luck96 Privacy Policy

luck96 is Pakistan's premier online casino and sports betting platform, serving players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. We take data privacy seriously — not because we have to, but because our players deserve to know exactly how their information is being handled.

This Privacy Policy applies to all personal data collected through the luck96 website at luck96.app, our mobile applications, and any associated services, communications, or promotional channels. It covers every stage of your relationship with luck96 — from the moment you land on our homepage to the point you request a withdrawal or contact our support team.

This policy is written in plain English and structured to be genuinely readable. If any section is unclear, our support team is available around the clock to clarify.

For the purposes of data protection law, luck96 acts as the data controller in respect of all personal data collected from players accessing the platform. As data controller, luck96 determines the purposes and means by which your personal data is processed.

luck96 operates under an internationally recognised gaming licence. All data processing activities are carried out in compliance with the data protection obligations imposed by that licensing regime, as well as applicable international data protection standards including the principles established under the General Data Protection Regulation (GDPR) where relevant.

Where luck96 engages third-party service providers who process personal data on its behalf — such as payment processors, KYC verification providers, and analytics platforms — those providers act as data processors under binding contractual agreements that restrict their use of your data to the specific purposes authorised by luck96.

luck96 collects personal data through several channels, including the registration process, account activity, KYC verification, customer support interactions, and automated technical systems. The categories of data we collect are set out below.

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or biometric data beyond what is strictly necessary for age and identity verification purposes.

luck96 uses your personal data strictly for the purposes listed below. We do not sell your data to third parties. We do not use your data for purposes unrelated to the operation of the luck96 platform.

• Account Management — Creating and maintaining your player account, verifying your identity at registration, and managing account security including password resets and two-factor authentication.
• Service Delivery — Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK; providing access to casino games, live dealer tables, sports betting markets, and other platform features.
• KYC & Compliance — Verifying that you meet the 21+ age requirement, confirming your identity and address, and conducting anti-money laundering (AML) checks as required under our licensing obligations.
• Responsible Gaming — Monitoring gaming patterns to identify signs of problem gambling, implementing deposit limits and self-exclusion tools activated by the player, and contacting players where welfare concerns arise.
• Fraud Prevention — Detecting and investigating suspicious activity, duplicate accounts, bonus abuse, and payment fraud to protect the integrity of the platform and its player community.
• Customer Support — Responding to queries, complaints, and disputes submitted via live chat or email, and maintaining records of communications for quality assurance.
• Platform Improvement — Analysing aggregated, anonymised usage data to improve game selection, user interface design, and overall platform performance.
• Marketing Communications — Sending promotional emails and notifications to players who have opted in, in accordance with Section 11 of this policy.

luck96 processes your personal data on the following legal bases, applied depending on the specific activity:

• Contractual Necessity — The majority of processing activities are necessary to perform our contract with you (the Terms & Conditions you accepted at registration). This covers account creation, payment processing, game delivery, and customer support.
• Legal Obligation — Certain processing activities are required to comply with legal and regulatory obligations, including KYC verification, AML checks, age verification, and retention of financial records.
• Legitimate Interests — Some processing activities are carried out on the basis of luck96's legitimate business interests, including fraud detection, platform security, and product improvement, provided those interests are not overridden by your data protection rights.
• Consent — Where we rely on consent — such as for direct marketing emails — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. See Section 11 for marketing preferences.

luck96 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and understand how players interact with our site. Cookies are small text files stored on your device when you visit luck96.app.

We use the following categories of cookies:

• Strictly Necessary Cookies — These are essential to the operation of the platform. They enable you to log in, maintain your session, and use core features. These cookies cannot be disabled without breaking the platform's core functionality.
• Functional Cookies — These remember your preferences such as language, display settings, and responsible gaming tool configurations, so you do not need to re-enter them each session.
• Analytics Cookies — These help us understand how players navigate the platform — which pages are visited most, where sessions end, and which features generate the most engagement. All analytics data is aggregated and anonymised.
• Security Cookies — Used to detect and prevent fraudulent activity, unauthorised access attempts, and unusual session behaviour.

You can control non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect your experience on the luck96 platform.

luck96 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive transaction data necessary to process your deposits and withdrawals. Each processor is bound by its own regulatory obligations and data protection agreements.
• KYC & Identity Verification Providers — Specialist third-party providers assist with CNIC verification, age confirmation, and AML screening. These providers act strictly as data processors under luck96's instruction.
• Fraud Prevention Services — We may share data with industry fraud-prevention databases to detect and prevent financial crime, multi-accounting, and bonus abuse across the gaming industry.
• Regulatory Authorities — We are required by our gaming licence to share certain data with our licensing authority upon request. We may also be legally compelled to disclose data to law enforcement or government agencies where required by a court order or applicable law.
• Technology Providers — Cloud hosting providers and platform infrastructure partners who process data on our behalf under strict data processing agreements that prohibit any independent use of player data.

luck96 retains your personal data for as long as is necessary to fulfil the purposes described in this policy, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements.

