Privacy Policy – Lucky999 Pakistan Online Gaming Platform

1. Introduction

Lucky999 operates as an online gaming and betting platform serving members in Pakistan. This Privacy Policy describes how Lucky999 collects, processes, stores, and protects the personal information of members who register and use our platform.

We have written this policy in plain, straightforward English because we believe Pakistani members deserve to understand clearly what happens to their data — not wade through pages of legal language designed to obscure rather than inform. If you have read the whole policy and still have a question, contact our support team and we will give you a direct answer.

This Privacy Policy applies to all Lucky999 members and to anyone who visits the Lucky999 website, whether or not they have created an account. It covers data collected through the Lucky999 website and any related communications including email and in-platform messages.

By registering on Lucky999 or by continuing to use our platform after this policy has been published or updated, you acknowledge that you have read and understood how we handle your personal data. This policy should be read alongside our Terms and Conditions.

2. Data We Collect

Lucky999 collects only the personal data that is necessary to operate your account and provide our services. The categories of data we collect are described below.

Lucky999 does not collect sensitive data categories such as biometric data, health information, or religious beliefs unless specifically required by a regulatory obligation. We collect the minimum amount of data necessary for each purpose.

3. How We Collect Your Data

Lucky999 collects your personal data through the following means:

• Registration: When you create your Lucky999 account, you provide your name, mobile number, and other identity details directly. This information forms the core of your member profile.
• Account use: Every time you deposit, place a bet, withdraw funds, or interact with the Lucky999 platform, data about that activity is recorded in your account history.
• Identity verification: When Lucky999 requests identity verification — for example, before processing a large withdrawal — you provide identity documents directly to our verification team.
• Cookies and technical tracking: Lucky999 automatically collects certain technical data about how you access and use the platform. See Section 9 for full details of our cookie and tracking practices.
• Customer support: When you contact Lucky999's support team via live chat or email, we record those communications for quality assurance and to maintain a record of your query and its resolution.
• Payment processors: When you make a deposit or withdrawal via Easypaisa, JazzCash, or other payment methods, our payment processors pass back confirmation data to Lucky999. We do not receive full payment credentials — we receive transaction reference numbers and status confirmations.

Lucky999 does not purchase data about Pakistani members from third-party data brokers or marketing databases. All data we hold about you came either from you directly or from systems generated by your use of the Lucky999 platform.

4. How We Use Your Data

Lucky999 uses the personal data we collect for the following specific purposes:

• Account management: To create, maintain, and administer your Lucky999 member account, including login authentication, account settings, and communication preferences.
• Service delivery: To process your bets, calculate and pay out winnings, apply bonus credits, and deliver all the gaming and betting services you use on Lucky999.
• Payments: To process deposits from your Pakistani payment accounts and to send withdrawal payments to your verified Easypaisa, JazzCash, bank, or card account.
• Identity verification: To verify that you meet Lucky999's age and eligibility requirements and to confirm your identity when required by our anti-money laundering obligations.
• Security and fraud prevention: To detect and prevent unauthorised account access, fraudulent transactions, multi-accounting, and other prohibited activities described in our Terms and Conditions.
• Customer support: To respond to your queries, resolve disputes, process responsible gaming requests such as self-exclusion, and maintain records of support interactions.
• Platform improvement: To understand how members use Lucky999 in aggregate, identify technical issues, and improve the performance and features of the platform.
• Legal and regulatory compliance: To meet our obligations under applicable laws including anti-money laundering regulations and to respond to lawful requests from authorities.
• Responsible gaming: To monitor account activity for signs of problem gambling behaviour and to enforce deposit limits and self-exclusion settings when these have been applied.

5. Legal Basis for Processing

Lucky999 processes your personal data on the following legal bases:

• Contract performance: Most of the data processing described in this policy is necessary to fulfil our contract with you as a Lucky999 member — to operate your account, process your bets, and pay out your winnings. Without this processing we cannot provide the service.
• Legal obligation: Some processing — particularly around identity verification and transaction records — is required by applicable laws including anti-money laundering and counter-terrorism financing regulations. Lucky999 is obligated to carry out this processing regardless of individual preference.
• Legitimate interests: Fraud prevention, security monitoring, and platform analytics are carried out under Lucky999's legitimate interest in maintaining a safe and well-functioning platform. These interests do not override the privacy rights of members where those interests are considered carefully.
• Consent: Where Lucky999 processes data for purposes that are not strictly necessary for the contract — such as sending you promotional content — we rely on your consent. You may withdraw this consent at any time without affecting your account standing.

6. Data Sharing

Lucky999 shares your personal data only in the following specific circumstances and only to the extent necessary for each purpose:

• Payment processors: To process your Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card transactions, Lucky999 shares transaction details with the relevant payment service provider. These providers are contractually bound to handle your data securely and only for payment processing purposes.
• Identity verification providers: When Lucky999 conducts Know Your Customer (KYC) verification, identity document data may be processed by a third-party verification service. These providers operate under strict data processing agreements with Lucky999.
• Technical infrastructure: Lucky999's platform runs on cloud and server infrastructure provided by reputable third-party technology providers. These providers store data on behalf of Lucky999 and are subject to contractual confidentiality and security requirements.
• Legal authorities: Lucky999 may disclose member data to law enforcement or regulatory authorities when required to do so by a valid legal order or where we have a good-faith obligation to report suspected illegal activity such as money laundering.
• Business transfers: If Lucky999's business is acquired, merged, or substantially restructured, member data may be transferred to the acquiring entity as part of that transaction. Members will be notified of any such change that materially affects how their data is processed.

