Lucky Game Privacy Policy – How We Protect Your Data

1 Introduction

Welcome to Lucky Game. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform, including the website at luckygame.vin, our mobile app, and all associated services. By creating an account and using Lucky Game, you agree to the practices described in this policy.

Lucky Game is committed to handling your data responsibly. We understand that Pakistani players expect their personal and financial information to be treated with respect and kept secure. This policy is designed to be straightforward and honest about what we do with your data, rather than burying important details in complicated legal language.

If you have questions about anything in this policy, our support team is available around the clock via live chat. We encourage you to read this policy carefully alongside our Terms and Conditions and Responsible Gaming page.

2 Data We Collect

Lucky Game collects personal data in several ways: information you provide directly when registering or using the platform, data gathered automatically as you interact with the site or app, and information received from trusted third-party service providers such as payment processors and identity verification services.

Information you provide directly:

• Full legal name as it appears on your CNIC or passport.
• Date of birth (for age verification purposes).
• Email address and mobile number.
• Residential address and city within Pakistan.
• Username and password (passwords are hashed and never stored in readable form).
• Payment method details, including JazzCash or Easypaisa account numbers, bank account details, or card information provided during deposit or withdrawal.
• Identity documents submitted for account verification, such as your CNIC, passport, or proof of payment method.
• Any communications you send to our support team via live chat or email.

Information collected automatically:

• IP address and approximate geographic location (country and city level).
• Device type, operating system version, and browser type.
• Pages and sections visited, time spent, and actions taken on the platform.
• Session start and end times, login frequency, and activity patterns.
• Betting and gaming history, including stakes, outcomes, and bonus usage.
• Cookie and similar tracking data as described in Section 9.

Information from third parties:

• Identity verification results from our KYC (Know Your Customer) service provider.
• Payment status and transaction reference numbers from JazzCash, Easypaisa, Raast, and banking partners.
• Fraud screening signals from our payment and risk management partners.

3 How We Use Your Data

We use the data we collect solely to operate, secure, and improve Lucky Game for players in Pakistan. The specific purposes for which your data is used are set out below.

We do not use your data for automated decision-making that produces legal or similarly significant effects without human review. Where automated systems flag an account for review (for example, suspected fraud or unusual betting patterns), a member of our team will review the case before any action is taken.

4 Legal Basis for Processing

Lucky Game processes your personal data on the following legal bases, depending on the specific activity involved:

• Contractual necessity: Processing required to fulfil your account agreement with us, including managing your account, processing transactions, and providing the gaming services you have requested.
• Legitimate interests: Processing needed to protect the security and integrity of the platform, prevent fraud, detect multi-accounting, and improve platform performance, where those interests are not overridden by your rights.
• Legal obligation: Processing required to comply with applicable law, including age and identity verification obligations, anti-money laundering (AML) checks, and record-keeping requirements.
• Consent: Processing based on your explicit agreement, such as receiving marketing communications. Where consent is the basis, you may withdraw it at any time by contacting support or adjusting your account notification settings.

5 Sharing Your Data

Lucky Game does not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. We share data only where it is strictly necessary to deliver our services to you, protect the platform, or comply with legal requirements.

The categories of third parties with whom we may share your data, and the reason for sharing, are as follows:

• Payment processors: JazzCash, Easypaisa, Raast, banking partners, and card payment processors receive the minimum information required to execute your deposit or withdrawal request. These providers operate under their own privacy policies and are bound by data protection agreements.
• Identity verification providers: Our KYC partner receives identity document images and personal details to complete age and identity verification on our behalf. Results are shared back with Lucky Game only.
• Fraud and risk management services: Anonymised or pseudonymised signals may be shared with fraud detection partners to protect you and the platform from financial crime.
• Game software providers: Third-party game studios that supply casino, live casino, and slot game content may receive a session token and anonymised player ID to facilitate game play. They do not receive your name, contact details, or payment information.
• Cloud and infrastructure providers: Our hosting and database infrastructure providers process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by law, a court order, or a lawful request from a relevant authority, we may be required to disclose personal data. We will always seek to notify you where we are legally permitted to do so.

All third-party processors who handle your data are required to process it only as instructed by Lucky Game, to maintain appropriate security standards, and to delete it when no longer required.

6 Payment Data

All financial transactions on Lucky Game are processed in PKR. When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, a bank account, or a debit or credit card, the relevant payment data is transmitted over an encrypted connection directly to our PCI-compliant payment processor.

Lucky Game does not store full card numbers on our servers. Card data is tokenised by our payment processor, meaning only a non-sensitive reference token is retained on our side. Full card details never pass through Lucky Game's own infrastructure in a readable form.

Deposit and withdrawal transaction records, including amounts, dates, payment method references, and statuses, are retained as part of your account history. You can view your transaction history at any time from within your account dashboard.

7 Data Retention

Lucky Game retains your personal data for as long as your account is active and for a period after account closure as required to fulfil our legal, financial, and operational obligations. The retention periods for different categories of data are summarised below.

