luki33 Privacy Policy

1 Introduction

luki33 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every player who registers and plays on luki33.com. This Privacy Policy applies to all users of the luki33 website, mobile-optimised platform, and any related services accessible under the luki33 brand.

This policy has been prepared in accordance with internationally recognised data protection principles, including those set out under the General Data Protection Regulation (GDPR) framework, which luki33 adopts as a global standard for responsible data handling — even where local regulations may not yet require it in full.

By creating a luki33 account, depositing funds, placing bets, or otherwise using our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your use of luki33.

2 Information We Collect

luki33 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with our platform, and occasionally from authorised third-party sources as part of our verification and fraud-prevention obligations. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name (as it appears on your CNIC or passport)
• Date of birth (to verify that you are 21 years of age or older)
• Pakistani CNIC number or passport number
• Residential address in Pakistan
• Mobile phone number (Pakistani format)
• Email address
• Username and encrypted password

2.2 Financial & Transaction Data

• JazzCash or EasyPaisa mobile wallet identifiers
• HBL, UBL, or Meezan Bank account details (where applicable)
• Cryptocurrency wallet addresses (where applicable)
• Deposit and withdrawal amounts in PKR
• Transaction history, timestamps, and reference numbers
• Source of funds declarations (where required by KYC procedures)

2.3 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration, login timestamps, and activity logs
• Game history, bet amounts, and wagering patterns
• Cookie identifiers and similar tracking data (see Section 5)

2.4 KYC Verification Documents

• Scanned or photographed copy of your CNIC (front and back)
• Proof of address (utility bill, bank statement dated within 3 months)
• Selfie or live photo for identity confirmation
• Additional documentation requested during enhanced due diligence reviews

2.5 Communications Data

• Live chat transcripts with luki33 support agents
• Emails sent to or received from [email protected]
• Feedback, complaint, and dispute records
• Responses to surveys or promotional communications (where you have opted in)

3 How We Use Your Data

luki33 uses the personal data we collect for the following purposes:

luki33 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or being required to do so by applicable law.

4 Legal Basis for Processing

luki33 processes personal data on the following legal grounds, depending on the specific purpose:

• Contractual necessity: Processing required to fulfil our obligations under the luki33 Terms & Conditions — including operating your account, processing transactions, and delivering gaming services.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) obligations, and any applicable international gaming regulations under luki33's operating licence.
• Legitimate interests: Processing carried out for purposes including fraud prevention, platform security, responsible gaming monitoring, and improving the luki33 platform experience — where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, certain cookies, and any other data use where we have obtained your specific, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Cookies & Tracking Technologies

luki33 uses cookies and similar tracking technologies (including pixel tags and session tokens) to operate the platform, enhance your experience, and gather analytics data. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential to the operation of luki33.com. These enable core functions such as user authentication, session management, and security. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences — such as language settings, preferred payment method, and responsible gaming limits — to personalise your experience on return visits.
• Analytics Cookies: Collect anonymised data about how users interact with luki33.com, which pages are visited most frequently, and where navigation drop-offs occur. This data helps us improve the platform.
• Marketing Cookies: Used to deliver promotional content that is relevant to your interests, where you have consented to receive marketing communications from luki33.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use luki33.com. Your cookie preferences can also be updated via the cookie settings panel accessible from the footer of the luki33 website.

6 Data Sharing & Disclosure

luki33 does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners — solely to process your PKR deposits and withdrawals.
• KYC and AML service providers: Third-party identity verification platforms used to confirm your CNIC, passport, or address documentation during the verification process.
• Gaming software providers: Game developers and platform providers whose games are offered on luki33 may receive anonymised or pseudonymised game session data necessary for technical operation.
• IT and security providers: Cloud hosting, cybersecurity, and platform infrastructure partners who process data on luki33's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where luki33 is required by applicable law, court order, or regulatory instruction to disclose personal data — including anti-money laundering authorities and gaming regulators.
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to confidentiality obligations.

Any third party that receives personal data from luki33 is contractually obligated to process that data solely for the specified purpose, maintain appropriate security standards, and not disclose it to further parties without luki33's authorisation.

