Lucky 99 Privacy Policy

1 Introduction

This Privacy Policy explains how Lucky 99 collects, uses, stores, and protects the personal information of players who register on the platform and use its services — including casino games, slot games, bingo, sports betting, and any associated features available through the website or mobile app.

When you create a Lucky 99 account, make a deposit, place a bet, or simply browse the platform, certain information about you is processed. This policy tells you what that information is, why we need it, and what your rights are in relation to it.

This policy applies to all players accessing Lucky 99 from Pakistan. It should be read alongside the Terms and Conditions and the Responsible Gaming policy, both of which are part of your overall agreement with us.

2 Data We Collect

Lucky 99 collects personal data in several ways — directly from you when you register or use the platform, automatically when you interact with it, and occasionally from third-party sources involved in payment processing or fraud prevention.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, or health information. If such data is incidentally included in documents you submit for verification, it is used only for the verification purpose and not stored beyond what is necessary.

3 How We Use Your Data

Lucky 99 uses your personal information for a range of purposes that are necessary to operate the platform and maintain a fair, secure environment for all players.

• Account management: Creating and maintaining your player account, verifying your identity, and processing your registrations and logins.
• Transaction processing: Handling PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, bank transfer, and other supported payment methods.
• Game and betting services: Enabling access to casino games, slots, bingo, live dealer tables, and cricket and football betting markets.
• Bonus and promotions management: Determining eligibility for offers, tracking wagering requirements, and crediting rewards correctly.
• Security and fraud prevention: Detecting and investigating suspicious activity, duplicate accounts, and unauthorised access attempts.
• Responsible gaming: Monitoring play patterns to identify potential problematic behaviour and presenting relevant self-management tools where appropriate.
• Legal compliance: Meeting record-keeping obligations and responding to lawful requests from relevant authorities.
• Customer support: Responding to your queries, resolving disputes, and improving service quality based on support interactions.
• Platform improvement: Analysing usage patterns in aggregate form to improve game selection, navigation, and overall player experience.

We do not use your personal data for automated decision-making that produces significant legal effects on you without a human review process being available.

4 Legal Basis for Processing

Every instance of data processing at Lucky 99 is carried out on one of the following legal bases:

• Contract performance: Processing that is necessary to provide you with the services you signed up for — running your account, processing transactions, and delivering games.
• Legitimate interests: Processing that is necessary for our reasonable business interests, such as fraud detection, security monitoring, and improving the platform — provided those interests are not overridden by your rights.
• Legal obligation: Processing required to comply with applicable law, including financial record-keeping and responding to lawful regulatory enquiries.
• Consent: Processing activities for which we have explicitly asked for and received your consent — such as sending you promotional communications. You may withdraw consent for these activities at any time.

5 Sharing Your Data

Lucky 99 does not sell your personal data. We share it only where necessary to operate the platform, comply with legal obligations, or protect the security of the platform and its players. The categories of recipients are:

• Payment processors: Third-party services that handle deposits and withdrawals, including JazzCash, Easypaisa, Raast, and banking partners. These parties receive only the data necessary to process your specific transaction.
• Identity verification providers: Services used to verify your identity and age where required. They process the documents you submit and return a verification result.
• Game software providers: The studios and suppliers whose games are available on Lucky 99. These providers may receive anonymised session identifiers to operate game round logic, but not your full personal profile.
• Fraud prevention services: Third-party tools used to detect and prevent fraudulent account activity. They may process technical data such as IP addresses and device identifiers.
• Legal and regulatory authorities: Where we are required by law to disclose information, we will do so. We will notify you where we are legally permitted to.

All third parties with whom Lucky 99 shares personal data are required to handle it securely and only for the stated purpose. They are not permitted to use your data for their own marketing.

6 Payment Data

When you make a deposit or request a withdrawal in PKR, your payment details are processed by the relevant payment provider — JazzCash, Easypaisa, Raast, your bank, or your card issuer. Lucky 99 does not store full card numbers or mobile wallet PINs on its own systems.

What Lucky 99 does retain is a record of the transaction amount, the payment method type, the date and time of the transaction, and a masked or tokenised identifier provided by the payment processor. This information is necessary for your account history, dispute resolution, and our financial record-keeping obligations.

