Privacy Policy – lucky98 Online Betting Pakistan

lucky98 is an online betting and casino platform operated at lucky98.ws, serving Pakistani players across the country. For the purposes of this Privacy Policy, lucky98 is the data controller — meaning we are the entity responsible for deciding how your personal data is collected, stored, and used.

This Privacy Policy applies to all personal data collected through the lucky98 website and any associated mobile-optimised interface. It covers Pakistani players who register accounts, make deposits, place bets, use the casino, or interact with lucky98 support in any capacity.

This policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and lucky98. If you have any questions about how lucky98 handles your data, please contact us at support@lucky98.ws before registering an account.

lucky98 collects personal data in several categories depending on how you interact with the platform. The table below summarises what we collect and why:

lucky98 collects personal data through the following means:

Direct interactions

When you register an account on lucky98, complete the identity verification process, make a deposit or withdrawal, place a bet, play a casino game, or contact lucky98 support — you are directly providing us with data. This is the primary source of personal information that lucky98 holds about you.

Automated technical collection

As with any website, lucky98 automatically collects certain technical data each time you visit or use the platform. This includes your IP address, the type of device and browser you are using, which pages you visit, how long you spend on each section, and other interaction data. This information helps lucky98 maintain the security and performance of the platform and detect suspicious activity such as unauthorised login attempts.

Third-party sources

lucky98 may occasionally receive data about you from third-party sources in limited circumstances, including:

• Payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank providers) — to confirm transaction status and verify payment account ownership.
• Identity verification service providers — where lucky98 uses an automated CNIC verification service to speed up the verification process for Pakistani players.
• Fraud detection and anti-money laundering screening services — to fulfil legal compliance obligations.

lucky98 uses your personal data for specific, defined purposes. We do not use your data for anything outside the purposes listed below without obtaining additional consent where required.

• Account management: To create and maintain your lucky98 account, authenticate your identity at login, and manage account settings and preferences.
• Payment processing: To process PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card providers.
• Identity verification: To verify that you are who you say you are, that you are 18 or older, and that the payment methods you use belong to you — as required by anti-money laundering and responsible gaming obligations.
• Bet and game settlement: To record, process, and settle all bets placed on sports markets and casino games on lucky98, including PSL betting, football betting, live casino, crash games, and card games.
• Platform security: To detect and prevent fraud, unauthorised account access, multi-accounting, bonus abuse, and other prohibited activity as defined in our Terms and Conditions.
• Responsible gaming compliance: To monitor account activity for behavioural patterns associated with problem gambling, apply account-level protections where appropriate, and fulfil responsible gaming obligations. See our Responsible Gaming Policy for full details.
• Customer support: To investigate and resolve queries, complaints, and disputes submitted to lucky98 support.
• Platform improvement: To analyse usage patterns at an aggregate level to improve the lucky98 interface, game selection, payment experience, and overall platform quality.
• Legal compliance: To fulfil obligations under applicable financial regulations, anti-money laundering requirements, and any lawful request from regulatory or law enforcement authorities.
• Communications: To send you account-related notifications such as transaction confirmations, withdrawal updates, and changes to terms or policies. Where you have opted in, to send promotional communications about lucky98 offers and new features.

lucky98 processes your personal data under one or more of the following legal bases:

• Contractual necessity: Processing that is required to fulfil the agreement between you and lucky98 — including operating your account, processing payments, and settling bets. Without this processing, lucky98 cannot provide the service to you.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, identity verification requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing that serves lucky98's legitimate business interests where those interests do not override your privacy rights — including fraud detection, security monitoring, platform performance analysis, and responsible gaming monitoring.
• Consent: Where you have specifically opted in to receive promotional communications from lucky98. You can withdraw this consent at any time via account settings or by contacting support.

lucky98 does not sell your personal data. We share your data only with the specific categories of third parties described below, and only to the extent necessary for the stated purpose:

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay, and IBFT-connected banks receive the transaction data necessary to process your deposits and withdrawals. These providers are each bound by their own privacy and security obligations and do not receive your lucky98 betting or gaming history.
• Identity verification providers: Where lucky98 uses third-party services to assist with CNIC verification, the identity data you submit is processed by those providers under strict data processing agreements.
• Game providers: Evolution Gaming, Pragmatic Play, Ezugi, Spribe, and other licensed game suppliers may receive your session data as part of the technical operation of their games. These providers are licensed and audited entities and handle data in accordance with their own regulatory requirements.
• Fraud and AML screening services: lucky98 may use third-party services to screen accounts and transactions against watchlists and fraud databases as required by legal compliance obligations.
• Regulatory and law enforcement authorities: lucky98 will disclose personal data to regulatory bodies or law enforcement where required by applicable law or in response to a valid legal order. lucky98 will not disclose more data than is legally required.
• Cloud and infrastructure providers: lucky98's platform is hosted on secure cloud infrastructure. Hosting providers access server environments as part of technical operations but are contractually prohibited from accessing or using player data for any other purpose.

