Data Protection & Privacy

Luck99 Privacy Policy – How We Handle Your Personal Data in Pakistan

At Luck99 we take your privacy seriously. This policy explains in straightforward terms exactly what personal data we collect from Pakistani players, why we collect it, how it's stored and protected, and what rights you have over your own information. Please read it carefully before creating your account.

Last Updated: 1 January 2025
SSL
256-bit Encryption
0
Third-Party Data Sales
30 Days
Data Request Response Time
24 / 7
Privacy Support Available
Our Commitments

Six Privacy Commitments Luck99 Makes to Every Pakistani Player

These are not just legal words on a page. They describe how we actually operate.

Military-Grade Encryption

Every piece of data transmitted between your device and the Luck99 platform is protected by 256-bit SSL encryption — the same standard used by major Pakistani banks. Your account credentials, payment details and personal information are encrypted at rest and in transit.

We Never Sell Your Data

Luck99 does not sell, rent or trade your personal information to third parties for their own marketing purposes. Your data is used to operate your account, verify your identity and improve the platform — nothing else, unless you have given explicit separate consent.

Minimal Data Collection

We collect only the personal data that is genuinely necessary to provide our services and meet our legal obligations. We don't collect data for the sake of it, and we don't hold onto it longer than we need to. If it's not needed, it's not collected or stored by Luck99.

Your Rights Are Real

You have the right to access the data Luck99 holds about you, to correct inaccuracies, to request deletion in eligible circumstances and to withdraw marketing consent at any time. These rights are genuine and will be honoured — not buried in a process designed to discourage you from exercising them.

Breach Notification

In the unlikely event of a data breach affecting your personal information, Luck99 will notify affected players promptly in accordance with applicable obligations. We will explain what happened, what data was involved and what steps we are taking to address the situation.

Plain-Language Explanations

This entire privacy policy is written in plain English so that Pakistani players can actually understand it. No legal maze, no deliberate confusion. If any part of this policy is unclear, our support team — available in Urdu and English at all hours — will explain it to you directly.

luck99

Your Privacy Matters at Luck99. By creating an account on Luck99 and using our services, you confirm that you have read and understood this Privacy Policy. It forms part of your overall agreement with us, alongside our Terms and Conditions. If anything is unclear, please contact our support team before registering.

1. Introduction

This Privacy Policy describes how Luck99 ("we", "us", "the Company") collects, uses, stores and protects personal information relating to individuals ("you", "the player") who register and use the Luck99 platform available at luck99.ws.

We are committed to handling your personal data with transparency, integrity and care. This policy is written in plain language so that every Pakistani player can understand exactly what happens to their information when they use Luck99. We strongly encourage you to read it in full rather than scrolling to the bottom and clicking accept.

This policy applies to all personal data processed through the Luck99 website, any associated mobile interface and all communications between you and the Luck99 support team. It does not apply to third-party websites that may be linked to from our platform.

A note for Pakistani players: Pakistan's data protection landscape is evolving. Luck99 applies internationally recognised data protection principles — including the concept of lawful basis for processing and data subject rights — regardless of which specific legal framework applies to any given transaction. We do this because it's the right way to treat players, not simply because we are required to.

2. Who We Are

Luck99 is operated by the Company under an international online gaming licence. We are the data controller for all personal information collected through luck99.ws — meaning we are the entity responsible for deciding how and why your personal data is processed.

Our primary contact for privacy matters is the Luck99 support team, reachable at support@luck99.ws. All privacy-related enquiries, data access requests and complaints should be directed to this address. We aim to acknowledge all privacy-related contacts within 24 hours and to provide a substantive response within 30 calendar days.

3. Personal Data We Collect

The following table summarises the categories of personal data that Luck99 collects from players, together with examples of the specific data types within each category.

CategoryExamplesRequired?
Identity DataFull name, date of birth, CNIC number, passport number, photographYes — for account registration & KYC
Contact DataEmail address, phone number, residential addressYes — for account operation
Financial DataEasypaisa / JazzCash account reference, bank account details, transaction historyYes — for payments & AML compliance
Account DataUsername, password (hashed), login history, account settings, preferencesYes — for account operation
Gaming DataBets placed, games played, wins and losses, session durations, responsible gaming settingsYes — for service delivery & compliance
Technical DataIP address, device type, browser type, operating system, time zoneYes — for security & fraud prevention
Communications DataSupport chat transcripts, email correspondence, survey responsesWhere applicable
Marketing DataCommunication preferences, promotion history, referral informationOptional — based on consent

Luck99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs or health data, unless specifically required by regulatory obligations in exceptional circumstances, in which case separate explicit consent will be sought.

