pak33 Privacy Policy

1 Who We Are

1.1 pak33 is an online gaming platform operating at pak33.bid, providing casino games, sports betting, live dealer tables, and related services exclusively in Pakistani Rupees to players aged 21 and above.

1.2 For the purposes of this Privacy Policy, pak33 is the data controller responsible for the personal information collected from players and visitors to the Platform. References to "pak33," "we," "us," and "our" throughout this policy refer to the Platform operator.

1.3 pak33 operates under an international online gaming licence. The Platform's data practices are governed by the applicable provisions of that Licence, which impose specific obligations regarding the collection, storage, and protection of player data.

2 Data We Collect

2.1 pak33 collects personal data in the following categories:

Data Category	Specific Data Points	Collection Method
Identity Data	Full legal name (as per CNIC), date of birth, CNIC number, CNIC image (front & back)	Provided by Player during KYC
Contact Data	Pakistani mobile number, email address (if provided)	Provided during registration
Financial Data	Deposit and withdrawal amounts, payment method type (e.g., JazzCash, EasyPaisa, HBL), transaction timestamps, transaction IDs	Generated during payment transactions
Gaming Activity Data	Game sessions, bets placed, game outcomes, bonus redemptions, jackpot events, responsible gaming tool usage	Automatically generated during Platform use
Technical Data	IP address, device type, browser type and version, operating system, session timestamps, login timestamps	Automatically collected via Platform systems
Support Communications	Live chat transcripts, email correspondence, complaint records	Generated during support interactions

2.2 pak33 does not intentionally collect sensitive categories of personal data beyond what is listed above (e.g., we do not collect health data, religious affiliation, or political views). If any such data is incidentally disclosed to us in a support communication, it is not recorded as a data point and is not used for any purpose.

3 How We Use Your Data

3.1 pak33 uses your personal data for the following clearly defined purposes:

• Account Management: Creating, maintaining, and operating your pak33 account, including processing deposits and withdrawals in PKR, managing your bonus wallet, and communicating account-related information.
• Identity Verification (KYC): Verifying your identity and age via CNIC as required under our international gaming licence. This is a legal obligation, not a discretionary process.
• Anti-Money-Laundering (AML) Compliance: Monitoring deposit and withdrawal patterns in compliance with anti-money-laundering regulations applicable under our Licence. This may include source-of-funds checks for large or unusual transactions.
• Fraud Prevention & Platform Security: Detecting, investigating, and preventing fraudulent account activity, collusion, bonus abuse, and security breaches. Technical data (IP, device information) is central to this use.
• Responsible Gaming Monitoring: Analysing gaming activity to identify indicators of problem gambling and to ensure the effective operation of responsible gaming tools including deposit limits, session limits, and self-exclusion.
• Customer Support: Handling and resolving Player queries, complaints, and disputes, including disputes related to games, payments, and bonuses.
• Legal and Regulatory Compliance: Meeting obligations under our international gaming licence, including providing data to the Licence Authority and law enforcement where legally required.
• Service Improvement: Analysing aggregated and anonymised gaming activity and technical data to improve Platform performance, game selection, and user experience for Pakistani players.
• Marketing Communications (where consented): Sending promotional offers, bonus notifications, and platform updates to Players who have explicitly opted in to marketing communications.

4 Legal Basis for Processing

4.1 pak33 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing your data is necessary to fulfil the contract between you and pak33 — specifically, to operate your account, process PKR transactions, and provide access to Platform services.
• Legal Obligation: KYC/identity verification, AML monitoring, and retention of financial records are legal obligations under our international gaming licence. We cannot waive these obligations regardless of individual preference.
• Legitimate Interests: Fraud detection, platform security, responsible gaming monitoring, and service improvement are conducted on the basis of pak33's legitimate interest in operating a secure, fair, and compliant gaming platform.
• Consent: Marketing communications are processed on the basis of your explicit, opt-in consent. This consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5 Cookies & Tracking Technologies

5.1 pak33 uses cookies and similar tracking technologies to operate the Platform effectively and to improve the user experience for Pakistani players.

5.2 Types of cookies used by pak33:

• Essential Cookies: Required for the Platform to function. These maintain your logged-in session, store your game state, and enable security features. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming tool configurations.
• Analytics Cookies: Collect anonymised data on how players navigate pak33 — pages visited, session duration, device type — to help us improve the Platform. This data is aggregated and does not identify individual players.
• Security Cookies: Help detect and prevent fraudulent activity, multiple account creation, and suspicious login patterns.

5.3 pak33 does not use third-party advertising or tracking cookies that share data with external advertising networks. You will not be tracked for advertising purposes as a result of visiting pak33.

5.4 You may manage cookie preferences through your browser settings, though disabling essential cookies will impair your ability to use pak33.

6 Data Sharing & Third Parties

6.1 pak33 shares your personal data only with the following categories of third parties, and only to the extent necessary for each specified purpose:

• Payment Processing Partners: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment providers receive the minimum data necessary to process your PKR deposit and withdrawal transactions. Payment partners are bound by their own privacy and data security obligations.
• KYC Verification Providers: Third-party identity verification services process your CNIC data to confirm identity and age. These providers operate under strict data processing agreements with pak33.
• Licence Authority: pak33's Licence Authority may require access to certain player data as part of regulatory audits, compliance checks, or dispute resolution. We comply with all such requests as required under the terms of our Licence.
• Law Enforcement and Government Authorities: pak33 discloses player data to law enforcement or regulatory authorities when legally required to do so — for example, in response to a valid court order, AML investigation, or fraud inquiry. We do not voluntarily disclose data beyond what is legally required.
• IT Infrastructure Providers: Cloud hosting and server infrastructure providers who process data on pak33's behalf under strict data processing agreements. These providers are not permitted to use your data for any purpose beyond providing infrastructure services to pak33.