All third parties with whom lucky98 shares data are required to handle it securely and in accordance with applicable data protection standards. lucky98 does not authorise any third party to use your data for their own marketing purposes.

Pakistani players on lucky98 use Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, and Visa/Mastercard cards to deposit and withdraw in PKR. The handling of payment data at lucky98 follows these specific principles:

• Full card numbers are never stored on lucky98's servers — card data is handled exclusively by PCI-DSS compliant payment processors.
• Mobile wallet credentials (Easypaisa/JazzCash account details) are used only to process the specific transaction requested and are not retained beyond the period required for transaction record-keeping.
• Bank account details provided for IBFT withdrawals are stored securely for the purpose of processing your withdrawal and are not shared with any party other than the relevant bank's processing infrastructure.
• Payment data is associated with your lucky98 account for the purpose of verifying that deposits and withdrawals are made to and from accounts registered in your own name, as required by anti-money laundering policy.

lucky98 uses cookies and similar technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. lucky98 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a visit and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking the platform's core functionality.
• Performance cookies: Used to collect anonymous aggregated data about how lucky98 is used — which pages load slowly, which features are most used, and where errors occur. This data is used purely to improve platform performance and is not linked to individual accounts.
• Functional cookies: Remember your preferences such as your selected language, last visited section, or preferred game view settings, so you don't have to reconfigure them each visit.

lucky98 does not use advertising tracking cookies or cross-site tracking pixels. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the platform.

lucky98 takes the security of your personal data seriously and maintains technical and organisational measures designed to protect it against unauthorised access, loss, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and the lucky98 platform.
• Encrypted storage of sensitive data at rest, including identity documents and personal identification details.
• Access controls that restrict which lucky98 staff can access player personal data, limited to those with a genuine operational need.
• Automated monitoring for suspicious login activity, including geographic anomalies, unusual session behaviour, and multiple failed authentication attempts.
• Regular security reviews of the lucky98 infrastructure and third-party integrations.
• Two-factor authentication (2FA) available for all player accounts and mandatory for administrative access.

While lucky98 maintains robust security measures, no online platform can guarantee absolute security. Players are responsible for keeping their own login credentials secure. If you suspect your lucky98 account has been compromised, contact support immediately via live chat so the account can be secured as quickly as possible.

lucky98 retains personal data only for as long as is necessary for the purpose for which it was collected, subject to any legal obligations that require longer retention. Specific retention periods are as follows:

• Active account data: Retained for the full duration of the account relationship — from registration until account closure.
• Transaction and betting records: Retained for a minimum of five years after account closure, in accordance with standard financial record-keeping requirements.
• Identity verification documents: Retained for the duration of the account relationship and for a minimum of five years after account closure.
• Support communications: Retained for up to three years after the relevant query is resolved, to assist with any follow-up disputes or regulatory requests.
• Technical and usage data: Anonymised after 12 months and retained in aggregated, non-identifiable form for platform analytics.

After the applicable retention period, lucky98 will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you as an individual.

As a Pakistani player on lucky98, you have the following rights regarding your personal data. You can exercise any of these rights by contacting lucky98 support at support@lucky98.ws or via live chat.

lucky98 does not knowingly collect personal data from individuals under the age of 18. The platform is strictly for adult use and registration by minors is prohibited under both lucky98's Terms and Conditions and applicable law.

Age verification is performed during the identity verification process. If lucky98 discovers that personal data has been collected from a person under the age of 18, that data will be deleted immediately, the account will be closed, and any funds deposited will be returned to the payment source after verification. If you are a parent or guardian and believe your child has created an account on lucky98, please contact us immediately at support@lucky98.ws.

lucky98 may update this Privacy Policy from time to time to reflect changes in our data practices, new features on the platform, or updated legal requirements. When we make material changes — meaning changes that substantially affect how we handle your personal data or your rights — we will notify you by email to your registered address or via a notice within your lucky98 account at least seven days before the change takes effect.

The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage players to review the Privacy Policy periodically. Continued use of lucky98 after an updated policy takes effect constitutes acceptance of the revised terms.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how lucky98 has handled your personal information, please contact us through one of the following channels:

• Live Chat: Available 24/7 directly within your lucky98 account. Suitable for straightforward queries and urgent account-related matters.
• Email: support@lucky98.ws — for data access requests, deletion requests, and detailed privacy concerns. We aim to respond to all privacy-related emails within 5 business days and to fulfil data access requests within 30 days of receiving a verified request.

When submitting a data rights request by email, please include your registered lucky98 username or email address and a brief description of your request. lucky98 may need to verify your identity before acting on certain requests to ensure we are responding to the account holder and not a third party.