33pka Privacy Policy
How We Collect, Use, and Protect Your Personal Data

01 Who We Are

33pka is the trading name of the operator of 33pka.net, an internationally licensed online gaming platform serving registered players across Pakistan. 33pka acts as the data controller in respect of all personal data collected through the 33pka platform, meaning we determine the purposes for which your data is collected and the manner in which it is processed.

Our platform is specifically designed and operated for Pakistani players — from Karachi's coastal districts to Lahore's cultural centre, from Islamabad's federal corridor to Faisalabad's industrial heartland and every city beyond. Everything at 33pka — including how we handle your data — is built with the Pakistani player in mind. If you have any questions about this Policy or our data practices, you may contact us at [email protected] at any time.

02 Information We Collect

33pka collects personal data through several channels: directly from you during account registration and ongoing platform use, automatically through your device and browser, and from third-party identity and payment verification services. Below is a comprehensive breakdown of the categories of information we collect and why.

2.1 Registration Data

When you create a 33pka account, we collect the following personal information:

• Full legal name (as it appears on your Pakistani CNIC)
• Date of birth (to verify the 21+ age requirement)
• Email address (used as a primary login credential and communication channel)
• Pakistani mobile phone number (for two-factor authentication and payment verification)
• Residential address in Pakistan
• Username and encrypted account password

2.2 Identity Verification (KYC) Data

In compliance with our international gaming license requirements and applicable anti-money laundering (AML) obligations, 33pka may request the following identity documentation:

• Scanned copy or photograph of your valid Pakistani CNIC (front and back)
• Proof of current address (utility bill, bank statement, or equivalent document)
• Proof of payment method ownership (e.g., JazzCash account confirmation, bank statement header)
• Selfie photograph or short video clip for liveness verification where required

2.3 Transaction & Financial Data

33pka records all financial transactions associated with your account, including deposit amounts and timestamps, payment method identifiers (e.g., JazzCash account number suffix, bank reference), withdrawal requests and processing confirmations, bonus credits and wagering activity, and PKR balance history.

2.4 Gaming Activity Data

We maintain detailed records of your gaming activity on 33pka, including:

• Games played (cricket betting, live casino, slots, Callbreak, Deuces Wild)
• Bet amounts, outcomes, and session durations
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Bonus uptake and wagering requirement progress

2.5 Technical & Device Data

When you access 33pka, we automatically collect certain technical information:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Mobile network operator (Jazz, Telenor, Zong, Ufone, etc.)
• Session timestamps, page navigation patterns, and feature usage data
• Cookie identifiers and similar tracking technologies (see Section 7)

2.6 Customer Support Data

Any communications you send to 33pka — whether via live chat, email to [email protected], or any other channel — are recorded and retained to facilitate the resolution of your enquiry and to improve our support quality. This includes the content of messages, timestamps, and the agent who handled your case.

03 How We Use Your Personal Data

33pka processes your personal data for the following specific and legitimate purposes. We do not use your data for any purpose beyond what is described in this Policy without first obtaining your explicit consent.

04 Legal Basis for Processing

33pka processes your personal data on one or more of the following legal grounds, as applicable to the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the 33pka Terms and Conditions — including operating your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws, regulations, and the conditions of our international gaming license — including age verification, KYC, AML, and responsible gaming obligations.
• Legitimate Interest: Processing carried out to pursue 33pka's legitimate business interests, including fraud prevention, platform security, customer support, and service improvement — provided such interests are not overridden by your rights and freedoms.
• Consent: Where you have provided specific, freely given, informed consent — primarily in connection with optional promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

05 How We Share Your Data

33pka does not sell your personal data to any third party under any circumstances. Your information is shared only in the following limited and controlled scenarios:

5.1 Payment Service Providers

To process your PKR deposits and withdrawals, 33pka shares necessary transaction information with integrated payment processors — JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. Each of these providers handles your payment data in accordance with their own privacy policies as independent data controllers.

5.2 Identity Verification Partners

33pka may share identity documents submitted during KYC verification with accredited third-party identity verification service providers for the purpose of validating document authenticity and confirming your age (21+ requirement). These providers are contractually bound to process your data solely for verification purposes.

5.3 Technology and Platform Partners

33pka works with internationally recognised game studios and live casino software providers to deliver its gaming content. These providers may receive anonymised or pseudonymised session data necessary to deliver game functionality. They do not receive your registration data, CNIC, or payment details.

5.4 Legal and Regulatory Authorities

33pka may be required to disclose your personal data to regulatory authorities, law enforcement agencies, or courts in response to lawful requests, legal proceedings, or our obligations under our international gaming license. We will notify you of such disclosures where we are legally permitted to do so.

06 Payment Data & Financial Security

All financial transactions at 33pka are processed over secure, encrypted connections. 33pka does not store complete payment account credentials — such as full JazzCash wallet numbers, EasyPaisa PINs, or bank account login details — on its own servers. Payment data is transmitted directly to the relevant payment processor via an encrypted API connection.

33pka maintains records of transaction metadata — including amounts, timestamps, payment method types, and reference numbers — for a minimum of five (5) years in accordance with our international gaming license requirements and applicable financial regulations. This data is used to resolve payment disputes, fulfil AML reporting obligations, and protect against fraud.

6.1 Segregated Player Funds

Your PKR account balance at 33pka is held in a segregated player fund account, physically separate from 33pka's operational accounts. This means your deposited funds are protected and accessible to you regardless of 33pka's operational financial position. This is a mandatory requirement under our international gaming license.