7 International Data Transfers

7.1 As an internationally licensed gaming platform, pak33 may process and store player data on servers located outside Pakistan. Where data is transferred internationally, pak33 ensures that appropriate safeguards are in place, including data processing agreements that require recipient parties to maintain data protection standards consistent with the obligations under our Licence.

7.2 pak33 does not transfer player data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual safeguards.

8 Data Retention

8.1 pak33 retains personal data for the following periods:

• Account and KYC Data: Retained for the duration of your account and for a minimum of 5 years following account closure, as required under our international gaming licence for AML compliance purposes.
• Financial Transaction Records: Retained for a minimum of 5 years following each transaction, in accordance with financial record-keeping obligations under our Licence.
• Gaming Activity Logs: Retained for the duration of your account and for 2 years following account closure, for dispute resolution and responsible gaming monitoring purposes.
• Support Communications: Retained for 3 years following the resolution of each communication, for complaint management and audit purposes.
• Technical Data: IP and session logs are retained for 12 months for fraud detection and security monitoring purposes.
• Marketing Consent Records: Retained for the duration of your account plus 1 year following closure, as evidence of consent or withdrawal of consent.

8.2 Data that is no longer required for any identified purpose and is not subject to mandatory retention is securely deleted in accordance with pak33's data destruction procedures.

9 Your Rights

9.1 pak33 recognises the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data pak33 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request correction. Account details can be updated directly in your pak33 account settings; CNIC corrections require re-submission through the KYC process.
• Right to Erasure: You may request deletion of your personal data. This right is subject to our mandatory data retention obligations — data required under our Licence for AML or financial auditing purposes cannot be deleted before the end of the applicable retention period. We will inform you of what can and cannot be deleted and the reasons for any limitation.
• Right to Restrict Processing: You may request that pak33 restricts the processing of your data while a correction or objection request is under review.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format for transfer to another service where technically feasible.
• Right to Object: You may object to processing based on pak33's legitimate interests. Where such objection is upheld, we will cease the relevant processing unless we have compelling legitimate grounds that override your interests.
• Right to Withdraw Marketing Consent: Where you have consented to marketing communications, you may withdraw that consent at any time via your account settings or by contacting pak33 support.

9.2 To exercise any of these rights, contact pak33 support via live chat or at the email address shown in Section 14. We will verify your identity before processing any data rights request.

10 Data Security

10.1 pak33 implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption on all data transmissions between your device and pak33 servers;
• Encrypted storage of passwords using industry-standard one-way cryptographic hashing — pak33 staff cannot read your password;
• Access controls limiting employee access to personal data to those with a legitimate operational need;
• Regular security audits and penetration testing of the Platform's infrastructure;
• Two-factor authentication availability for player accounts;
• Automated suspicious activity monitoring and real-time fraud detection systems;
• Data processing agreements with all third-party service providers that handle player data on pak33's behalf.

10.2 In the event of a data breach that poses a risk to player rights and freedoms, pak33 will notify the Licence Authority and affected players in accordance with applicable breach notification obligations.

11 Children & Minors

11.1 pak33 is strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal data from persons under 21.

11.2 All accounts are required to complete CNIC-based age verification before accessing real-money gaming features. If pak33 discovers that it has inadvertently collected data from a person under 21, that account will be immediately closed, the data will be deleted (subject to any mandatory retention obligations), and any net deposits will be returned.

12 Marketing & Opt-Out

12.1 pak33 sends marketing communications only to players who have explicitly opted in during registration or subsequently via account settings. Marketing communications may include: new game announcements, deposit bonus offers, PSL cricket betting promotions, jackpot milestone notifications, and VIP Programme invitations.

12.2 You may opt out of marketing communications at any time by: (a) updating your communication preferences in your pak33 account settings; (b) clicking the unsubscribe link in any marketing message; or (c) contacting pak33 support directly. Opt-out requests are processed within 48 hours.

12.3 Opting out of marketing communications does not affect operational communications — pak33 will continue to send account-related notifications such as deposit confirmations, withdrawal updates, KYC requests, and security alerts regardless of your marketing preferences.

13 Changes to This Privacy Policy

13.1 pak33 reserves the right to update this Privacy Policy at any time. The effective date of the current version is shown at the top of this page. The version number in the table of contents indicates the revision level.

13.2 For material changes to this policy — particularly those affecting how we collect, use, or share personal data — pak33 will notify registered Players via the mobile number or communication channel associated with their account, in addition to updating this page.

13.3 Your continued use of pak33 after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised policy, you must discontinue use of pak33 and may request account closure.

14 Contact & Complaints

14.1 For any questions, requests, or concerns relating to this Privacy Policy or pak33's data practices, please contact us through the following channels:

• Live Chat: Available 24/7 from any page on pak33.bid. For data rights requests, please mention "Privacy Request" to our support agent so it can be routed appropriately.
• Support Email: [email protected] — data privacy queries receive a response within 48 hours. Please include your registered mobile number and a description of your request.

14.2 If you are dissatisfied with pak33's response to a privacy concern or data rights request, you may escalate the matter to the Licence Authority's complaints process as described in pak33's Terms & Conditions.