33r Privacy Policy – How We Collect, Use & Protect Your Data

1. Introduction

This Privacy Policy ("Policy") describes how 33r ("33r", "we", "us", "our") collects, processes, stores and protects personal data in connection with the operation of the online betting and casino platform accessible at 33r.biz ("Platform"). This Policy applies to all users of the Platform, including registered account holders and visitors who access the Platform without registering.

33r is committed to handling personal data responsibly, transparently and in accordance with applicable data protection laws. We collect only the data necessary to provide our services, fulfil legal obligations and protect the integrity of the Platform. We do not sell personal data to third parties for marketing purposes.

By accessing or using the 33r Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, please discontinue use of the Platform. This Policy should be read alongside 33r's Terms & Conditions, which govern your use of the Platform more broadly.

2. Data Controller

For the purposes of applicable data protection legislation, 33r is the data controller responsible for personal data collected through the Platform. As data controller, 33r determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable legal requirements.

Where 33r engages third-party service providers who process personal data on its behalf (for example, payment processors, identity verification providers, and software suppliers), such parties act as data processors and are contractually bound to process data only in accordance with 33r's documented instructions and applicable law.

3. Personal Data We Collect

33r collects personal data across several categories, depending on the nature of your interaction with the Platform:

33r does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs or health data, except where required by applicable anti-money laundering or responsible gaming regulations.

4. How We Collect Your Data

33r collects personal data through the following channels:

• Direct interactions: Data you provide when registering a 33r account, completing KYC verification, making a deposit or withdrawal, or contacting our support team.
• Automated technical collection: Data collected automatically through cookies, server logs and analytics tools when you access or navigate the Platform.
• Third-party sources: Data received from identity verification providers (e.g., CNIC validation services), payment processors (e.g., JazzCash, Easypaisa, bank partners), and fraud detection services, used to verify identity and prevent financial crime.
• KYC / AML screening: Data from publicly available sanctions lists, politically exposed persons (PEP) databases and adverse media sources, used to comply with anti-money laundering obligations.

5. How We Use Your Personal Data

33r processes personal data for the following purposes:

• Account creation and management: To register your 33r account, verify your identity, manage your login credentials and maintain your account profile.
• Service delivery: To enable you to place bets on cricket, PSL and other sports, access casino games, and process deposits and withdrawals in Pakistani Rupees.
• Identity and age verification: To confirm that you are 18 or older and to comply with KYC requirements before processing withdrawals or large transactions.
• Fraud prevention and security: To detect, investigate and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering and other prohibited conduct on the Platform.
• Responsible gaming: To monitor gambling activity for indicators of problem gambling and to administer self-exclusion, deposit limits and cooling-off requests.
• Customer support: To respond to your queries, resolve disputes and improve the quality of our support services.
• Legal and regulatory compliance: To fulfil obligations under applicable anti-money laundering, counter-terrorism financing and data protection laws.
• Service communications: To send you transactional notifications (deposit confirmations, withdrawal updates, account alerts). Promotional communications are sent only with your consent and may be opted out of at any time.
• Platform improvement: To analyse usage patterns and improve the 33r Platform, including optimising the mobile betting and casino experience for Pakistani players.

6. Legal Basis for Processing

33r processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the Terms & Conditions you agreed to when registering your 33r account, including account management, betting, gaming and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, KYC requirements and regulatory reporting obligations.
• Legitimate interests: Processing necessary for 33r's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Where required, processing based on your freely given, informed consent — for example, for marketing communications or the use of non-essential cookies.

7. Data Sharing & Third Parties

33r does not sell, rent or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances:

• Payment processors: To process deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard and USDT TRC20 infrastructure providers.
• Identity verification providers: To fulfil KYC and age verification requirements before account activation and withdrawal processing.
• Game software providers: Game providers who supply slots, live casino and other content to the 33r Platform receive session and gameplay data necessary to deliver the game service.
• Fraud prevention and AML services: To screen accounts against sanctions lists, PEP databases and fraud intelligence platforms.
• IT and infrastructure providers: Cloud hosting, server management and cybersecurity service providers who process data as data processors under binding agreements.
• Regulatory authorities: Where 33r is required by law, regulation or court order to disclose information to a government authority, law enforcement body or regulatory agency.