What we never do: Lucky999 does not sell member data to advertisers, data brokers, or any third party for their own commercial purposes. We do not share your data with other gaming platforms, affiliates, or marketing networks for their own use. Your account details and transaction history remain strictly within the Lucky999 environment and the service providers listed above.

7. Payments and Financial Data

Lucky999 handles financial data with particular care given the sensitivity of payment information. The following principles apply to how we manage your financial data:

• All financial transactions on Lucky999 are conducted in PKR. No international currency conversion is applied and no data is shared with international financial networks beyond what is necessary for Visa/Mastercard processing where applicable.
• Lucky999 does not store complete Easypaisa or JazzCash account credentials on our servers. We store the account reference numbers and mobile numbers associated with your verified payment methods, which are used to direct withdrawals to the correct account.
• Full card numbers are never stored on Lucky999's servers. Card processing is handled by PCI-DSS compliant payment processors, and Lucky999 receives only tokenised references that cannot be used to make independent card charges.
• Transaction history — showing deposits, withdrawals, and bet settlements — is retained as part of your account record for a minimum of 5 years. This retention period is required by anti-money laundering regulations and is not discretionary.
• Withdrawals are only processed to payment methods that have been verified as belonging to the registered account holder. This policy exists to prevent both fraud and accidental misdirection of funds.

8. Data Security

Lucky999 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. The key security measures in place include:

• SSL encryption: All data transmitted between your device and Lucky999's servers is encrypted using 256-bit SSL (TLS) encryption. This means that data in transit cannot be intercepted and read by a third party.
• Access controls: Access to member personal data within Lucky999's systems is restricted to staff who need it to perform their job functions. Access is logged and regularly audited.
• Two-factor authentication: Lucky999 offers two-factor authentication (2FA) for member accounts. We strongly recommend all members enable 2FA in their account settings.
• Infrastructure security: Lucky999's servers and databases are hosted in secured data centre environments with physical and network-level security controls.
• Monitoring: Lucky999 employs automated monitoring systems to detect suspicious login attempts, unusual transaction patterns, and potential security breaches in real time.

While Lucky999 takes data security seriously and maintains robust protections, no system can guarantee absolute security. In the event of a data breach that poses a significant risk to members, Lucky999 will notify affected members promptly and take all necessary steps to contain the breach and prevent further unauthorised access.

Members also have a responsibility to keep their own account secure. Do not share your Lucky999 password with anyone. Do not log in on devices you do not trust. Use a strong, unique password and enable 2FA. If you believe your account has been compromised, contact Lucky999 support immediately via live chat.

9. Cookies and Technical Tracking

Lucky999 uses cookies and similar tracking technologies to operate the platform and understand how it is being used. A cookie is a small text file stored on your device by your browser when you visit a website.

Lucky999 uses the following categories of cookies:

• Essential cookies: These are necessary for the Lucky999 platform to function. They maintain your login session, remember your language preferences, and enable core features like the betting interface and account dashboard. These cookies cannot be disabled without breaking the platform.
• Analytics cookies: Lucky999 uses anonymised analytics data to understand how members navigate the platform, which game sections are most used, and where technical problems arise. This data is aggregated and cannot be used to identify individual members.
• Security cookies: These cookies help Lucky999 detect fraudulent behaviour, such as automated bot access or login attempts from unusual locations. They are part of our fraud prevention infrastructure.

Lucky999 does not use cookies to track your activity on other websites, to build advertising profiles, or to serve you targeted advertising on third-party platforms. We do not place third-party advertising cookies on the Lucky999 platform.

You can manage cookie settings through your browser. Disabling essential cookies will affect your ability to use the Lucky999 platform normally. Disabling analytics cookies will not affect your account functionality in any way.

10. Data Retention

Lucky999 retains your personal data for as long as your account is active and for certain defined periods after account closure. The retention periods we apply are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years after account closure. This period is driven by anti-money laundering regulatory requirements.
• Transaction and bet history: Retained for a minimum of 5 years from the date of each transaction. This data forms part of Lucky999's audit trail and is required by financial regulation.
• Customer support communications: Retained for 2 years from the date of the communication, or longer if the communication relates to an unresolved dispute or legal matter.
• Technical and device data: IP logs and session data are typically retained for 12 months and then anonymised or deleted unless they are relevant to an ongoing security investigation.
• Marketing preferences: Records of your marketing consent or opt-out are retained for as long as they are relevant to ensuring we send you only communications you have agreed to receive.

When the retention period for a category of data expires, Lucky999 securely deletes or anonymises that data. Anonymised data — data from which you cannot be identified — may be retained indefinitely for statistical and analytical purposes.

11. Your Privacy Rights

As a Lucky999 member and a data subject, you have the following rights regarding your personal data. These rights can be exercised by contacting Lucky999 support at support@lucky999-jit.com or via live chat.

12. Contact and Policy Updates

For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern about how Lucky999 handles your personal information, please contact our team:

• Live chat: Available from your Lucky999 account dashboard 24 hours a day, 7 days a week. This is the fastest channel for privacy queries.
• Email: support@lucky999-jit.com — privacy queries are responded to within 2 business hours during standard operating hours.

Lucky999 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements to our data practices. When material changes are made to this policy, Lucky999 will notify active members via email or in-platform notification where practicable. The updated policy will be published on this page with a revised "Last Updated" date at the top.

We recommend that all Lucky999 members review this Privacy Policy periodically — particularly before making significant deposits or participating in new platform features. Continued use of Lucky999 after an updated policy has been published constitutes acceptance of the revised terms.

Lucky999 is committed to handling your data responsibly and to responding to privacy concerns openly and promptly. If you feel that Lucky999 has not handled your personal data appropriately, please contact us first to give us the opportunity to resolve your concern before escalating to any external authority.