01 Introduction
This Privacy Policy ("Policy") is issued by 33r ("33r," "we," "us," or "our"), the operator of the online gaming and sports betting platform accessible at 33r.lat and all associated services (the "Platform"). It applies to all individuals who visit, register with, or otherwise interact with the 33r Platform, including players based in Pakistan and all other jurisdictions where 33r's services are accessible.
33r is committed to protecting the personal data of its players and handling all personal information with transparency, integrity, and respect. This Policy explains in plain terms what data we collect, why we collect it, with whom it may be shared, how long we keep it, and the rights you hold over your own information at every stage of your relationship with 33r.
By registering on the 33r Platform, making a deposit, or using any service offered by 33r, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not use the Platform. For questions, contact our support team in English or Urdu via live chat, available 24/7.
This Policy should be read alongside 33r's Terms & Conditions and Responsible Gaming Policy, all of which govern your use of the Platform collectively.
02 Data Controller
For the purposes of applicable data protection legislation, 33r is the data controller responsible for the personal data it collects and processes in connection with the Platform. 33r is incorporated and licensed under an international gaming regulatory framework and operates the Platform at 33r.lat.
33r's data protection contact point is its customer support team, reachable via live chat on the Platform at any time. You may also reach us by email at [email protected]. We do not accept queries via telephone, social media, or any channel not listed in this Policy.
Where 33r engages third-party service providers — such as payment processors, game software providers, or identity verification services — those providers may independently act as data controllers for data they collect under their own terms and privacy notices. 33r will always make clear when a third party is involved in processing your data.
03 Personal Data We Collect
33r collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we may collect about you include the following:
| Data Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, passport number | Mandatory |
| Contact Data | Email address, Pakistani mobile number (03XX format), correspondence address | Mandatory |
| Financial Data | JazzCash/EasyPaisa wallet number, bank account details, payment card details (tokenised), transaction history | Mandatory for payments |
| Verification Data | Copies of identity documents, proof of address, selfies for liveness checks | Required at KYC stage |
| Account Data | Username, password (hashed), account preferences, responsible gaming settings | Mandatory |
| Gaming Data | Bet history, game sessions, wagering patterns, wins and losses, bonus activity | Automatic |
| Technical Data | IP address, device type, operating system, browser type, session tokens | Automatic |
| Usage Data | Pages visited, features used, click paths, time on platform | Automatic |
| Communications Data | Live chat transcripts, email correspondence, support ticket records | Where applicable |
| Marketing Preferences | Opt-in or opt-out status for email and SMS marketing | Optional |
33r does not collect sensitive personal data — such as racial or ethnic origin, religious beliefs, health information, or biometric data for identification purposes — except where strictly required by applicable regulatory obligations (for example, specific AML checks), in which case the collection will be clearly notified and separately consented to.
04 How We Collect Personal Data
33r collects personal data through the following channels and mechanisms:
Direct Collection
- Account registration: When you create a 33r account, you provide identity, contact, and login credential data directly.
- Identity verification (KYC): When 33r requests documentation to verify your age and identity, you upload documents and may complete a liveness verification step.
- Payment transactions: When you make a JazzCash, EasyPaisa, bank transfer, or card deposit or withdrawal, financial data is collected and processed.
- Support interactions: When you contact 33r via live chat, email, or any other support channel, communications data is recorded and retained.
- Responsible gaming tools: When you set deposit limits, request self-exclusion, or adjust responsible gaming preferences, those choices are recorded against your account.
Automated Collection
- Cookies and tracking technologies: 33r uses cookies, pixel tags, and similar technologies to collect technical and usage data when you browse or play on the Platform. See Section 11 for full details.
- Platform activity logs: All gaming sessions, bets placed, game results, and account actions are automatically logged for security, compliance, and fairness assurance purposes.
- Device and network data: Technical information about the device and network connection you use to access 33r is collected automatically to support security and fraud prevention.
Third-Party Sources
- Identity verification providers: 33r may receive verification results and risk scores from third-party KYC and AML service providers.
