Privacy Policy – Lucky 99 Pakistan Online Casino Platform

Lucky 99 is an online gaming and casino platform operated at lucky99-play.net, designed specifically for adult players in Pakistan. In this Privacy Policy, "Lucky 99", "we", "us", and "our" all refer to the platform operator responsible for processing your personal data.

As the data controller for information collected through lucky99-play.net, Lucky 99 is responsible for determining how and why your personal data is processed. If you have any questions about how your data is handled, the best place to start is our support team, who can be reached 24/7 via live chat, WhatsApp, Telegram, or email at support@lucky99-play.net.

Lucky 99 collects personal data through several channels: directly from you when you register, when you make deposits or withdrawals, when you use our games, and automatically when you browse the platform. Here is a breakdown of the specific types of data involved:

Lucky 99 does not intentionally collect sensitive personal data beyond what is listed above. We do not collect biometric data, political opinions, religious beliefs, or health information. If you contact us and voluntarily share information of this nature, we will only use it in the context of responding to your query.

Every piece of data collected by Lucky 99 is used for a specific, documented purpose. We do not use data for purposes that are incompatible with the reason it was originally collected. The primary purposes are:

• Account creation and management: Your registration data allows us to create and maintain your Lucky 99 account, verify your identity, and provide you with access to the platform.
• Payment processing: Financial data is required to process your PKR deposits and withdrawals via Easypaisa, JazzCash, IBFT, NayaPay, SadaPay, and Visa/Mastercard.
• Identity verification and KYC: Anti-money laundering regulations require us to verify the identity of players, particularly before processing withdrawals above certain thresholds. CNIC data is used solely for this purpose.
• Gameplay and platform operation: Gaming data allows the platform to run games correctly, settle bets accurately, and maintain your account history.
• Fraud and security monitoring: Technical and usage data helps Lucky 99 detect suspicious activity, unauthorised access, duplicate accounts, and bonus abuse.
• Customer support: Communication data allows our support team to assist you, track the history of your queries, and improve the quality of our responses.
• Responsible gaming: Gaming and session data is used to monitor for signs of problematic behaviour and to enforce any self-imposed limits you activate in your account settings.
• Platform improvement: Aggregated and anonymised usage data is used to understand how players interact with Lucky 99, identify areas for improvement, and prioritise new features.
• Marketing communications: If you have opted in to receive promotional emails or messages from Lucky 99, your contact data is used to send you relevant offers. You can opt out at any time through your account settings.

Lucky 99 does not use automated decision-making that produces legal or similarly significant effects on players, except in cases involving fraud detection where account suspension may occur pending manual review. In all such cases, you have the right to request human review of the decision.

Lucky 99 processes personal data only where a valid legal basis exists for doing so. The legal bases we rely on are:

• Contractual necessity: Processing your registration data, financial data, and gaming data is necessary to deliver the Lucky 99 service you signed up for. Without this processing, we cannot operate your account.
• Legal obligation: Anti-money laundering regulations and similar compliance requirements mean we are legally required to collect and retain certain identity and financial data. This processing is mandatory and cannot be opted out of while holding an active Lucky 99 account.
• Legitimate interests: Security monitoring, fraud prevention, and platform improvement activities are carried out based on Lucky 99's legitimate interest in operating a safe and reliable platform. These interests have been assessed and found not to override your privacy rights given the security measures in place.
• Consent: Marketing communications are only sent to players who have explicitly opted in. You can withdraw consent for marketing at any time through account settings without affecting your ability to use the platform.

Lucky 99 does not sell or rent your personal data to any third party. However, to operate the platform, we work with a number of service providers who process data on our behalf. All such providers are required to process data only for the specified purpose and to maintain appropriate security measures. The categories of service providers we use include:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking infrastructure partners receive the minimum financial data required to process your transactions.
• Identity verification services: Third-party KYC and document verification providers receive identity data strictly for the purpose of verifying your CNIC and age.
• Game providers: Where games on Lucky 99 are provided by third-party studios, those studios may receive anonymised session data required to operate their games. They do not receive your full profile.
• Cloud infrastructure: Our hosting and database infrastructure providers store data on secure servers. These providers operate under data processing agreements with strict security and confidentiality obligations.
• Customer support tools: Live chat, email, and messaging tools may process communication data as part of delivering customer support.

Lucky 99 may also disclose personal data to law enforcement, regulatory authorities, or courts where required by applicable law – for example, in response to a valid legal order or in the context of an investigation into financial crime. We will only do so to the extent required by law and, where possible, will inform you of such disclosure unless prohibited from doing so.