• Active Accounts — Data is retained for the full duration your luck96 account remains open, plus a minimum retention period of five years following account closure to satisfy AML and gaming licence record-keeping requirements.
• KYC Documents — Identity and verification documents are retained for a minimum of five years from the date of verification, in line with anti-money laundering legislation.
• Transaction Records — Financial transaction logs are retained for seven years to meet financial record-keeping obligations.
• Support Communications — Live chat transcripts and support emails are retained for three years for quality assurance and dispute resolution purposes.
• Marketing Data — Where you have consented to marketing, your preferences and contact details are retained until you withdraw consent or request deletion.

Once the applicable retention period has expired and there is no overriding legal basis to continue holding the data, luck96 will securely delete or anonymise your personal data.

luck96 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. Our key security measures include:

• SSL/TLS Encryption — All data transmitted between your device and the luck96 platform is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols, preventing interception during transit.
• Data Encryption at Rest — Sensitive personal data stored on luck96's systems, including financial details and KYC documents, is encrypted at rest using AES-256 encryption.
• Access Controls — Player data is accessible only to luck96 personnel and authorised third parties who have a legitimate operational need for it. Access is role-based and subject to regular audit.
• Two-Factor Authentication — Players are strongly encouraged to enable 2FA on their accounts, and luck96 staff access to internal systems requires multi-factor authentication.
• Regular Security Audits — The luck96 platform is subject to regular independent security assessments and penetration testing to identify and address potential vulnerabilities.
• Fraud Monitoring — Automated real-time monitoring systems detect and flag unusual account activity, triggering review before any irreversible action is taken.

As a luck96 player, you hold the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting our support team at [email protected] or via live chat:

• Right of Access — You have the right to request a copy of all personal data luck96 holds about you. We will respond to access requests within 30 calendar days of receipt.
• Right to Rectification — If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections can be made directly through your account settings panel.
• Right to Erasure — You may request deletion of your personal data in certain circumstances. Please note that this right is subject to our legal obligations — for example, we cannot delete financial records or KYC documents during the mandatory retention period.
• Right to Restriction — You may request that we restrict processing of your data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability — You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transferred to another controller where technically feasible.
• Right to Object — You may object to processing carried out on the basis of legitimate interests, including profiling. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent — Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without penalty.

luck96 will not charge a fee for exercising any of the above rights in ordinary circumstances. Where requests are manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline the request, providing written reasons in either case.

luck96 may send you promotional communications about bonuses, new games, PSL cricket betting markets, seasonal offers, and platform updates. We will only send marketing communications where you have given your explicit consent at the time of registration or subsequently through your account notification settings.

Marketing communications are sent via the following channels, subject to your preferences:

• Email to your registered address
• SMS notifications to your registered Pakistani mobile number
• In-platform notifications visible when you are logged in

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email
• Adjusting your notification preferences in the Account Settings section
• Contacting our support team directly at [email protected]

The luck96 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. Our registration process includes date-of-birth verification, and KYC procedures include mandatory age confirmation before any withdrawal is authorised.

If luck96 discovers that personal data has been collected from a player who is under 21 years of age, we will:

• Immediately suspend the account and restrict all platform access.
• Securely delete all personal data associated with that account as soon as operationally possible.
• Return any deposited funds that cannot be definitively linked to wagers already placed, to the source payment method where technically feasible.
• Document the incident in accordance with our regulatory reporting obligations.

luck96 reserves the right to update this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. The most current version of this policy will always be available at luck96.app/privacy-policy.

Where changes are material — meaning they meaningfully affect how we collect, use, or share your personal data — we will notify registered players via the email address on their account at least 14 days before the changes take effect. For non-material updates such as clarifications or structural reorganisation, changes may take effect upon publication without prior individual notice.

Continued use of the luck96 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with a material change, you have the right to close your account before the change takes effect and request deletion of your personal data to the extent permitted by our retention obligations.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way luck96 handles your personal data, please get in touch with our Data Support team. We are available around the clock and can assist in both English and Urdu.

• Email: [email protected]
• Live Chat: Available directly within the luck96 platform after login, 24/7.
• Response Time: luck96 aims to acknowledge all privacy-related requests within 48 hours and provide a full written response within 30 calendar days.
• Coverage: Serving players across Karachi, Lahore, Islamabad, Faisalabad, and all of Pakistan.

If you are unsatisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection supervisory authority or to the dispute resolution body designated by luck96's licensing authority.