lak33 Privacy Policy

1. Overview

lak33 ("we", "us", "our") operates the online sports betting and casino platform accessible at lak33.net. As a data controller, lak33 is responsible for the personal information it processes in connection with the provision of its services to users ("you", "your") in Pakistan and other jurisdictions.

This Privacy Policy describes the categories of personal data lak33 collects, the lawful bases on which we process it, how long we retain it, and the rights available to you. By registering for or using lak33, you acknowledge that you have read and understood this Privacy Policy.

2. Personal Data We Collect

lak33 collects the following categories of personal data from users:

2.1 Identity Data

• Full legal name as it appears on a government-issued identity document.
• Date of birth (for age verification purposes).
• Copies of identity documents submitted during KYC verification (e.g., CNIC, passport).

2.2 Contact Data

• Email address used at lak33 account registration.
• Mobile phone number (where provided for 2FA or account recovery).
• Residential address (where required for KYC or withdrawal processing).

2.3 Financial Data

• JazzCash and Easypaisa account identifiers associated with deposits or withdrawals.
• Bank account details (HBL, UBL, Meezan Bank, Bank Alfalah) where provided for withdrawal.
• Partial card numbers, card type, and billing country for Visa/Mastercard transactions.
• USDT wallet addresses where applicable.
• Transaction history, deposit and withdrawal amounts, and PKR wallet balances.

2.4 Technical & Usage Data

• IP address, device type, operating system, browser type, and language settings.
• Session duration, pages visited, features accessed, and navigation paths within lak33.
• Login timestamps and login history.
• Betting and gaming activity records including wager amounts, game selections, outcomes, and bonus usage.

2.5 Communications Data

• Records of communications with lak33 customer support via live chat or email.
• Feedback, dispute submissions, and responsible gaming requests.

3. How We Collect Your Data

lak33 collects personal data through the following mechanisms:

• Direct submission: Data you provide when registering a lak33 account, completing KYC verification, initiating a JazzCash/Easypaisa deposit or bank withdrawal, contacting support, or filling out any form on lak33.net.
• Automated collection: Technical and usage data collected automatically via cookies, server logs, and analytics tools as you navigate and interact with lak33.
• Third-party sources: Identity verification and fraud prevention data from licensed KYC/AML service providers; payment processing data from payment gateway partners including JazzCash, Easypaisa, and card processors.

4. Purpose and Legal Basis for Processing

lak33 processes your personal data for the following purposes and on the following legal bases:

• Account creation and management — Necessary to perform the contract between lak33 and you as a registered user.
• Identity and age verification (KYC) — Legal obligation under applicable anti-money laundering and responsible gaming frameworks; necessary to ensure compliance with the 18+ age restriction.
• Processing deposits and withdrawals — Necessary to perform the contract; facilitates PKR transactions via JazzCash, Easypaisa, and linked bank accounts.
• Fraud detection and security monitoring — Legitimate interest in protecting lak33 users and the platform from unauthorised access, account takeover, and financial fraud.
• Responsible gaming compliance — Legal obligation and legitimate interest in protecting users from gambling-related harm; includes monitoring for self-exclusion compliance and at-risk behaviour patterns.
• Customer support — Necessary to perform the contract and respond to user queries and disputes.
• Platform improvement and analytics — Legitimate interest in understanding user behaviour to improve lak33's product quality and user experience.
• Marketing communications — Based on your explicit consent where required; you may withdraw consent at any time by updating your communication preferences in your lak33 account settings.

5. Data Sharing and Disclosure

lak33 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly as necessary:

• KYC and identity verification providers: To fulfil age verification and anti-money laundering obligations.
• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard networks, and USDT processors, as required to process transactions.
• Game software providers: Certified game studios supplying live casino, slot, and RNG table content to lak33 may receive session data necessary for game delivery and fairness auditing.
• Regulatory authorities: Where lak33 is required by applicable law, court order, or licensing authority directive to disclose user data.
• Fraud prevention agencies: To detect, investigate, and prevent fraudulent transactions and account abuse.
• IT and hosting service providers: Cloud infrastructure and cybersecurity providers who process data on lak33's behalf under strict data processing agreements.

