At lock33, we take the privacy of every Pakistani player seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and protected, and what rights you have over your own information.
Our Commitment
Six core principles that guide every data decision we make at lock33
All personal data held by lock33 — including your CNIC details, JazzCash or EasyPaisa account references, and payment history — is stored using industry-standard encryption at rest and in transit.
lock33 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Full stop. Your data exists to operate your account, nothing more.
You have the right to access, correct, and request deletion of your personal data at any time. These rights can be exercised by contacting lock33 support with your account details.
lock33 only collects data that is genuinely necessary to operate your account, process your PKR deposits and withdrawals, verify your identity, and comply with our licensing obligations.
Data is not kept indefinitely. lock33 applies defined retention periods to all categories of personal data. Once a retention period expires and there is no legal obligation to retain the data, it is securely deleted.
All data processing activities at lock33 are conducted in compliance with the requirements of our international gaming licence, including AML and KYC obligations that protect all players on the platform.
Please read carefully: This Privacy Policy forms part of your agreement with lock33. By registering an account or continuing to use the lock33 platform, you acknowledge that you have read and understood this policy and consent to the processing of your personal data as described herein.
lock33 ("we", "us", "our") is committed to protecting the privacy and personal data of all users who access or use the lock33 online gaming and sports betting platform available at https://lock33.net ("the Platform"). This Privacy Policy sets out our practices in relation to the collection, use, storage, sharing, and protection of personal data.
This policy applies to all registered players, visitors to the lock33 website, and any individual whose personal data is processed in connection with the delivery of lock33 services. It covers data collected through the website, account registration, KYC verification, deposits and withdrawals, gameplay activity, and communications with lock33 support.
This Privacy Policy should be read alongside the lock33 Terms & Conditions and Responsible Gaming Policy, which together form the full agreement between you and lock33. If you have any questions about how your data is handled, please contact us at the details provided in Section 15.
For the purposes of applicable data protection law, lock33 is the data controller in respect of personal data collected and processed through the Platform. As data controller, lock33 determines the purposes and means of processing your personal data and bears responsibility for ensuring that processing is conducted lawfully, fairly, and transparently.
lock33 operates under an international gaming licence which imposes its own data protection and privacy obligations. Our processing activities are conducted in compliance with the data protection requirements of that licensing framework in addition to general good-practice privacy standards.
All data protection queries, subject access requests, and requests to exercise your data rights should be directed to our support team at [email protected] with the subject line "Data Protection Request".
lock33 collects personal data across several categories depending on the nature of your interaction with the Platform. The following table summarises the main categories of data collected and their source:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, nationality | Registration form, KYC documents |
| Contact Data | Email address, mobile number (JazzCash/EasyPaisa registered), city (e.g. Karachi, Lahore, Islamabad) | Registration form |
| Financial Data | Deposit and withdrawal amounts (PKR), payment method identifiers, transaction references | Payment processing, account dashboard |
| Verification Data | Identity document images, proof of address documents, selfie images for liveness checks | KYC verification process |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Automatic collection via platform |
| Usage Data | Games played, bet amounts, win/loss history, session duration, cricket and PSL market selections | Platform activity logs |
| Communications Data | Support chat transcripts, emails sent to lock33, feedback submissions | Customer support interactions |
| Marketing Preferences | Opted-in or opted-out status for promotional communications | Account settings, registration choices |
We do not intentionally collect sensitive categories of personal data (such as health data or biometric data for identification purposes) unless specifically required by our KYC obligations, in which case such data is processed only to the extent necessary to fulfil those obligations.
lock33 uses the personal data we collect only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process your data are:
lock33 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except in cases of fraud prevention screening where an automated flag will always be followed by a manual compliance review.
lock33 processes personal data only where a valid legal basis exists for doing so. The legal bases we rely on are as follows:
lock33 does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited circumstances, and only to the extent strictly necessary for each purpose:
All third parties with whom lock33 shares personal data are required to handle that data in accordance with applicable privacy and data security standards. lock33 does not permit any third party to use your personal data for their own independent marketing or analytics purposes.
As lock33 is operated under an international gaming licence and uses globally distributed infrastructure and third-party service providers, your personal data may be transferred to and processed in countries outside Pakistan. This includes countries where our hosting infrastructure, KYC verification partners, or game suppliers are located.
