luc33 Privacy Policy

01 Introduction

luc33 (hereinafter "luc33," "we," "us," or "the Company") operates the online gaming platform accessible at luc33.net and all associated subdomains and mobile applications. As the operator of a platform that collects and processes personal data from registered players, luc33 is committed to handling that data with the highest standards of care, security, and transparency.

This Privacy Policy describes how luc33 collects, uses, stores, shares, and protects personal data in connection with the operation of the luc33 platform. It applies to all current and former luc33 account holders, prospective registrants who interact with the luc33 website without completing registration, and any individual whose personal data is provided to luc33 in connection with account verification or support requests.

This Privacy Policy should be read alongside the luc33 Terms & Conditions, which govern the contractual relationship between luc33 and its players. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy shall take precedence.

02 Data Controller

For the purposes of applicable data protection law, luc33 is the data controller responsible for the personal data collected through the luc33.net platform. As data controller, luc33 determines the purposes for which personal data is processed and the means by which that processing takes place.

luc33 operates under an international gaming licence and is subject to the data protection and privacy obligations imposed by its licensing jurisdiction. Where luc33 engages third-party processors to handle personal data on its behalf — such as payment service providers, identity verification services, and cloud infrastructure providers — those processors are bound by data processing agreements that restrict their use of your data to the purposes specified by luc33.

If you have any questions about how luc33 acts as data controller in relation to your personal data, or wish to exercise any of the rights described in this Privacy Policy, please contact the luc33 Data Privacy team via in-account live chat or by email at [email protected].

03 Data We Collect

luc33 collects personal data across several categories, depending on the nature of your interaction with the platform. The table below summarises the main categories of personal data that luc33 collects and holds:

luc33 does not collect or process special categories of sensitive personal data — such as biometric data used for identification, health information, political opinions, or religious beliefs — except where this is strictly required for regulatory compliance purposes and only with your explicit consent where required by applicable law.

04 How We Collect Data

luc33 collects personal data through the following channels:

• Direct interactions: Data you provide when registering for a luc33 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account settings.
• Automated technologies: Technical and usage data collected automatically through cookies, server logs, and analytics tools each time you access the luc33 platform. This includes your IP address, device identifiers, and session behaviour data.
• Third-party sources: Identity and fraud risk data received from third-party KYC and AML verification services when you submit documents for account verification. luc33 may also receive data from payment processors confirming the status of your transactions.
• Responsible gaming interactions: Data generated when you use luc33's self-exclusion tools, deposit limits, session time controls, or reality check features. This data is used exclusively for responsible gaming management and is never shared with third parties for commercial purposes.

05 Purpose & Legal Basis

luc33 processes your personal data only where a valid legal basis exists for doing so. The following table sets out the primary purposes for which luc33 processes personal data and the corresponding legal basis for each:

Where luc33 relies on consent as the legal basis for processing — specifically for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

06 Data Sharing

luc33 does not sell, rent, or trade your personal data to any third party for commercial purposes. luc33 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 wallet service providers receive only the minimum financial data required to execute your deposit and withdrawal instructions.
• Identity verification providers: Third-party KYC and AML compliance services receive your identity documents and biographic data to perform verification checks required under luc33's licensing obligations.
• Cloud infrastructure and hosting providers: luc33 uses cloud-based infrastructure partners to host the platform and store data securely. These providers act as data processors under contractual agreements and have no independent right to use your data.
• Regulatory and law enforcement authorities: luc33 may disclose personal data to its licensing regulator, financial intelligence units, or law enforcement agencies where required by applicable law, court order, or regulatory directive. luc33 will notify you of such disclosure where legally permitted to do so.
• Game and software providers: Where luc33 offers games developed by third-party studios, limited technical and session data may be shared with those studios solely for game operation and integrity purposes.
• Professional advisors: Legal counsel, auditors, and compliance consultants may access personal data on a strictly confidential basis where required to provide professional services to luc33.

07 Cookies & Tracking Technologies

luc33 uses cookies and similar tracking technologies to operate and improve the platform, authenticate your session, remember your preferences, and analyse usage patterns. The following categories of cookies are used on the luc33 platform:

• Strictly Necessary Cookies: Essential for the luc33 platform to function correctly. These cookies manage your login session, maintain your account security, and enable core features such as the cashier and game lobby. These cookies cannot be disabled.
• Performance & Analytics Cookies: Used to understand how players interact with the luc33 platform — which pages are visited most, where players drop off, and how long sessions last. This data is used in aggregate and is not personally identifiable. You may opt out of these cookies via your browser settings.
• Functionality Cookies: Store your platform preferences, such as language settings, preferred payment method, and responsible gaming reminder frequency. Disabling these cookies may affect your platform experience.
• Marketing Cookies: Used to deliver relevant promotional content about luc33 bonuses and events, including PSL season promotions, to players who have opted in to marketing communications. These cookies are only set with your prior consent.

You can manage your cookie preferences through the luc33 cookie consent manager, accessible from the platform footer, or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality and security of your luc33 account.