• Account registration data (name, email, date of birth, address): Retained for the life of your account and for a minimum of five years after account closure, in line with anti-money laundering record-keeping requirements.
• Identity verification documents (CNIC, passport scans): Retained for the duration of your account and for five years after closure or the date of last activity, whichever is later.
• Transaction and betting records: Retained for a minimum of five years from the date of each transaction.
• Support and communication records: Retained for three years from the date of the last communication.
• Cookies and session analytics data: Session-level data is deleted when your browser session ends. Persistent analytics data is retained for up to 24 months in anonymised form.
• Marketing preferences: Retained until you withdraw consent or close your account.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to you as an individual. If you request deletion of your account and associated data, we will action your request promptly, subject to any overriding legal retention obligations.

8 Security Measures

Protecting your data is a core operational priority for Lucky Game. We apply multiple layers of technical and organisational safeguards to prevent unauthorised access, data breaches, and misuse.

• Encryption in transit: All communication between your device and Lucky Game's servers uses TLS 1.2 or higher, ensuring that data cannot be intercepted in transit.
• Encryption at rest: Sensitive personal data stored in our databases is encrypted using AES-256. This includes identity documents, payment references, and verification records.
• Password security: Account passwords are hashed using a one-way cryptographic algorithm. We never store or have access to your password in plain text.
• Two-factor authentication (2FA): We offer 2FA for account login as an additional layer of protection. We strongly recommend enabling this in your account security settings.
• Access controls: Access to personal data within Lucky Game's systems is restricted on a need-to-know basis. Staff with data access undergo background checks and are bound by confidentiality obligations.
• Security monitoring: Our systems are monitored continuously for intrusion attempts, unusual access patterns, and anomalous activity. Alerts trigger immediate investigation by our security team.
• Regular audits: Our infrastructure and data handling processes are reviewed periodically to identify and address potential vulnerabilities.

9 Cookies & Tracking

Lucky Game uses cookies and similar technologies to make the platform work properly, remember your preferences, and understand how players use our service so we can continue to improve it. Below is a clear breakdown of the types of cookies we use and their purpose.

• Strictly necessary cookies: These are essential for the platform to function. They keep you logged in during your session, maintain your game state, and support core security features. These cookies cannot be disabled without breaking basic platform functionality.
• Functional cookies: These remember your preferences such as language settings, preferred deposit method, and notification choices, so you do not need to re-enter them on every visit.
• Analytics cookies: We use anonymised analytics to understand how players navigate the site, which pages are visited most, and where issues occur. This helps us fix problems and improve the experience for everyone. Analytics data is aggregated and does not identify you personally.
• Security cookies: Short-lived tokens used to prevent cross-site request forgery (CSRF) and other common web security attacks.

Lucky Game does not use advertising or third-party tracking cookies to follow you across other websites. We do not participate in cross-site tracking networks or share cookie data with advertisers.

You can control cookie settings through your browser's privacy or settings menu. Note that disabling strictly necessary cookies will affect your ability to use certain parts of the platform, including staying logged in during a session.

10 Your Rights

As a user of Lucky Game, you have a number of rights in relation to your personal data. These are summarised below. To exercise any of these rights, contact our support team via live chat or at the email address listed in Section 13.

• Right of access: You can request a copy of the personal data we hold about you. We will provide this in a clear format within a reasonable timeframe following verification of your identity.
• Right to rectification: If any of the personal data we hold is inaccurate or incomplete, you can ask us to correct it. For certain data such as your registered name or date of birth, we may ask for documentary evidence before making changes.
• Right to erasure: You can request deletion of your personal data where we no longer have a lawful basis to retain it. Note that some data must be retained for legal compliance reasons (as described in Section 7) even after account closure.
• Right to restrict processing: In certain circumstances you can ask us to pause processing of your data while a query or complaint is being resolved.
• Right to data portability: You can request that we provide your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to object: You can object to processing based on our legitimate interests, including profiling for responsible gaming purposes. We will consider your objection and respond accordingly.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you can withdraw that consent at any time with no effect on your account access.

11 Minors & Age Policy

Lucky Game is strictly an adult-only platform. Our services are not directed at, and should not be used by, anyone under the age of 18. We do not knowingly collect personal data from minors.

During the registration process, players are required to confirm that they are 18 years of age or older. Where we have reason to believe that a player may be under 18, we will suspend the account and request age verification documentation before allowing any activity to continue. If it is confirmed that the account belongs to a person under 18, the account will be immediately and permanently closed.

If you are a parent or guardian and believe that a minor in your household has created an account on Lucky Game, please contact our support team immediately via live chat so we can investigate and act without delay. Any funds deposited by a minor will be returned to the source payment method after verification.

We also encourage parents and guardians to use device-level parental control tools to restrict access to online gaming platforms on shared devices used by children.

12 Policy Updates

Lucky Game may update this Privacy Policy from time to time to reflect changes in how we handle data, changes to the platform or its features, or updates to applicable privacy laws and best practices. When changes are made, the updated policy will be published on this page with a revised "Last Updated" date at the top.

For significant changes that materially affect how your data is used or your rights in relation to it, we will take reasonable steps to notify you directly, either by email or through a notice displayed when you next log in to your account.

Your continued use of Lucky Game after an updated policy is published on this page constitutes your acceptance of the changes. If you do not agree with an updated policy, you should stop using the platform and contact support to request account closure. We recommend bookmarking this page and checking it periodically.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a concern about how your personal data has been handled, please get in touch with our support team. We are available 24 hours a day, seven days a week.

When contacting us about a data rights request, please include your registered email address and a brief description of your request. For identity verification purposes we may ask you to confirm some account details before actioning certain requests.