Privacy Policy

1. Who We Are

33rs operates the online casino and sports betting platform accessible at 33rs.ws. For the purposes of data protection law, 33rs is the data controller responsible for the personal data collected through the platform and all associated services. When this Privacy Policy refers to "33rs", "we", "us" or "our", it means the operating entity behind the 33rs platform. When it refers to "you", "your" or "Player", it means any individual who registers an account, visits the platform, or otherwise interacts with 33rs services.

33rs operates under an internationally recognised gaming licence that imposes specific obligations around data collection, identity verification, anti-money laundering screening, and responsible gaming — all of which require the processing of certain personal data. This Privacy Policy explains how those obligations are met while protecting player privacy to the greatest extent possible.

If you have questions about this Privacy Policy or how your data is handled, you can contact the 33rs data protection team at [email protected]. All privacy enquiries are handled by the same support team available 24/7 through the in-account live chat channel.

2. Data We Collect

33rs collects only the personal data that is necessary for the operation of the platform, compliance with licensing obligations, and the delivery of a secure and personalised player experience. The categories of data collected are as follows:

33rs does not collect sensitive categories of personal data such as health information, political opinions, or biometric identifiers beyond what is contained in standard CNIC documentation for identity verification purposes.

3. How We Collect Data

33rs collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically — when you visit or use the 33rs platform, technical data and usage data are collected through cookies, server logs, and similar tracking technologies as described in Section 9.
• From third-party payment providers — when you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or direct bank transfer, the payment processor confirms transaction details to 33rs for the purposes of crediting your PKR wallet and maintaining financial records.
• From identity verification services — 33rs may use third-party KYC verification tools to cross-reference CNIC data and confirm the identity of Players. These services return a verification status to 33rs but do not provide additional data beyond what was submitted for verification.
• From fraud prevention and AML screening services — 33rs uses automated screening tools to check account activity against known fraud patterns, sanctions lists, and anti-money laundering indicators. These checks are a requirement of the platform's licensing obligations.

4. Legal Basis for Processing

33rs processes personal data on the following legal bases depending on the nature and purpose of the processing activity:

• Contract performance: Processing your identity data, contact data, financial data, and transactional data is necessary for 33rs to provide the betting and gaming services you have contracted for by registering an account and accepting the Terms & Conditions.
• Legal obligation: 33rs is required by its gaming licence to carry out KYC verification, maintain anti-money laundering records, implement responsible gaming controls, and retain certain financial and identity records for prescribed periods. Processing for these purposes is mandatory.
• Legitimate interests: 33rs processes technical data and usage data on the basis of its legitimate interests in maintaining platform security, preventing fraud, optimising the player experience, and operating a commercially viable gaming platform. These interests have been assessed against player privacy rights and are not overridden by those rights in the context of a regulated gaming platform.
• Consent: Where 33rs sends optional marketing communications or uses non-essential cookies, processing is based on your consent, which you may withdraw at any time as described in Sections 9 and 10 respectively.

5. How We Use Your Data

The personal data collected by 33rs is used for the following specific purposes:

• Creating and maintaining your 33rs account, including verifying your identity and age (21+ requirement) through KYC processes using your CNIC documentation.
• Processing deposits to your PKR wallet and withdrawals back to your verified payment method through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or bank transfer.
• Recording and settling bets placed on cricket, PSL, other sports, and casino games, and maintaining an accurate transaction history within your account.
• Detecting and preventing fraud, collusion, bonus abuse, money laundering, and any other form of prohibited conduct as defined in the 33rs Terms & Conditions.
• Complying with the anti-money laundering (AML) and counter-terrorist financing (CTF) obligations imposed by 33rs's international gaming licence, including transaction monitoring and suspicious activity reporting where required.
• Monitoring player activity for responsible gaming indicators, including unusual betting patterns, rapid loss escalation, and other behaviours that may indicate problem gambling, and providing appropriate interventions where identified.
• Providing customer support, resolving disputes, and maintaining records of support interactions for quality and compliance purposes.
• Improving the 33rs platform based on usage patterns, including game library decisions, payment method priorit isation, and interface improvements.
• Sending transactional communications such as deposit confirmations, withdrawal status updates, security alerts, and responsible gaming notices to your registered email address or mobile number.
• Where you have provided consent, sending promotional communications about 33rs bonuses, new games, and platform features. You may opt out of marketing communications at any time by contacting support or using the unsubscribe option in any marketing email.