4. How We Collect Your Data

Luck99 collects personal data through the following channels:

Direct Submission by You

The majority of the personal data we hold is provided by you directly when you register a Luck99 account, complete identity verification (KYC), make a deposit or withdrawal, contact our support team or respond to a survey. You choose what you submit in these cases, though certain fields are mandatory for account operation.

Automated Collection

When you use the Luck99 platform, certain technical data is collected automatically through cookies, log files and similar tracking technologies. This includes your IP address, device identifiers, browser information and activity patterns within the platform. See Section 12 for more detail on our cookie practices.

Third-Party Sources

In limited circumstances, Luck99 may receive data about you from third-party sources, including identity verification providers used during the KYC process, fraud prevention and anti-money laundering screening services, and payment processors (such as Easypaisa and JazzCash) who confirm transaction details as part of payment processing.

luck99

5. Why We Use Your Personal Data

Luck99 uses your personal data for the following purposes:

Account Creation & Management
To register your account, verify your identity, manage your preferences and keep your account secure at all times.
Service Delivery
To process your deposits and withdrawals, display your betting history, calculate bonuses and provide access to the full Luck99 game lobby.
Fraud & AML Compliance
To detect and prevent fraudulent activity, money laundering and other financial crimes as required by our licensing obligations.
Platform Improvement
To analyse usage patterns and performance data so we can improve the Luck99 platform, fix problems and develop new features that Pakistani players want.
Responsible Gaming
To monitor gaming patterns and support players who may be experiencing difficulties, in line with our responsible gaming commitments.
Marketing (With Consent)
To send you information about Luck99 promotions, new games and special offers, but only where you have given explicit consent and can withdraw it at any time.

7. Data Sharing

Luck99 does not sell your personal data to any third party. We share your data only in the following limited and controlled circumstances:

Service Providers

We share necessary data with companies that help us operate the Luck99 platform — including payment processors (Easypaisa, JazzCash, NayaPay and banking partners), identity verification providers, cloud hosting providers, game suppliers and customer support software providers. All such service providers are required to handle your data in accordance with our instructions and applicable data protection standards.

Regulatory and Legal Authorities

We may share your data with regulatory authorities, law enforcement agencies or courts where we are required to do so by law or by the conditions of our gaming licence. We do not disclose more than is strictly required in such circumstances.

Anti-Fraud and AML Screening

Luck99 shares necessary data with fraud prevention and anti-money laundering screening services as required by our licensing obligations. These services help us verify identities and identify suspicious activity. Their use of your data for screening purposes is governed by their own privacy policies and our data processing agreements with them.

Business Transfers

In the event that Luck99 or a substantial part of its business is acquired by another entity, player data may be transferred as part of that transaction. Any acquiring entity would be required to honour the commitments set out in this Privacy Policy or to obtain fresh consent from affected players if they intend to use the data differently.

We do not share your data with advertisers, data brokers, social media platforms or any other third party for their own independent marketing or profiling purposes. Full stop.

8. International Data Transfers

Some of the service providers used by Luck99 operate outside Pakistan. Where your personal data is transferred to a country that may not have equivalent data protection standards, we take steps to ensure an adequate level of protection is maintained. These steps may include contractual safeguards, standard data protection clauses or reliance on the receiving party's existing certification under recognised international data protection frameworks.

By using the Luck99 platform, you acknowledge that your data may be processed in countries other than Pakistan as part of the normal operation of our services.

9. Data Retention

Luck99 retains your personal data for as long as is necessary for the purpose for which it was collected, and in compliance with applicable legal and regulatory obligations.

As a general guide:

  • Account and identity data is retained for the lifetime of your account and for a minimum period of five years after account closure, in compliance with anti-money laundering obligations.
  • Transaction and financial data is retained for a minimum of five years from the date of the relevant transaction.
  • Gaming history is retained for the lifetime of your account and for a reasonable period following closure.
  • Support communications are retained for two years from the date of the interaction.
  • Marketing data (where consent-based) is retained until you withdraw consent, after which it is removed from active marketing systems within 30 days.

When personal data is no longer required and its retention period has expired, Luck99 will securely delete or anonymise it.

luck99

10. Security Measures

Luck99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, loss or destruction. These measures include:

  • SSL/TLS encryption: All data transmitted between your browser or app and the Luck99 platform is encrypted using 256-bit SSL/TLS protocols.
  • Password hashing: Account passwords are never stored in plain text. They are hashed using industry-standard one-way cryptographic functions.
  • Access controls: Only authorised Luck99 personnel with a legitimate need have access to personal data, and all such access is logged and audited.
  • Two-factor authentication: Available for all Luck99 accounts and strongly recommended for all players.
  • Regular security testing: The Luck99 platform undergoes regular penetration testing and security audits.
  • Data segregation: Personal data, financial data and gaming data are stored in segregated systems with independent access controls.

