luky91 Privacy Policy — Your Data, Clearly Explained

luky91 (referred to in this document as "luky91", "we", "us", or "our") operates the online gaming platform accessible at luky91.asia. We are committed to protecting the personal data and privacy of every individual who visits, registers on, or interacts with our Platform.

This Privacy Policy ("Policy") applies to all personal data collected by luky91 through the Platform, through our customer support channels, and through any communications between you and luky91. It covers registered users ("Members"), unregistered visitors, and any individual whose personal data we process in connection with the operation of our services.

This Policy is incorporated by reference into luky91's Terms and Conditions. By registering for a luky91 account or by continuing to use the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.

luky91 collects personal data through several channels, including the registration process, ongoing account activity, identity verification procedures, payment transactions, customer support interactions, and automatic technical data collection during Platform use. The categories of data we collect are as follows:

luky91 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a CNIC or passport document incidentally contains such information as part of the standard document format.

luky91 uses the personal data we collect for the following documented purposes:

• Account Creation & Management: To register your account, verify your identity, maintain your player profile, and manage your PKR wallet balance.
• Service Delivery: To provide access to casino games, sports betting markets, live dealer tables, and all other Platform services you choose to use.
• Payment Processing: To process deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to execute withdrawal requests to your verified payment method.
• KYC & Regulatory Compliance: To verify your identity and age (21+) in accordance with anti-money-laundering (AML) obligations and responsible gaming requirements under our operating license.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and any other activity that may harm luky91 or other users.
• Responsible Gaming Monitoring: To identify patterns in your gaming behaviour that may indicate problem gambling, and to make responsible gaming tools and resources available to you.
• Customer Support: To respond to your queries, complaints, and requests submitted through live chat or email.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve our game offering, user interface, payment systems, and overall service quality.
• Legal Obligations: To comply with requirements from luky91's licensing authority, financial regulators, or law enforcement agencies where legally compelled to do so.
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates — subject to your communication preferences and opt-out rights.

luky91 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and luky91 — including account registration, game access, payment processing, and withdrawal handling.
• Legal Obligation: Processing required to comply with legal requirements applicable to luky91 — including KYC/AML verification, age verification, licensing obligations, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out for luky91's legitimate business interests — including fraud prevention, security monitoring, Platform analytics, and responsible gaming monitoring — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent — primarily for marketing communications and optional analytics cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

luky91 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — to process your deposits and withdrawals. Only the transaction-relevant data required by each provider is shared.
• Identity Verification Services: Third-party KYC providers engaged by luky91 to verify the authenticity of identity documents submitted during account verification.
• Fraud Prevention Services: Specialised providers who assist luky91 in detecting and preventing fraudulent activity and money laundering.
• Game Content Providers: Third-party game developers and providers whose titles are hosted within the luky91 lobby may receive anonymised session data required to operate their games and RNG certification audits.
• Licensing Authority: luky91's international gaming licensing authority may require access to certain player data records as part of regulatory compliance and audit processes.
• Law Enforcement & Regulatory Bodies: Where luky91 is legally compelled by a valid court order, regulatory directive, or law enforcement request to disclose specific player data.

luky91 uses cookies — small text files stored on your device — and similar tracking technologies to operate and improve the Platform. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your login state, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Preference Cookies: Store your Platform settings and preferences — such as language selection, game lobby display preferences, and notification settings — so they persist between sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate the Platform — which pages are visited most, how long sessions last, and which game categories attract the most engagement. This data informs Platform improvements.
• Security Cookies: Used to detect and prevent fraudulent activity, including unusual login patterns, suspicious device behaviour, and account takeover attempts.