- Payment processors: JazzCash, EasyPaisa, and card payment networks may share transaction confirmation data with 33r.
- Fraud and AML databases: 33r may check player details against publicly available and licensed third-party fraud prevention and watchlist databases.
05 Legal Basis for Processing
33r processes personal data only where a lawful basis exists for doing so. The legal bases 33r relies upon are as follows:
- Contractual necessity: Processing necessary to perform the contract between you and 33r — including account management, game provision, and payment processing.
- Legal obligation: Processing required to comply with 33r's obligations under its gaming license, AML regulations, KYC requirements, and applicable financial crime legislation.
- Legitimate interests: Processing necessary for 33r's legitimate business interests, where those interests are not overridden by your data protection rights — including fraud prevention, platform security, product improvement, and responsible gaming monitoring.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Where 33r relies on legitimate interests as a legal basis, a balancing test is carried out to confirm that 33r's interests do not override your fundamental rights and freedoms. If you would like information about a specific legitimate interests assessment, please contact our support team.
06 How 33r Uses Your Personal Data
33r uses the personal data it collects for the following purposes, in each case subject to having a lawful basis as described in Section 5:
- Account creation and management: To register your account, verify your identity, maintain your player profile, and manage your login credentials securely.
- Service delivery: To provide access to all games, betting markets, live casino tables, and other features of the 33r Platform.
- Payment processing: To process your JazzCash, EasyPaisa, bank, and card deposits and withdrawals, and to maintain accurate financial records.
- Regulatory compliance: To fulfil 33r's obligations under its international gaming license, including age verification, KYC checks, AML monitoring, and reporting to regulatory authorities where required.
- Fraud and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other security threats.
- Responsible gaming: To monitor gaming behaviour for signs of problem gambling, to enforce self-exclusion requests, to apply deposit limits, and to provide relevant support information.
- Customer support: To respond to your queries, resolve disputes, and improve the quality of our support services.
- Platform improvement: To analyse usage patterns, conduct A/B testing, fix bugs, and develop new features based on how players interact with 33r.
- Marketing (with consent): To send you promotional offers, bonus notifications, PSL betting alerts, and other marketing communications where you have opted in.
- Legal proceedings: To establish, exercise, or defend legal claims where necessary.
07 Data Sharing with Third Parties
33r does not sell your personal data to third parties for their own commercial purposes. 33r may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
- Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Visa, Mastercard, and USDT TRC20 wallet service operators, to the extent necessary to process your transactions.
- Identity and KYC verification providers: Third-party services that assist 33r with age verification, identity document checks, and AML screening.
- Gaming software providers: Licensed game providers whose titles are hosted on the 33r Platform may receive limited technical and session data necessary to operate their games.
- IT and hosting providers: Cloud infrastructure, server hosting, and cybersecurity partners who support the operation of the Platform.
- Regulatory authorities: 33r's licensing authority and, where legally required, financial intelligence units and law enforcement agencies.
- Professional advisers: Lawyers, auditors, and compliance consultants engaged by 33r, subject to binding confidentiality obligations.
- Business successors: In the event of a merger, acquisition, or sale of all or part of 33r's business, personal data may be transferred to the successor entity, subject to equivalent privacy protections.
All third-party service providers engaged by 33r are required to process personal data only on 33r's documented instructions and in accordance with data protection obligations at least equivalent to those in this Policy.
08 International Data Transfers
As an internationally licensed gaming operator, 33r may transfer personal data to servers and service providers located outside Pakistan. Such transfers are made subject to appropriate safeguards, which may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions that have been determined to offer adequate data protection standards.
33r takes all reasonable technical and organisational measures to ensure that personal data transferred internationally receives the same level of protection as it does within Pakistan, consistent with the standards set out in this Policy.
If you would like further information about the specific safeguards applied to any particular international transfer of your personal data, please contact 33r's support team via live chat or email.
09 Data Retention Periods
33r retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law — in particular, 33r's obligations under its gaming license and AML legislation.
