33r Privacy Policy
Your Data, Your Rights, Our Commitment
At 33r, protecting the personal data of our players across Pakistan — from Karachi to Lahore, Islamabad to Faisalabad — is a responsibility we take seriously. This Privacy Policy explains exactly what data 33r collects, why we collect it, how we use and protect it, and what rights you have over your own information at all times.
Table of Contents
Introduction & Scope
This Privacy Policy ("Policy") describes the information practices of 33r ("33r," "we," "us," "our") in connection with the 33r online gaming platform, accessible at https://33r.pro and all associated subdomains, mobile interfaces, and support channels (collectively, the "Platform"). This Policy applies to all individuals who register an account, visit the Platform, or otherwise interact with 33r's services — including players based in Karachi, Lahore, Islamabad, Faisalabad, and all other cities across Pakistan.
By accessing or using the 33r Platform, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. If you do not agree with any part of this Policy, you should discontinue use of the 33r Platform immediately and contact our support team to arrange account closure.
This Policy should be read together with the 33r Terms & Conditions and the Responsible Gaming policy, both of which contain additional provisions that govern your use of the 33r Platform and interact with your data rights described herein.
This Policy covers data collected through the 33r website, the 33r login portal, any 33r mobile application, and all communications between you and the 33r support team, including live chat, email, and any other support channel. It does not cover the privacy practices of third-party payment providers such as JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank — each of which operates under its own independent privacy terms.
Data Controller
For the purposes of applicable data protection law, 33r is the data controller in respect of all personal data collected through the Platform. As data controller, 33r determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing complies with all applicable legal obligations.
All data protection enquiries, subject access requests, and privacy complaints should be directed to the 33r Data Protection team using the contact details provided in Section 14 of this Policy. 33r is committed to responding to all legitimate data protection requests within the timeframes required by applicable law.
33r operates under an internationally recognised gaming and data compliance framework. Our data handling practices are designed to meet or exceed internationally accepted privacy standards, including principles of data minimisation, purpose limitation, storage limitation, and the requirement for a valid lawful basis for all processing activities.
Information We Collect
33r collects personal data in a number of ways — directly from you when you register or interact with the Platform, automatically through your use of the Platform, and in some cases from third parties such as payment processors and identity verification services. The categories of data 33r collects are set out below.
3.1 Registration & Account Data
When you create a 33r account, we collect the following information:
- Full legal name as it appears on your government-issued identity document.
- Date of birth (used to verify that you are 21 years of age or older).
- Residential address, including city and province within Pakistan.
- Pakistani CNIC number or passport number for KYC verification purposes.
- Email address used as your primary account communication channel.
- Mobile phone number (used for account security and transaction notifications).
- Username and encrypted password associated with your 33r login credentials.
3.2 KYC Verification Documents
To comply with anti-money laundering (AML) obligations and responsible gaming requirements, 33r collects copies of identity documents including your CNIC, passport, utility bills, bank statements, and payment method ownership evidence. These documents are handled under strict access controls and are retained only for the period required by our legal obligations.
3.3 Transaction & Gaming Data
33r maintains detailed records of all financial and gaming activity on your account, including:
- Deposit and withdrawal history, amounts, dates, and payment methods used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard).
- Game participation records across all 33r products including Andar Bahar, live casino, slots, cricket betting, and other sports markets.
- Betting stakes, odds accepted, game outcomes, and resulting balance movements.
- Bonus and promotional activity including bonuses claimed, wagering progress, and fulfilment status.
3.4 Technical & Usage Data
When you access the 33r Platform, we automatically collect certain technical information including your IP address, device type and operating system, browser type and version, session timestamps, pages and features accessed, and approximate geographic location derived from your IP address. This data is used for security monitoring, fraud detection, and platform optimisation.
3.5 Communications Data
33r retains records of all communications between you and the 33r support team, including live chat transcripts, email correspondence, and any documents or screenshots you submit in connection with a query, complaint, or KYC request. These records are used to resolve disputes, improve service quality, and meet regulatory record-keeping requirements.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Name, CNIC, date of birth | Registration form / KYC upload |
| Contact Data | Email, phone, address | Registration form |
| Financial Data | PKR deposits, withdrawal history | Platform transactions |
| Gaming Data | Andar Bahar sessions, bet history | Automatic platform logs |
| Technical Data | IP address, device, browser | Automatic collection |
| Communications Data | Live chat logs, support emails | Support interactions |
How 33r Uses Your Data
33r processes your personal data for the following specific purposes. Each purpose is supported by a lawful basis for processing, as detailed in Section 5 of this Policy.
- Account Creation & Management: To create, maintain, and administer your 33r account, including enabling you to access the 33r login portal securely and managing your account preferences.