Strictly necessary and security cookies operate without requiring your consent as they are essential to Platform operation and security. Analytics and preference cookies may be managed through your browser settings. Most modern browsers allow you to block or delete cookies — note that blocking strictly necessary cookies will impair your ability to use the Platform.

luky91 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active membership with luky91, plus a period thereafter as required by licensing and AML obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction in accordance with standard AML record-keeping requirements.
• KYC Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the last transaction, whichever is later.
• Customer Support Communications: Retained for three (3) years following the resolution of the relevant support interaction.
• Gaming Activity Logs: Retained for five (5) years for regulatory compliance purposes including responsible gaming monitoring and dispute resolution.
• Technical & Session Data: Retained for up to twelve (12) months for security and fraud analysis purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

As a user of the luky91 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact luky91 via live chat or at [email protected]. We will respond to all valid requests within thirty (30) days of receipt.

The luky91 Platform is strictly restricted to individuals aged 21 years and above. luky91 does not knowingly collect personal data from any person under the age of 21, and the Platform's registration process includes age verification steps designed to identify and reject applications from underage individuals.

If luky91 discovers that personal data has been collected from a person under the age of 21, all data associated with that account will be deleted immediately, the account will be closed, and any deposits made to the account will be returned to their originating payment method. Any gameplay or winnings associated with an underage account will be voided.

If you believe that a minor has registered a luky91 account without your knowledge, please contact luky91 support immediately via live chat so that the account can be identified and closed without delay.

luky91 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and luky91's servers is encrypted using 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data stored on luky91's servers is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to luky91 personnel and authorised service providers on a strict need-to-know basis. All access is logged and regularly audited.
• Two-Factor Authentication: luky91 offers SMS-based two-factor authentication for all accounts, providing an additional layer of security beyond the account password.
• Security Monitoring: luky91's systems are continuously monitored for unusual activity, intrusion attempts, and data anomalies. Alerts trigger immediate investigation and response.
• Regular Security Reviews: luky91 conducts periodic security assessments of its infrastructure, data handling processes, and third-party service provider arrangements.

While luky91 applies rigorous security standards, no digital system is entirely immune to risk. In the event of a data security incident that materially affects your personal data, luky91 will notify you as required under applicable data protection obligations.

luky91 operates as an international platform and, as a result, your personal data may be processed on servers located outside Pakistan. Where personal data is transferred to third-party service providers located in other jurisdictions — including KYC verification partners, fraud prevention services, and game content providers — luky91 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

These safeguards include contractual data processing agreements with all third-party recipients that bind them to equivalent data protection standards, and luky91's selection criteria for third-party partners includes assessment of their data security practices and jurisdiction-specific compliance obligations.

luky91 may send you promotional communications including bonus offers, reload promotions, free spin notifications, cricket betting market alerts, PSL-related offers, and general platform updates. These communications are sent via SMS to your registered Pakistani mobile number and/or via email to your registered address.

You may opt out of receiving marketing communications from luky91 at any time by:

• Updating your notification and communication preferences in your luky91 account settings dashboard.
• Contacting luky91 customer support via live chat or at [email protected] and requesting removal from marketing lists.

Please note that opting out of marketing communications does not opt you out of essential transactional communications related to your account — such as deposit confirmations, withdrawal notifications, security alerts, and KYC verification requests. These communications are sent on the basis of contractual necessity and cannot be disabled while your account remains active.

luky91 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform operations. The effective date of the current version is displayed at the top of this Policy and is updated with each revision.

Where changes to the Policy are material — meaning they significantly alter the way we collect, use, or share your personal data — luky91 will notify registered users via SMS and/or email to their registered contact details prior to the changes taking effect. Continued use of the Platform following notification of material changes constitutes your acceptance of the revised Policy.

We encourage you to review this Privacy Policy periodically. The most current version will always be accessible at luky91.asia/privacy-policy.

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy-related concern or complaint, please contact luky91 through either of the following channels:

Live Chat: Available 24 hours a day, 7 days a week, directly within the luky91 Platform. This is the fastest route for all privacy enquiries.

Email: [email protected] — For formal written privacy requests and complaints. All privacy-related emails are reviewed by luky91's data compliance function and responded to within thirty (30) days of receipt.

If you are not satisfied with luky91's response to your privacy complaint, you have the right to escalate the matter to the relevant authority responsible for overseeing data protection compliance under luky91's international operating license. Details of the relevant supervisory authority are available upon written request to luky91's support team.