- Active account data: Retained for the full duration of your account's active life plus a minimum of five (5) years from the date of account closure, in accordance with standard AML record-keeping requirements.
- Transaction records: Retained for a minimum of five (5) years from the date of each transaction, which may extend to seven (7) years where required by applicable financial regulation.
- KYC and verification documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
- Support and communications records: Retained for three (3) years from the date of each interaction, unless the communication relates to an ongoing dispute or legal matter.
- Responsible gaming records: Self-exclusion and limit-setting records are retained permanently to prevent circumvention of player protection measures.
- Marketing consent records: Retained for three (3) years from the date of last active consent, to demonstrate compliance with opt-in requirements.
- Technical and usage logs: Retained for twelve (12) months from collection, unless required for security investigation purposes.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.
10 Data Security Measures
33r implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
- 256-bit SSL/TLS encryption applied to all data transmitted between your browser or device and the 33r Platform.
- Encryption at rest applied to stored personal data, including financial records and identity documents, on 33r's servers.
- Password hashing using industry-standard cryptographic algorithms — 33r never stores your password in plain text.
- Two-factor authentication (2FA) available to all players from within Account Settings to add a second layer of protection to your 33r login.
- Access controls limiting internal access to personal data to 33r staff who have a legitimate need to access it in the performance of their duties, subject to binding confidentiality obligations.
- Penetration testing and vulnerability assessments conducted regularly by qualified security professionals.
- Incident response procedures in place to detect, contain, and respond to data security incidents in a timely manner, and to notify affected individuals and authorities as required by applicable law.
Notwithstanding these measures, no system can be guaranteed to be entirely impervious to determined attack. 33r encourages all players to protect their own accounts by using strong, unique passwords and enabling 2FA. If you suspect your account has been compromised, please contact 33r's support team immediately.
11 Cookies & Tracking Technologies
33r uses cookies and similar technologies on the Platform to ensure core functionality, improve your experience, and gather analytical data to help us understand how the Platform is used. Below is a summary of the types of cookies 33r uses:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, CSRF protection | Session / Short-term |
| Functional | Remembering your language preference, responsible gaming settings, UI customisations | Up to 12 months |
| Analytical | Measuring page views, session duration, feature usage, and error rates to improve the Platform | Up to 24 months |
| Performance | Identifying slow-loading pages, infrastructure bottlenecks, and client-side errors | Up to 12 months |
33r does not use third-party advertising cookies or sell cookie-derived data to advertising networks. Strictly necessary cookies cannot be disabled as they are essential to the operation of the Platform. You may manage non-essential cookies through your browser settings, though doing so may affect the functionality and performance of the 33r Platform on your device.
12 Marketing Communications
33r may send you marketing communications — including promotional offers, bonus announcements, PSL betting alerts, and new game notifications — by email or SMS only where you have explicitly opted in to receive such communications during account registration or at any subsequent point.
You may withdraw your consent to marketing communications at any time by:
- Clicking the "unsubscribe" or "opt out" link included in any 33r marketing email;
- Updating your communication preferences from within your 33r Account Settings panel; or
- Contacting 33r's support team via live chat and requesting removal from marketing lists.
Withdrawal of marketing consent will not affect your ability to continue using the 33r Platform, nor will it prevent 33r from sending you transactional and account-related communications (such as deposit confirmations, withdrawal notifications, and account security alerts), which are necessary for the provision of the service.
13 Your Data Protection Rights
Subject to applicable law and the limitations imposed by 33r's regulatory obligations, you hold the following rights in relation to your personal data held by 33r. You may exercise these rights by contacting 33r's support team via live chat or email at [email protected].
Right of Access
You have the right to request a copy of the personal data 33r holds about you. We will provide this information in a structured, commonly used format within 30 days of a valid request, subject to identity verification.
Right to Rectification
If any personal data 33r holds about you is inaccurate or incomplete, you have the right to request correction. For most account data, corrections can be made directly within your Account Settings or by contacting support.
Right to Erasure
In certain circumstances, you may request that 33r delete your personal data. This right is subject to overriding legal obligations — including 33r's AML and licensing retention requirements — which may prevent immediate deletion of certain records.
