Lucky99 Privacy Policy — How We Handle Your Personal Data

Lucky99 is an online gaming platform operating at lucky99-khelo.net, providing casino games, sports betting, and entertainment services to eligible players. For the purposes of this Privacy Policy, Lucky99 is the data controller — meaning we determine how and why personal data about our players is collected and processed.

This policy is written to be read and understood by our Pakistani players. We have deliberately avoided dense legal language — our goal is for you to finish reading this page with a clear, practical understanding of exactly how your data is handled when you use Lucky99.

Lucky99 collects only the data that is genuinely necessary to operate the platform safely and legally. Here is a clear breakdown of every category of data we collect and how it comes to us:

Lucky99 collects personal data for specific, legitimate purposes. We do not collect data speculatively or "just in case." Every piece of information we hold about you serves one of the following purposes:

• Account creation and verification: To create your Lucky99 account and verify that you are who you say you are — essential for a real-money gaming platform.
• Processing deposits and withdrawals in PKR: To correctly credit deposits to your Lucky99 balance and route withdrawal payments to your Easypaisa, JazzCash, or bank account.
• Identity verification (KYC): To comply with our obligation to verify player identities, confirm legal age (18+), and prevent money laundering and fraud.
• Customer support: To identify your account, review your transaction history, and resolve your support queries effectively.
• Security and fraud prevention: To detect and prevent unauthorised access, multi-accounting, bonus abuse, and fraudulent payment activity on Lucky99.
• Platform improvement: To understand how Pakistani players use Lucky99 and make the product better — improving load times, game selection, and mobile performance.
• Marketing communications: To send you relevant bonus offers, game announcements, and PSL Betting promotions — only where you have opted in to receive them.
• Responsible gaming monitoring: To identify patterns of play that may indicate a player is experiencing difficulty, so that appropriate support can be offered.

Lucky99 processes your personal data on one or more of the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations to you as a Lucky99 player — processing payments, managing your account, settling bets.
• Legal obligation: Processing required to comply with anti-money laundering obligations, age verification requirements, and law enforcement requests.
• Legitimate interests: Processing for fraud prevention, platform security, and improving our services — where our legitimate interests are not outweighed by your privacy rights.
• Consent: Where we rely on your consent — specifically for marketing communications — you have the right to withdraw that consent at any time by contacting Lucky99 support or updating your account notification preferences.

Beyond the purposes described above, here is a practical breakdown of how your data flows within Lucky99's day-to-day operations:

• Your mobile number is used to send OTP codes during login, withdrawal confirmations, and security alerts. It is not used for unsolicited marketing unless you explicitly opt in.
• Your transaction history is used internally to calculate bonus wagering completion, resolve payment disputes, and generate your account statements — available to you at any time through your Lucky99 dashboard.
• Your IP address and device information are used to detect suspicious login attempts and multi-account activity. Lucky99 cross-references IP data with known fraud patterns to protect all players on the platform.
• Your game activity data is used in aggregate, anonymised form to understand which Lucky99 products are most popular and where performance improvements are needed. Individual game histories are not shared externally.
• Email communications from Lucky99 will always include an unsubscribe option for marketing messages. Transactional communications — such as withdrawal confirmations and security alerts — cannot be opted out of, as they are essential to your account security.

Lucky99 does not sell, rent, or trade your personal data to third parties. Full stop. There are, however, limited circumstances in which your data is shared with external parties — always for specific, legitimate reasons:

• Payment processors: When you deposit or withdraw PKR via Easypaisa, JazzCash, NayaPay, SadaPay, or bank transfer, your payment details are shared with the relevant payment processor to execute the transaction. These processors are bound by strict data security obligations.
• Identity verification providers: Third-party KYC services may process your CNIC and identity documents to confirm your identity. These providers are under strict contractual obligations regarding data security and are not permitted to use your data for any other purpose.
• Game software providers: Some Lucky99 games are powered by licensed third-party game studios. Minimal game session data may be shared with these providers for technical operation purposes. No financial data or contact details are shared with game providers.
• Legal and regulatory authorities: Lucky99 may be required to disclose player data to law enforcement, financial intelligence units, or regulatory bodies if legally compelled to do so. In such cases, Lucky99 will comply with applicable legal requirements.
• Fraud prevention services: Anonymised fraud signal data may be shared with industry fraud prevention networks to protect Pakistani players across multiple platforms.

