lake33 Privacy Policy

Introduction

lake33 ("we", "us", "our") operates the online gaming and sportsbook platform accessible at lake33.pro (the "Platform"). This Privacy Policy describes how lake33 collects, processes, stores, shares, and protects personal data relating to individuals who register accounts, visit our Platform, or interact with our customer support services (collectively referred to as "you" or "the player").

We understand that privacy is of particular importance to our players — many of whom are based in Pakistan and share their financial and identity information with us as part of the account registration and KYC process. We take this responsibility seriously. lake33 is committed to handling your personal data with the utmost care, in full compliance with our licensing obligations and applicable international data protection standards, including principles aligned with the General Data Protection Regulation (GDPR).

By registering an account or using the lake33 Platform, you acknowledge that you have read, understood, and accepted this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately and contact us at [email protected] to request account closure.

Data We Collect

lake33 collects personal data through a number of channels — during registration, through your ongoing use of the Platform, via our customer support interactions, and through automated technical means such as cookies and server logs. Below is a comprehensive description of the categories of personal data we collect and the circumstances in which we collect them.

2.1 Registration & Identity Data

When you create a lake33 account, we collect the following information: full legal name, date of birth, residential address (including city and country — e.g., Karachi, Lahore, Islamabad, Faisalabad), email address, mobile phone number, and a chosen username. This information is required to open and manage your account.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect copies of government-issued identity documents, including your CNIC (Computerised National Identity Card), passport, or other nationally recognised photo ID. We may also collect proof of address documents such as utility bills or bank statements. For Pakistani players, the CNIC is the primary accepted identity document.

2.3 Financial & Transaction Data

We collect data relating to your financial transactions on the Platform, including deposit and withdrawal amounts (denominated in PKR), payment method details (e.g., JazzCash account reference, EasyPaisa wallet ID, HBL or UBL bank account details, Meezan Bank reference, or cryptocurrency wallet address), transaction timestamps, and transaction IDs. We do not store full card numbers or banking passwords.

2.4 Gaming & Betting Activity Data

We record all betting and gaming activity on the Platform, including wagers placed, games played, outcomes, bonus usage, and session durations. This data is used for account management, dispute resolution, fraud detection, responsible gaming monitoring, and regulatory reporting.

2.5 Technical & Usage Data

We automatically collect certain technical data when you access the Platform, including your IP address, device type and operating system, browser type and version, referring URL, pages visited, session duration, and clickstream data. This data helps us maintain the security and performance of the Platform.

2.6 Communications Data

We retain records of communications between you and lake33, including live chat transcripts, support emails, and any correspondence submitted through contact forms. These records are kept for quality assurance, dispute resolution, and regulatory audit purposes.

How We Use Your Data

lake33 uses your personal data strictly for the purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with the reason it was collected. The primary purposes for which we process personal data are as follows:

• Account Management: To create, verify, maintain, and manage your player account on the lake33 Platform, including processing deposits, withdrawals, and bonus claims.
• Identity Verification: To verify your identity and age as required by our licensing conditions and applicable anti-money laundering regulations. Pakistani players must be at least 21 years of age.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform. This includes automated monitoring of transaction patterns and login behaviour.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 English and Urdu support channels.
• Regulatory Compliance: To meet our obligations under the terms of our international gaming licence, including mandatory reporting of suspicious transactions and co-operation with regulatory audits.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling behaviour and to administer responsible gaming tools including deposit limits, session timers, and self-exclusion requests.
• Platform Improvement: To analyse aggregated usage data — in anonymised form where possible — to improve the performance, usability, and content of the lake33 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about lake33 — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.

Legal Basis for Processing

lake33 processes your personal data only where a valid legal basis exists for doing so. In accordance with GDPR-aligned principles, the legal bases on which we rely are as follows:

• Contract Performance: Processing necessary to perform our contractual obligations to you under the lake33 Terms and Conditions — including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with our legal and regulatory obligations, including KYC verification, AML reporting, and licensing requirements under our gaming licence.
• Legitimate Interests: Processing undertaken to pursue our legitimate business interests, including fraud prevention, Platform security, and improving our services — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, informed, and specific consent — primarily relating to direct marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Disclosure

lake33 does not sell your personal data to third parties under any circumstances. We share personal data only in limited, well-defined circumstances — and only with parties bound by strict data protection obligations. The categories of third parties with whom we may share your data are described below.

5.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform and delivering our services. These include payment processors (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency payment gateways), identity verification and KYC service providers, game content licensors, cloud hosting providers, customer support software vendors, and fraud detection service providers. All service providers operate under data processing agreements that prohibit them from using your data for any purpose other than providing their services to lake33.

5.2 Regulatory & Law Enforcement Authorities

lake33 may be required by law, court order, or the terms of our gaming licence to disclose personal data to regulatory authorities, law enforcement agencies, or other government bodies. We will comply with all such lawful disclosure obligations. Where permitted, we will notify you of any such disclosure request.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of lake33's business, your personal data may be transferred to a successor entity as part of that transaction. You will be notified of any such transfer and the Privacy Policy of the successor entity will apply going forward.

5.4 With Your Consent

We may share your data with additional third parties where you have provided your explicit, informed consent for us to do so. You may withdraw such consent at any time.