If a chargeback or payment dispute arises, Lucky 99 may share relevant transaction data with the payment provider or relevant financial institution to resolve the matter. This is a legitimate processing activity arising from the payment contract.

7 Cookies and Tracking Technologies

Lucky 99 uses cookies and similar technologies to operate the platform, keep you logged in between sessions, remember your preferences, and understand how players use the site so we can improve it.

• Essential cookies: Required for the platform to function — these handle session authentication, security tokens, and basic navigation. They cannot be disabled without affecting how the site works.
• Functional cookies: Remember your settings and preferences, such as language choice and display options, across sessions.
• Analytics cookies: Collect anonymised or aggregated data about how pages are used, which games are most popular, and where players encounter navigation issues. This helps us improve the experience.
• Security cookies: Help detect unusual activity patterns, such as multiple failed login attempts from the same device, to protect your account.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using Lucky 99, though some features may behave differently. Lucky 99 does not use third-party advertising cookies or share browsing data with ad networks.

8 How Long We Keep Your Data

Lucky 99 retains personal data for as long as it is needed for the purpose it was collected, and for any additional period required by law or legitimate business need.

• Active accounts: Account data is held for the full duration your account is active on the platform.
• Closed accounts: Following account closure, personal data is retained for a further defined period for legal, audit, and dispute resolution purposes. After that period, data is deleted or anonymised.
• Transaction records: Financial transaction records are held for the period required by applicable financial record-keeping rules.
• Support communications: Chat logs and email records related to support queries are held for a limited period to allow follow-up and quality review.
• Fraud and security records: Where an account was closed due to fraud or serious policy breach, we may retain certain identifiers for a longer period to prevent the opening of future accounts using the same details.

When data is no longer required and no legal obligation requires us to retain it, it is securely deleted or rendered permanently anonymous.

9 Your Data Rights

As a player whose personal data Lucky 99 processes, you have a number of rights. These are not unlimited — some depend on the legal basis for processing and may be subject to legal or regulatory constraints — but we take them seriously and will respond to requests promptly.

To exercise any of these rights, contact the Lucky 99 support team through your account. We will verify your identity before processing the request and aim to respond within a reasonable timeframe. Requests that are manifestly unfounded or excessive may be declined, with an explanation provided.

10 How We Protect Your Data

Lucky 99 takes data security seriously and has put in place a range of technical and organisational measures to protect your personal information against accidental loss, unauthorised access, disclosure, or misuse.

• All data in transit between your device and Lucky 99 servers is protected with TLS encryption.
• Sensitive stored data — including identity verification documents — is encrypted at rest.
• Access to player data within Lucky 99 is restricted on a need-to-know basis. Staff who do not need access to personal data as part of their role do not have it.
• Systems are monitored for unusual activity and access attempts on an ongoing basis.
• In the event of a data breach that is likely to affect your rights, we will take prompt action and notify affected players as required.

While Lucky 99 takes all reasonable steps to protect your data, no online platform can guarantee complete security. You also play a role — keeping your password strong and not sharing your account credentials reduces the risk of unauthorised access significantly.

11 Minors and Age Restriction

Lucky 99 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. The registration process includes age confirmation, and identity verification may be requested before withdrawals are processed.

If Lucky 99 becomes aware that an account has been created by or on behalf of a minor, the account will be closed immediately, any funds will be handled in line with responsible gaming obligations, and the personal data will be deleted except where retention is required by law.

If you believe a minor has created an account on Lucky 99, please contact our support team immediately.

12 Changes to This Policy

Lucky 99 may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or our data processing practices. When changes are made, the updated policy will be published on this page with a revised "Last updated" date.

For significant changes that affect how your data is used in a material way, we will make reasonable efforts to notify you through the platform or using the contact details held on your account. Your continued use of Lucky 99 after a policy update is published constitutes your acknowledgement of the revised terms.

We recommend checking this page periodically so you are always aware of how your data is being handled.

13 Contact and Data Queries

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal information has been handled, please get in touch with the Lucky 99 support team.

Support is available 24 hours a day, seven days a week through the live chat feature in your account. You can also visit the FAQ page for answers to common questions about accounts, payments, and data.