Lucky99 Privacy Policy – How We Protect Your Data

1. About This Privacy Policy

Lucky99 is committed to handling the personal data of its players with respect, care and transparency. This Privacy Policy is intended to tell you clearly — without unnecessary legal jargon — exactly how your data is collected, why it is used, how long it is kept and what your rights are in relation to it.

This policy applies from the moment you first visit lucky99-win.net, whether or not you create an account. By registering an account and using lucky99's services, you confirm that you have read this Privacy Policy and that you consent to the data practices described here. If you do not agree, please do not register or use the platform.

This Privacy Policy should be read alongside our Terms and Conditions. In the event of any conflict between this policy and the Terms, the Terms will prevail unless otherwise stated.

2. Data We Collect

Lucky99 collects personal data in the following categories depending on how you interact with the platform:

2.1 Registration Data

When you create a lucky99 account, we collect the information you provide during registration. This typically includes:

• Full legal name
• Date of birth (to confirm you are 18 or older)
• Mobile phone number
• Email address
• Preferred username and password (stored in encrypted form)
• City or region of residence within Pakistan

2.2 Verification Data (KYC)

Lucky99 is required to verify the identity of players before processing withdrawals and in certain other circumstances. When you submit identity documents we collect:

• Copy of your CNIC (Computerised National Identity Card), passport or other government-issued ID
• Selfie or live photo for identity matching (where required)
• Proof of address documentation (where required)

KYC documents are used only for identity verification and anti-money-laundering compliance. They are stored securely and are not used for any marketing purpose.

2.3 Financial Data

To process your deposits and withdrawals at lucky99, we collect transactional data including:

• Payment method type (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa/Mastercard)
• Transaction amounts and timestamps in PKR
• Mobile wallet identifiers or masked card/account numbers used for transactions

Lucky99 does not store full card numbers or full mobile wallet PINs. Payment processing is handled through PCI-DSS compliant third-party providers.

2.4 Betting and Gaming Activity

Lucky99 records all bets, wagers and casino activity associated with your account. This includes bet selections, stakes, odds, outcomes, session duration and game history. This data is essential for account management, dispute resolution and responsible gaming monitoring.

2.5 Technical and Device Data

When you access lucky99, our systems automatically collect certain technical information including:

• IP address and approximate geographic location
• Device type, model and operating system
• Browser type and version
• Session start and end times
• Pages and features accessed within the platform

2.6 Communications Data

If you contact lucky99 customer support — via live chat, email or any other channel — we retain a record of those communications to help us resolve your query and improve our service quality.

3. How We Use Your Data

Lucky99 uses your personal data for the following purposes:

• Account operation: Creating and maintaining your lucky99 account, processing deposits and withdrawals, settling bets, applying bonuses and delivering the full platform experience.
• Identity verification: Confirming that you are who you say you are, that you are aged 18 or older, and that your payment methods belong to you — all required for legal compliance and player protection.
• Security and fraud prevention: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, money laundering and other prohibited activity.
• Responsible gaming: Monitoring player behaviour patterns to identify signs of problematic gambling and to apply or enforce the responsible gaming tools requested by players — including deposit limits, cool-off periods and self-exclusion.
• Customer support: Handling your queries, resolving disputes, processing complaints and providing assistance across all lucky99 products.
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money-laundering regulations, data protection requirements and any other legal obligations that apply to the operation of the lucky99 platform.
• Service improvement: Analysing aggregated, anonymised usage data to understand how players use lucky99, identify issues and improve the platform experience.
• Communications: Sending you account notifications, transaction confirmations, bonus information and updates about changes to our products or policies. You can manage communication preferences in your account settings.

4. Legal Basis for Processing

Lucky99 processes your personal data on the following legal grounds depending on the purpose:

• Contract performance: Processing your registration data, financial data and betting activity is necessary to fulfil our contractual obligations to you as a lucky99 account holder.
• Legal obligation: Identity verification (KYC), anti-money-laundering checks and data retention for financial records are required by law.
• Legitimate interests: Security monitoring, fraud detection, platform analytics and responsible gaming monitoring are based on our legitimate interest in operating a safe, sustainable and fair platform.
• Consent: Where we send you promotional communications or use non-essential cookies, we rely on your consent. You may withdraw consent at any time through your account communication preferences or via the cookie management tool.

5. Sharing Your Data

Lucky99 does not sell, rent or trade your personal data to third parties for commercial or marketing purposes — full stop. We do share data in the following limited circumstances:

5.1 Payment Processors

When you make a deposit or withdrawal, lucky99 shares the minimum necessary data with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT) or your card scheme (Visa/Mastercard). This is necessary to complete your transaction and is governed by each provider's own privacy practices.

5.2 Identity Verification Providers

Lucky99 uses accredited KYC service providers to verify the identity documents you submit. These providers process your document data solely for the purpose of verification and are contractually prohibited from using it for any other purpose.

5.3 Legal and Regulatory Authorities

Lucky99 will disclose personal data to law enforcement, financial intelligence units or other regulatory authorities when required to do so by law or pursuant to a valid legal order. Lucky99 will notify you of such disclosure unless prohibited from doing so by law.

