Privacy Policy – How 33taj Protects Your Personal Data

1 Introduction

33taj is an online entertainment platform available at 33taj.win. We offer casino games, live casino, sports betting — with a strong focus on Cricket, Pakistan Super League (PSL), T20 and international cricket — bingo, and a full game lobby. To operate these services, we collect and process certain personal data about you.

This Privacy Policy sets out what personal data we collect, the reasons we collect it, who we may share it with, how long we keep it, and what rights you have over it. We have written this policy in plain, straightforward language because we want you to actually understand it, not just scroll past it.

This policy should be read alongside our Terms and Conditions and Responsible Gaming policy, both of which are part of your overall agreement with 33taj.

2 Information We Collect

We collect information from you in three main ways: information you give us directly, information generated automatically through your use of the platform, and in some cases, information from third-party verification services.

Information you provide directly:

• Full legal name and date of birth
• Residential address in Pakistan
• Contact number (mobile)
• Email address
• Government-issued ID details (CNIC, passport or driving licence) submitted during KYC verification
• Payment account details (JazzCash number, Easypaisa number, bank account details, card details for deposits and withdrawals)
• Any communication you send to the support team via live chat or email

Information generated automatically:

• IP address and approximate location
• Device type, operating system and browser version
• Session activity including login times, pages visited, games played, bets placed and session duration
• Transaction history (deposits, withdrawals, bonuses claimed)
• Cookies and similar tracking technologies (see Section 5)

Information from third parties:

• Identity and age verification results from KYC service providers
• Transaction status confirmations from payment processors (JazzCash, Easypaisa, Raast, banks)

3 How We Use Your Data

We process your personal data only for specific, legitimate purposes. The main reasons we use your data are:

• Account operation — to create and manage your account, authenticate your logins and maintain your account settings and preferences.
• Service delivery — to allow you to play games, place bets, access the casino and bingo lobbies, and participate in promotions.
• Payment processing — to handle deposits and withdrawals securely using your chosen payment method (JazzCash, Easypaisa, Raast, bank transfer, cards or mobile wallets).
• Compliance and fraud prevention — to verify your age and identity, detect suspicious activity, and meet applicable compliance requirements including anti-money laundering obligations.
• Customer support — to respond to your queries, investigate disputes, and manage complaints effectively.
• Platform improvement — to analyse how the platform is used so we can fix issues, optimise performance and improve the overall experience.
• Responsible gaming — to monitor for signs of problematic gaming patterns and to apply tools such as deposit limits, session limits or self-exclusion where relevant.
• Communications — to send you relevant account-related notifications such as transaction confirmations, security alerts and policy updates. Marketing communications are only sent where you have opted in.

4 Payment Data

All transactions on 33taj are processed in PKR. We work with trusted payment processors to handle deposits and withdrawals. The way payment data is handled depends on the method you use:

• JazzCash and Easypaisa — transactions are authorised through the respective app-based flows. 33taj does not store your JazzCash or Easypaisa PIN. We retain the mobile number and transaction reference for our records.
• Debit and credit cards — card payments are processed via 3D Secure. 33taj does not store your full card number. Only truncated card details (last four digits) and the card type are retained for your transaction history.
• Raast and bank transfers — bank account numbers used for Raast or direct bank transfers are retained to facilitate withdrawals to the same account.

Payment data is used solely for the purpose of processing your deposits and withdrawals, completing KYC and fraud checks, and maintaining your transaction history. It is not used for marketing or shared with unrelated third parties.

5 Cookies and Tracking Technologies

33taj uses cookies and similar technologies to make the platform work correctly, keep you logged in between sessions, and understand how the platform is being used so we can improve it.

Types of cookies we use:

• Essential cookies — required for the platform to function. These manage your login session, remember your language preferences and keep your account secure. They cannot be disabled without breaking core functionality.
• Analytics cookies — collect anonymised data about which pages are visited, how long sessions last, and where users navigate within the platform. This helps us identify and fix issues and improve the experience for all players.
• Functional cookies — remember choices you have made such as game preferences, display settings and notification preferences to personalise your experience.
• Security cookies — help detect and prevent fraudulent activity, bot traffic and unauthorised access attempts on the platform.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use the platform normally. Disabling analytics or functional cookies will not prevent you from playing games or placing bets.

