Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by 533win ("the Platform", "we", "us", "our") and applies to all personal data processed in connection with your use of the 533win website at https://533win.cam, including all sub-domains, mobile interfaces and associated services (collectively, "the Platform").

We are committed to protecting the privacy and security of all users, including players from across Pakistan — from Karachi and Lahore to Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. This Policy explains in clear, accessible English exactly what personal data we collect, the purposes for which it is processed, with whom it may be shared, how long it is retained, and the rights available to you as a data subject.

By registering an Account with 533win, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not register an Account or use the Platform.

This Policy should be read alongside our Terms & Conditions, which form part of the overall agreement governing your use of the Platform.

2 Definitions

The following defined terms are used consistently throughout this Policy:

• "Personal Data" means any information that identifies or is reasonably capable of identifying a living individual, including name, email address, date of birth, CNIC number, payment details and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, deletion or destruction.
• "Data Subject" means any identified or identifiable natural person to whom the Personal Data relates — in the context of this Platform, that is you, the Account holder or visitor.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, the 533win Platform operator.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under a written agreement.
• "KYC Data" means identity and age-verification documents, including CNIC, passport copies, proof-of-address documents and liveness/selfie verification images.
• "Cookies" means small text files placed on your device by the Platform's web server for session management, analytics and personalisation purposes.
• "Sensitive Data" means a specific category of Personal Data requiring heightened protection, including health or vulnerability information related to responsible-gambling disclosures.

3 Data Controller Identity

The Data Controller for all personal data processed in connection with the 533win Platform is the operator entity that holds the applicable gaming licence under which 533win operates. Full operator details are published in the Platform's official licensing and terms documentation.

For data-subject rights requests, privacy-related enquiries and complaints, the primary contact channel is the 533win customer support team, accessible via live chat (24/7) or the support email address set out in Section 16 of this Policy.

4 Personal Data We Collect

We collect Personal Data from you directly (when you register, deposit, contact support or use Platform features) and indirectly (through your device and browser as you interact with the Platform). The categories of data collected are set out below.

4.1 Registration & Account Data

• Full legal name as it appears on your official identity document;
• Date of birth (for age-verification purposes);
• Email address and mobile telephone number;
• Residential address (city, province, country — including references to Pakistani cities where applicable);
• Chosen username and encrypted password credentials;
• Account preferences and communication settings.

4.2 KYC & Identity Verification Data

• Scanned or photographed copies of valid CNIC, Pakistani Passport or other accepted identity documents;
• Proof-of-address documents (utility bills, bank statements or equivalent dated within three months);
• Selfie or liveness-verification images taken at the time of submission;
• Source-of-funds documentation (where requested as part of enhanced due diligence).

4.3 Financial & Transaction Data

• Deposit and withdrawal transaction history, amounts and timestamps;
• Payment method identifiers (wallet account references for services such as Easypaisa or JazzCash, where used — for context only, not implying endorsement; bank account references for HBL, UBL, Meezan Bank or Bank Alfalah transfers; cryptocurrency wallet addresses where applicable);
• Currency denomination (PKR for Pakistani players) and balance history;
• Bonus and promotional credit activity.

4.4 Gameplay & Betting Data

• Bet and game session history, including game types, stakes and outcomes;
• Sports markets accessed, including cricket, PSL, ICC tournaments, football and UFC events;
• Responsible-gambling tool settings, limit configurations and self-exclusion status.

4.5 Technical & Device Data

• IP address and approximate geolocation at the time of access;
• Device type, operating system, browser type and version;
• Session timestamps, page interaction data and click-stream logs;
• Cookie identifiers and similar tracking data (see Section 11).

4.6 Support & Communications Data

• Content of live-chat transcripts, email correspondence and any other communications with the support team;
• Complaints, feedback and dispute-resolution records.

