33r Privacy Policy – How We Protect Your Personal Data

33r ("the Platform", "we", "us") takes the privacy of every player seriously. This Privacy Policy explains how personal data is collected, used, stored and shared when you access and use the 33r website and all associated gaming services — including sports betting, casino games, slots, live casino, bingo, fish games and the VIP programme.

This policy is written in plain language so that every player in Pakistan can understand exactly what happens with their information. We have tried to avoid technical or legal language where possible. If something is not clear, you are welcome to contact us using the details in Section 13.

For the purposes of this policy, "personal data" means any information that can be used to identify you directly or indirectly — including your name, contact details, payment information, account activity and device information. "Processing" means anything done with that data, including collecting, storing, using, sharing or deleting it.

33r collects personal data in three main ways: information you provide directly, information generated automatically by your use of the platform, and information received from third-party service providers such as payment processors and identity verification services.

We do not knowingly collect sensitive personal data beyond what is needed for identity verification and fraud prevention. We do not collect biometric data.

Your personal data is used only for specific, legitimate purposes directly related to running the 33r platform and providing you with a safe, fair gaming experience. The table below sets out each purpose and the basis on which we process your data for that purpose.

• Account management: Creating and maintaining your 33r account, processing logins, managing your account settings and responsible gaming preferences.
• Payment processing: Facilitating PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer, cards and mobile wallets. Transaction records are retained for accounting and dispute resolution.
• Identity and age verification: Confirming that you are 18 or over and that the payment methods you use are registered in your name. This may involve sharing limited data with third-party verification services.
• Platform security and fraud prevention: Detecting and preventing unauthorised access, duplicate accounts, bonus abuse, money laundering and other prohibited activity. This processing is essential to keeping the platform fair for every player.
• Customer support: Responding to your queries, complaints and requests through live chat and email. Support interactions are logged so that we can follow up effectively and maintain service quality.
• Platform improvement: Analysing aggregated, anonymised usage patterns to improve game selection, platform performance and the overall player experience. This analysis does not identify individual players.
• Responsible gaming: Monitoring account activity to identify signs of problem gambling behaviour so that appropriate safeguards can be offered. This processing helps us fulfil our commitment to player welfare.
• Legal compliance: Retaining records and responding to lawful requests from authorities where required by applicable law.
• Marketing communications: Sending you information about promotions, bonuses and new features — but only where you have opted in to receive such communications. You can opt out at any time (see Section 11).

All financial transactions on 33r are conducted in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, a bank account or a card, the transaction is processed through the respective payment provider's secure infrastructure. 33r receives confirmation of the transaction outcome and a reference, but does not store your full wallet credentials, card number or bank account details on its own servers.

For withdrawals above certain thresholds, or where our fraud prevention systems flag a concern, we may request identity verification documents. This is a standard practice on online gaming platforms and is intended to protect both you and the integrity of the platform. Verification documents are handled securely and retained only for as long as required (see Section 7).

33r does not sell your personal data. Data is shared with third parties only where it is necessary to operate the platform, comply with legal obligations, or protect the integrity of the service. The categories of third parties who may receive your data are:

• Payment providers: JazzCash, Easypaisa, Raast, banks and card processors receive the transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and security standards.
• Identity verification services: Where enhanced verification is required, we may use accredited third-party verification services to confirm your identity and age. These providers receive only the minimum data necessary to complete the check.
• Fraud prevention and security services: Third-party tools that help detect suspicious activity, bot usage or account compromise. These services process technical and behavioural data to generate risk scores.
• Game providers: Third-party game studios and live casino providers whose games are available on the 33r platform may receive anonymised session and bet data necessary to operate their games correctly. They do not receive your name, contact details or payment information.
• IT and hosting providers: Companies that provide the infrastructure on which the 33r platform operates. These providers access data only as necessary to maintain and secure the platform.
• Legal and regulatory authorities: Where required by applicable law, 33r may be obliged to disclose personal data to governmental or regulatory bodies. We will only do so to the extent legally required.

All third-party processors who handle personal data on behalf of 33r are required to process that data securely, use it only for the specified purpose, and not share it further without authorisation.

