining a secure and fair gaming environment, protecting players from account compromise, and detecting and preventing abuse of platform systems.
- Responsible gaming monitoring: Processing based on lak33's legitimate interests and regulatory obligations to identify and respond to indicators of problem gambling behaviour, including providing appropriate support and enforcing self-exclusion measures.
- Dispute resolution: Processing necessary for the performance of lak33's contractual obligations to investigate and resolve complaints and disputes fairly and with reference to an accurate factual record.
- Direct marketing communications: Processing based on your explicit consent, where you have opted in to receive promotional communications about lak33 offers, bonuses, and new games. You may withdraw this consent at any time.
- Platform analytics and improvement: Processing based on lak33's legitimate interests in improving platform performance, user experience, and game selection — using aggregated or anonymised data where possible.
05 Data Sharing & Third-Party Processors
lak33 does not sell, rent, or trade your personal data. We may share your data with third parties only in the following strictly controlled circumstances:
- Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency processing providers receive the minimum financial transaction data necessary to process your deposits and withdrawals. These processors are bound by their own regulatory obligations and data protection commitments.
- Identity verification providers: Regulated KYC and age verification service providers may receive copies of identity documents you submit for the purpose of verifying your eligibility to use lak33 Services. These providers operate under strict data processing agreements with lak33.
- Game content providers: Third-party game studios whose titles are offered on the lak33 platform may receive limited anonymised session and RNG audit data required for the proper technical functioning of their games and for regulatory certification purposes. This data does not identify you personally.
- Regulatory and law enforcement authorities: lak33 is legally obligated to disclose personal data and financial transaction records to relevant regulatory bodies, financial intelligence units, and law enforcement agencies upon receipt of a lawful request, court order, or as required by applicable AML and gaming regulations. Such disclosures are made without notice to the affected player where legally required.
- Professional advisors: lak33's legal, audit, and compliance advisors may access personal data on a strictly confidential, need-to-know basis where required for the delivery of their professional services to lak33.
Data Processing Agreements: All third parties who process personal data on behalf of lak33 are required to enter into a formal Data Processing Agreement that commits them to processing your data only in accordance with lak33's documented instructions, for the specified purposes only, and in compliance with applicable data protection legislation.
06 International Data Transfers
As an international online gaming platform serving Pakistani players, lak33 operates infrastructure in multiple jurisdictions. Consequently, your personal data may be transferred to, stored in, and processed in countries outside Pakistan.
Where such international transfers occur, lak33 ensures that appropriate safeguards are in place to protect your data, including:
- Reliance on approved international data transfer mechanisms as recognised by applicable data protection frameworks.
- Requiring all international data recipients to maintain security standards and data processing obligations at least equivalent to those applied by lak33.
- Implementing contractual data protection clauses with all international data processors that govern the treatment of Pakistani players' personal data.
By registering and using lak33's services, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan and consent to such transfers as described in this policy.
07 Cookies & Tracking Technologies
lak33 uses cookies and similar technologies on the lak33.org platform. Cookies are small data files stored on your device when you visit or interact with the lak33 website. The following categories of cookies are used:
- Strictly Necessary Cookies: Required for the core functioning of the lak33 platform, including maintaining your login session, processing bets, and maintaining your PKR wallet state. These cookies cannot be disabled without rendering core platform functionality inoperable.
- Security Cookies: Used to detect and prevent fraudulent activity, protect against cross-site request forgery, and monitor for suspicious login patterns that may indicate account compromise. These cookies are essential to platform security.
- Functional Cookies: Used to remember your language preferences, game display settings, and other personalisation options that improve your lak33 experience. These cookies persist across sessions so your preferences are retained.
- Analytics Cookies: Used to collect aggregated information about how players navigate and use the lak33 platform, including which games are most popular, which pages generate the most traffic, and where technical errors occur. This data is used to improve platform performance. Analytics data is anonymised or pseudonymised where possible.
- Marketing Cookies: Where you have consented to marketing communications, cookies may be used to measure the effectiveness of promotional campaigns and to avoid showing you the same promotional content repeatedly. You may withdraw your consent to marketing cookies through your account preferences.
