luke33 Privacy Policy

1. Introduction

This Privacy Policy (hereinafter referred to as the "Policy") applies to all personal data processed by luke33 (hereinafter "we", "us", "our", or "the Platform") in connection with your use of the website located at luke33.vip and all associated services, games, sportsbook features, payment tools, and support functions accessible through it.

luke33 is committed to handling your personal data with the highest standards of care, transparency, and security. We operate in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, and integrity and confidentiality.

This Policy should be read alongside the luke33 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and collectively govern your relationship with the Platform.

2. Data Controller

luke33 acts as the data controller in respect of all personal data collected through the Platform. As data controller, luke33 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

For all data protection enquiries, including requests to exercise your data subject rights, you may contact us via:

• Email: [email protected] — please include "Privacy Request" in your subject line
• Live Chat: Available 24/7 inside your account dashboard

We aim to respond to all data-related enquiries within 30 calendar days of receipt.

3. Personal Data We Collect

3.1 Registration Data

When you create a luke33 account, we collect the information you provide during the registration process, which typically includes:

• Full legal name (as it appears on your CNIC or passport)
• Date of birth (to verify the 21+ age requirement)
• Residential address (city, province, Pakistan)
• Email address and mobile number
• Chosen username and hashed password

3.2 KYC Verification Data

To comply with our anti-money laundering (AML) obligations and to verify your identity and age before processing withdrawals, we collect:

• Copy of your Pakistani CNIC (front and back) or valid passport
• Proof of address documentation (utility bill, bank statement) where required
• Source of funds documentation in cases flagged by our AML monitoring systems

3.3 Transaction & Financial Data

We collect records of all financial transactions conducted on the Platform, including deposit and withdrawal amounts, payment method identifiers (JazzCash wallet number, EasyPaisa number, bank account last four digits, USDT wallet address), timestamps, and transaction reference numbers. We do not store full payment card details on our systems.

3.4 Gaming Activity Data

We maintain records of your gaming and betting activity on the Platform, including wagers placed, games played, stakes, outcomes, bonus usage, and session durations. This data is used for account management, responsible gaming monitoring, bonus administration, and dispute resolution.

3.5 Technical & Device Data

When you access the Platform, our systems automatically record certain technical information, including your IP address, device type and operating system, browser type and version, referring URL, pages visited, and session timestamps. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

3.6 Communications Data

We retain records of communications between you and the luke33 support team, including live chat transcripts, email correspondence, and support ticket histories. These records are maintained for quality assurance and dispute resolution purposes.

4. How We Use Your Personal Data

luke33 uses the personal data described in Section 3 for the following specific purposes:

• Account Management: To create, maintain, and administer your luke33 account, including processing your luke33 Login credentials and enabling access to Platform features;
• Identity & Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with KYC obligations;
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and to maintain accurate financial records;
• AML & Fraud Prevention: To monitor transactions and account activity for signs of money laundering, fraud, or other prohibited financial conduct;
• Responsible Gaming: To monitor gaming patterns, enforce deposit limits and self-exclusion restrictions, and identify players who may require responsible gaming intervention;
• Customer Support: To respond to your enquiries, resolve disputes, and maintain support correspondence records;
• Security: To detect, investigate, and prevent unauthorised account access, platform abuse, and other security threats;
• Legal Compliance: To comply with applicable gaming regulations, AML laws, and any lawful directions from competent regulatory authorities;
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving Platform features, performance, and user experience.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review.

5. Legal Basis for Processing

luke33 processes your personal data on the following legal bases:

• Contractual Necessity: Processing your registration data, financial data, and gaming activity data is necessary for the performance of the contract between you and luke33 (i.e., the Terms & Conditions);
• Legal Obligation: Processing KYC documentation, AML monitoring data, and retention of transaction records is required by applicable gaming regulations and anti-money laundering laws;
• Legitimate Interests: Processing technical and device data for security monitoring and fraud prevention is based on luke33's legitimate interests in protecting the Platform and its users;
• Consent: Where we send you optional promotional communications, we do so on the basis of your explicit consent, which may be withdrawn at any time by contacting support.

6. Data Sharing & Disclosure

6.1 No Sale of Data

luke33 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes under any circumstances.