Cookies & Tracking Technologies

lake33 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, prevent fraud, and improve your experience. Cookies are small text files placed on your device when you visit the Platform.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. You cannot opt out of strictly necessary cookies without ceasing to use the Platform.
• Functional Cookies: Remember your preferences such as language, currency, and display settings to provide a more personalised experience.
• Analytics Cookies: Collect anonymised data about how users interact with the Platform — pages visited, time spent, and navigation patterns — to help us understand usage and improve performance.
• Marketing Cookies: Used to deliver relevant promotional content to you based on your interests, where you have consented to receive marketing communications. These cookies may interact with third-party advertising platforms.

You can manage your cookie preferences at any time through your browser settings. Disabling non-essential cookies may affect certain features of the Platform. For a full list of cookies in use on lake33.pro, please contact us at [email protected].

Data Retention

lake33 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law or our licensing conditions. The following retention principles apply:

• Active Accounts: Personal data is retained for the duration of your active account relationship with lake33 and for a minimum period of five years following account closure, in compliance with anti-money laundering recordkeeping requirements.
• KYC & Identity Documents: Copies of identity documents submitted for KYC purposes are retained for a minimum of five years from the date of account closure or the date of the last transaction, whichever is later.
• Financial Transaction Records: Transaction records are retained for a minimum of seven years in compliance with financial recordkeeping obligations.
• Communications Records: Support chat transcripts and email records are retained for a minimum of three years for dispute resolution and quality assurance purposes.
• Marketing Data: Marketing preference data and consent records are retained until you withdraw your consent or for three years following your last interaction with marketing content, whichever is earlier.
• Technical & Usage Logs: Server logs and IP address records are retained for a maximum of 12 months, unless retained for a longer period as part of a fraud or security investigation.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with lake33's data disposal procedures.

Data Security

lake33 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, loss, alteration, or disclosure. Our security infrastructure includes, but is not limited to:

• Encryption: All data transmitted between your device and the lake33 Platform is encrypted using TLS (Transport Layer Security). Sensitive data at rest — including identity documents and financial records — is stored using AES-256 encryption.
• Access Controls: Access to personal data within lake33's systems is strictly limited to authorised personnel who require access to fulfil their specific job functions. All internal access is logged and subject to regular audit.
• Two-Factor Authentication: lake33 supports and encourages the use of two-factor authentication (2FA) on all player accounts to protect against unauthorised login.
• Penetration Testing: The Platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: lake33 maintains a documented data breach incident response plan. In the event of a data breach that is likely to result in a high risk to your rights, lake33 will notify affected players without undue delay in accordance with applicable notification obligations.

Your Data Rights

Subject to applicable law and our regulatory obligations, you have a number of rights in relation to the personal data lake33 holds about you. You may exercise any of these rights by submitting a request to [email protected]. We will respond to all verified data rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data lake33 holds about you and information about how that data is being used.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data held about you.
• Right to Erasure: In certain circumstances, you have the right to request that lake33 delete your personal data. Note that this right is subject to overriding legal obligations — for example, we are required to retain KYC and transaction data for defined regulatory periods regardless of a deletion request.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while we investigate the accuracy of data you have contested.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive a structured, machine-readable copy of your personal data and to transmit that data to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease marketing processing immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Children & Minors

lake33 strictly prohibits the use of its Platform by individuals under the age of 21. Our Platform is intended exclusively for adult players who meet the minimum age requirement. We do not knowingly collect personal data from individuals under the age of 21.

If lake33 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately close the associated account, delete the collected data to the extent permitted by our regulatory obligations, and take appropriate steps to prevent further access. Any funds held in such an account may be forfeited in accordance with our Terms and Conditions and applicable licensing rules.

International Data Transfers

lake33 operates as an internationally licensed gaming platform. As a result, your personal data may be transferred to, processed in, and stored in countries outside of Pakistan. These countries may have different data protection laws than those in your home jurisdiction.

When we transfer personal data internationally, we ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection standards. These safeguards may include standard contractual clauses, binding corporate rules, or reliance on adequacy decisions where applicable. Where data is transferred to service providers in other jurisdictions, those providers are contractually bound by data processing agreements that impose data protection obligations consistent with this Privacy Policy.

By using the lake33 Platform, you acknowledge and consent to the transfer of your personal data outside of Pakistan for the purposes described in this Privacy Policy.

Changes to This Privacy Policy

lake33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we provide. The effective date at the top of this document will always reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect your rights or the way we handle your personal data — lake33 will provide advance notice to registered players by email to the address on file and/or by a prominent notice on the Platform, with a minimum of 14 days before the revised Policy takes effect.

Your continued use of the lake33 Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised Policy, you must stop using the Platform and request account closure before the effective date.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way lake33 handles your personal data, please reach out to us through one of the following channels:

• Data Protection Enquiries: [email protected] — please include "Privacy Policy" in the subject line of your email.
• Live Chat: Available 24/7 in English and Urdu via the Platform. Our support agents can handle basic data rights requests directly through chat.
• Data Rights Requests: Send a written request to [email protected] referencing "Data Rights Request" in the subject line. We will respond within 30 days and may ask you to verify your identity before processing the request.

lake33 is committed to resolving all privacy-related concerns promptly and transparently. We treat every data rights enquiry with the same seriousness as a player support complaint — your privacy matters to us as much as your gaming experience does.