Cookie Control: You may control cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies will impair or prevent your access to lak33's services. lak33's platform does not currently respond to Do Not Track (DNT) browser signals, though we will monitor industry developments in this area.
08 Data Retention Periods
lak33 retains personal data for periods determined by the purpose for which it was collected and by applicable legal and regulatory requirements. The following general retention framework applies:
| Data Type |
Retention Period |
Basis |
| Account & Identity Data |
Duration of account + 7 years post-closure |
AML regulatory requirements |
| Financial Transaction Records |
7 years from transaction date |
AML and financial regulation |
| KYC Documentation |
Duration of account + 7 years post-closure |
Regulatory KYC record-keeping obligations |
| Gaming Activity Records |
Duration of account + 3 years post-closure |
Dispute resolution, regulatory audit |
| Customer Support Records |
3 years from interaction date |
Dispute resolution, quality assurance |
| Marketing Preferences |
Until consent withdrawn + 1 year |
Consent management record |
| Technical / Session Data |
90 days (anonymised thereafter) |
Security monitoring, fraud prevention |
Upon expiry of the applicable retention period, lak33 will securely delete or irreversibly anonymise your personal data so that it can no longer be attributed to you as an identified individual.
09 Your Data Protection Rights
As a data subject whose personal information is processed by lak33, you hold the following rights in relation to your personal data. lak33 will respond to all valid rights requests within 30 days of receipt, free of charge for reasonable first requests:
Right of Access
Request a copy of all personal data lak33 holds about you, along with information about how it is being processed.
Right to Rectification
Request correction of any inaccurate or incomplete personal data that lak33 holds about you.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Right to Restriction
Request that lak33 restrict its processing of your data in certain circumstances, such as while a dispute about data accuracy is being investigated.
Right to Portability
Receive a copy of your personal data in a structured, machine-readable format, and request its transfer to another controller where technically feasible.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes. Marketing-related objections will always be honoured immediately.
How to Exercise Your Rights: To submit a data rights request, contact the lak33 Privacy team at
[email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. lak33 may require identity verification before processing your request to ensure data is not disclosed to unauthorised parties.
Limitations on Erasure & Portability: lak33's ability to comply with erasure and portability requests may be limited where retention of data is required by applicable AML regulations, gaming licensing requirements, or other legal obligations. Where lak33 is unable to fulfil a request in full, we will explain the basis for any partial compliance in our response.
10 Children's Privacy — 21+ Platform
Strict Age Restriction: lak33 is a real-money gambling platform strictly for adults. No person under the age of 21 is permitted to register, deposit, or use any service offered by lak33. lak33 does not knowingly collect personal data from individuals under 21 years of age.
Where lak33 discovers or has reasonable grounds to believe that an Account has been registered by, or on behalf of, an individual under 21 years of age, lak33 will:
- Immediately suspend the Account and block access to all real-money services.
- Conduct a review of all transactions associated with the Account.
- Return any real-money deposits made (net of any winnings, which will be voided) to the originating payment method.
- Permanently close the Account and retain the minimum data required by applicable regulatory and AML obligations.
- Where legally required, report the matter to relevant regulatory authorities.
Parents and guardians who are concerned about potential underage access to online gaming services are encouraged to make use of parental control software tools available for installation on shared family devices.
11 Security Measures
lak33 implements a comprehensive, multi-layered security framework to protect the personal data of all Pakistani players. This framework includes the following key controls:
- Encryption in transit: All data transmitted between your device and lak33's servers is protected by 256-bit Transport Layer Security (TLS). The padlock icon in your browser confirms this encryption is active during all lak33 sessions.
- Encryption at rest: Personal data stored in lak33's databases — including identity documents, KYC records, and financial transaction data — is encrypted using AES-256 encryption.
- Access controls: Access to personal data within lak33's internal systems is granted on a strict need-to-know basis, with role-based access controls, multi-factor authentication for all staff, and comprehensive audit logging of data access events.
- Network security: lak33's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and regular penetration testing conducted by independent security specialists.
- Vendor security assessments: All third-party processors who handle lak33 player data are subject to security assessments before onboarding and periodic reviews to confirm continued compliance with lak33's security standards.