6.2 Service Providers

We share limited personal data with trusted third-party service providers who assist us in operating the Platform, strictly on a data processing basis. These include payment gateway operators (JazzCash, EasyPaisa, banking partners), KYC verification service providers, gaming software licensors, cloud hosting and infrastructure providers, and customer support software vendors. All such providers are contractually required to process your data only on our instructions and to maintain appropriate security standards.

6.3 Legal & Regulatory Disclosure

We may disclose your personal data to competent regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of luke33, its users, or the public.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of substantially all assets of luke33, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments. You will be notified of any such transfer and the applicable privacy terms of the successor entity.

7. Data Retention

luke33 retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention period required by applicable law. The following retention periods apply:

• Account & Registration Data: Retained for the duration of your active account plus 5 years following permanent account closure, to satisfy AML record-keeping requirements;
• KYC Documentation: Retained for a minimum of 5 years from the date of verification, or longer where required by applicable AML regulations;
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction;
• Gaming Activity Logs: Retained for 3 years from the date of activity for dispute resolution and responsible gaming monitoring purposes;
• Support Communications: Retained for 2 years from the date of the last interaction;
• Technical & Device Logs: Retained for 12 months on a rolling basis.

Upon expiry of the applicable retention period, your personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

8. Data Security

luke33 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and luke33 servers is encrypted using industry-standard TLS protocols;
• Password Hashing: Account passwords are never stored in plain text — they are hashed using bcrypt or equivalent cryptographic algorithms;
• Two-Factor Authentication: Optional SMS-based two-factor authentication is available for all accounts and is strongly recommended;
• Access Controls: Access to personal data within luke33 systems is restricted to authorised personnel on a need-to-know basis, governed by role-based access control policies;
• Security Monitoring: Our systems are monitored continuously for anomalous activity, intrusion attempts, and security incidents;
• Data Minimisation: We do not store full payment card details on Platform servers; payment processing is handled by PCI-DSS compliant payment partners.

While we take all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. In the event of a data security breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities in accordance with applicable legal requirements.

9. Cookies & Tracking Technologies

9.1 What We Use Cookies For

The luke33 platform uses cookies and similar session technologies for the following specific purposes:

• Session Cookies: To maintain your logged-in state during a Platform session — these are deleted when you close your browser;
• Security Cookies: To detect and prevent fraudulent login attempts and cross-site request forgery attacks;
• Preference Cookies: To remember your language, display, and notification preferences;
• Analytics Cookies: First-party analytics to measure page performance, load times, and feature usage in aggregate, anonymised form.

9.2 What We Do Not Use

luke33 does not deploy third-party advertising cookies, social media tracking pixels, or behavioural profiling technologies on the Platform.

9.3 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling session and security cookies may impair certain Platform functions, including the ability to remain logged in. Consult your browser's help documentation for cookie management instructions.

10. Your Data Protection Rights

As a user of the luke33 platform, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this within 30 days of a valid request;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You may request deletion of your personal data where there is no longer a legitimate legal or contractual basis for its retention. Note that data subject to AML retention obligations cannot be erased before the mandatory retention period expires;
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, such as while the accuracy of the data is contested;
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to us, where processing is based on contract or consent;
• Right to Object: You may object to processing of your personal data based on our legitimate interests, including direct marketing communications;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, contact the luke33 support team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing the request and respond within 30 calendar days.

11. Children's Privacy

12. International Data Transfers

luke33 operates with the support of service providers whose infrastructure may be located in jurisdictions outside Pakistan. Where your personal data is transferred to such jurisdictions, we ensure that appropriate safeguards are in place to protect your data at a standard equivalent to that described in this Policy. These safeguards include data processing agreements with standard contractual clauses and requirements for service providers to maintain internationally recognised security certifications.

By using the luke33 platform, you acknowledge that your data may be processed in jurisdictions outside your country of residence, subject to the safeguards described above.

13. Amendments to This Policy

luke33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform features. Material changes will be communicated to registered players via email notification or a prominent on-Platform notice prior to the effective date of the change.

The effective date at the top of this Policy indicates when it was last revised. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. We recommend reviewing this page periodically to stay informed of how we protect your data.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way luke33 handles your personal data, please contact us through the following channels:

• Email: [email protected] — use subject line "Privacy Enquiry" for fastest routing
• Live Chat: Available 24/7 inside your account dashboard — recommended for urgent data concerns

We are committed to resolving all privacy-related enquiries fairly and promptly. Response times: typically under 15 minutes via live chat, under 24 hours via email.