5 Legal Basis for Processing

We process your Personal Data on one or more of the following lawful bases, depending on the specific processing activity:

6 How We Use Your Personal Data

Your Personal Data is used strictly for the purposes for which it was collected or for compatible purposes subsequently identified. We do not sell your Personal Data to third parties for commercial marketing. Specific uses include:

• Account Administration: Creating, verifying and maintaining your account; processing deposits and withdrawals in PKR; applying bonus credits and enforcing promotional terms.
• Identity Verification & KYC: Confirming your identity, verifying minimum age (18+ or the applicable jurisdiction minimum), and meeting anti-money-laundering obligations under the operator's licence framework.
• Fraud Prevention & Security: Detecting, investigating and preventing fraud, multi-accounting, unauthorised access, money laundering and other prohibited conduct specified in the Terms & Conditions.
• Responsible Gambling: Monitoring account activity for indicators of problematic gambling behaviour; applying limit settings; enforcing self-exclusion and cooling-off periods; maintaining exclusion records.
• Customer Support: Responding to your queries, processing complaints and resolving disputes.
• Legal & Regulatory Compliance: Fulfilling obligations under the operator's gaming licence, including record-keeping, reporting and audit requirements.
• Communications: Sending transactional notifications (account activity, deposit confirmations, withdrawal updates), security alerts and — where you have consented or where permitted by applicable law — promotional communications about 533win offers.
• Platform Improvement: Using aggregated, anonymised or pseudonymised data to analyse usage patterns, improve game performance and optimise the platform experience for Pakistani users.

7 Data Sharing & Third-Party Disclosure

533win does not sell, rent or trade your Personal Data to third parties for commercial marketing purposes. We may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data-processing agreements:

• KYC and Identity Verification Providers: Third-party identity verification services that process document uploads and liveness checks on our behalf. These providers act as Data Processors under binding contractual terms.
• Payment Service Processors: Payment infrastructure providers that facilitate deposit and withdrawal transactions. References to familiar Pakistani payment rails (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) are for context only — these entities process only the transaction data necessary to execute the payment instruction and do not receive full profile data.
• Game Content Providers: Game studio and software providers who may receive aggregated session data for game performance analytics. No personally identifiable data is shared beyond what is operationally required.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order or regulatory instruction, we may be obligated to disclose certain Personal Data to relevant authorities. We will notify you of such disclosure where legally permitted to do so.
• Anti-Fraud and AML Services: Third-party fraud-detection and AML screening tools that process transactional and identity data to identify suspicious patterns.

8 International Data Transfers

As 533win is an internationally operated platform, your Personal Data may be transferred to, stored and processed in countries outside of Pakistan, including the operator's licence jurisdiction and countries where our technical infrastructure, KYC providers and payment processors are located.

Where such transfers take place, we implement appropriate safeguards to protect your Personal Data, which may include:

• Standard contractual clauses or equivalent binding data-transfer mechanisms with recipient entities;
• Processing only with entities that maintain security standards equivalent to those described in this Policy;
• Restricting transferred data to the minimum necessary for the specified processing purpose.

By using the Platform, you acknowledge that your Personal Data will be processed outside Pakistan in connection with the services provided. We do not transfer data to jurisdictions that we do not consider to provide adequate protection.

9 Data Retention Periods

We retain your Personal Data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law and the operator's licensing obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account relationship plus the post-closure retention period required by the operator's licence.
• KYC and Identity Documents: Retained for a minimum period required by the applicable AML framework following account closure (typically five (5) years, but this may be longer depending on the licence jurisdiction).
• Transaction Records: Financial transaction records are retained for the period required by applicable accounting and AML legislation — typically a minimum of five (5) years.
• Self-Exclusion Records: Retained permanently or for the exclusion period plus the post-exclusion cooling-off window to prevent re-registration by excluded individuals.
• Support & Communications: Retained for a period sufficient to resolve any dispute or complaint and to maintain records as required under the operator's licence.

Where retention is no longer justified and no legal basis applies, Personal Data is securely deleted or anonymised.