08 Data Retention

luc33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the lifetime of your luc33 account and for a minimum of five (5) years following permanent account closure, as required by AML and gaming licence compliance obligations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements applicable to licensed gaming operators.
• Customer support communications: Retained for three (3) years from the date of the last interaction, to support dispute resolution and compliance review.
• Technical and usage data: Retained for a maximum of thirteen (13) months in identifiable form, after which it is aggregated and anonymised for analytical purposes.
• Marketing preference records: Retained for the lifetime of your luc33 account to honour your opt-in or opt-out choices accurately.
• Self-exclusion records: Retained indefinitely to prevent re-registration during any active self-exclusion period, including permanent self-exclusions.

At the end of the applicable retention period, luc33 will securely delete or anonymise personal data in accordance with its internal data lifecycle management procedures.

09 Data Security

luc33 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and luc33 servers.
• AES-256 encryption for sensitive data fields stored at rest, including CNIC numbers and payment account identifiers.
• Multi-factor authentication (MFA) requirements for luc33 staff accessing systems that hold player personal data.
• Role-based access controls that restrict internal access to personal data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• 24/7 security monitoring and intrusion detection systems across all luc33 infrastructure.
• Documented incident response procedures that ensure prompt detection, containment, and notification of any personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, luc33 will notify affected players without undue delay, providing details of the breach, its likely consequences, and the measures luc33 has taken or intends to take to address it.

10 Your Rights

As a luc33 player, you have the following rights in relation to your personal data. luc33 will respond to all valid rights requests within thirty (30) days of receipt, unless the complexity or volume of requests requires an extension, in which case you will be notified.

• Right of Access: You have the right to request a copy of the personal data that luc33 holds about you, along with information about how that data is being used.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. For basic account details, you may be able to update these directly within your luc33 account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that luc33 may be required to retain certain data for regulatory compliance purposes even after a deletion request.
• Right to Restriction: You have the right to request that luc33 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where luc33 processes your personal data on the basis of consent or contract performance, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where luc33 relies on legitimate interest as the legal basis, and you believe that your interests or fundamental rights override luc33's legitimate interests.
• Right to Withdraw Consent: Where luc33 processes your personal data on the basis of consent — primarily for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact luc33 via in-account live chat or by email at [email protected]. luc33 may need to verify your identity before processing a rights request to ensure that personal data is not disclosed to or altered by unauthorised persons.

11 Marketing Communications

luc33 sends marketing communications — including bonus offers, PSL promotions, seasonal campaigns, and platform news — only to players who have explicitly opted in to receive them. Marketing communications may be sent via email, SMS, or push notifications depending on the channels you have enabled in your luc33 account settings.

You can opt out of marketing communications at any time by:

• Updating your communication preferences in the luc33 account settings panel.
• Clicking the unsubscribe link included in any luc33 marketing email.
• Contacting the luc33 support team via in-account live chat and requesting removal from marketing lists.

Opting out of marketing communications will not affect the delivery of transactional messages — such as deposit confirmations, withdrawal notifications, and security alerts — which are essential to the operation of your luc33 account and are sent regardless of your marketing preferences.

12 Children & Minors

The luc33 platform is strictly for individuals aged 21 years and above. luc33 does not knowingly collect personal data from individuals under the age of 21. Age verification via CNIC is a mandatory step before any real-money gaming activity can take place on luc33.

If luc33 becomes aware that personal data has been collected from an individual under the age of 21 without valid parental consent, that data will be deleted immediately, the associated account will be permanently closed, and any funds deposited will be returned to the source payment method following verification.

If you are a parent or guardian and believe that a minor may have accessed or registered on the luc33 platform using your details or without your knowledge, please contact the luc33 support team immediately. We will investigate and act promptly.

13 Cross-Border Data Transfers

luc33 operates globally and may transfer your personal data to countries outside Pakistan for the purposes of cloud hosting, identity verification, and payment processing. Where such transfers occur, luc33 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses in data processing agreements that impose equivalent data protection obligations on the recipient.
• Transfer only to jurisdictions that provide an adequate level of data protection as assessed by relevant international standards.
• Technical measures — including encryption in transit and at rest — that protect data throughout its journey across borders.

If you would like further information about the safeguards luc33 applies to cross-border data transfers, please contact the luc33 Data Privacy team at [email protected].

14 Policy Changes

luc33 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we offer. When material changes are made, luc33 will notify registered players via email to the address on file and via a prominent notice on the luc33 platform no less than seven (7) days before the changes take effect.

Minor updates — such as corrections of typographical errors or clarifications that do not alter the substance of the Privacy Policy — may take effect immediately upon publication. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the luc33 platform after the effective date of any Privacy Policy update constitutes your acknowledgement of the revised policy. If you do not agree with any update, you should discontinue use of the luc33 platform and close your account before the update takes effect.

15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a concern about how luc33 handles your personal data, please contact us through the following channels:

• 24/7 Live Chat: Available directly within your luc33 account after logging in — the fastest way to reach the luc33 Data Privacy team.
• Email: [email protected] — for formal written privacy requests and complaints.

luc33 will acknowledge all privacy-related inquiries within 48 hours and will aim to resolve them within 30 days. Where a request is complex or involves a high volume of data, we will notify you of any required extension to this timeframe.

If you are not satisfied with luc33's response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority or dispute resolution body specified under luc33's international gaming licence. Details of the applicable escalation route are available from the luc33 support team on request.