luky101 Privacy Policy

luky101 ("we", "us", "our", "the Company") operates the online casino and sports betting platform accessible at luky101.net, including all mobile-optimised versions of the platform. luky101 is the data controller responsible for the personal data of players who register and use the platform.

luky101 operates under an international online gaming licence framework and is committed to processing personal data in accordance with the data protection principles embedded in that framework — including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality.

This Privacy Policy applies to all personal data collected via the luky101 platform, including data collected during the account registration process, the luky101 Login process, during gameplay, during payment transactions, and through any communications you initiate with luky101 customer support.

For data-related enquiries, complaints, or requests, the luky101 Data Protection point of contact can be reached at the email address set out in Section 14 of this Policy.

luky101 collects personal data from you directly — through account registration, KYC verification, payment processing, and customer support interactions — and indirectly through automated technical means as you use the platform. The categories of personal data collected by luky101 are set out below.

luky101 does not intentionally collect special categories of sensitive personal data (such as health data, biometric data, or political opinions) unless required to do so under a specific regulatory obligation, such as problem gambling self-exclusion management.

luky101 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your luky101 player account, including enabling access via the luky101 Login page and managing your account preferences.
• Identity and Age Verification: To verify that you are 21 years of age or older and to confirm your identity in compliance with KYC and anti-money-laundering obligations.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard, and to maintain accurate transaction records.
• Platform Delivery: To provide access to cricket betting, live casino, slots, Super Bingo, Royal Fishing, and all other luky101 gaming services.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, and other unlawful activity on the platform.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, to administer self-exclusion and deposit limit requests, and to comply with responsible gaming obligations under luky101's licence framework.
• Customer Support: To respond to your queries, complaints, and requests submitted via live chat or email.
• Legal Compliance: To comply with applicable laws, regulations, and requests from competent authorities, including gaming regulators and financial intelligence units.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregate usage data and improve the performance, features, and user experience of the luky101 platform.

luky101 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing another lawful basis for the new processing activity.

luky101 processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which luky101 relies are as follows:

• Contractual Necessity: Processing is necessary to perform the contract between luky101 and you — specifically, to operate your player account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including KYC verification, anti-money-laundering checks, age verification, and reporting obligations to competent authorities.
• Legitimate Interests: Processing is carried out in pursuit of luky101's legitimate business interests — including fraud prevention, platform security, and business analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: For marketing communications and non-essential cookies, luky101 relies on your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where luky101 relies on legitimate interests as its legal basis, a balancing assessment is conducted to ensure that the legitimate interest pursued does not unduly interfere with your right to privacy.

luky101 does not sell or rent your personal data to third parties. Personal data may be shared in the following limited circumstances:

• Payment Processors: Financial data is shared with payment service providers — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — to facilitate the processing of deposits and withdrawals on your account. Each payment provider processes your data under its own privacy policy and is independently responsible for compliance with applicable data protection standards.
• Game Providers: Certain technical data (such as session identifiers and game round results) may be shared with third-party game studios and platform providers who supply casino games, cricket betting markets, slot content, and other gaming services available on the luky101 platform.
• KYC and Identity Verification Services: Identity documents and personal data submitted during the KYC process may be shared with third-party identity verification providers engaged by luky101 to authenticate player identities and assess risk.
• Regulatory and Law Enforcement Authorities: luky101 is required to disclose personal data to relevant regulators, financial intelligence units, and law enforcement agencies where required by applicable law or where luky101 has a reasonable suspicion of illegal activity.
• Responsible Gaming Organisations: Where a player activates a self-exclusion or third-party exclusion, limited data may be shared with relevant responsible gaming organisations or multi-operator self-exclusion schemes to give effect to the exclusion request.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of luky101, personal data held by luky101 may be transferred to the acquiring or merged entity, subject to equivalent privacy protections being maintained.

All third parties with whom luky101 shares personal data are required to handle that data in accordance with applicable data protection principles and are prohibited from using it for any purpose beyond the specific purpose for which it was shared.

luky101 operates under an international gaming licence framework, and certain personal data may be transferred to, stored in, or processed in countries outside Pakistan. This may occur, for example, when game providers, payment processors, or KYC service providers are based in or operate infrastructure in countries other than Pakistan.

Where such international transfers occur, luky101 takes steps to ensure that an appropriate level of data protection is maintained, including through the use of contractual safeguards, data processing agreements, and by engaging only with service providers who demonstrate adequate data security practices.

By registering a luky101 account, you acknowledge that your personal data may be processed outside Pakistan in connection with the delivery of luky101 services, subject to the protections described in this Policy.

luky101 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your active player account and for such additional periods as may be required to comply with legal, regulatory, and audit obligations.