10 Data Security

533win implements technical and organisational security measures appropriate to the risk level of each category of personal data processed. Security measures applied include, but are not limited to:

• HTTPS encryption across all web interfaces — all KYC document uploads, payment flows and account interactions are transmitted over encrypted TLS connections;
• Password hashing using industry-standard one-way hashing algorithms — plaintext passwords are never stored;
• Access controls limiting personal data access to personnel with a legitimate operational need;
• Regular security assessments and vulnerability monitoring of Platform infrastructure;
• Two-factor authentication options available to Account holders for additional login security;
• Data segregation between different data categories to limit exposure in the event of a system incident.

While we apply robust security measures, no internet-based system can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you in accordance with applicable data-protection law.

11 Cookies & Tracking Technologies

The 533win Platform uses cookies and similar tracking technologies to operate core platform functions, maintain session security, analyse usage patterns and, where you have consented, to personalise your experience. The categories of cookies used are described below:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality. Disabling analytics or preference cookies will not prevent you from accessing core features.

12 KYC & Identity Data — Special Handling

KYC data — including CNIC scans, passport copies, proof-of-address documents and liveness verification images — is treated as a higher-sensitivity category of personal data at 533win. The following specific handling provisions apply:

• KYC documents are transmitted exclusively over encrypted HTTPS channels and stored in access-controlled, encrypted storage environments;
• Access to KYC documents is restricted to personnel and authorised verification-service providers with a direct operational need;
• KYC data is never used for marketing purposes and is not shared with third parties outside the specific verification, fraud-prevention and regulatory-compliance purposes described in this Policy;
• Document images are not retained beyond the applicable legal retention period once an account is closed and the retention window has elapsed;
• You must never submit KYC documents via email, chat or any channel other than the official HTTPS verification portal within your account settings.

13 Minors & Age Restrictions

The 533win Platform is strictly restricted to adults aged 18 years or older, or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect, process or retain personal data from individuals who are under the applicable minimum age.

Where we have reasonable grounds to suspect that a registered Account holder is under the minimum age, we will immediately suspend the account pending age verification. If the user is confirmed to be underage, the account will be permanently closed, all deposits refunded where legally required, and all personal data deleted in accordance with applicable law except where retention is required for audit or compliance purposes.

Parents and guardians are encouraged to use appropriate parental controls and internet filtering tools to prevent underage access to online gambling platforms. 533win supports responsible gambling principles, including strict age-gating.

14 Exercising Your Data Rights

To exercise any of the rights described in this Policy — including access, rectification, erasure, restriction, portability or objection — please contact the 533win data team through the channels set out in Section 16. Your request will be assessed and responded to in accordance with the timeframes required by the applicable data-protection framework.

When submitting a data rights request, please:

• Provide sufficient information to identify your account (registered email address and username);
• Specify clearly which right you wish to exercise and the scope of your request;
• Note that we may need to verify your identity before processing certain requests — this is to protect you against unauthorised access to your data by third parties.

Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or to refuse the request, with written reasons provided.

15 Changes to This Privacy Policy

533win reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of processing or share data with a new category of third party — we will provide advance notice via the email address registered to your account or via an in-platform notification.

The most current version of this Policy is published on this page with the effective date displayed at the top. We recommend that you review this Policy periodically. Continued use of the Platform after a published change constitutes acceptance of the revised Policy. If you do not accept the amended Policy, you should cease using the Platform and contact support to close your account.

16 Contact & Complaints

For all privacy-related queries, data rights requests and concerns about how 533win handles your personal data, please contact us using the details below. Email addresses are displayed as plain text only and are not clickable links — do not send KYC documents or sensitive financial data via email.

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the applicable data-protection supervisory authority in the operator's licence jurisdiction. Details of the relevant supervisory authority are available in the Platform's official licensing documentation.

For further reading on how 533win operates and your rights as a player, please refer to our Terms & Conditions, Responsible Gambling tools page and FAQ.