lucky88 game Privacy Policy —
How We Protect Your Data

1 Who We Are

lucky88 game ("we", "us", "our") operates the online casino and sports betting platform accessible at lucky88game.app (the "Platform"). We are the data controller in respect of the personal data of all registered players ("you", "your") who use the Platform.

This Privacy Policy applies to all personal data collected through the lucky88 game Platform, including data collected when you register an account, make a PKR deposit or withdrawal, participate in casino games or sports betting, contact our support team, or interact with any promotional communication issued by lucky88 game.

This Privacy Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated into this Policy by reference.

2 Data We Collect

lucky88 game collects the following categories of personal data from Pakistan players:

3 How We Use Your Data

lucky88 game processes your personal data for the following purposes:

• Account management: Creating and maintaining your lucky88 game player account, including authentication via SMS OTP to your Pakistan mobile number and email address.
• Identity verification: Verifying that you are at least 18 years of age and are the legitimate owner of the payment methods used for PKR deposits and withdrawals, in compliance with anti-money laundering (AML) obligations.
• Payment processing: Facilitating PKR deposits via Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, and MCB Bank, and processing withdrawal requests to your registered payment method.
• Gaming operations: Enabling access to live casino tables, sports betting markets, jackpot slots, and other platform products; recording bet history and gaming sessions for dispute resolution purposes.
• Fraud and security: Detecting and preventing fraudulent account activity, unauthorised access, money laundering, and multi-account abuse.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators; enforcing deposit limits, self-exclusion, and session time controls elected by the player.
• Customer support: Responding to queries, resolving complaints, and processing account-related requests submitted via live chat or email.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to your registered email or Pakistan mobile number, where you have consented to receive such communications.
• Legal compliance: Meeting our obligations under applicable financial crime, data protection, and gaming regulations.

4 Legal Basis for Processing

lucky88 game processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between you and lucky88 game — including account creation, PKR payment processing, game delivery, and support services.
• Legal obligation: Processing required to comply with AML, identity verification, and data retention obligations imposed by applicable law.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring — where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given, and withdrawable consent. You may withdraw marketing consent at any time by contacting our support team via live chat.

5 Data Sharing & Disclosure

lucky88 game does not sell, rent, or trade your personal data. We share data only with the following categories of third parties, strictly for the purposes described, and subject to appropriate data processing agreements:

• Payment processors: Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, and MCB Bank receive the transaction data necessary to process your PKR deposits and withdrawals. These providers operate under their own data protection frameworks and are not permitted to use your data for any purpose beyond processing your transaction.
• Identity verification providers: Third-party KYC verification partners receive your CNIC data and identity documents solely for the purpose of confirming your eligibility to hold a lucky88 game account.
• Game content providers: Live casino studio operators and slot game developers receive anonymised session data to facilitate game delivery. No personally identifiable data is shared with game content providers beyond what is technically required to connect your session.
• Regulatory and law enforcement authorities: lucky88 game will disclose personal data to competent authorities where required by law, court order, or to report suspected financial crime.
• Professional advisers: Legal, compliance, and audit professionals engaged by lucky88 game on a confidential basis may access personal data as part of their professional engagement.

6 PKR Payments & Financial Data

All PKR financial data processed by lucky88 game — including Easypaisa wallet references, JazzCash transaction IDs, and bank account details for HBL, UBL, and MCB Bank — is subject to heightened security and access controls commensurate with the sensitivity of financial information.

lucky88 game does not store complete payment credentials on our own servers. PKR payment processing is handled via tokenisation through our regulated payment provider integrations. We retain only the minimum transaction reference data necessary for dispute resolution, AML record-keeping, and withdrawal verification.

Under our AML obligations, lucky88 game retains records of all PKR deposits and withdrawals for a minimum of five years from the date of the transaction, regardless of whether the account remains active. This retention period is mandatory under applicable financial crime regulations and cannot be reduced by a data deletion request.

7 Cookies & Tracking Technologies

lucky88 game uses cookies and similar tracking technologies on the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function — including session authentication, security token validation, and fraud prevention. These cannot be disabled without impairing the functionality of your lucky88 game account.
• Performance cookies: Collect anonymised data on how players interact with the Platform — including which games are most visited, page load times on Pakistan 4G connections, and error occurrence rates — to help us improve the platform experience.
• Functional cookies: Remember your platform preferences, such as language settings and preferred payment method, to personalise your experience on return visits.
• Marketing cookies: Used to deliver relevant promotional content based on your platform activity. These are only set with your consent and can be withdrawn at any time.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your lucky88 game account. For mobile players on Android accessing via a mobile browser in Pakistan, cookie settings are managed within your browser's privacy settings.

8 Data Retention

lucky88 game retains your personal data for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods:

• Account data (name, CNIC, contact details): Retained for the lifetime of your active account plus a minimum of 5 years following account closure, to meet AML and legal record-keeping requirements.
• PKR transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming session logs: Retained for a minimum of 3 years for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for 2 years from the date of last interaction, or longer where the communication relates to an unresolved dispute or legal matter.
• Self-exclusion and responsible gaming data: Retained for the duration of the exclusion period plus a minimum of 5 years, to prevent re-registration by excluded players.
• Marketing consent records: Retained for as long as your consent remains active, plus 1 year following withdrawal of consent, for compliance audit purposes.

9 Your Rights

As a lucky88 game player in Pakistan, you have the following rights in respect of your personal data. These rights may be exercised by contacting our support team via live chat or email at [email protected]:

lucky88 game will respond to all rights requests within 30 days. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you within the initial 30-day window. We will not charge a fee for exercising your rights unless requests are manifestly unfounded or excessive.

10 Children & Minors

The lucky88 game Platform is strictly for individuals aged 18 and above. lucky88 game does not knowingly collect or process personal data of individuals under the age of 18.

lucky88 game uses CNIC-based date-of-birth verification to prevent underage account creation. Any account found to have been registered by a person under 18 — regardless of whether the CNIC details used belong to an eligible adult — will be permanently closed and all associated balances forfeited.

11 Data Security

lucky88 game implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the lucky88 game platform.
• Encrypted storage of all sensitive personal data, including CNIC records and financial data, on access-controlled servers.
• Two-factor authentication (2FA) via SMS OTP to your registered Pakistan mobile number for account login and withdrawal authorisation.
• Role-based access controls limiting lucky88 game staff access to personal data on a strictly need-to-know basis.
• Automated intrusion detection and 24/7 security monitoring of platform infrastructure.
• Regular penetration testing and security audits conducted by independent security specialists.
• Payment tokenisation ensuring that full payment credentials are never stored on lucky88 game servers.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, lucky88 game will notify affected players without undue delay and implement all available remediation measures immediately.

While lucky88 game takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You play an important role in your own account security by using a strong, unique password for lucky88 game, enabling 2FA, and never sharing your login credentials or SMS OTP codes with any third party.

12 Policy Updates

lucky88 game reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Where an update is material — meaning it significantly changes how we collect, use, or share your personal data — lucky88 game will notify registered players by email to their registered address and via an in-platform notification, at least 14 days before the updated Policy takes effect.

Continued use of the lucky88 game Platform following notification of a Policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated Policy, you must cease using the Platform and request closure of your account before the revised Policy takes effect.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way lucky88 game handles your personal data, please contact our dedicated privacy support team through any of the following channels:

• Live Chat: Available 24/7 in English directly from the lucky88 game Platform. This is the fastest route for urgent data-related requests, including suspected unauthorised access to your account.
• Email: [email protected] — for non-urgent privacy enquiries, data access requests, and formal complaints. Please include "Privacy Request" in your subject line so our team can route your message correctly.

All privacy-related enquiries will receive an initial acknowledgement within 24 hours and a substantive response within 30 days. If you are dissatisfied with our response to a privacy concern, you have the right to escalate your complaint through formal channels available under applicable law.

For concerns specifically related to responsible gaming data, self-exclusion, or problem gambling support, please visit our Responsible Gaming page or contact our support team via live chat. Our team is available around the clock in English and is trained to handle sensitive data matters with discretion and care.