07 Cookies & Tracking Technologies

33pka uses cookies and similar web technologies to operate and improve the platform. A cookie is a small data file stored on your device by your web browser. We use the following categories of cookies on 33pka.net:

• Essential Cookies: Required for the platform to function. These enable secure 33pka login sessions, maintain your active gaming sessions, and support core security features. They cannot be disabled without preventing platform use.
• Analytical Cookies: Used to understand how players interact with 33pka — which pages are visited most, where players encounter difficulties, and how gaming features are used. Data is processed in aggregated and anonymised form.
• Functional Cookies: Used to remember your preferences — such as language settings and responsible gaming tool configurations — to improve your experience on 33pka.
• Performance Cookies: Used to monitor site load times, error rates, and network performance, particularly relevant for players accessing 33pka on Pakistani mobile networks including Jazz 4G, Telenor, and Zong.

08 Data Retention

33pka retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, to comply with our legal and regulatory obligations under our international gaming license, and to defend against potential legal claims. Specific retention periods apply as follows:

• Account registration and KYC data: Retained for the duration of your account and for a minimum of five (5) years following permanent account closure, in compliance with gaming license and AML requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, consistent with standard financial record-keeping obligations.
• Gaming activity records: Retained for three (3) years from the date of each session, used for responsible gaming monitoring, dispute resolution, and platform analytics.
• Customer support communications: Retained for two (2) years from the date of resolution of each support case.
• Technical and device data: Retained in identifiable form for up to twelve (12) months, after which it is anonymised and may be retained indefinitely for aggregate analytics purposes.

Where you request deletion of your data and there is no outstanding legal or regulatory obligation requiring its retention, 33pka will process your deletion request within thirty (30) calendar days.

09 Data Security

33pka employs a multi-layered security infrastructure to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Security measures implemented at 33pka include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and 33pka's servers — the same standard used by major Pakistani commercial banks including HBL and UBL for their internet banking portals.
• End-to-end encryption of stored personal data and financial records, with encryption keys managed in accordance with industry-standard key management practices.
• Two-factor authentication (2FA) available to all 33pka account holders, delivering one-time codes to your registered Pakistani mobile number to prevent unauthorised account access.
• Automated anomaly detection to flag unusual login activity, abnormal transaction patterns, or device changes that may indicate account compromise or fraud.
• Access controls ensuring that 33pka personnel can only access player data on a need-to-know basis, with all access logged and audited.
• Regular security audits and penetration testing conducted by third-party security specialists to identify and remediate vulnerabilities before they can be exploited.

10 Your Data Rights

As a user of the 33pka platform, you have the following rights in relation to your personal data. These rights are aligned with internationally recognised data protection principles and are available to all 33pka players regardless of location within Pakistan.

• Right of Access You may request a copy of all personal data that 33pka holds about you. We will provide this information within thirty (30) days of receiving a verified request.
• Right to Rectification If any personal data held by 33pka about you is inaccurate or incomplete, you have the right to request correction. Some data corrections (e.g., name changes on CNIC) may require supporting documentation.
• Right to Erasure ("Right to Be Forgotten") You may request deletion of your personal data where there is no legal or regulatory obligation requiring its continued retention. Deletion requests will be processed within thirty (30) days subject to applicable retention requirements.
• Right to Restriction of Processing You may request that 33pka restrict the processing of your personal data in certain circumstances — for example, while a rectification request is under review, or where you have objected to processing.
• Right to Data Portability You may request that 33pka provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider. This right applies to data processed on the basis of consent or contractual necessity.
• Right to Object You may object to 33pka processing your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, though 33pka may override this objection where compelling legitimate grounds exist.
• Right to Withdraw Consent Where processing is based on your consent — such as receiving 33pka promotional communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing. Use the unsubscribe function in any marketing communication, or contact [email protected].

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and will respond within thirty (30) days.

11 Children's Privacy & Age Restriction

The 33pka platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. The 21+ age gate is enforced through mandatory CNIC verification during the account registration and KYC process.

If 33pka discovers or is informed that personal data has been collected from an individual under 21 years of age, the associated account will be immediately and permanently closed, all associated data will be deleted to the extent legally permissible, and any funds held in the account will be processed in accordance with our responsible gaming obligations and applicable law.

12 International Data Transfers

As an internationally licensed gaming operator, 33pka may process and store your personal data on servers located outside Pakistan. Where data is transferred internationally, 33pka ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. Applicable safeguards may include contractual data transfer agreements based on recognised international frameworks, binding corporate rules where applicable, or transfers to jurisdictions deemed to provide an adequate level of data protection.

Game content and live casino streams provided by 33pka's third-party studio partners may be routed through servers in multiple jurisdictions. In all cases, such transfers are governed by contractual terms that require data processing standards consistent with those applied by 33pka itself.

13 Changes to This Privacy Policy

33pka reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, gaming services, payment integrations, or applicable legal requirements. Where changes are material — meaning they significantly affect how we process your personal data — we will notify you in advance via your registered email address and via a prominent notice on the 33pka platform.

The effective date at the top of this page will always indicate when the most recent version of the Policy was published. Continued use of the 33pka platform following publication of any amendments constitutes your acknowledgement of the revised Policy. If you do not agree with any update to this Policy, you should cease use of the platform and contact us to discuss your options.

14 Contact Us & Data Complaints

If you have any questions, concerns, or complaints relating to this Privacy Policy or 33pka's data processing practices, please contact our dedicated data protection team using the details below. We take all data privacy concerns seriously and will respond to all enquiries within five (5) business days.

• Email: [email protected] (Subject line: "Privacy Enquiry" or "Data Rights Request")
• Live Chat: Available in-platform 24/7 after completing the 33pka login process
• Response Time: Within 5 business days for email; typically under 2 minutes for live chat during operational hours

If you are not satisfied with 33pka's response to a data privacy complaint, you may escalate your concern to the relevant data protection supervisory authority in the jurisdiction in which 33pka holds its international gaming license. Details of the applicable supervisory authority are available on request.