No security measure is completely infallible. While Luck99 takes every reasonable precaution, we cannot guarantee that data will never be compromised by a determined and sophisticated attacker. In the event of a breach, we will follow the notification and remediation procedures described in our commitment above.

11. Your Data Rights

As a player on Luck99, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@luck99.ws with the subject line "Data Rights Request".

1
Right of Access
You can request a copy of all personal data that Luck99 holds about you. We will provide this in a structured, readable format within 30 days of receiving your request.
2
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you can ask us to correct it. You can also update most of your own information directly from your Luck99 account settings.
3
Right to Erasure
In certain circumstances you can ask us to delete your personal data. Note that we cannot always comply with this right — for example, where the data is required for regulatory compliance such as AML record-keeping obligations.
4
Right to Restrict Processing
You can ask us to restrict how we use your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
5
Right to Data Portability
Where processing is based on contract or consent, you may request your personal data in a machine-readable format suitable for transfer to another service provider.
6
Right to Object
You can object to processing carried out on the basis of Luck99's legitimate interests. We will stop processing your data for that purpose unless we can demonstrate compelling legitimate grounds that override your interests.
7
Right to Withdraw Consent
Where processing is based on your consent — most commonly for marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

12. Cookies & Tracking Technologies

Luck99 uses cookies and similar technologies on its website. Cookies are small text files stored on your device that help us recognise you, maintain your session and understand how you use our platform.

Types of Cookies Used

  • Strictly necessary cookies: Required for the platform to function. These cannot be disabled. They include session cookies that keep you logged in and security cookies that protect against cross-site request forgery.
  • Performance cookies: Collect anonymous data about how players use the Luck99 platform — which pages are visited most, how long players spend in the lobby, error rates. Used to improve the platform.
  • Functional cookies: Remember your language preference, display settings and other personalisation choices so you don't have to reconfigure them every visit.
  • Marketing cookies: Used only with your explicit consent, to help us understand the effectiveness of promotional campaigns. These are optional and can be declined.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the Luck99 platform.

13. Minors

The Luck99 platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will delete it immediately and close the associated account.

If you are a parent or guardian and believe that your child has registered on Luck99, please contact us immediately at support@luck99.ws. We will investigate and take appropriate action as a priority.

14. Marketing Communications

Luck99 will only send you marketing communications — including emails, SMS messages and in-platform notifications about promotions, new games and special offers — if you have given your explicit consent to receive them.

You can withdraw your marketing consent at any time by:

  • Clicking the unsubscribe link in any Luck99 marketing email
  • Updating your communication preferences in your account settings
  • Contacting support at support@luck99.ws and requesting removal from marketing lists

Withdrawing marketing consent does not affect your ability to use the Luck99 platform or to receive transactional communications about your account (such as deposit confirmations, withdrawal notifications and security alerts). Those communications are sent on the basis of contract performance, not consent, and will continue regardless of your marketing preferences.

Players who have self-excluded under responsible gaming provisions will be automatically removed from all Luck99 marketing lists for the duration of their self-exclusion period, regardless of their stated preferences at the time of exclusion.

15. Updates to This Policy

Luck99 may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer or applicable legal requirements. The current version will always be published at luck99.ws/privacy-policy with a revised "Last Updated" date.

Where an update is material — meaning it significantly changes how we handle your personal data or affects your rights — we will notify registered players by email or through an in-platform notification before the change takes effect. For minor updates that do not affect your rights, we may simply update the policy without separate notification.

Your continued use of the Luck99 platform after an updated Privacy Policy has been published constitutes your acceptance of the updated version. We encourage you to review this page periodically.

16. Contact Us & Complaints

For all privacy-related enquiries, data access requests, corrections or complaints, please contact the Luck99 privacy team:

  • Email: support@luck99.ws (use subject line: Privacy / Data Request)
  • Live Chat: Available 24/7 from within your Luck99 account
  • Response time: Acknowledgement within 24 hours, substantive response within 30 calendar days
  • Language: Urdu and English both supported

If you are not satisfied with the outcome of your privacy complaint after engaging with Luck99 support, you may escalate to the relevant supervisory authority or to the licensing body under whose authority Luck99 operates. Details of the relevant authority will be provided upon request.

For responsible gaming matters specifically — including self-exclusion requests, deposit limit settings and support resources — please visit the Responsible Gaming page or contact support directly. Privacy requests and responsible gaming requests are handled by separate teams to ensure both are dealt with promptly.

Your Data Is Safe with Luck99

Play with Confidence — Luck99 Protects Pakistani Players

Register on Luck99 knowing exactly how your data is handled. We built this platform for Pakistani players and that means being honest about privacy, not hiding behind confusing legalese.

SSL encrypted Data never sold PKR only 18+ only Withdraw consent anytime