6 Data Sharing

33taj does not sell your personal data. We do not share it with third-party advertisers or data brokers. Data is shared only with the categories of partners listed below, and only to the extent necessary to operate the platform:

• Payment processors — JazzCash, Easypaisa, Raast, banking partners and card payment gateways receive the transaction data required to process your deposits and withdrawals.
• KYC and identity verification providers — when you submit identity documents, these are processed by a trusted verification partner to confirm your identity and age. The partner is contractually bound to handle this data securely and not use it for any other purpose.
• Game providers — game software providers may receive a session token or anonymised player identifier to deliver the game to you. They do not receive your name, CNIC or payment details.
• Platform infrastructure providers — hosting, security and technical operations partners may process data as part of running the platform. These providers operate under strict data processing agreements.
• Legal and compliance obligations — where required by applicable law or by a valid order from a competent authority, 33taj may be required to disclose certain data. We will inform you where we are legally permitted to do so.

7 Data Retention

We keep your personal data for as long as your account is active or as long as needed to provide the platform services. When you close your account, we retain certain data for a further period as required for legal, compliance and dispute resolution purposes.

• Account and identity data — retained for a minimum of five years following account closure, in line with standard anti-money laundering record-keeping requirements.
• Transaction records — deposit, withdrawal and betting history is retained for a minimum of five years following each transaction.
• Support communications — live chat transcripts and email correspondence are retained for up to three years.
• Session and activity logs — anonymised platform usage data may be retained for up to two years for analytics and fraud detection purposes.

When data is no longer needed and the retention period has passed, it is securely deleted or anonymised so that it can no longer be linked to you.

8 Your Rights

You have the following rights regarding your personal data held by 33taj. To exercise any of these rights, contact the support team via live chat or email. We will respond within 30 days.

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to update or correct inaccurate personal data on your account.
• Deletion — request that we delete your personal data, subject to our legal retention obligations. Note that some data must be retained even after account closure for compliance reasons.
• Portability — request your data in a commonly used, machine-readable format so you can transfer it elsewhere.
• Object — object to processing of your data for direct marketing or analytics purposes at any time.
• Restrict — ask us to limit how we process your data in certain circumstances, for example while a dispute is being investigated.

9 Security Measures

Protecting player data is something we take seriously at 33taj. The platform employs a layered approach to security that covers data in transit, data at rest, and access controls at every level.

• Transport layer security — all connections between your browser or app and our servers use TLS 1.3, the current industry standard for encrypted communications.
• Data at rest — sensitive data stored on our servers, including personal details and payment references, is encrypted using strong symmetric encryption.
• Access controls — access to player data is restricted to authorised personnel only and is governed by role-based permissions. All access is logged and regularly audited.
• Two-factor authentication — 2FA is available for your 33taj account and we strongly recommend enabling it from your account settings for an additional layer of protection.
• Fraud and anomaly detection — automated systems monitor for unusual login patterns, suspicious transaction activity and potential account compromise, triggering alerts for manual review where needed.
• Regular security reviews — platform infrastructure and processes are reviewed regularly to identify and address vulnerabilities before they can be exploited.

While we take every reasonable precaution, no platform can guarantee absolute security. You are also responsible for keeping your own password and login credentials secure. If you suspect your account has been compromised, contact the support team immediately via live chat.

10 Children's Privacy

The 33taj platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we discover that a user under 18 has registered an account, the account will be immediately closed, all deposits returned, and all associated data deleted in line with our age verification policy.

Parents and guardians should ensure that minors in their household do not have access to the 33taj platform or the account credentials of any registered player. For more guidance on keeping gaming activity in check, visit the Responsible Gaming page.

11 Third-Party Links

The 33taj platform does not contain links to external third-party websites. All navigation on the platform stays within 33taj.win. In the unlikely event that any third-party content or embedded feature is present, please be aware that those third parties operate under their own privacy policies, and 33taj is not responsible for how they handle your data.

If you access the 33taj platform through a link on a third-party website or app, 33taj is not responsible for the privacy practices of that referring platform. This policy applies solely to your use of 33taj.win and any official 33taj applications.

12 Changes to This Policy

33taj may update this Privacy Policy from time to time. When we make material changes — such as collecting a new category of data or changing how we share information — we will notify you via a notice on the platform or by email to the address registered to your account, at least 7 days before the change takes effect.

The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review this policy periodically. Continued use of the platform after the effective date of any update constitutes your acceptance of the revised policy.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a concern about how your data has been handled, please contact the 33taj team:

• Live chat — available 24/7 directly within the platform. Best for quick queries and immediate account issues.
• Email — [email protected]. For formal data requests, please include your registered username, the nature of your request and any relevant details. We aim to respond within 48 hours and resolve all data-related requests within 30 days.

For a formal complaint about data handling, please mark your email clearly as a "Privacy Complaint" so it is routed to the relevant team promptly. We take all privacy concerns seriously and will acknowledge your complaint within 48 hours.