Privacy Policy – we33

we33 ("we33", "the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every member and visitor to the we33 website at we33.net. This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, sharing, and protection of personal information in connection with the we33 online gaming and sports betting platform.

This Policy applies to all users of we33 Services, including registered members from Pakistan and all other jurisdictions where we33 operates. It covers data collected through the we33 website, account registration forms, payment and KYC processes, customer support interactions, and any other point of contact between you and we33.

By registering a we33 account or using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This Policy should be read together with the we33 Terms & Conditions.

We take our data protection obligations seriously. we33 does not sell personal data to third parties for their own marketing purposes. We process data only to the extent necessary to operate the platform, comply with legal obligations, and provide the best possible service to our members.

we33 collects personal data in the following categories, depending on your level of interaction with the platform:

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification purposes)
• Email address and Pakistani mobile number
• Username and encrypted password
• Residential address (city, province, postal code)
• Preferred currency and language settings

• Copies of government-issued identity documents (CNIC, passport, or driving licence)
• Proof of address documents (utility bill, bank statement)
• Payment method verification documents
• Selfie or live photo where required for identity confirmation

• Deposit and withdrawal transaction records
• Payment method identifiers (JazzCash/Easypaisa account numbers, bank account details, masked card numbers)
• Transaction amounts, dates, and status
• PKR account balance history

• Game sessions, bet history, stakes, and outcomes
• Sports betting selections, odds accepted, and settled results
• Bonus and promotional usage records
• Loyalty coin earning and redemption history
• Responsible gaming tool settings (deposit limits, self-exclusion status)

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session timestamps, pages visited, and navigation patterns
• Cookies and similar tracking technologies (see Section 6)

• Content of live chat, email, and any other support interactions
• Nature of complaints, disputes, or feedback submitted to we33
• Resolution records and case notes

we33 uses personal data for the following purposes:

Purpose	Data Used
Account creation and management	Registration data, contact details
Age verification and KYC compliance	Identity documents, date of birth
Processing deposits and withdrawals	Financial and transaction data
Delivering gaming and betting services	Account data, gaming activity data
Fraud prevention and security monitoring	Technical data, transaction data, IP address
Anti-money laundering (AML) compliance	KYC data, transaction history
Customer support and dispute resolution	Support data, account and transaction data
Responsible gaming monitoring and intervention	Gaming activity, responsible gaming settings
Platform improvement and analytics	Technical and usage data (aggregated/anonymised)
Marketing communications (where consented)	Email address, mobile number, preferences
Legal and regulatory compliance	All categories, as required

we33 does not use personal data for automated decision-making that produces significant legal effects on members, without providing an opportunity for human review.

we33 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and we33 (account management, deposits, withdrawals, delivering gaming services).
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML, and age verification obligations.
• Legitimate Interests: Processing conducted in we33's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests do not override your fundamental rights.
• Consent: Where we33 relies on your explicit consent for a specific processing activity (such as marketing communications), you may withdraw that consent at any time by contacting support or updating your account preferences.

we33 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard, and USDT processing partners receive transaction data necessary to process payments.
• KYC & Identity Verification Providers: Accredited third-party KYC services receive identity document data for verification purposes only.
• Game & Software Providers: Licensed game providers receive minimal session data necessary to deliver game content. They do not receive financial or KYC data.
• Customer Support Tools: Support platform providers may process support interaction data under strict data processing agreements with we33.
• Legal & Regulatory Authorities: we33 will disclose personal data to competent legal authorities, regulators, or law enforcement agencies where required by a valid legal obligation or court order.
• Fraud Prevention Services: Data may be shared with fraud prevention and AML screening services to protect the platform and its members.

All third-party service providers with whom we33 shares personal data are contractually required to process that data only for the specified purpose and in accordance with applicable data protection standards.

we33 uses cookies and similar tracking technologies to operate the platform, remember your session, analyse usage, and improve the member experience. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the platform to function. These enable login sessions, payment flows, and security features. They cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences such as language, currency display, and game layout settings across sessions.
• Analytics Cookies: Collect anonymised or pseudonymised data about how members use the we33 platform to help improve performance, navigation, and game recommendations.
• Security Cookies: Used for fraud detection and to identify unusual access patterns that may indicate unauthorised account access.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use the we33 platform normally. we33 does not use third-party advertising tracking cookies.

we33 retains personal data for as long as necessary to fulfil the purposes set out in this Policy, subject to applicable legal and regulatory retention obligations. Specific retention periods are guided by the following principles:

• Active Account Data: Retained for the duration of your active we33 membership.
• Transaction & Financial Records: Retained for a minimum of five (5) years following account closure to comply with AML and financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Customer Support Records: Retained for three (3) years following resolution of the relevant case.
• Technical/Usage Data (non-anonymised): Retained for up to twelve (12) months, then anonymised or deleted.

After applicable retention periods expire, personal data is securely deleted or anonymised in accordance with we33's data destruction procedures.

we33 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Measures include:

• TLS 1.3 encryption for all data transmitted between your device and the we33 platform
• Encryption at rest for sensitive data including KYC documents and payment details
• Access controls limiting internal access to personal data to authorised staff on a need-to-know basis
• Regular security assessments and vulnerability testing of the we33 platform
• Multi-factor authentication for administrative access to systems containing personal data
• Secure, access-logged storage for identity verification documents

In the event of a personal data breach that poses a risk to member rights, we33 will notify affected members and relevant authorities in accordance with applicable requirements. If you believe your we33 account has been compromised, contact [email protected] immediately.

Depending on your jurisdiction, you may have the following rights with respect to the personal data we33 holds about you:

• Right of Access: Request a copy of the personal data we33 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to Restriction: Request that we33 restrict processing of your data in certain circumstances.
• Right to Data Portability: Request transfer of your data to another service provider in a structured, machine-readable format.
• Right to Object: Object to processing of your data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact we33 at [email protected]. we33 will respond to requests within 30 days. Identity verification may be required before we33 can action a data rights request. Note that some requests may be subject to legal limitations, for example where data must be retained to comply with AML obligations.

we33 strictly prohibits use of its platform by individuals under 18 years of age. we33 does not knowingly collect personal data from anyone under 18. If we33 discovers that personal data has been collected from an individual who was underage at the time of registration, the account will be immediately closed and personal data deleted, except where retention is required for legal compliance purposes.

If you believe that a minor has registered or attempted to register a we33 account, please contact [email protected] immediately so we can investigate and take appropriate action.

The we33 platform may contain references to third-party services (such as payment processors and game providers) whose privacy practices are governed by their own separate privacy policies. we33 is not responsible for the privacy practices of third-party service providers beyond the contractual data processing obligations imposed on them by we33.

we33 does not include external advertising links or third-party tracking pixels from ad networks on the we33 platform. We do not share member data with advertisers for targeted advertising purposes.

we33 reserves the right to update or revise this Privacy Policy at any time. Material changes will be communicated to registered members via the email address on file or via a prominent notice on the we33 platform, prior to the changes taking effect. The effective date at the top of this page will reflect the date of the most recent revision.

Your continued use of the we33 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the changes, you should discontinue use of the platform and contact support to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we33 handles your personal data, please contact the we33 Data & Privacy team: