Lucky100 Privacy Policy — How We Protect Your Data in Pakistan

Lucky100 operates the online gaming platform accessible at lucky100.click. References to "Lucky100", "we", "us" or "our" throughout this Privacy Policy refer to the operator of the Lucky100 platform. References to "you", "your", or "Player" refer to any individual who accesses, registers with, or uses the Lucky100 platform.

Lucky100 is the data controller in respect of all personal information collected through the platform. This means that Lucky100 determines the purposes for which personal data is processed and is responsible for ensuring that processing activities comply with applicable data protection law. If you have questions about how your data is used, Lucky100 is the entity to contact — details are in Section 13 of this policy.

This Privacy Policy applies to the Lucky100 website at lucky100.click, all Lucky100 gaming products and services, and all communications we send to registered players. It should be read alongside our Terms and Conditions.

Lucky100 collects the following categories of personal data from players. We collect only what is necessary to operate the platform, process your transactions, and meet our legal obligations — nothing more.

Lucky100 collects personal data through the following means:

• Registration: When you create a Lucky100 account, you provide your name, email address, mobile number, and other required registration information directly.
• Account verification: When Lucky100 requests identity verification, you submit documents such as your CNIC or passport copy directly through the platform.
• Deposits and withdrawals: When you transact through Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer, or card, we receive transaction reference data and the payment identifier (mobile number or account number) associated with the transaction.
• Platform usage: Lucky100 automatically records your activity on the platform, including which games you play, which bets you place, session duration, and navigation patterns. This data is generated by your use of the service rather than submitted by you directly.
• Device and technical data: Your device, browser, IP address and related technical identifiers are captured automatically when you connect to Lucky100. This data is used for security monitoring and fraud prevention.
• Support interactions: If you contact Lucky100 via live chat or email, the content of that communication is stored for quality assurance and to maintain a record of your query and its resolution.
• Cookies and similar technologies: Lucky100 uses cookies and session tracking technologies as described in Section 6 of this policy.

Lucky100 processes your personal data for specific, legitimate purposes. We do not use your data for purposes beyond those listed below without first obtaining your consent or having a separate legal basis to do so.

• Account creation and operation: To register your account, verify your identity, maintain your player profile, and enable you to access Lucky100's full range of games and services.
• Processing PKR transactions: To process deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments — including confirming transaction amounts and verifying payment method ownership.
• Legal compliance: To comply with applicable legal obligations including age verification, anti-money laundering checks, and any regulatory reporting requirements. Lucky100 is legally required to retain certain transaction records and cannot delete them on request before the legally mandated retention period expires.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, multiple account creation, and abuse of promotions. Device and IP data are central to this function.
• Customer support: To respond to your queries, resolve disputes, and maintain records of communications for quality assurance purposes.
• Responsible gaming: To monitor for patterns associated with problem gambling and to enforce any limits, cool-off periods, or self-exclusions you have set. Lucky100 has a legitimate interest in protecting player wellbeing.
• Platform improvement: To analyse aggregated, anonymised usage data to improve game selection, user interface, payment flows, and platform performance. This analysis uses anonymised data and does not identify individual players.
• Marketing communications: To send you promotional offers, bonus notifications, and game updates — but only where you have opted in to receive them. See Section 11 for details on managing your marketing preferences at Lucky100.

Lucky100 does not sell your personal data to third parties. We do not share your information with third-party advertisers or data brokers. Data is shared only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: When you deposit or withdraw via Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer, or card, Lucky100 shares the minimum data necessary to process that transaction with the relevant payment provider. These providers process data under their own privacy policies and applicable Pakistani financial regulations.
• Identity verification services: When Lucky100 requires you to verify your age or identity, your CNIC or passport data may be shared with a third-party identity verification provider. These providers are contractually bound to process your data only for the purpose of verification and to maintain equivalent security standards to Lucky100.
• Technology and platform providers: Lucky100 works with hosting, security, and software providers who process data on our behalf. All such providers operate under data processing agreements that restrict how they can use your information.
• Legal and regulatory authorities: Lucky100 will disclose personal data to law enforcement agencies, financial regulators, or other government bodies where required to do so by law, a valid court order, or regulatory direction. Lucky100 will comply with such requests without notifying the player where legally prohibited from doing so.
• Business transfers: In the event of a merger, acquisition, or sale of Lucky100's business or assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such change that materially affects how their data is processed.

Lucky100 uses cookies and similar session technologies to operate the platform effectively, maintain your login state, and understand how players use the site. Below is a plain-English summary of what cookies Lucky100 uses and why.

• Essential cookies: Required for the platform to function. These maintain your login session, remember your language preference, and keep your bet slip contents between pages. Without these, Lucky100 cannot operate correctly. They cannot be disabled.
• Security cookies: Help Lucky100 detect suspicious activity, such as login attempts from unusual IP addresses or devices not previously associated with your account. These are part of Lucky100's fraud prevention infrastructure.
• Analytics cookies: Used in anonymised form to understand which games are most popular, where players encounter difficulties in the interface, and how navigation patterns affect the platform experience. No individual player is identifiable from this data.
• Preference cookies: Remember your platform preferences — such as your preferred language, display settings, or recently visited game categories — so you do not have to reconfigure them every visit.

Most browsers allow you to view, manage, and delete cookies through the browser settings menu. Disabling essential cookies will prevent Lucky100 from functioning correctly — you will not be able to log in or place bets. Analytics and preference cookies can be disabled without affecting core functionality.

Lucky100 stores player data on secure servers using industry-standard security measures. All data transmitted between your device and Lucky100 is encrypted using 256-bit SSL/TLS encryption — the same standard used by banks and major financial institutions. Data at rest is stored using encryption and access controls that restrict which Lucky100 staff can view personal player information.

Lucky100 maintains the following security practices to protect your data:

• 256-bit SSL/TLS encryption for all data in transit between your device and Lucky100 servers.
• Encryption of sensitive data fields at rest, including payment identifiers and identity document references.
• Role-based access controls: Lucky100 staff can only access player data to the extent required by their specific job function. Support staff, for example, can view account details necessary to resolve your query, but do not have access to full payment card numbers.
• Regular security auditing of platform infrastructure.
• Automated alerts for unusual access patterns, potential data breaches, or suspicious administrative activity.
• No storage of full card numbers: Lucky100 does not store complete Visa or Mastercard numbers. Card payment processing is handled by the payment gateway, which stores only a tokenised reference.

No online platform can guarantee 100% security against all possible threats. However, Lucky100 applies reasonable and industry-appropriate measures to protect your data, and continuously reviews and updates those measures as technology and threat landscapes evolve.

Lucky100 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as long as required by law. The specific retention periods vary by data type:

• Account data and identity records: Retained for the lifetime of your Lucky100 account plus a minimum of five years following account closure. This retention is required to comply with anti-money laundering and financial record-keeping obligations.
• Transaction records (deposits, withdrawals, bets): Retained for a minimum of five years from the date of each transaction, in accordance with applicable financial regulations. These records cannot be deleted on request before this period expires.
• Support communications: Retained for two years following the resolution of the relevant query, to enable Lucky100 to reference prior communications in subsequent interactions.
• Security and fraud logs: Retained for up to three years to support ongoing fraud detection and, where relevant, to provide evidence in connection with investigations or legal proceedings.
• Marketing preferences: Your opt-in and opt-out preferences are retained indefinitely to ensure Lucky100 honours your communication choices accurately over time.
• Analytics data: Anonymised aggregate analytics data may be retained indefinitely as it cannot be linked to any individual player.

After the applicable retention period, Lucky100 either securely deletes or anonymises the relevant data so it can no longer be linked to you.

As a Lucky100 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact Lucky100 support with your account username and registered mobile number for verification.

Lucky100 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of eighteen. Registration requires age confirmation and Lucky100 conducts age verification checks. If Lucky100 discovers or reasonably suspects that a player is under 18 years of age, the account will be suspended immediately, all balances will be frozen pending investigation, and the personal data of the underage player will be handled in accordance with applicable law.

If you are a parent or guardian and believe that a minor has created a Lucky100 account without your knowledge, please contact our support team immediately. Lucky100 will investigate and take appropriate action, which will include closing the account and, where a deposit has been made, returning any funds to the original payment source after verification.

Lucky100 sends marketing communications — including bonus offers, promotional notifications, and new game announcements — only to players who have opted in to receive them. You are asked about your marketing preferences during registration and can update them at any time from your Lucky100 account settings.

If you no longer wish to receive marketing emails or SMS messages from Lucky100, you can:

• Click the unsubscribe link in any Lucky100 marketing email.
• Reply STOP to any Lucky100 SMS message.
• Update your communication preferences directly in the notifications section of your Lucky100 account settings.
• Contact Lucky100 support and request removal from marketing lists.

Opting out of marketing communications does not affect transactional messages. Lucky100 will continue to send you account-related communications — such as deposit confirmations, withdrawal notifications, and important security alerts — regardless of your marketing preferences. These messages are part of the service, not marketing.

Lucky100 reviews this Privacy Policy periodically and updates it when necessary to reflect changes in how we operate, changes in applicable law, or improvements in our data practices. The "Last updated" date at the top of this page is revised whenever changes are made.

For material changes — those that significantly affect how your data is collected, used, or shared — Lucky100 will notify registered players by email to their registered address at least fourteen days before the changes take effect. Minor clarifications or corrections that do not materially affect your rights may be made without advance notice.

Continuing to use the Lucky100 platform after a material change to this Privacy Policy takes effect constitutes your acceptance of the updated policy. If you disagree with a change, you may request account closure and any balance will be returned to you through your registered payment method.

If you have questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how Lucky100 handles your personal information, please contact us through any of the following channels:

• Email: support@lucky100.click — include "Privacy Request" in your subject line
• Live Chat: Available 24/7 through your Lucky100 account dashboard
• Response commitment: Privacy-related requests are acknowledged within 24 hours and substantively addressed within 30 days

When submitting a privacy request, please include your Lucky100 username and your registered mobile number so that we can verify your identity before disclosing or modifying any personal data. This verification step is required to protect your account from unauthorised access and is not intended to create unnecessary friction.

Lucky100 takes privacy seriously and will handle all requests respectfully and in accordance with this policy. We do not require any justification for exercising your rights — these are your rights and Lucky100 is committed to honouring them promptly.