6. Data Sharing & Third Parties

33rs does not share your personal data with third parties except in the following specific circumstances, each of which is necessary for platform operation or legal compliance:

• Payment processors: When you make a deposit or request a withdrawal, your financial data is transmitted to the relevant payment processor — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or the applicable bank transfer network — solely to complete the transaction. These processors act as independent data controllers under their own privacy policies for the data they hold.
• KYC and identity verification providers: 33rs shares CNIC and identity data with third-party KYC verification services for the purpose of confirming your identity and age. These providers are contractually bound to process your data only for verification purposes and to maintain appropriate security standards.
• AML and fraud screening services: Transaction and identity data may be processed through automated AML and fraud detection systems operated by third-party compliance technology providers. These systems are used solely to meet 33rs's licensing obligations and do not use your data for any other purpose.
• Game software providers: When you play a casino or slot game, your gameplay data (but not your full identity data) is processed by the underlying game software provider's RNG and game management systems. These providers are certified by independent gaming auditors and are contractually prohibited from using player data beyond what is necessary for game operation.
• Regulatory and law enforcement authorities: 33rs may be required to disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required by law, a court order, or the terms of the platform's gaming licence. Such disclosures are made only to the extent required and are not within 33rs's discretion to refuse where legally mandated.
• Professional advisers: 33rs may share data with its legal, financial, or security advisers on a strictly confidential basis where necessary for the defence of legal claims, regulatory proceedings, or platform security investigations.

All third parties with whom 33rs shares personal data are required to maintain appropriate technical and organisational security measures and to process that data only for the purposes for which it was disclosed.

7. International Data Transfers

7.1 Cross-Border Processing. As an internationally licensed gaming platform, 33rs may process or store certain categories of data on infrastructure located outside Pakistan. This can occur where 33rs's game software providers, KYC partners, cloud hosting providers, or other third-party service providers operate data centres in other jurisdictions.

7.2 Transfer Safeguards. Where personal data is transferred outside of Pakistan, 33rs ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Privacy Policy. Safeguards used may include:

• Contractual data processing agreements incorporating internationally recognised standard contractual clauses for data transfers.
• Transfers to jurisdictions that maintain recognised data protection standards as assessed by 33rs's compliance function.
• Technical security measures including end-to-end encryption of data in transit and at rest.

7.3 Player Acknowledgement. By registering a 33rs account and using the platform, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan as described in this section, and that such processing is necessary for the delivery of 33rs's services under the terms you have accepted.

8. Data Retention

8.1 General Retention Principle. 33rs retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as is required by applicable law or the platform's gaming licence. Once data is no longer required, it is securely deleted or anonymised.

8.2 Retention Periods by Category. The following retention periods apply to each category of personal data held by 33rs:

• Identity and KYC data (CNIC, verification records): Retained for a minimum of five (5) years from the date of account closure, as required by AML and gaming licence obligations.
• Financial and transactional data (deposits, withdrawals, bet records): Retained for a minimum of five (5) years from the date of each transaction, in line with standard financial record-keeping requirements.
• Account and contact data: Retained for the duration of the active account and for up to two (2) years following account closure, unless a longer period is required for legal or regulatory reasons.
• Support and communications data: Retained for up to three (3) years from the date of each interaction, for dispute resolution and quality assurance purposes.
• Technical and usage data: Retained for up to twelve (12) months from collection, after which it is anonymised or deleted.

8.3 Extended Retention. Where a Player's account is subject to investigation for fraud, AML concerns, or legal proceedings at the time of closure, 33rs may retain relevant data for the duration of that investigation or proceedings and for a reasonable period thereafter, regardless of the standard retention periods above.

9. Cookies & Tracking

9.1 What Are Cookies. Cookies are small text files placed on your device by the 33rs platform when you visit. They allow the platform to recognise your device on return visits, maintain your session while you are logged in, and collect information about how you interact with the site.

