Privacy Policy

This Privacy Policy ("Policy") sets out how laki33 ("laki33", "we", "us", "our"), operating the online gaming platform at https://laki33.cam, collects, uses, discloses, stores and otherwise processes personal data relating to individuals ("you", "User", "Player") who access or use the Platform.

laki33 is committed to handling your personal data responsibly, transparently and in accordance with applicable data protection principles. This Policy is designed to give you a clear and complete understanding of your privacy rights and our data practices before you register an account, make a deposit or engage with any feature of the Platform.

This Policy should be read alongside the laki33 Terms & Conditions and Responsible Gambling Policy, which together form the complete framework governing your use of the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — an individual who can be identified directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, or online identifier.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is laki33 operating via https://laki33.cam.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller under written instruction.
• "KYC" means Know Your Customer — identity and age verification procedures required for compliance purposes.
• "AML" means Anti-Money Laundering controls applied to detect and prevent financial crime.
• "Cookies" means small data files placed on your device by the Platform to maintain session state, preferences and anonymised analytics.
• "Platform" means the laki33 website and all associated pages, features and services at https://laki33.cam.

laki33, operating the Platform at https://laki33.cam, acts as the Data Controller in respect of all personal data collected through your use of the Platform. As Data Controller, laki33 determines the purposes for which your personal data is collected and the means by which it is processed.

Where laki33 engages third-party service providers to process data on its behalf — such as KYC verification partners, payment processing intermediaries or fraud detection systems — those parties act as Data Processors under written contractual arrangements that restrict their use of your data to the purposes specified by laki33.

laki33 collects personal data through several channels, including information you provide voluntarily during registration, data generated automatically through your use of the Platform, and data received from third-party verification and payment partners. The categories of personal data we may collect are set out in the table below.

laki33 does not knowingly collect special category personal data (such as health information, political opinions or biometric data) except where a liveness check image is required as part of KYC — in which case it is processed solely for identity verification and deleted once the verification process is complete.

laki33 uses the personal data it collects for the following purposes:

1. Account creation and management: To register your account, verify your identity and age, and manage your account settings and preferences throughout the duration of your relationship with the Platform.
2. Transaction processing: To process deposits, withdrawals and related financial transactions. Payment method references familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are referenced for context only and do not imply any data-sharing arrangement with those institutions.
3. KYC and AML compliance: To verify your identity and the legitimacy of your funds in accordance with our compliance obligations and to prevent fraud, money laundering and underage access.
4. Customer support: To respond to your enquiries, complaints, account issues and requests via live chat and email.
5. Platform improvement: To analyse anonymised usage patterns, improve platform performance, identify technical issues and develop new features.
6. Responsible gambling: To monitor gaming behaviour for signs of problem gambling, enforce self-exclusion requests, and apply deposit, loss and time limits as requested by you or required by policy.
7. Security and fraud prevention: To detect, investigate and prevent unauthorised account access, fraudulent activity, bonus abuse and other prohibited conduct as defined in the Terms & Conditions.
8. Marketing communications (where consented): To send you promotional offers, bonus notifications and platform updates by email or on-platform messaging, where you have given explicit consent and not subsequently withdrawn it.
9. Legal and regulatory obligations: To comply with applicable laws, regulatory requirements, court orders or requests from competent authorities.

laki33 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to enter into and perform our contractual obligations with you — including account creation, transaction processing and customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML and responsible gambling obligations.
• Legitimate interests: Processing carried out in the legitimate interests of laki33 or a third party — such as fraud prevention, platform security and analytics — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your explicit, freely given, specific and informed consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

laki33 does not sell, rent or otherwise transfer your personal data to third parties for their own commercial use. We may share your personal data with the following categories of recipients only as strictly necessary for the purposes set out in Section 5:

• KYC and identity verification partners: Third-party providers who verify the authenticity of identity documents and perform liveness checks as part of the account verification process.
• Payment processing partners: Intermediaries who facilitate deposit and withdrawal transactions. The specific payment partners in operation at any time may be verified with the operator directly.
• Fraud prevention and AML screening services: Specialist providers who screen account activity against databases of known fraud patterns and AML risk indicators.
• Customer support platform providers: Third-party software providers powering the live chat and email support infrastructure.
• Analytics and platform performance providers: Services that collect anonymised usage data to help improve Platform performance. These providers do not receive personally identifiable information.
• Legal and regulatory authorities: Law enforcement agencies, courts, regulators or other competent authorities where disclosure is required by applicable law, court order or regulatory request.