Where such transfers occur, lock33 takes appropriate steps to ensure that your personal data receives an adequate level of protection. This may include entering into contractual arrangements with receiving parties that impose data protection obligations equivalent to those applicable to lock33, or relying on other recognised transfer mechanisms.
By registering an account with lock33, you acknowledge and consent to the transfer of your personal data for the purposes described in this policy.
lock33 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & identity data | Duration of account plus 5 years following account closure, as required by AML and licensing obligations |
| Financial transaction records | Minimum 5 years from the date of the transaction in compliance with AML requirements |
| KYC verification documents | 5 years following account closure or the completion of the KYC process, whichever is later |
| Customer support communications | 3 years from the date of the last interaction in the relevant support case |
| Marketing consent records | Until consent is withdrawn, plus 1 year as evidence of the consent history |
| Technical and usage logs | Up to 12 months, unless required for fraud investigation or legal proceedings |
Upon expiry of the relevant retention period, data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, the resulting information can no longer be associated with any individual and falls outside the scope of this policy.
lock33 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
While lock33 takes these obligations seriously and applies industry-standard protections, no online platform can guarantee absolute security. You also play an important role in keeping your account secure — please use a strong, unique password for your lock33 account and never share your login credentials with anyone.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, lock33 will notify you without undue delay in accordance with applicable obligations.
lock33 uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and analyse usage patterns. The categories of cookies we use are:
You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Disabling functional or analytics cookies will not affect your ability to place bets or access games.
As a lock33 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your account username and the specific right you wish to exercise:
Request a copy of the personal data lock33 holds about you and information about how it is used.
Request correction of inaccurate or incomplete personal data held in your account or our records.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
Request that we limit the processing of your data in certain circumstances, for example while a rectification request is being resolved.
Request a machine-readable copy of the personal data you have provided to lock33 for transfer to another service provider.
Object to the processing of your data on the basis of legitimate interests, including processing for direct marketing purposes, which will be honoured without question.
lock33 will respond to all data rights requests within 30 days. Where a request is complex or involves a high volume of data, we may extend this period by a further 60 days, in which case we will inform you of the extension and the reason for it.
21+ Age Policy: lock33 strictly prohibits use of the Platform by anyone under the age of 21. The collection and processing of personal data from individuals under 21 is not permitted under any circumstances.
lock33 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been submitted by a person under 21 — whether through a false declaration at registration or any other means — we will immediately close the associated account, void any balances, and permanently delete all associated personal data as far as our legal retention obligations permit.
If you are a parent or guardian and believe that a minor may have registered an account with lock33, please contact us immediately at [email protected] so we can take prompt action.
The lock33 Platform may contain references to third-party services such as payment processors or game suppliers. Where links to external websites or services are present, please be aware that lock33 has no control over the privacy practices of those third parties.
This Privacy Policy applies only to data processed by lock33 in connection with the Platform. We encourage you to review the privacy notices of any third-party services you interact with, including JazzCash, EasyPaisa, and your bank, to understand how they handle your personal data independently of lock33.
lock33 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new services offered on the Platform, or updated legal and regulatory requirements. The date of the most recent revision is always displayed at the top of this document.
Where changes to this policy are material — meaning they affect how we process your personal data in a significant way — lock33 will notify you by email to your registered address or via a prominent notice on the Platform prior to the changes taking effect.
Your continued use of the lock33 Platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with any changes, you should discontinue use of the Platform and may request account closure in accordance with the Terms & Conditions.
If you have any questions, concerns, or complaints about this Privacy Policy or the way lock33 handles your personal data, please contact our data protection team. We take all privacy queries seriously and aim to respond within 5 business days for general enquiries and within 30 days for formal data rights requests.
Email: [email protected] — for data protection queries, please use the subject line "Privacy Query" or "Data Rights Request" so our team can route your message correctly.
If you are not satisfied with the way lock33 has handled your privacy concern after raising it with us directly, you may escalate your complaint to the relevant supervisory authority under our international gaming licence framework.
For responsible gaming-related data queries — such as information held in connection with a self-exclusion order — please visit our Responsible Gaming page for dedicated guidance.
Cricket betting, live casino, slots, and crash games — all through a single PKR account with your privacy fully protected.
21+ only | Play responsibly | Your data is never sold