All third-party data processors engaged by 33r are contractually bound to implement appropriate technical and organisational security measures and to process personal data only in accordance with 33r's documented instructions.

8. Data Retention

33r retains personal data for as long as necessary to fulfil the purposes outlined in this Policy, subject to the following principles:

• Active account data is retained for the duration of your account's existence plus a minimum of five (5) years after account closure, to comply with anti-money laundering record-keeping obligations.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, or longer where required by applicable law.
• KYC documentation (including CNIC and identity verification records) is retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer support correspondence is retained for three (3) years from the date of the communication, unless required longer for dispute resolution or regulatory purposes.
• Cookies and analytical data are retained in accordance with the cookie policy described in Section 10.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

9. Security Measures

33r implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. Key security measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and 33r's servers.
• Encrypted storage of passwords — passwords are never stored in plain text.
• Two-factor authentication (2FA) available for all 33r accounts — we strongly recommend enabling this feature.
• Access controls limiting internal access to personal data to authorised personnel on a need-to-know basis.
• Regular security assessments and penetration testing of the Platform's infrastructure.
• Fraud detection and anomaly monitoring systems that flag suspicious account activity in real time.

10. Cookies & Tracking Technologies

33r uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help the Platform function correctly and allow us to understand how users interact with the site.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect the functionality of the 33r Platform, including the ability to log in and maintain your session. Non-essential cookies may be declined without impacting core Platform functions.

11. Your Data Rights

Subject to applicable data protection laws, you have the following rights in respect of your personal data held by 33r:

• Right of access: Request a copy of the personal data 33r holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data in your 33r account profile.
• Right to erasure: Request deletion of your personal data, subject to 33r's legal retention obligations (including AML and KYC record-keeping requirements, which may prevent immediate deletion).
• Right to restriction: Request that 33r restrict processing of your personal data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability: Request a machine-readable copy of personal data you have provided to 33r, where processing is based on consent or contractual necessity.
• Right to object: Object to processing based on 33r's legitimate interests, including direct marketing communications.
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact 33r's support team via live chat on your account dashboard or by email at [email protected]. 33r will respond to all legitimate data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days, with prior notification to you.

12. Minors & Age Policy

The 33r Platform is strictly intended for persons aged 18 (eighteen) years and above. 33r does not knowingly collect or process personal data belonging to individuals under the age of 18. Account registration requires age verification, and identity documentation is requested before withdrawals are processed.

If 33r identifies that personal data has been collected from a person under the age of 18, such data will be permanently deleted and the associated account closed immediately. If you are a parent or guardian and believe that a minor has accessed the 33r Platform, please contact our support team immediately so that the account can be reviewed and closed.

13. International Data Transfers

Due to the global nature of 33r's infrastructure and third-party service providers — including game software suppliers, cloud hosting providers and payment processors — personal data may be transferred to and processed in countries outside Pakistan. Such transfers are made only where appropriate safeguards are in place to ensure a comparable level of data protection, including:

• Contractual clauses requiring recipient parties to maintain data protection standards consistent with this Policy;
• Transfer to countries or organisations recognised as providing adequate data protection under applicable frameworks;
• Binding corporate rules or equivalent mechanisms where applicable.

14. Changes to This Privacy Policy

33r reserves the right to update this Privacy Policy at any time. Material changes — such as changes to the types of data collected, new third-party sharing arrangements or changes to your data rights — will be communicated via a prominent notice on the Platform and, where appropriate, by email to your registered address.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the 33r Platform after any revision constitutes your acceptance of the updated Policy.

15. Contact Us

If you have questions about this Privacy Policy, wish to exercise a data rights request, or have a concern about how 33r processes your personal data, please contact the 33r data protection team through the following channels:

• Live Chat: Available 24/7 via your 33r account dashboard
• Email: [email protected]

Please include your registered email address and a clear description of your query or request. 33r aims to acknowledge all privacy-related enquiries within five (5) business days.