All third parties with whom lak33 shares personal data are contractually required to process that data only for the specified purpose and in accordance with applicable data protection standards.

6. Data Retention

lak33 retains personal data only for as long as is necessary for the purposes described in this Policy or as required by applicable law:

• Account data and transaction records: Retained for a minimum of five (5) years from the date of account closure or last transaction, as required by applicable AML frameworks.
• KYC documents: Retained for the duration of the account relationship and for five (5) years thereafter.
• Support communications: Retained for three (3) years from the date of the last communication.
• Session and usage logs: Retained for up to twelve (12) months for security and audit purposes, then anonymised or deleted.
• Marketing preferences: Retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, lak33 will securely delete or irreversibly anonymise your personal data.

7. Data Security

lak33 implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• SSL/TLS encryption on all data transmitted between your device and lak33.net.
• Encryption of sensitive data at rest, including financial details and KYC documents.
• Two-factor authentication (2FA) available to all registered lak33 accounts.
• Role-based access controls limiting internal data access to authorised personnel only.
• Regular security audits and penetration testing of lak33's infrastructure.
• Automatic session expiry after periods of inactivity.

While lak33 takes all reasonable steps to protect your data, no system is entirely immune to risk. You are responsible for maintaining the security of your lak33 login credentials and for notifying us immediately if you suspect any unauthorised account activity.

8. Cookies and Tracking Technologies

lak33 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and gather analytics data. The categories of cookies used by lak33 include:

• Strictly necessary cookies: Required for lak33 to function — session management, authentication tokens, and security features. These cannot be disabled.
• Performance and analytics cookies: Collect anonymised data about how users navigate lak33 to help us identify and fix usability issues.
• Functional cookies: Remember your language preferences, display settings, and responsible gaming tool configurations within lak33.
• Marketing cookies: Used only with your consent to deliver relevant promotional content related to lak33's offers, such as PSL cricket betting promotions and casino bonus notifications.

You can manage or withdraw consent to non-essential cookies at any time through your browser settings or lak33's cookie preference centre. Disabling certain cookies may affect the functionality of lak33.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data lak33 holds about you:

• Right of access: Request a copy of the personal data lak33 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete data in your lak33 account.
• Right to erasure: Request deletion of your personal data in certain circumstances (subject to legal retention obligations).
• Right to restriction: Request that lak33 restrict processing of your data in certain circumstances.
• Right to data portability: Receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object: Object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Withdraw consent for any processing activity based on consent (e.g., marketing emails) at any time without affecting prior processing.

To exercise any of these rights, please contact lak33 via the support channels listed in Section 13. lak33 will respond to all verified data rights requests within 30 days.

10. Minors and Age Verification

lak33 does not knowingly collect personal data from individuals under the age of 18. All lak33 accounts are subject to mandatory age verification. Where lak33 discovers that personal data has been collected from a minor — whether through registration, payment, or any other means — that data will be deleted immediately and the associated account permanently closed.

11. International Data Transfers

lak33 operates infrastructure across multiple jurisdictions. Where personal data is transferred outside of Pakistan, lak33 ensures that appropriate safeguards are in place — including data processing agreements incorporating standard contractual clauses — to provide an equivalent level of protection to that afforded under applicable data protection law.

Transfers to payment processors (JazzCash, Easypaisa, and bank partners) and certified game studios are governed by their respective data processing agreements, which require protection standards consistent with this Policy.

12. Changes to This Privacy Policy

lak33 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be communicated to registered users via the email address on file or through a prominent notice on lak33.net prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically. Continued use of lak33 following notification of a material change constitutes acceptance of the updated Policy.

13. Contact and Data Enquiries

For all privacy-related enquiries, data rights requests, or concerns about lak33's handling of your personal data, please contact our Data Protection team:

lak33 will acknowledge receipt of all data rights requests within 5 business days and will aim to provide a full response within 30 calendar days. Complex or multi-part requests may require additional time, in which case you will be notified of the extended timeline.