luck99 Privacy Policy

This Privacy Policy applies to all personal data collected, processed, and stored by luck99 in connection with the operation of the luck99 platform at luck99.biz and any associated mobile applications or services. It covers every registered player, visitor, and prospective user who interacts with the luck99 website or support channels.

luck99 acts as the data controller in respect of personal data collected directly from Pakistani players through the registration process, account management, payment processing, and customer support interactions. Where luck99 engages third-party processors — such as payment gateways, identity verification providers, or game content suppliers — those parties act as data processors operating strictly under luck99's instructions and in accordance with this Privacy Policy.

By creating a luck99 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you must cease using the luck99 platform and contact the support team to request account closure.

luck99 collects personal data in several ways: directly from you when you register or use the platform, automatically through your device and browser when you visit luck99.biz, and from third parties such as payment providers and KYC verification agencies. The categories of data we collect include the following:

luck99 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond CNIC photo matching for KYC), or medical records, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion or problem gambling referral request.

Every category of personal data collected by luck99 serves a specific, documented purpose. We do not collect data speculatively or retain it beyond the period necessary for the purposes set out below:

• Account Registration & Management: Identity and contact data are required to create and maintain a unique, verified player account on the luck99 platform. This includes sending account-related notifications, security alerts, and policy updates.
• Age Verification (21+): Date of birth and KYC documents are collected to enforce luck99's strict 21+ age policy. No player may place real-money wagers without first confirming their age through the verification process.
• Payment Processing: Financial data is collected to facilitate PKR deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20. This data is processed securely and shared only with authorised payment processors.
• Anti-Fraud & Anti-Money Laundering (AML): Transaction data, gameplay history, and device information are monitored to detect and prevent fraudulent activity, account takeover attempts, and money laundering in compliance with applicable AML obligations.
• Responsible Gaming: Gameplay and behavioural data are used to identify players who may be exhibiting signs of problem gambling, enabling luck99 to offer timely responsible gaming interventions, cooling-off periods, and self-exclusion options.
• Platform Security: Technical data including IP addresses and device fingerprints are used to identify duplicate accounts, detect unauthorised access, and maintain platform integrity across all luck99 services.
• Customer Support: Communications data is retained to ensure continuity and quality of support interactions, including resolution of disputes, payment queries, and technical issues raised by Pakistani players.
• Regulatory Compliance: Identity, financial, and KYC documentation is retained to satisfy audit and reporting obligations under luck99's international gaming licence and applicable AML regulations.
• Platform Improvement: Anonymised and aggregated behavioural data is used to understand how players use the luck99 platform and to improve game offerings, user experience, and interface design.

luck99 processes personal data only where a valid legal basis exists for doing so. The legal bases on which luck99 relies are as follows:

• Contractual Necessity: Processing is necessary to perform the contract between luck99 and the player — specifically, to operate the player account, process transactions, and deliver gaming services in accordance with the Terms & Conditions.
• Legal Obligation: Processing is necessary for luck99 to comply with KYC, AML, and licence-mandated reporting requirements under applicable gaming and financial regulations.
• Legitimate Interests: Processing is necessary for luck99's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and the prevention of underage gambling — provided these interests are not overridden by the player's own privacy rights.
• Consent: Where processing is based on consent — such as for direct marketing emails — luck99 will obtain your explicit agreement before processing begins. Consent may be withdrawn at any time without penalty.

luck99 does not sell, rent, or trade your personal data to any third party for commercial purposes. Data sharing occurs only under the following controlled circumstances:

All third-party processors engaged by luck99 are bound by contractual data processing agreements that restrict them to processing personal data solely for the purposes instructed by luck99, applying appropriate technical and organisational security measures, and prohibiting any onward transfer or commercial exploitation of the data they receive.

luck99.biz uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session, and to analyse how Pakistani players interact with the site. The cookies deployed on luck99.biz fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the luck99 website to function. They maintain your authenticated session, remember your language preference, and enable core features such as the cashier and game launcher. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your platform preferences — such as display settings and responsible gaming limit configurations — so that you do not need to reconfigure them each time you log in.
• Analytics Cookies: luck99 uses anonymised analytics tools to measure page performance, session duration, and navigation paths. This data is aggregated and cannot be used to identify individual players. It informs improvements to the luck99 platform.
• Security Cookies: Device fingerprinting and fraud-detection cookies help luck99 identify unusual login patterns, detect multiple accounts operating from the same device, and prevent account takeover attempts.

luck99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal, regulatory, or licensing obligations. The following retention framework applies:

