luke33 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out the practices of luke33 ("we", "us", "our") with respect to the collection, use, storage, disclosure, and protection of personal information relating to users ("you", "your") of the luke33 platform available at luke33.ws (the "Platform").

luke33 is committed to maintaining the highest standards of data privacy for all users across Pakistan — whether you are playing from Karachi, Lahore, Islamabad, Faisalabad, or anywhere else. We understand that entrusting us with your personal information is a significant act of confidence, and we take that responsibility seriously.

By registering an Account on luke33, or by continuing to use the Platform in any capacity, you acknowledge that you have read and understood this Policy and agree to the collection and use of your information as described herein. This Policy forms an integral part of the luke33 Terms and Conditions.

2. Data Controller

For the purposes of this Policy, luke33 acts as the data controller in respect of all personal information collected from users of the Platform. As data controller, luke33 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

luke33 operates under an international gaming licence. Details of the applicable regulatory framework and licensing authority are available through our support team and on the About Us page. Regulatory obligations under that licence framework govern certain aspects of how we are required to collect and retain personal data, particularly in relation to anti-money laundering (AML) and Know Your Customer (KYC) compliance.

For all privacy-related enquiries or requests, users may contact our dedicated support team at any time via the live chat service available on the Platform. Our support email is available in plain text in Section 14 of this Policy.

3. Data We Collect

luke33 collects personal data through several channels. The categories of data we collect include, but are not limited to, the following:

luke33 collects only the minimum personal data necessary for the stated purpose at the time of collection. We do not collect sensitive personal data (such as ethnic origin, political opinions, or health data) except where specifically required by applicable law or regulatory obligation.

4. How We Use Your Data

luke33 uses the personal data we collect for the following clearly defined purposes:

• Account Creation and Management: To register your Account, authenticate your identity, maintain your Account, and provide you with access to all Platform services.
• KYC and Age Verification: To verify that you meet the 21+ age requirement and to complete mandatory identity checks in accordance with our international gaming licence obligations. No user below the age of 21 is permitted to hold a real-money Account on luke33.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or direct bank transfer — and to maintain accurate transaction records.
• Service Delivery: To provide access to casino games, cricket betting, PSL markets, live dealer tables, slot titles, and all other features available on the Platform.
• Anti-Money Laundering (AML) Compliance: To monitor transactions for suspicious activity, perform source-of-funds checks where required, and comply with applicable AML regulations under our gaming licence framework.
• Responsible Gaming: To administer responsible gaming tools such as deposit limits, loss limits, cooling-off periods, and self-exclusion requests. Gaming history data is used to identify patterns that may indicate problem gambling, so that appropriate support can be offered.
• Customer Support: To respond to your queries, resolve disputes, and provide technical assistance through our 24/7 live chat service.
• Platform Improvement: To analyse aggregated usage patterns, identify technical issues, and improve the overall performance and experience of the Platform.
• Marketing Communications (Opt-In Only): To send you promotional offers, bonus notifications, and platform news — but only where you have explicitly opted in to receive such communications. You may withdraw consent at any time.
• Legal and Regulatory Obligations: To comply with all applicable laws, court orders, regulatory instructions, and lawful requests from competent authorities.

5. Legal Basis for Processing

luke33 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to perform the contract between you and luke33 — including Account registration, payment processing, and service delivery — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable laws and regulatory obligations — including KYC, AML monitoring, and age verification — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out to improve Platform performance, prevent fraud, ensure platform security, and manage responsible gaming risks is carried out on the basis of luke33's legitimate interests, provided those interests are not overridden by your rights and interests.
• Consent: Processing carried out for marketing communications, optional cookies, and any other purpose for which we have sought your specific agreement is carried out on the basis of your freely given, informed, and revocable consent.

6. Data Sharing & Disclosure

luke33 does not sell, rent, or trade your personal information to any third party for their own commercial or marketing purposes. We may share your data only in the following limited and controlled circumstances:

• Payment Processors: Your financial data is shared with licensed payment service providers — including JazzCash, EasyPaisa, and partner banks — solely for the purpose of processing your deposit and withdrawal transactions. These providers are contractually bound to handle your data securely and only for the stated purpose.
• Identity Verification Providers: KYC and age verification processes may involve third-party identity verification platforms. These providers access only the specific data required to complete the verification check and are bound by strict data processing agreements.
• Gaming Software Providers: Game providers whose titles are featured on the Platform may receive limited technical data (such as session tokens and game results) necessary to operate the game environment. They do not receive your full personal profile.
• Regulatory and Law Enforcement Authorities: luke33 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, a valid court order, or a lawful regulatory instruction. luke33 will notify you of such a disclosure where legally permitted to do so.
• Fraud Prevention: Where fraud, money laundering, or other prohibited conduct is suspected, relevant data may be shared with specialist fraud prevention organisations or industry bodies as part of our AML compliance framework.
• Corporate Transactions: In the event of a merger, acquisition, or transfer of all or part of luke33's business operations, your personal data may be transferred to the successor entity, subject to equivalent privacy protections being maintained.

7. Data Retention

luke33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Our general retention periods are as follows:

• Account Data: Retained for the duration of your active Account relationship with luke33, and for a minimum period of five (5) years following Account closure, in compliance with AML regulatory requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by international gaming licence AML obligations.
• KYC Documentation: Retained for the duration of the Account relationship and for five (5) years following Account closure or the completion of the relevant KYC check, whichever is later.
• Customer Support Communications: Retained for up to three (3) years from the date of the interaction, to facilitate future dispute resolution and quality assurance.
• Gaming History: Retained for a minimum of five (5) years to support responsible gaming monitoring, dispute resolution, and regulatory audit requirements.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, to maintain a record of your preference history.

Upon expiry of the applicable retention period, data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymised data is retained for analytical purposes, it no longer constitutes personal data under applicable privacy standards.

8. Security Measures

luke33 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Transport Encryption: All data transmitted between your device and the luke33 Platform is encrypted using 256-bit SSL/TLS protocols. Look for the padlock in your browser's address bar as confirmation.
• Data-at-Rest Encryption: Sensitive personal data stored on luke33 servers is encrypted at rest. Account passwords are stored as salted cryptographic hashes and are never accessible in plain text — not even by our own technical staff.
• Access Controls: Access to personal data within luke33's internal systems is strictly limited to authorised personnel who require that access to perform their job functions. All internal access is logged and subject to regular audit.
• Penetration Testing: The Platform undergoes regular security assessments and penetration testing by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.
• Two-Factor Authentication: luke33 supports and encourages the use of two-factor authentication (2FA) on all user Accounts to provide an additional layer of protection beyond username and password.
• Incident Response: In the event of a data security incident that poses a risk to your rights and freedoms, luke33 will notify affected users and relevant regulatory authorities within the timeframes required by applicable law.

9. Cookies & Tracking Technologies

luke33 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit the Platform. We use cookies for the following purposes:

• Strictly Necessary Cookies: These cookies are required for the Platform to function. They manage your login session, maintain your Account state between pages, and ensure that security tokens are handled correctly. These cookies cannot be disabled without affecting core Platform functionality.
• Performance Cookies: These cookies collect anonymised data about how users interact with the Platform — such as which pages are visited most frequently and whether error messages are encountered — to help us improve the Platform experience. No personally identifiable information is collected by these cookies.
• Functionality Cookies: These cookies remember your preferences, such as your chosen language, display settings, and responsible gaming notification preferences, so that you do not need to re-enter them on every visit.

luke33 does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking technologies. We do not build advertising profiles based on your Platform activity or share cookie data with ad networks.

You may manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from logging in or using core Platform features. For all other cookie types, you may opt out without affecting your ability to use the Platform.

10. Your Data Rights

As a user of the luke33 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or the support email listed in Section 14. We will respond within 72 hours of verifying your identity.

• Right of Access: You have the right to request a copy of all personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format where technically feasible.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to applicable legal retention obligations — for example, we may be required by law to retain AML and KYC records for a defined period even after Account closure.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a portable format and to transmit it to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling. You may also object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing that occurred prior to withdrawal.

11. Minors & Age Restriction

If luke33 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately close the relevant Account, void all associated gaming activity, and securely delete the underage user's personal data without undue delay — subject only to any legal obligation to retain evidence of the underage access event for regulatory reporting purposes.

If you are a parent or guardian and believe that a minor in your care has registered on the luke33 Platform, please contact our support team immediately via live chat so that the matter can be investigated and resolved without delay.

luke33 strongly encourages parents and guardians to make use of available parental control software to prevent minors from accessing online gambling platforms. Responsible management of devices used by minors in the household remains a critical complement to our own technical age verification measures.

12. International Data Transfers

luke33 operates under an international gaming licence, and some of our service infrastructure, third-party processors, and technology partners may be located outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than your country of residence.

Where personal data is transferred internationally, luke33 ensures that appropriate safeguards are in place to protect your data to at least the same standard as required under applicable data protection principles. These safeguards may include:

• Contractual data processing agreements with third-party recipients that impose equivalent data protection obligations.
• Transfer only to jurisdictions or recipients that maintain data protection standards consistent with our licensing obligations.
• Encryption of data in transit and at rest for all cross-border data flows.

For specific information about the international transfer safeguards applicable to any particular processing activity, please contact our support team via live chat.

13. Changes to This Policy

luke33 reserves the right to update or revise this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered users by displaying a prominent notice upon login to the Platform and, where practicable, by sending a notification to the email address associated with your Account.

The "Last Updated" date shown at the top of this page reflects the most recent revision. We recommend reviewing this Policy periodically to stay informed about how we handle your personal data. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.

If you do not agree with any changes to this Policy, you should stop using the Platform and contact support to close your Account in accordance with the Account closure procedure set out in the luke33 Terms and Conditions.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data luke33 holds about you, please reach out to us through the following channels:

• Live Chat: Available 24/7 directly within the Platform — average response time under 90 seconds.
• Support Email (plain text — not a link): [email protected]

When submitting a data rights request, please include your registered Account username and a description of your request so that our team can process it as efficiently as possible. Identity verification will be required before any data is disclosed or action is taken.

This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous versions of the luke33 Privacy Policy.