All third-party Data Processors engaged by laki33 are subject to written data processing agreements that restrict the use of your personal data to the purposes for which it was shared and require the maintenance of appropriate security standards.

laki33 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active accounts: Personal data associated with active accounts is retained for the duration of the account relationship.
• Closed accounts: Following account closure, laki33 retains personal data for a minimum period required to meet AML, KYC, fraud investigation and dispute resolution obligations. This period is typically five years from the date of account closure, though it may be longer if required by applicable law or active legal proceedings.
• KYC documents: Identity verification documents are retained for the period required under applicable compliance frameworks and thereafter securely deleted.
• Marketing data: Where you have consented to marketing communications, your contact data is retained for this purpose until you withdraw consent. Following withdrawal of consent, data is removed from marketing lists promptly.
• Technical and log data: Server logs and technical data are retained for a limited period for security and fraud investigation purposes, after which they are deleted or anonymised.

Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by laki33. To exercise any of these rights, please contact our support team using the details in Section 16.

• Right of Access: You have the right to request a copy of the personal data laki33 holds about you and to be informed about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you may request the deletion of your personal data. Note that this right is subject to overriding legal obligations — for example, KYC and AML record-keeping requirements may prevent immediate deletion.
• Right to Restriction of Processing: You may request that laki33 restrict the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have the unconditional right to object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

laki33 will respond to all valid data rights requests within a reasonable timeframe and, where feasible, within 30 days of receipt. In complex cases, this period may be extended, and you will be informed accordingly.

laki33 uses cookies and similar technologies to operate and improve the Platform. Cookies are small text files stored on your device that help maintain session state, remember preferences and gather anonymised performance data.

The types of cookies used by laki33 include:

• Essential / Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that keep you logged in during your visit and security cookies that help detect fraud. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your preferences — such as language and display settings — to personalise your experience. Disabling these may affect how the Platform displays for you.
• Analytics Cookies: Collect anonymised data on how users interact with the Platform — such as pages visited, session duration and error encounters — to help improve performance. This data is not linked to your personal identity.
• Security and Fraud-Detection Cookies: Used to identify anomalous session behaviour and support fraud prevention systems.

You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will affect your ability to use the Platform. Guidance on cookie management is available through your browser's help documentation.

laki33 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• SSL/TLS encryption across the entire Platform — all data in transit between your device and our servers is encrypted.
• Secure document upload portals for KYC submissions — documents must not be sent via email or unencrypted channels.
• Access controls limiting personal data access to authorised personnel only, on a need-to-know basis.
• Regular security assessments and monitoring of Platform infrastructure.
• Two-factor authentication (2FA) available to all users for enhanced account security.

In the event of a personal data breach that poses a risk to your rights and freedoms, laki33 will take appropriate steps in accordance with applicable data protection obligations, which may include notifying affected users.

In the course of providing its services, laki33 may transfer your personal data to third-party processors or service providers located outside your country of residence, including outside Pakistan. Such transfers may occur in connection with KYC verification, payment processing or cloud infrastructure services.

Where personal data is transferred internationally, laki33 takes steps to ensure that appropriate safeguards are in place to protect your data, including contractual clauses requiring recipient organisations to maintain data protection standards consistent with those applied by laki33.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan, which may have different data protection laws than those in your home jurisdiction.

laki33 is strictly an adults-only platform. The Platform is not directed at, and must not be used by, individuals under the age of 18, or the higher minimum age required by the operator's license jurisdiction. laki33 does not knowingly collect personal data from individuals under the applicable minimum age.

Where laki33 discovers that personal data has been collected from an individual who does not meet the minimum age requirement, that data will be deleted and the associated account closed immediately. Age verification is enforced as part of the KYC process.

If you believe a minor has accessed or registered on the Platform, please notify us immediately using the contact details in Section 16. This age restriction does not constitute legal advice about the lawfulness of gambling under Pakistani law.

The laki33 Platform may contain references to third-party services — for example, responsible gambling support resources mentioned in our Responsible Gambling Policy. laki33 is not responsible for the privacy practices of any third-party website or service. This Privacy Policy applies solely to data collected through the laki33 Platform at https://laki33.cam.

We recommend that you review the privacy policies of any third-party platforms you access independently of laki33, as their data handling practices may differ from ours.

laki33 reserves the right to amend this Privacy Policy at any time to reflect changes in data processing practices, legal requirements or Platform functionality. When material changes are made, laki33 will endeavour to notify registered users via the email address associated with their account or through a notice on the Platform.

The date of the most recent update is shown at the top of this page. It is your responsibility to review this Policy periodically. Continued use of the Platform following a Policy update constitutes acceptance of the revised Policy. If you do not accept the revised Policy, please cease using the Platform and contact support to close your account.

For any questions, concerns or requests relating to this Privacy Policy — including exercising your data rights as described in Section 9 — please contact the laki33 support team through the following channels:

• Email (plain text — not a clickable link): [email protected]
• Live Chat: Available 24/7 through the chat function accessible within your logged-in account area. Live chat is recommended for time-sensitive requests such as self-exclusion, account restriction or urgent security concerns.
• Response time: Privacy-related email requests are typically acknowledged within 2 business days and resolved within 30 calendar days. Complex requests may take longer, and you will be informed of any extension.