- Identity Verification (KYC): To verify your identity and age in compliance with anti-money laundering regulations, responsible gaming obligations, and our international licensing requirements. This includes confirming that you are 21 years of age or older.
- Payment Processing: To process PKR deposits and withdrawals through your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard) and to maintain accurate financial records of all transactions.
- Gaming Services: To provide and personalise the full range of 33r gaming products, including Andar Bahar, live casino, slots, cricket betting, and all other available markets.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and any other prohibited activities on the 33r Platform.
- Responsible Gaming: To monitor gaming patterns and identify indicators of problem gambling behaviour, enabling 33r to offer appropriate responsible gaming interventions including deposit limits, self-exclusion tools, and referrals to support resources.
- Legal & Regulatory Compliance: To comply with applicable laws, regulatory requirements, court orders, and instructions from relevant licensing and law enforcement authorities.
- Customer Support: To respond to your queries, resolve disputes, and provide assistance through 33r's live chat and email support channels.
- Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided your consent or where permitted under applicable law. You may opt out of marketing communications at any time.
- Platform Improvement: To analyse usage patterns, conduct internal research, and improve the quality, performance, and user experience of the 33r Platform.
Marketing Opt-Out: If you no longer wish to receive promotional emails or bonus notifications from 33r, you can unsubscribe at any time by clicking the unsubscribe link in any marketing email, or by contacting the 33r support team via live chat. Opting out of marketing will not affect your ability to use the 33r Platform or receive essential service communications relating to your account.
Legal Basis for Processing
33r processes your personal data only where a valid lawful basis exists under applicable data protection law. The primary legal bases upon which 33r relies are as follows:
5.1 Contractual Necessity
The majority of data processing carried out by 33r is necessary for the performance of the contract between 33r and you — specifically, the 33r Terms & Conditions that you agree to upon registration. This includes processing your account data, transaction history, gaming records, and KYC documentation.
5.2 Legal Obligation
Certain processing activities are required for 33r to comply with legal and regulatory obligations, including anti-money laundering (AML) requirements, KYC verification duties, responsible gaming obligations, record-keeping mandates imposed by licensing authorities, and cooperation with law enforcement bodies.
5.3 Legitimate Interests
33r processes some data on the basis of its legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, security monitoring, technical data collection for platform stability, and certain internal analytics activities. 33r has conducted legitimate interest assessments for all processing activities in this category.
5.4 Consent
Where 33r processes your data on the basis of consent — including sending marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of marketing consent will not affect your ability to use the 33r Platform or receive essential account communications.
Cookies & Tracking Technologies
33r uses cookies and similar tracking technologies to operate the Platform effectively, maintain your logged-in session, remember your preferences, and analyse how the Platform is used. The categories of cookies used by 33r are described below.
6.1 Strictly Necessary Cookies
These cookies are essential for the 33r Platform to function correctly. They enable core features such as maintaining your 33r login session, remembering items in your account settings, and ensuring secure page transitions. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
6.2 Performance & Analytics Cookies
33r uses performance cookies to collect aggregated, anonymised data about how visitors interact with the Platform — including which pages are most visited, how long sessions last, and where users encounter errors. This information is used exclusively to improve Platform performance and user experience. No individually identifiable data is collected through performance cookies.
6.3 Functional Cookies
Functional cookies allow the 33r Platform to remember choices you have made, such as your preferred language settings, your responsible gaming tool preferences, and notification settings. These cookies improve your experience but are not strictly required for the Platform to operate.
6.4 Managing Cookies
You can manage your cookie preferences through the cookie consent banner displayed when you first visit the 33r Platform, or through your browser settings. Please note that disabling certain cookies may affect the functionality of the 33r Platform, including the ability to maintain your 33r login session across pages.
33r does not use cookies to serve third-party advertising on external websites or to track your browsing behaviour outside of the 33r Platform. Cookies placed by 33r are used solely to operate, secure, and improve the 33r gaming experience for players in Pakistan.
Data Sharing & Third Parties
33r does not sell, rent, or trade your personal data to any third party for commercial purposes. 33r may share your personal data with third parties only in the specific, limited circumstances described below.
7.1 Service Providers
33r engages trusted third-party service providers to assist in the operation of the Platform, including KYC and identity verification providers, payment gateway operators, IT infrastructure and hosting providers, fraud detection and security services, and customer support technology providers. All such providers are contractually obligated to process your data only in accordance with 33r's instructions and this Privacy Policy, and are prohibited from using your data for any independent purpose.
7.2 Payment Processors
To process your PKR deposits and withdrawals, 33r shares the minimum necessary financial data with your chosen payment provider — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, or Mastercard. Each payment provider operates under its own privacy policy and regulatory framework. 33r is not responsible for the data practices of third-party payment processors once data has been transmitted to them.