7 Data Retention

luki33 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for a minimum of five (5) years from the date of account closure, in accordance with standard AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support communications: Retained for three (3) years from the date of the interaction, or longer where related to an unresolved dispute.
• Technical and usage logs: Retained for up to thirteen (13) months for analytics purposes, after which they are anonymised or deleted.
• Marketing consent records: Retained for as long as consent is active, plus one (1) year after withdrawal of consent for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with luki33's internal data destruction procedures. Where deletion is not immediately possible due to technical constraints, data is isolated from active processing until deletion can be completed.

8 Data Security

luki33 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and luki33's servers.
• Encrypted data storage for sensitive fields including passwords, CNIC numbers, and financial identifiers — stored using industry-standard hashing and encryption algorithms.
• Two-factor authentication (2FA) available for all luki33 accounts to add an additional layer of login security.
• Role-based access controls ensuring that luki33 staff can only access the personal data necessary for their specific job function.
• Regular penetration testing and security audits conducted by qualified third-party cybersecurity professionals.
• Intrusion detection and monitoring systems operating continuously to identify and respond to suspicious activity in real time.

Despite these measures, no internet-based system is completely immune to security risks. In the unlikely event of a data breach that poses a risk to your rights and freedoms, luki33 will notify affected players and, where required, the relevant regulatory authorities, within the timeframes mandated by applicable data protection law.

9 Your Privacy Rights

As a luki33 player, you have the following rights in relation to your personal data. luki33 is committed to honouring these rights promptly and without undue barriers:

To exercise any of the above rights, please contact luki33 via live chat or by emailing [email protected]. luki33 will respond to all verified requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, with prior notice given to you. Identity verification will be required before any request is actioned to protect against fraudulent data access requests.

10 Children & Minors

luki33 is strictly prohibited to persons under the age of 21. The luki33 platform does not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory component of the luki33 KYC process and is enforced at account registration and at the deposit stage.

Parents and guardians are encouraged to make use of internet filtering tools to prevent underage access to online gambling platforms. luki33 supports responsible gaming education and age-awareness initiatives across Pakistan.

11 Marketing Communications

luki33 may send you promotional communications — including bonus offers, PSL cricket promotions, Eid and Ramadan seasonal campaigns, and platform updates — via email or SMS, but only where you have provided explicit consent to receive such communications during registration or at a later stage through your account settings.

All marketing communications from luki33 will:

• Clearly identify luki33 as the sender.
• Include a straightforward and functioning opt-out mechanism in every communication.
• Be tasteful, culturally respectful, and appropriate — particularly during the Ramadan period, when luki33 ensures all promotional messaging is celebratory rather than aggressive or intrusive.
• Not be sent to players who have set a self-exclusion or cooling-off period on their account.

You may opt out of marketing communications at any time by clicking the unsubscribe link in any luki33 email, updating your preferences in your account settings, or contacting support. Opting out of marketing does not affect the receipt of essential transactional communications related to your account.

12 Third-Party Services

luki33.com may contain links to third-party game providers, payment gateways, or informational resources. These third-party services operate under their own independent privacy policies. luki33 is not responsible for the privacy practices or content of any third-party service.

Where luki33 integrates third-party technology — such as payment processing APIs for JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — data shared with these providers is limited strictly to what is required to complete the relevant transaction or service, and is governed by formal data processing agreements that require the third party to maintain data protection standards equivalent to those applied by luki33.

13 Policy Updates

luki33 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, luki33 will notify registered players via on-site notification or email at least 14 days before the revised policy takes effect. The effective date shown at the top of this page will always reflect the most recent version.

Continued use of luki33.com after a revised Privacy Policy has taken effect constitutes your acceptance of the updated policy. If you do not agree with the changes, you must cease using luki33 and may request account closure in accordance with Section 13 of the luki33 Terms & Conditions. We encourage you to review this page periodically to stay informed about how luki33 handles your data.

14 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or luki33's data handling practices, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 on luki33.com — the fastest way to raise a privacy query or request.
• Email: [email protected] — for formal written privacy requests, data subject access requests, or complaints. Please include "Privacy Request" in the subject line to ensure prompt routing to the correct team.

luki33 aims to acknowledge all privacy-related communications within 48 hours and to resolve them fully within 30 calendar days. Where a complaint cannot be resolved to your satisfaction through luki33's internal process, you retain the right to escalate the matter to the relevant data protection authority or gaming regulator under whose jurisdiction luki33 operates.