Lucky 99 Privacy Policy – How We Protect Your Data

1 Introduction

Lucky 99 is an online gaming and casino platform built specifically for players in Pakistan. When you register an account, make a deposit in PKR, play games or use any feature on the platform, you share certain personal information with us. This Privacy Policy explains what that information is, why we collect it, how it is protected and what choices you have regarding your data.

By creating an account on Lucky 99, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how your data is handled as described below, you should not register or continue using the platform.

This policy applies to all users of Lucky 99 regardless of how they access the platform — through a desktop browser, a mobile browser, or the Lucky 99 dedicated app. References to "Lucky 99", "we", "us" or "our" throughout this document all refer to the Lucky 99 platform and its operators.

2 Data We Collect

Lucky 99 collects personal data through several channels: information you provide directly when registering or using the platform, information generated automatically as you use the platform, and in limited cases, information obtained through identity verification processes. The categories of data we collect include:

Lucky 99 collects only the data that is necessary to operate your account, process PKR transactions and maintain platform security. We do not collect data that has no clear purpose related to the services we provide.

3 How We Use Your Data

The personal data Lucky 99 holds is used for specific, legitimate purposes. We do not use your data for anything beyond what is described below:

• Account Management: To create, maintain and secure your Lucky 99 account. This includes verifying your identity, managing your balance, processing your bonus eligibility and handling account settings.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer and other supported methods. Your payment details are used only to complete transactions and verify that payment accounts belong to you.
• Platform Security: To detect and prevent fraud, account abuse, money laundering, underage gambling and other prohibited activity. Automated and manual monitoring of account behaviour helps keep the platform safe for all players.
• Customer Support: To respond to your queries, resolve disputes and provide assistance. Support staff access account data only as needed to help with the issue you have raised.
• Legal Compliance: To meet obligations under applicable laws, including anti-money laundering (AML) requirements, identity verification standards and any instructions received from relevant authorities.
• Platform Improvement: Aggregated, anonymised usage data helps Lucky 99 understand how the platform is used so we can improve game selection, performance and features. This data cannot be traced back to individual players.
• Promotional Communications: If you have opted in, to send you information about bonuses, new games and platform updates. You can opt out of marketing communications at any time through your account settings or by contacting support.

4 Payment Data & PKR Transactions

Because all Lucky 99 transactions are denominated in PKR and processed through local payment channels, we handle payment-related data with particular care. Here is how payment data is managed:

• When you deposit via JazzCash, Easypaisa or Raast, the transaction is processed through a secure payment gateway. Lucky 99 receives a transaction reference and confirmation, not your full mobile banking credentials or PIN.
• Bank transfer details (account number, IBAN) shared for withdrawal purposes are stored in encrypted form and used solely to process the withdrawal request you have made.
• Payment data is never shared with third parties for marketing or profiling purposes.
• All PKR transaction records are retained for a minimum period required by applicable financial regulations. After this period, records are deleted or anonymised.
• If a discrepancy is identified in a transaction, payment data may be reviewed by the Lucky 99 payments team for reconciliation purposes.

5 Data Sharing

Lucky 99 does not sell, rent or trade your personal data. Data sharing is limited to circumstances where it is operationally necessary or legally required. The following parties may have access to specific data in defined circumstances:

• Payment Processors: JazzCash, Easypaisa, Raast and banking partners receive the minimum data necessary to process your PKR deposit or withdrawal. These providers operate under their own privacy policies and data protection obligations.
• Identity Verification Services: Where third-party KYC (Know Your Customer) services are used to verify your CNIC or identity document, your verification data is shared with that provider solely for this purpose.
• Technology and Hosting Providers: Lucky 99 uses third-party infrastructure providers (servers, databases, security services) to operate the platform. These providers access data only to the extent necessary to deliver their services and are contractually bound to maintain confidentiality.
• Legal and Regulatory Authorities: If Lucky 99 receives a lawful request from a competent authority — such as a court order or law enforcement request — we may be required to disclose specific data. We disclose only what is legally required and, where permitted, will notify you of such a request.
• Internal Teams: Access to personal data within Lucky 99 is limited to staff who need it to do their job — for example, support agents resolving your query or the payments team processing a withdrawal.

6 Data Retention

Lucky 99 retains your personal data for as long as your account is active and for a defined period after account closure. Retention periods vary by data type:

• Account and Registration Data: Retained for the duration of your account and for a minimum of five years after account closure, in line with standard financial record-keeping practices.
• Transaction Records: PKR deposit and withdrawal records are retained for a minimum of five years to support financial auditing, dispute resolution and compliance obligations.
• Identity Verification Documents: Copies of CNIC or passport documents are retained for as long as required by applicable verification and AML obligations, typically five years from the date of verification.
• Support Communications: Chat logs and email correspondence are retained for up to three years to assist with any follow-up disputes or queries.
• Usage and Game Data: Session and game history data is retained for up to two years from the date of the session, after which it is anonymised or deleted.