7.3 Regulatory & Legal Disclosure
33r may disclose your personal data to regulatory authorities, law enforcement agencies, courts, or other governmental bodies where required to do so by applicable law, court order, or regulatory instruction. 33r will notify you of any such disclosure where legally permitted to do so.
7.4 Business Transfers
In the event that 33r undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred as part of that transaction. 33r will provide reasonable notice of any such transfer and will ensure that your data continues to be protected in accordance with this Policy or an equivalent standard.
No Data Sale: 33r has never sold and will never sell your personal data to advertising networks, data brokers, or any other commercial third parties. Your data is used solely to operate your 33r account, deliver gaming services, and comply with our legal and regulatory obligations.
Payment Data & PKR Transactions
All financial transactions on the 33r Platform are conducted exclusively in Pakistani Rupees (PKR). 33r handles payment data with the highest level of security and operates in compliance with applicable financial data protection standards.
33r does not store full card numbers, CVV codes, or complete JazzCash or EasyPaisa wallet credentials on its own servers. Payment card data transmitted through the 33r Platform is processed directly by PCI-DSS compliant payment gateway partners. 33r retains only a tokenised reference to your payment method for the purposes of withdrawal processing and AML compliance.
All PKR transaction records — including deposit amounts, withdrawal requests, and associated payment method references — are retained for a minimum period as required by applicable anti-money laundering regulations and our international licensing obligations. These records may be disclosed to regulatory authorities upon lawful request.
33r applies 256-bit SSL encryption to all financial data in transit between your device and the 33r Platform. All stored financial records are protected by industry-standard encryption at rest. Only authorised 33r compliance and finance personnel have access to detailed transaction records, and all such access is logged and audited.
Data Security
33r implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include, but are not limited to:
- Encryption in Transit: All data transmitted between your device and the 33r Platform is protected by TLS 1.2 or higher encryption protocols.
- Encryption at Rest: Sensitive personal data stored on 33r's servers — including identity documents, financial records, and KYC files — is encrypted using AES-256 or equivalent standards.
- Access Controls: Access to personal data is strictly limited to authorised 33r personnel on a need-to-know basis. All internal data access is subject to role-based permissions, multi-factor authentication, and comprehensive audit logging.
- Fraud Detection Systems: 33r operates real-time fraud detection and behavioural analytics systems that monitor account activity for signs of unauthorised access, identity fraud, and suspicious transaction patterns.
- Regular Security Audits: 33r's technical infrastructure undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities proactively.
- Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, 33r will notify affected users and relevant regulatory authorities within the timeframes required by applicable law.
While 33r takes every reasonable precaution to protect your data, no digital platform can guarantee absolute security. You also play a role in keeping your account secure — please use a strong, unique password for your 33r login and never share your login credentials with any third party. Contact 33r support immediately if you suspect any unauthorised access to your account.
Data Retention
33r retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention principles apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account + 5 years post-closure | AML & regulatory compliance |
| KYC documents | Duration of account + 5 years post-closure | Legal obligation |
| Transaction records | Minimum 5 years post-transaction | AML & financial regulation |
| Gaming activity logs | 3 years from session date | Dispute resolution & responsible gaming |
| Support communications | 3 years from last interaction | Dispute resolution & quality assurance |
| Marketing consent records | Until consent withdrawn + 1 year | Demonstrating lawful basis |
| Technical & usage logs | Up to 13 months from collection | Security monitoring & analytics |
Upon expiry of the applicable retention period, 33r will securely delete or anonymise your personal data. Where anonymisation is applied, the resulting anonymised data may be retained indefinitely for statistical and research purposes, as it no longer constitutes personal data.
Your Privacy Rights
Subject to applicable data protection law, you have the following rights in relation to the personal data 33r holds about you. To exercise any of these rights, contact the 33r Data Protection team using the details in Section 14. 33r will respond to all valid requests within 30 days of receipt, and will notify you if additional time is required for complex requests.
Data Protection
Your Rights Over Your 33r Data
33r is committed to upholding your privacy rights. Here is a clear summary of what you are entitled to — and how to exercise each right.
Right of Access
You have the right to request a copy of all personal data that 33r holds about you. This includes your account information, KYC records, transaction history, and gaming activity logs. 33r will provide this information free of charge in a structured, machine-readable format.
Right to Rectification
If any personal data that 33r holds about you is inaccurate or incomplete, you have the right to request that it be corrected. This is particularly important for contact details and address information, which affect payment processing and account communications.
Right to Erasure
In certain circumstances you may request that 33r delete your personal data — commonly known as the "right to be forgotten." This right is subject to overriding legal obligations: financial and KYC records must be retained for regulatory purposes even after account closure.