5.4 Technology Service Providers

Lucky99 works with third-party technology providers — including cloud hosting, security monitoring and customer support software — who may process personal data on our behalf as data processors. All such providers are subject to strict data processing agreements and are required to maintain appropriate security standards.

6. Cookies and Tracking

Lucky99 uses cookies and similar tracking technologies on its website. Cookies are small data files placed on your device when you visit lucky99-win.net. They help the platform function correctly, keep you logged in securely and allow us to understand how the platform is being used.

6.1 Types of Cookies Used

• Essential cookies: Required for basic platform functionality — login sessions, account security, bet placement and transaction processing. These cannot be disabled without breaking core features.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the platform. This helps lucky99 identify and fix usability issues and improve the overall experience.
• Preference cookies: Store your language preferences, display settings and other personalisation choices so you don't have to reset them on every visit.

6.2 Managing Cookies

You can control non-essential cookies through the cookie settings panel available on the lucky99 website. You may also manage cookies at the browser level — most modern browsers allow you to view, block or delete cookies in your browser settings. Note that disabling essential cookies will affect your ability to use lucky99's core features including login and bet placement.

7. Data Retention

Lucky99 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following guidelines:

• Active accounts: Data associated with your active lucky99 account is retained for as long as your account remains open.
• Closed accounts: After account closure, lucky99 retains your data for a minimum of five years to comply with anti-money-laundering regulations, financial record-keeping requirements and to handle any late-arising disputes.
• KYC documents: Identity verification documents are retained for a minimum of five years from the date of submission or from account closure, whichever is later.
• Financial transaction records: Deposit and withdrawal records are retained for a minimum of five years from the date of each transaction.
• Support communications: Records of customer support interactions are typically retained for three years after the interaction, unless they relate to an ongoing dispute or legal matter.
• Technical logs: IP address logs and access logs are typically retained for no longer than 12 months unless required for a specific security investigation.

After the applicable retention period, lucky99 will securely delete or anonymise your personal data. Anonymised data may be retained indefinitely for statistical and analytical purposes without identifying you as an individual.

8. Data Security

Lucky99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. Our security framework includes:

• SSL/TLS encryption: All data transmitted between your device and lucky99 servers is encrypted in transit using industry-standard TLS protocols.
• Encryption at rest: Sensitive data stored on lucky99 servers — including passwords, payment identifiers and KYC documents — is encrypted using strong encryption algorithms.
• Access controls: Access to personal data within lucky99's systems is limited to staff members who genuinely need it to perform their job functions. All staff with access to personal data are bound by confidentiality obligations.
• Two-factor authentication: Lucky99 supports and encourages the use of two-factor authentication on all player accounts as an additional layer of security.
• Regular security audits: Lucky99 conducts regular internal security reviews and uses third-party security testing to identify and address vulnerabilities in the platform.
• PCI-DSS compliance: Payment card processing at lucky99 meets Payment Card Industry Data Security Standard requirements.

While lucky99 takes significant steps to protect your data, no online platform can guarantee absolute security. If you suspect that your lucky99 account has been compromised, contact our support team immediately via live chat or at support@lucky99-win.net.

9. Your Rights

As a lucky99 player, you have clear rights over your personal data. Lucky99 is committed to honouring those rights promptly and without unnecessary barriers.

To exercise any of these rights, contact lucky99 support via live chat in your account or at support@lucky99-win.net. Please include "Data Rights Request" in your subject line and specify which right you want to exercise. Lucky99 will respond within 30 days. Some requests may require identity verification before we can proceed.

10. Responsible Gaming and Data

Lucky99's responsible gaming programme relies on data analysis to function effectively. We monitor betting patterns, session durations, deposit frequency and other behavioural indicators to identify players who may be showing signs of problem gambling. This monitoring is conducted in the genuine interest of player welfare and is not used for any commercial profiling purpose.

Where our monitoring identifies potential concern — such as a sudden large increase in deposit amounts, very long uninterrupted sessions or a pattern of chasing losses — a member of the lucky99 responsible gaming team may reach out to you. This communication is always private, non-judgmental and focused on ensuring you are aware of the tools available to help you manage your play.

Data related to responsible gaming — including any limits, cool-off periods or self-exclusion arrangements you set — is retained for the lifetime of your account and for a period after closure to prevent re-registration during an exclusion period. Lucky99 takes these records seriously and will not remove or override active self-exclusion or restriction settings on request during the exclusion period.

For more information about our responsible gaming tools and how to access them, visit the Responsible Gaming section of lucky99.

11. Updates to This Privacy Policy

Lucky99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or the services we offer. When we make material changes, we will notify registered players by email or by posting a prominent notice on the lucky99 platform before the changes take effect.

The "Last Updated" date displayed at the top of this page tells you when the most recent revision was made. The current version of this Privacy Policy is always available at lucky99-win.net/privacy-policy. We encourage you to check back periodically, particularly if you are a regular lucky99 player.

Your continued use of lucky99 after any update to this Privacy Policy constitutes acceptance of the revised terms. If you do not agree to any updated version, you should request account closure before the effective date of the update.