The 33r website uses cookies — small text files placed on your device when you visit the site. Cookies help the platform function correctly, remember your preferences and analyse how the site is used. The cookies used on 33r fall into the following categories:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in while you are active on the site and security cookies that help prevent cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences, such as your chosen language or responsible gaming settings, so you do not have to re-enter them each visit.
• Analytics cookies: Collect anonymised data about how visitors use the site — which pages are visited most, how long sessions last and where users navigate from. This data is used in aggregate to improve the platform and is not linked to individual accounts.
• Security and fraud prevention cookies: Help identify suspicious patterns of behaviour, such as multiple accounts being accessed from the same device, to protect against fraud and platform abuse.

You can manage cookie settings through your browser. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies may affect your ability to log in and use the platform normally. Detailed browser-level cookie controls are available in the help section of Chrome, Firefox, Safari and other major browsers.

33r retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods applied are:

• Account data: Retained for the lifetime of your active account plus a period of up to 5 years after account closure, to cover potential disputes and legal obligations.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, in line with standard financial record-keeping requirements.
• Identity verification documents: Retained for the duration of your account and for up to 5 years following account closure. Documents are securely deleted once the retention period has elapsed.
• Support communications: Retained for up to 3 years from the date of the interaction, to allow follow-up on open matters and quality assurance.
• Marketing preference records: Retained for as long as you hold an account, so that we can respect your opt-in or opt-out choices accurately.
• Technical and log data: Typically retained for 12 months, after which it is anonymised or deleted.

When the applicable retention period expires, data is securely deleted or anonymised in a way that means it can no longer be linked back to you as an individual.

33r uses a combination of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols.
• Encryption of sensitive data at rest within our storage systems.
• Strict access controls ensuring that only authorised personnel can access personal data, and only to the extent needed for their specific role.
• Regular security assessments and vulnerability testing of platform infrastructure.
• Secure, certified payment gateways for all PKR transactions — full payment credentials are never stored on 33r servers.
• Monitoring systems that flag unusual access patterns or potential security incidents for investigation.

While 33r takes reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You also have a responsibility to keep your account credentials secure. If you believe your account has been compromised, contact support immediately so that your account can be protected.

As a player on 33r you have the following rights in relation to your personal data. To exercise any of these rights, contact us using the details in Section 13.

We aim to respond to all data rights requests promptly. Requests that are clearly unfounded, repetitive or excessive may be declined or subject to an administrative charge, but we will explain our reasoning if that is the case.

The 33r platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If a minor has registered on the platform by misrepresenting their age, their account will be closed immediately upon discovery and any funds held will be dealt with in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that a minor has created an account on 33r, please contact us immediately using the details in Section 13. We take these reports seriously and will act on them promptly.

We strongly recommend that players with children at home use parental control tools available on devices, routers and through internet service providers to prevent underage access to online gaming platforms.

33r may send you information about promotions, bonuses, new games and platform features by email or SMS — but only where you have explicitly opted in to receive such communications. Marketing messages will always be clearly identified as coming from 33r.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email you receive from 33r.
• Updating your communication preferences in the notification settings section of your 33r account.
• Contacting our support team and requesting to be removed from marketing lists.

Opting out of marketing will not affect transactional communications — you will still receive important account notifications such as deposit confirmations, withdrawal updates, security alerts and responsible gaming reminders. These are part of the service and cannot be switched off while your account is active.

33r may update this Privacy Policy from time to time to reflect changes in how we operate, the services we offer, or applicable legal requirements. When a material change is made, we will publish the updated policy on this page with a revised "Last Updated" date and, where appropriate, notify active players by email or via a notice on the platform.

We encourage you to check this page periodically. Your continued use of the 33r platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change, you may close your account by contacting support.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or need to report a privacy concern, you can reach the 33r support team through the contact options available in your account area.

Our support team can also be reached at the email address displayed in the footer of this page. When contacting us about a data rights request, please include your registered account username and a clear description of your request so that we can respond as efficiently as possible.

We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 14 business days. Complex requests may take longer, in which case we will let you know and keep you updated on progress.