Right to Restrict Processing
You may request that 33r restrict the processing of your data in specific circumstances — for example, if you contest the accuracy of data held, or if you have objected to processing and a determination is pending. During the restriction period your data will be stored but not actively used.
Right to Data Portability
Where 33r processes your data on the basis of your consent or contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
Right to Object
You have the right to object to 33r processing your personal data on the basis of legitimate interests, including profiling for responsible gaming monitoring. You also have an unconditional right to object to processing for direct marketing purposes, which 33r will honour immediately.
Children & Underage Users
The 33r Platform is strictly intended for individuals who are 21 years of age or older. 33r does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory component of the 33r account registration and KYC process, and 33r employs robust age verification procedures to prevent underage access to the Platform.
If 33r becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated balances will be forfeited in accordance with the 33r Terms & Conditions, and all personal data relating to the underage individual will be securely deleted as soon as is practicable, subject to any overriding legal obligations to retain such data.
If you are a parent or guardian and believe that your child has registered on the 33r Platform or otherwise provided personal data to 33r, please contact our support team immediately via live chat or the contact details in Section 14. 33r will investigate and take appropriate action without delay.
21+ Age Restriction: By registering on the 33r Platform, you confirm that you are 21 years of age or older. Providing false information about your age during registration constitutes a material breach of the 33r Terms & Conditions and may result in permanent account closure with forfeiture of all funds. Please gamble responsibly and never allow underage individuals access to your 33r account.
Changes to This Privacy Policy
33r reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing activities, or the services we offer. The date of the most recent revision is displayed at the top of this Policy and will be updated each time a material change is made.
Where a proposed change materially affects your rights or the way in which 33r processes your personal data, 33r will provide reasonable advance notice via email to the address registered to your 33r account or via a prominent notice on the Platform. Your continued use of the 33r Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.
33r encourages you to review this Privacy Policy periodically to stay informed about how we are protecting your data. If you have any questions or concerns about a proposed or recent change to this Policy, please contact the 33r Data Protection team using the details in Section 14.
All previous versions of the 33r Privacy Policy are archived and available upon request. If you require a copy of a prior version of this Policy — for example, the version that was in effect at the time you registered your 33r account — please contact our support team and we will provide the relevant archived version promptly.
Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or 33r's data processing activities, please contact the 33r Data Protection team through any of the following channels:
- Support Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/7 inside your 33r account portal. Average response time: 3–5 minutes.
33r is committed to resolving all privacy-related queries and complaints promptly and fairly. Upon receipt of a privacy complaint, 33r will acknowledge your submission within 3 business days and aim to provide a substantive response within 30 days. For complex matters requiring further investigation, 33r will notify you of the extended timeline and keep you informed of progress.
If you are not satisfied with 33r's response to your privacy complaint, or if you believe that 33r is processing your personal data in a manner that is inconsistent with applicable data protection law, you have the right to escalate your complaint to the relevant data protection supervisory authority or to seek independent legal advice.
For the fastest response to privacy requests — including subject access requests and erasure requests — 33r recommends contacting us via the live chat function inside your account portal. Our dedicated compliance team monitors all data protection requests and will assign your case to the appropriate team member within one business day of receipt.
Our Commitment
How 33r Protects Your Privacy
From encrypted transactions to strict data minimisation, here is what 33r does every day to keep your personal information safe on our Pakistan-facing gaming platform.
256-Bit SSL Encryption
Every connection to 33r is protected by TLS encryption. Your 33r login credentials, personal details, and PKR transaction data are encrypted end-to-end at all times — on mobile or desktop across Pakistan.
Zero Data Sales — Ever
33r has never sold player data and never will. Your personal information is used exclusively to operate your 33r account and meet our legal obligations. No advertising networks. No data brokers. Full stop.
Strict KYC Controls
Identity documents collected during KYC are stored with AES-256 encryption and accessed only by authorised compliance staff. Every document access event is logged, audited, and time-stamped for full accountability.
Secure PKR Payments
33r never stores full card numbers or wallet credentials on its own servers. All JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card transactions are handled through PCI-DSS compliant payment gateways.
Data Minimisation
33r collects only the data that is genuinely necessary for the purposes described in this Policy. We do not collect data speculatively or for undefined future uses. Every data field collected by 33r has a specific, documented purpose.
Regular Security Audits
33r's infrastructure undergoes independent penetration testing and security audits on a regular basis. Identified vulnerabilities are prioritised and remediated by our technical team before they can be exploited by malicious actors.
Questions About Your 33r Privacy? We're Here 24/7
Our dedicated support team is available around the clock via live chat inside your account portal. Whether you need to submit a data access request, update your personal details, or raise a privacy concern — 33r has you covered.
21+ For adults 21 and above only. Gambling involves financial risk. Please play responsibly.