- Incident response: lak33 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to player rights and freedoms, lak33 will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.
Your Role in Security: While lak33 takes extensive technical measures to protect your data, you play an important role in keeping your lak33 Account secure. Use a unique, strong password, enable two-factor authentication, never share your login credentials, and contact lak33 support immediately if you suspect unauthorised access to your account.
12 Third-Party Content & Links
The lak33 platform may contain references to, or integrate content from, third-party game providers and technology partners. lak33 does not control the privacy practices of third-party game studios and technology providers whose software is integrated into the lak33 platform.
Game providers integrated into lak33 may process limited, game-session-specific technical data as part of the game delivery infrastructure. Such processing is governed by the game provider's own privacy documentation and data processing agreements with lak33. lak33 does not permit game providers to use data obtained through the lak33 platform for purposes beyond those required for game delivery and regulatory certification.
lak33 is not responsible for the privacy practices of any third-party entities whose data processing is independent of lak33's instructions. This Privacy Policy applies only to data processing carried out by lak33 as Data Controller.
13 Direct Marketing Communications
lak33 may send you promotional communications — including notifications about new games, seasonal bonus offers, PSL betting promotions, Money Coming leaderboard updates, and other lak33 platform offers — only where you have provided your explicit consent to receive such communications at the time of registration or subsequently through your account preferences.
Marketing communications from lak33 may be delivered via:
- SMS to your registered Pakistani mobile number.
- Email to your registered email address.
- In-platform notifications displayed within your lak33 account dashboard.
You may withdraw your consent to marketing communications at any time and without any negative consequences to your lak33 account or access to platform services. To opt out, update your notification preferences in your account settings or contact lak33 support at [email protected]. Opt-out requests will be processed within 48 hours.
Service Notifications: Withdrawal of marketing consent does not affect lak33's ability to send you essential service communications — such as account verification messages, OTP codes, transaction confirmations, security alerts, responsible gaming notifications, and policy update notices. These communications are required for the proper administration of your lak33 account and cannot be opted out of while your account is active.
14 Policy Updates & Changes
lak33 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or platform features. When we make changes to this policy, we will:
- Update the "Last Updated" date displayed at the top of this document and in the header section of the policy.
- Where changes are material — meaning they meaningfully affect how we process your personal data or the rights available to you — provide advance notice to registered lak33 players via in-platform notification or email to your registered address.
- For significant changes, provide a clear summary of what has changed and why, so you can easily understand the impact on your privacy.
Your continued use of the lak33 platform following the posting of an updated Privacy Policy constitutes your acknowledgement of, and where required your consent to, the changes described. If you do not agree with an updated Privacy Policy, you may close your lak33 account and request deletion of your data subject to the retention requirements described in Section 8.
Always Current: The most current version of the lak33 Privacy Policy is always available at lak33.org/privacy-policy. We recommend reviewing this policy periodically to stay informed about how lak33 protects your information.
15 How to Contact lak33 About Privacy
For all privacy-related enquiries, data rights requests, or concerns about how lak33 handles your personal data, please contact the lak33 Privacy team through the following channels:
- Privacy Email: [email protected] — please include "Privacy Policy" or "Data Rights Request" in the subject line. (Plain text — not a clickable link.)
- Live Chat: Available 24/7 through your lak33 account after login. Suitable for initial privacy queries and guidance on exercising your rights.
- Response Commitment: lak33 aims to acknowledge all privacy-related correspondence within 24 hours and to provide a substantive response within 30 calendar days. Complex requests may require additional time, in which case lak33 will notify you of the extended timeline within the initial 30-day period.
If you are dissatisfied with lak33's response to a privacy concern or data rights request, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. lak33 will cooperate fully with any regulatory enquiry regarding its data processing activities.
For questions about your lak33 account, payment matters, responsible gaming tools, or platform support (as distinct from privacy matters), please visit the FAQ page or contact lak33 general support via live chat. The Responsible Gaming page provides dedicated tools and resources if you need help managing your gaming activity. The full platform Terms & Conditions are also available for reference.