When data is no longer needed and its retention period has expired, it is securely deleted or permanently anonymised so it can no longer be connected to you as an individual.

7 Security Measures

Protecting your personal and financial data is a core responsibility for Lucky 99. The following technical and organisational measures are in place to keep your information secure:

• SSL Encryption: All data transmitted between your device and the Lucky 99 platform is encrypted using SSL/TLS protocols. This applies to your login, registration, deposit and withdrawal activity.
• Secure Data Storage: Personal data stored on Lucky 99 servers is encrypted at rest. Access to production data is restricted to authorised personnel only.
• Two-Factor Authentication: Lucky 99 supports additional login security. Enabling two-factor authentication on your account provides an extra layer of protection against unauthorised access.
• Fraud Monitoring: Automated systems monitor account activity in real time to flag unusual behaviour such as multiple login attempts, suspicious deposits or irregular betting patterns.
• Regular Security Reviews: Lucky 99 conducts periodic reviews of its security practices and infrastructure to identify and address potential vulnerabilities.
• Staff Training: Team members who handle personal data receive training on data protection responsibilities and access only the data relevant to their role.

8 Cookies

Lucky 99 uses cookies and similar tracking technologies to make the platform work properly and to understand how it is used. A cookie is a small text file stored on your device when you visit the platform. Here is how we use them:

• Essential Cookies: Required for the platform to function. These handle your login session, security tokens and account preferences. Without these, Lucky 99 cannot work correctly. These cookies cannot be disabled.
• Performance Cookies: Collect anonymised data on how users navigate the platform — which games are most visited, how long sessions last and where errors occur. This data helps us improve the platform. No personally identifiable information is captured.
• Functional Cookies: Remember preferences you have set, such as language settings or your last visited game category, so you do not have to re-set them every visit.
• Analytics Cookies: Used to understand aggregate traffic patterns across the platform. Data collected is anonymised and used only for internal reporting purposes.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent Lucky 99 from functioning correctly. Disabling other cookie types may affect your experience but will not stop you from using the platform.

9 Your Rights

As a Lucky 99 player, you have the following rights regarding your personal data. To exercise any of these rights, contact Lucky 99 support with your registered account details:

• Right to Access: You can request a copy of the personal data Lucky 99 holds about you. We will respond to verified data access requests within a reasonable timeframe.
• Right to Correction: If any of the personal data on your account is inaccurate or out of date, you can request that it be corrected. For certain data fields (such as name or date of birth) you may be asked to provide supporting documentation.
• Right to Deletion: You can request that your account and associated personal data be deleted. Please note that some data must be retained for legal and financial compliance reasons even after account closure, as described in the Data Retention section above.
• Right to Restriction: In certain circumstances, you can request that Lucky 99 restrict the processing of your data — for example, while a dispute about data accuracy is being resolved.
• Right to Opt Out of Marketing: If you have opted in to receive promotional communications from Lucky 99, you can opt out at any time through your account settings or by contacting support. Opting out of marketing does not affect essential account communications.

10 Minors & Age Verification

Lucky 99 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under 18 years of age. Age verification is part of the registration process, and additional identity checks may be requested at any stage if there is reason to believe an account holder may be under 18.

If Lucky 99 discovers that a registered account belongs to someone under 18, the account will be immediately suspended, all balances will be frozen and the account will be closed. Any deposits associated with a minor's account will be returned to the payment method used, minus any winnings generated, which will be forfeited.

Parents and guardians who are concerned about a minor accessing the Lucky 99 platform should contact support immediately. We take reports of underage access seriously and will act without delay.

11 Policy Updates

Lucky 99 may update this Privacy Policy from time to time to reflect changes in how we handle data, changes to the services we offer, or developments in applicable laws. When we make changes, the updated policy will be published on this page with a revised "Last updated" date at the top.

For changes that significantly affect how your personal data is used, Lucky 99 will provide advance notice via the email address registered on your account or through an in-platform notification. Continuing to use Lucky 99 after an updated Privacy Policy is published constitutes your acceptance of the changes.

We recommend reviewing this page periodically. If you have concerns about any update to this policy, please contact the support team before continuing to use the platform.

12 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a data-related concern, the Lucky 99 support team is available 24 hours a day, 7 days a week.

• Email: [email protected] (displayed as text — not a clickable link)
• Live Chat: Available from within the platform after logging in to your account
• FAQ: Answers to common questions are available on the FAQ page

When contacting support regarding a data or privacy matter, please include your registered email address and a clear description of your request. This helps the team verify your identity and process your request efficiently.

For full details on your account obligations and platform rules, refer to the Terms and Conditions. For information on managing your gaming activity responsibly, visit the Responsible Gaming page.