• Active Account Data: All personal data associated with an active luck99 account is retained for the duration of the account's active status plus a minimum post-closure retention period required under licensing obligations.
• KYC & Identity Documents: Identity verification documents, including CNIC copies and selfies, are retained for a minimum of five (5) years following account closure to comply with AML record-keeping requirements.
• Transaction Records: Full transaction histories, including deposits and withdrawals in PKR, are retained for a minimum of five (5) years from the date of the transaction for regulatory audit purposes.
• Support Communications: Live chat transcripts and email correspondence are retained for a minimum of two (2) years from the date of the interaction, or longer if the communication relates to an unresolved dispute or regulatory inquiry.
• Analytics & Behavioural Data: Anonymised and aggregated analytics data may be retained indefinitely as it cannot be used to identify individual players.
• Self-Exclusion Records: If a player requests permanent self-exclusion, their exclusion record is retained indefinitely to prevent re-registration attempts, even after all other account data has been purged.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. luck99 maintains internal data retention schedules and conducts periodic reviews to ensure compliance with this Policy.

luck99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to the following:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the luck99 platform is encrypted in transit using industry-standard TLS protocols. The padlock icon in your browser confirms an active encrypted connection.
• Encrypted Data Storage: Sensitive personal data — including KYC documents and financial account details — is stored in encrypted form at rest using AES-256 encryption across all luck99 data storage systems.
• Access Controls: Access to player personal data within luck99's internal systems is restricted to authorised personnel on a strict need-to-know basis. Role-based access controls and audit logging are enforced across all data systems.
• Multi-Factor Authentication (MFA): Internal luck99 systems handling player data require MFA for all staff access. Players are also encouraged to enable any available account-level authentication features for additional security.
• Penetration Testing & Vulnerability Scanning: luck99's platform undergoes regular third-party security assessments, including penetration testing and automated vulnerability scanning, to identify and remediate potential security weaknesses before they can be exploited.
• Incident Response: luck99 maintains a documented data breach response procedure. In the event of a confirmed breach affecting player personal data, luck99 will notify affected players and relevant regulatory authorities within the timeframes required under applicable obligations.

As a luck99 player, you hold a number of rights over your personal data. luck99 is committed to honouring these rights promptly and without unnecessary friction. The following rights are available to all registered players:

luck99 is strictly an adult platform. The minimum age to register and play on luck99 is 21 years of age. luck99 does not knowingly collect, store, or process personal data belonging to any person under the age of 21.

Age verification is conducted at the point of registration using the date of birth provided by the player, and is confirmed through document-based KYC verification prior to the processing of any withdrawal request. Where luck99 identifies or reasonably suspects that a registered player is under 21 years of age, the account will be closed immediately, all deposits will be returned, and any associated winnings will be forfeited.

If you are a parent or guardian and believe that a person under the age of 21 has registered on luck99 without your knowledge, please contact our support team immediately via live chat or at [email protected]. luck99 will investigate the matter urgently and take appropriate action.

luck99 operates as an internationally licensed gaming platform. As a result, some of the personal data you provide may be transferred to and processed in countries outside Pakistan. These transfers may involve countries where data protection laws differ from those applicable in Pakistan or the jurisdiction in which luck99 holds its licence.

Where such international transfers take place, luck99 ensures that adequate safeguards are in place to protect your personal data. These safeguards include:

• Data processing agreements with all third-party processors that include binding data protection clauses consistent with internationally recognised standards.
• Transfer of data only to jurisdictions that maintain an adequate level of data protection as assessed by luck99's compliance team in accordance with applicable legal frameworks.
• Contractual restrictions on recipient processors that prevent them from processing transferred data for any purpose other than the specific purpose for which it was transferred.

By creating and maintaining a luck99 account, you acknowledge and consent to your personal data being transferred internationally as described in this section, subject to the safeguards outlined above.

luck99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or our data processing practices. The "Last Reviewed" date at the top of this page will be updated whenever a change is made.

Where a change is material — for example, where we introduce a new category of data collection or a new third-party sharing arrangement — luck99 will notify registered players via email or via an in-platform notification prior to the change taking effect. Continued use of the luck99 platform following notification of a material change constitutes your acceptance of the updated Privacy Policy.

We encourage all Pakistani players to review this Privacy Policy periodically to stay informed about how luck99 protects your data. If you have any questions about a specific change, please contact the support team via live chat.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way luck99 handles your personal data, please reach out through one of the following channels:

• Live Chat: Available 24/7 directly inside your luck99 account dashboard. This is the fastest way to raise a data privacy query or lodge a data rights request.
• Email: Write to us at [email protected] with the subject line "Privacy Query" or "Data Rights Request". We aim to respond within 2 business days for general queries and within 30 calendar days for formal data rights requests.

luck99 takes every privacy concern seriously. All data-related communications are handled by trained staff who are familiar with luck99's data protection obligations and will assist you in a professional and timely manner.