Lucky99 retains personal data only for as long as it is necessary to fulfil the purposes described in this policy, or as required by law. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your account plus 5 years following account closure, in order to comply with anti-money laundering and financial record-keeping requirements.
• Transaction and financial data: Retained for a minimum of 5 years following each transaction, in accordance with financial reporting obligations.
• Support communications: Chat transcripts and email records are retained for 2 years following the closure of each support case.
• Technical and usage data: Retained in aggregate, anonymised form for up to 2 years for platform analytics purposes. Raw session logs are retained for 90 days.
• Marketing preferences: Records of your marketing opt-in and opt-out history are retained indefinitely to ensure we respect your communication preferences.

When data reaches the end of its retention period, Lucky99 securely deletes or anonymises it so that it can no longer be linked to you as an individual.

Lucky99 takes the security of your personal data seriously. The following technical and organisational measures are in place to protect your information:

• SSL/TLS encryption: All data transmitted between your device and Lucky99 servers is encrypted in transit using industry-standard SSL/TLS protocols. You can verify this by the padlock icon in your browser's address bar.
• Encrypted data storage: Sensitive personal data including CNIC numbers and financial account details are stored in encrypted form at rest. Encryption keys are managed separately from the encrypted data.
• Access controls: Access to personal data within Lucky99's systems is restricted on a need-to-know basis. Staff members can only access the player data relevant to their specific role and responsibilities.
• Two-factor authentication: Lucky99 offers 2FA for all player accounts and uses internal 2FA requirements for all staff accessing production data systems.
• Regular security audits: Lucky99's platform and data infrastructure are subject to regular security reviews and penetration testing by independent specialists.
• Breach response protocol: In the unlikely event of a data breach affecting your personal information, Lucky99 will notify affected players as soon as practically possible and take immediate steps to contain and remediate the breach.

Lucky99 uses cookies and similar technologies on our platform. Cookies are small text files stored on your device that help the platform function correctly and improve your experience. Here is a plain-English breakdown of the cookies Lucky99 uses:

You can manage cookie preferences through your browser settings at any time. Please note that disabling essential cookies will impair the functionality of Lucky99 significantly.

As a Lucky99 player, you have the following rights regarding your personal data. To exercise any of these rights, simply contact us at support@lucky99-khelo.net with your account mobile number and a description of your request. We will respond within 48 hours and complete the request within 30 days.

Lucky99 is strictly an 18+ platform. We do not knowingly collect or process personal data belonging to individuals under the age of 18. Age verification is performed during account registration, and further verification may be requested at any point.

If Lucky99 discovers or is informed that data belonging to a minor has been collected, that account will be immediately suspended, all associated data will be deleted, and any funds deposited to the account will be returned to the original payment method pending investigation. If you believe a minor has registered on Lucky99, please contact us immediately at support@lucky99-khelo.net.

Lucky99 may update this Privacy Policy from time to time to reflect changes in our data practices, new Lucky99 products or features, or changes in applicable law. When significant changes are made, registered players will be notified by email or through an in-platform notification before the changes take effect.

The "Last Updated" date at the top of this page will be revised each time the policy is updated. We encourage all Lucky99 players to review this page periodically to stay informed about how their data is being handled.

For any question, concern, or request related to this Privacy Policy or the personal data Lucky99 holds about you, please reach out through any of the following:

• Email (preferred for privacy requests): support@lucky99-khelo.net — please include "Privacy Request" in your subject line and your registered mobile number in the message body.
• Live Chat: Available on Lucky99 24/7 — accessible from any page. Our agents can log a privacy request and escalate it to the appropriate team on your behalf.
• FAQ Centre: Visit our FAQ page — it covers the most common questions about data access, deletion, and marketing opt-outs on Lucky99.

We are committed to resolving all privacy requests within 30 days of receipt. Complex requests involving large volumes of data or requiring legal consultation may take slightly longer — in which case we will communicate the expected timeline to you directly.