9.2 Types of Cookies Used. The 33rs platform uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and enable the shopping basket functionality in the cashier. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These cookies collect anonymised information about how Players use the platform — which pages are visited most, how long sessions last, and where errors occur. This information is used to improve the platform. These cookies require your consent.
• Functional cookies: These cookies remember choices you have made on the platform — such as your preferred game category or responsible gaming settings — to provide a more personalised experience. These cookies require your consent.

9.3 Managing Cookies. You can control non-essential cookies through your browser settings at any time. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to use the 33rs platform. Disabling performance or functional cookies will not prevent access to the platform but may reduce the quality of your experience.

9.4 No Third-Party Advertising Cookies. 33rs does not use third-party advertising or retargeting cookies on the platform. You will not be tracked across other websites for advertising purposes based on your 33rs activity.

10. Your Data Rights

As a Player whose personal data is processed by 33rs, you have the following rights in relation to that data. To exercise any of these rights, contact 33rs support at [email protected]. 33rs will respond to all verified data rights requests within thirty (30) days.

• Right of access: You have the right to request a copy of all personal data held about you by 33rs, together with information about how it is being used. This is sometimes called a Subject Access Request (SAR).
• Right to rectification: If any personal data held by 33rs about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: In certain circumstances — where data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies — you have the right to request deletion of your personal data. This right is subject to 33rs's legal and regulatory retention obligations described in Section 8; data that must be retained for AML or licensing compliance cannot be deleted on request.
• Right to restriction of processing: Where you contest the accuracy of data, object to its processing, or require it for legal claims, you may request that 33rs restrict processing of that data to storage only while the matter is resolved.
• Right to data portability: Where data has been provided by you and is processed on the basis of contract or consent, you may request a machine-readable copy of that data for transfer to another service provider.
• Right to object: Where 33rs processes your data on the basis of legitimate interests, you have the right to object to that processing. 33rs will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as optional marketing communications or non-essential cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

11. Security Measures

11.1 Technical Safeguards. 33rs implements a range of technical security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• SSL/TLS encryption for all data transmitted between your device and the 33rs platform.
• Encryption of sensitive data fields — including financial account details and CNIC data — at rest within 33rs's database infrastructure.
• Multi-factor authentication options for Player accounts to prevent unauthorised login.
• Automated intrusion detection and monitoring systems that flag unusual access patterns for security review.
• Regular penetration testing and security audits conducted by qualified third-party security firms.

11.2 Organisational Safeguards. Access to personal data within 33rs is restricted on a need-to-know basis. Staff who handle personal data are trained in data protection obligations and are subject to confidentiality agreements. Access controls and audit logs are maintained for all systems containing personal data.

11.3 Data Breach Response. In the event of a personal data breach that poses a risk to Player rights and freedoms, 33rs will notify affected Players and relevant regulatory authorities within the timeframes required by applicable data protection law. Notifications will be sent to the email address registered to the affected account.

11.4 Player Responsibility. While 33rs takes extensive measures to secure the platform, Players are responsible for maintaining the confidentiality of their own login credentials. You should never share your 33rs password with anyone. If you suspect your account has been accessed without your authorisation, contact 33rs support immediately.

12. Changes to This Policy

12.1 Policy Updates. 33rs reserves the right to update this Privacy Policy at any time to reflect changes in platform operations, legal requirements, or industry best practices. The updated policy will be published on this page with a revised effective date at the top of the document.

12.2 Notification of Material Changes. Where a change to this Privacy Policy is material — meaning it significantly affects the way your personal data is processed or your rights in relation to it — 33rs will notify you via your registered email address or via an in-account notification before the change takes effect.

12.3 Continued Use. Continued use of the 33rs platform after the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a change, you should cease using the platform and contact 33rs support to request account closure in accordance with the Terms & Conditions.

12.4 Contact. For any privacy-related questions, data rights requests, or concerns about how 33rs handles your personal data, please contact our support team at [email protected]. Our team is available 24/7 and will direct your query to the appropriate data protection contact within the organisation.