Right to Restriction
You may request that 33r restrict the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over deletion.
Right to Data Portability
Where processing is based on your consent or contractual necessity, you may request that 33r provide your personal data in a machine-readable format that allows you to transfer it to another service provider.
Right to Object
You have the right to object to 33r's processing of your personal data where processing is based on legitimate interests, including profiling for responsible gaming monitoring. 33r will cease such processing unless compelling legitimate grounds override your interests.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing that occurred prior to withdrawal, and will not affect 33r's ability to process data on other lawful bases.
14 Minors
The 33r Platform is strictly intended for individuals aged 21 years and above. 33r does not knowingly collect personal data from individuals under the age of 21. If 33r becomes aware that personal data has been collected from an individual under 21, that data will be deleted promptly and the associated account will be permanently closed.
If you have reason to believe that a minor has registered on or is using the 33r Platform, please contact our support team immediately via live chat so that appropriate action can be taken. 33r takes the protection of underage individuals seriously and cooperates fully with parental or guardian concerns in this regard.
15 Changes to This Privacy Policy
33r reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, our gaming license obligations, or operational requirements. Where changes are material — meaning they significantly affect your rights or the way 33r uses your personal data — 33r will endeavour to notify you via email to your registered address and/or via a prominent notice on the Platform before the revised Policy takes effect.
The date at the top of this Policy indicates when it was last updated. Continued use of the 33r Platform following the effective date of any revised Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to remain informed about how 33r protects your privacy.
16 Contact Us
If you have any questions, concerns, or requests in relation to this Privacy Policy, or if you wish to exercise any of your data protection rights as described in Section 13, please contact 33r through any of the following channels:
- Live Chat: Available 24/7 on the 33r Platform in English and Urdu — this is the fastest way to reach us for privacy-related queries.
- Email: [email protected] — please use the subject line "Privacy Request" to ensure prompt routing to our data protection team.
33r aims to respond to all data protection enquiries within five (5) working days. For complex requests involving data access, erasure, or portability, a response will be provided within 30 calendar days, which may be extended by a further 60 days in particularly complex cases, with notice given to you within the initial 30-day window.
If you are not satisfied with 33r's response to a privacy concern, you have the right to escalate the matter to the relevant supervisory authority or regulatory body applicable in your jurisdiction, or to 33r's licensing authority's dispute resolution service.
33R'S PRIVACY COMMITMENTS TO YOU
Six concrete commitments that define how 33r handles your personal data — not as legal formalities, but as genuine operating principles.
Your Data Is Not for Sale
33r will never sell your personal data to third-party advertisers, data brokers, or any commercial entity. Full stop. Your information is shared only where operationally necessary or legally required — never for others' commercial gain.
Enterprise-Grade Security
256-bit SSL encryption, hashed passwords, encrypted storage, 2FA support, and regular penetration testing ensure your 33r account and personal data are protected to the same standard as Pakistan's major commercial banks.
Minimal Collection
33r collects only the personal data it genuinely needs to operate, comply with its gaming license, and protect players. We do not collect data speculatively or maintain data for longer than necessary to fulfil defined purposes.
You Control Your Data
Your rights — access, rectification, erasure, restriction, portability, and objection — are real and exercisable. 33r's support team processes rights requests promptly and without obstruction, in English or Urdu, 24/7.
Marketing Only With Consent
33r will never send you unsolicited promotional emails or SMS messages. Marketing communications go only to players who have clearly opted in, and opting out is simple, immediate, and permanent until you choose to opt in again.
Regulatory Compliance
33r's data practices are governed by its international gaming license obligations, which include stringent data protection standards. Compliance is audited externally and is not optional — it is a condition of 33r's right to operate.
PLAY ON 33R WITH CONFIDENCE
Your data is protected, your account is secure, and your privacy is respected — every time you log in to 33r. Trusted by over 500,000 Pakistani players.
21+ only • International gaming license • 256-bit SSL encryption • Play responsibly