Lucky 99 uses cookies and similar tracking technologies on lucky99-play.net. Cookies are small text files placed on your device when you visit the site. They serve different purposes and have different lifecycles. Here is how we use them:

You can manage cookie preferences through your browser settings. Note that disabling required cookies will prevent you from logging into your Lucky 99 account and will affect core platform functionality. Disabling optional cookies will not affect your ability to play games or manage your account. Lucky 99 does not use third-party advertising cookies or cross-site tracking technologies.

Lucky 99 retains your personal data for as long as it is needed to fulfil the purposes set out in this policy, or for as long as legally required. The retention periods we apply are:

• Active account data: Retained for the lifetime of your account and for a period after account closure as required by law and audit requirements.
• Transaction and financial records: Retained for a minimum of five years after the date of the transaction in accordance with anti-money laundering record-keeping obligations.
• Identity verification documents: Retained for the period required by KYC regulations applicable to our operations, typically five to seven years.
• Customer support communications: Retained for up to two years after the date of the last interaction to allow for follow-up and quality review.
• Gaming history and session data: Retained for up to two years for responsible gaming monitoring and dispute resolution purposes.
• Marketing consent records: Retained until you withdraw consent and for a reasonable period thereafter to demonstrate compliance.

When data is no longer required, Lucky 99 deletes or anonymises it securely. Anonymised data – which cannot identify any individual – may be retained indefinitely for statistical analysis and platform improvement purposes.

As a Lucky 99 player, you have a range of rights over your personal data. These rights are described in full in the dedicated section below. In summary, you have the right to access, correct, port, restrict, object to, and request deletion of your data. You also have the right to withdraw consent for marketing and to request human review of any automated decision that affects you. To exercise any of these rights, contact Lucky 99 support in writing via email or live chat. We aim to respond to all data rights requests within 30 days.

Lucky 99 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes age verification steps, and we require CNIC verification before first withdrawals, which further ensures compliance with the age requirement.

If Lucky 99 becomes aware that personal data has been collected from a person under 18, the account will be closed immediately, any funds will be held pending investigation (and returned to the depositing payment method where fraud is not implicated), and all associated data will be deleted from our systems as quickly as technically possible.

If you believe a minor has registered on Lucky 99 using false information, please contact our support team immediately so we can investigate and act. We take underage gambling extremely seriously and treat all related reports as high priority.

Lucky 99 takes the security of your personal and financial data seriously. The technical and organisational measures we have in place include:

• 256-bit SSL/TLS encryption for all data in transit between your device and Lucky 99 servers.
• Encrypted storage for sensitive data fields including CNIC numbers and payment account details.
• Multi-factor authentication for all internal staff accessing player data systems.
• Automated intrusion detection and prevention systems monitoring server activity continuously.
• Regular security audits and penetration testing by independent security professionals.
• OTP-based withdrawal verification tied to your registered Pakistani mobile number.
• Strict data access controls ensuring that only staff with a legitimate operational need can access specific categories of player data.

Despite these measures, no online platform can guarantee absolute security against all possible threats. If you suspect your account has been compromised, contact Lucky 99 support immediately via live chat and we will suspend the account, investigate, and guide you through the recovery process.

Lucky 99 may update this Privacy Policy from time to time. Changes may be needed due to new features being added to the platform, changes in applicable laws and regulations, or improvements in how we manage data. When changes are made, the revised policy will be published on this page with a new "Last Updated" date at the top.

For significant changes that materially affect how your data is used – for example, a new category of data being collected or a new purpose for existing data – Lucky 99 will provide advance notice via email to your registered address or through an in-platform notification before the changes take effect. Minor changes such as clarifications of existing practices will be published without advance notice.

Your continued use of the Lucky 99 platform following any policy update constitutes your acceptance of the revised terms. If you disagree with a change, you may close your account and request data deletion before the change takes effect. Accounts closed for this reason will have any real-money balance processed through the standard withdrawal route.

If you have any questions, concerns, or requests relating to your personal data and how Lucky 99 handles it, please get in touch. Our support team is available 24/7 and is trained to handle data-related queries in both Urdu and English. For formal data rights requests (access, deletion, correction, portability), we recommend contacting us by email to ensure there is a written record of your request and our response.

We aim to respond to all privacy-related queries within 72 hours and to formally submitted data rights requests within 30 days. If your request is complex, we may take up to 60 days but will keep you informed of progress.