Specific retention periods applicable to key data categories are as follows:

• Account and Identity Data: Retained for the lifetime of your active luky101 account and for a minimum of five (5) years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Transaction and Betting Records: Retained for a minimum of five (5) years from the date of each transaction, as required for financial compliance and audit purposes.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the date of the most recent transaction, whichever is later.
• Customer Support Records: Retained for a period of three (3) years from the date the support interaction was concluded.
• Marketing Preference Data: Retained until you withdraw your consent for marketing communications, plus a reasonable suppression period to ensure the opt-out is honoured.
• Technical and Log Data: Typically retained for twelve (12) months for security and fraud investigation purposes, after which it is anonymised or deleted.

When personal data is no longer required, luky101 will securely delete or anonymise it in accordance with its internal data retention and destruction procedures.

luky101 uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device when you visit the luky101 website. Cookies allow luky101 to recognise your device on return visits and to deliver a consistent, personalised experience.

The categories of cookies used by luky101 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the luky101 platform to function correctly. They enable core functionality such as maintaining your login session, storing your language preference, and remembering items in your account settings. These cookies cannot be disabled without affecting platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players use the luky101 platform — such as which pages are visited most frequently and whether any error messages are encountered. This data helps luky101 improve platform performance. These cookies do not identify individual users.
• Functional Cookies: These cookies remember choices you make on the platform — such as your preferred display settings or responsible gaming notification preferences — to provide a more personalised experience on return visits.
• Marketing Cookies: With your consent, luky101 may use cookies to track your interaction with promotional content on the platform. These cookies are only activated where you have provided explicit consent.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect your ability to use certain features of the luky101 platform, including the luky101 Login function.

luky101 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the luky101 platform.
• Encryption of sensitive data fields — including passwords and financial credentials — at rest using industry-standard encryption algorithms.
• Role-based access controls restricting luky101 staff access to personal data on a strict need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments of the luky101 platform infrastructure.
• Automated fraud detection and account monitoring systems designed to identify and respond to suspicious activity in real time.
• Secure, access-controlled data centres for server infrastructure, with physical and logical access controls in place.

While luky101 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your luky101 account credentials and for notifying us promptly if you suspect any unauthorised access to your account.

As a luky101 account holder, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the luky101 Data Protection team using the contact details in Section 14:

• Right of Access: You have the right to request a copy of the personal data that luky101 holds about you, together with information about how that data is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held about you is corrected or updated without undue delay.
• Right to Erasure: You may request that luky101 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to luky101's legal obligations to retain certain records (as described in Section 7).
• Right to Restrict Processing: You may request that luky101 restrict its processing of your personal data in certain circumstances — for example, while a dispute regarding data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you may request that luky101 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to luky101 processing your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, subject to luky101 demonstrating compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

luky101 will respond to all valid data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by up to two further months, with prior notification provided to you.

The luky101 platform is strictly intended for individuals who are 21 years of age or older. luky101 does not knowingly collect or process personal data from individuals under the age of 21. If luky101 becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be suspended immediately and the personal data deleted, subject to any legal obligations to retain certain records for regulatory reporting purposes.

If you have reason to believe that a minor has registered on the luky101 platform using false information, please notify luky101 immediately via the contact details provided in Section 14 of this Policy. luky101 treats the protection of minors as a matter of the highest priority and operates robust age verification procedures as part of its responsible gaming obligations.

The luky101 platform may contain references to or integrations with third-party services — such as payment processors and game providers — that operate under their own privacy policies. luky101 is not responsible for the privacy practices of third-party services and encourages you to review the privacy policies of any third party with whom you interact in connection with your use of the luky101 platform.

The inclusion of a third-party service on the luky101 platform does not constitute an endorsement of that third party's data practices by luky101. luky101 exercises due diligence in selecting third-party partners and requires contractual data protection commitments from all processors engaged to handle luky101 player data.

luky101 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform functionality, or data processing practices. The date of the most recent update is displayed at the top of this page.

Where changes to this Privacy Policy are material — meaning they significantly affect how luky101 processes your personal data or your rights in relation to that data — luky101 will provide advance notice to registered players via the email address held on their account. For minor or administrative updates, the updated Policy will be published on this page without individual notification.

Your continued use of the luky101 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes to this Policy, you should cease using the luky101 platform and contact support to arrange account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or luky101's processing of your personal data — including requests to exercise your data subject rights — please contact the luky101 Data Protection team using the details below.

luky101 customer support is available 24 hours a day, 7 days a week via the live chat function on the platform. For formal data protection requests and written complaints, please use the following email address:

luky101 aims to acknowledge all data protection requests within 48 hours of receipt and to provide a substantive response within 30 days. In the event that a complaint cannot be resolved directly with luky101, you may have the right to escalate the matter to the data protection authority or dispute resolution body applicable under luky101's international gaming licence framework.