Lucky95 Privacy Policy – How We Protect Your Data in Pakistan

Lucky95 is an online gaming platform operating at lucky95.biz, built specifically for Pakistani players. The platform provides access to Live Casino games, Teen Patti, Card Games, Fishing Games, Jackpot Slots, and Esports Betting, all denominated in Pakistani Rupees (PKR).

For the purposes of this Privacy Policy, Lucky95 is the data controller — meaning we are responsible for deciding how and why your personal data is processed. If you have any questions about how Lucky95 handles your data, or if you wish to exercise any of your data rights, you can contact us directly through the support channels listed at the end of this policy.

Lucky95 is committed to operating a transparent, player-first platform. This Privacy Policy is not a legal technicality — it is a genuine explanation of what happens to your information when you use the platform. We have written it to be readable by any Lucky95 player, not just lawyers.

Lucky95 collects personal data in three main ways: information you provide directly, information generated by your use of the platform, and information received from payment processors during transactions.

Lucky95 does not collect your full card number, CVV, or full bank account credentials. Payment processing is handled via secure integrations with Easypaisa, JazzCash, NayaPay, SadaPay, banks via IBFT, and Visa/Mastercard networks — your full payment credentials remain within those systems and are not transmitted to or stored by Lucky95.

Lucky95 uses your personal data only for purposes that are directly connected to operating the platform and serving you as a player. The specific uses are:

• Account management: Creating and maintaining your Lucky95 account, verifying your identity, and enabling access to all platform features.
• Payment processing: Facilitating deposits and withdrawals in PKR through your chosen payment method, verifying that transactions originate from accounts registered in your name, and maintaining transaction records.
• Platform security and fraud prevention: Monitoring for suspicious activity, detecting potential fraud or money laundering, and protecting both the platform and legitimate players from abuse.
• Responsible gaming: Tracking gaming activity to support the deposit limits, session alerts, and self-exclusion tools you have activated. Identifying patterns that may indicate problematic gaming behaviour so we can offer support proactively.
• Customer support: Using your account history, transaction records, and communication logs to resolve queries and disputes efficiently.
• Service improvement: Analysing aggregated, anonymised platform usage data to improve game performance, payment flows, and overall user experience. This analysis does not involve individual identification.
• Legal and regulatory compliance: Maintaining records required by applicable laws and responding to valid regulatory or law enforcement requests.

Lucky95 does not use your data for unsolicited marketing from third parties, profiling for advertising purposes, or any activity that is not directly connected to operating your account and the platform.

Lucky95 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the service agreement you enter when registering a Lucky95 account — including account creation, payment processing, and customer support.
• Legitimate interests: Processing for fraud detection, platform security, and abuse prevention — activities that protect the platform and all its users, including you.
• Legal obligation: Processing required to comply with applicable laws, including identity verification requirements and financial transaction record-keeping.
• Consent: Where Lucky95 sends you optional communications — such as promotional offers or account notifications — your consent is obtained and can be withdrawn at any time by updating your communication preferences in the account dashboard or by contacting support.

Lucky95 does not sell your personal data. We do not share it with advertisers, data brokers, or unaffiliated third parties for commercial purposes. There are, however, specific limited circumstances in which Lucky95 shares data with trusted parties:

• Payment processors: When you make a deposit or withdrawal, Lucky95 shares the minimum necessary data with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank via IBFT, or Visa/Mastercard — to process the transaction. These providers operate under their own privacy and security standards and are contractually bound to protect your data.
• Game providers: Lucky95 hosts games provided by licensed third-party game studios. Your gaming activity data may be shared with these providers to the extent necessary for game operation, dispute resolution, and RNG certification compliance. Game providers do not receive your payment data or full identity information.
• Fraud detection and security services: Lucky95 uses third-party fraud detection tools that may process technical data (such as IP addresses and device fingerprints) to identify suspicious patterns. These services operate under strict data processing agreements.
• Legal and regulatory bodies: Lucky95 will disclose data to law enforcement, regulatory authorities, or courts when required to do so by a valid legal obligation or official request. Lucky95 will not voluntarily disclose data to government bodies beyond what is legally required.

All third parties with whom Lucky95 shares data are required to maintain appropriate security measures and are prohibited from using your data for purposes beyond the specific service they are providing to Lucky95.

Payment security at Lucky95 is treated with the same seriousness as any formal financial institution. The following standards are applied to all payment-related data:

• All payment communications between Lucky95 and payment providers are encrypted using TLS 1.2 or higher.
• Full payment credentials — including Easypaisa account PINs, JazzCash MPINs, card numbers, and CVVs — are never transmitted to or stored on Lucky95 servers. These credentials remain exclusively within the payment provider's own secure systems.
• Lucky95 stores only transaction reference numbers and partial account identifiers (for example, the last four digits of a card number) for record-keeping and dispute resolution purposes.
• The same-method withdrawal policy — requiring withdrawals to be sent to the same payment method used for deposits — is a security measure that protects your funds from being redirected to unauthorised accounts.
• All payment records are stored in encrypted databases with access restricted to authorised Lucky95 staff on a need-to-know basis.

Lucky95 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session, and to improve the overall user experience. The types of cookies used on Lucky95 are:

• Essential cookies: Required for the platform to function. These manage your login session, maintain your game progress within a session, and keep your currency and language preferences. These cannot be disabled without breaking platform functionality.
• Performance cookies: Collect anonymised data about how different pages are used — which games are most accessed, how long pages take to load, and where errors occur. This data is used to improve platform performance. No individual player is identified in this data.
• Security cookies: Used to detect unusual login patterns that may indicate unauthorised access attempts. These help protect your account from third-party intrusion.

Lucky95 does not use advertising cookies, third-party tracking pixels, or cross-site tracking technologies. You will not be tracked across other websites as a result of visiting Lucky95.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to log in and use the platform. Performance and security cookies can be disabled without affecting core functionality, though doing so reduces our ability to detect account security issues.

Lucky95 retains your personal data for as long as necessary to fulfil the purposes described in this policy and to comply with applicable legal obligations. The general retention periods are as follows:

• Active account data: Retained for the duration of your Lucky95 account. If you request account closure, active account data is archived securely and then deleted within 90 days of the closure request, except where retention is required by law.
• Transaction records: Financial transaction records — including deposit and withdrawal histories — are retained for a minimum of 5 years in compliance with financial record-keeping requirements. These records may be required for tax, audit, or regulatory compliance purposes.
• Identity verification data: Retained for 5 years following account closure. This is required to comply with anti-money laundering and know-your-customer obligations.
• Support communications: Chat logs and email correspondence are retained for 2 years from the date of the interaction, unless the communication is part of an ongoing dispute or legal matter.
• Technical/device data: Session logs and IP records are retained for 12 months and then automatically deleted.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

You have the following rights with respect to the personal data Lucky95 holds about you. These rights are not theoretical — submitting a request will receive a real response within 30 days.

• Right of Access: You can request a copy of all personal data Lucky95 holds about you. We will provide this in a clear, readable format within 30 days.
• Right to Rectification: If any of your data is inaccurate or incomplete, you can request that it be corrected. For most data fields, you can update them directly from your account settings.
• Right to Erasure: You can request deletion of your personal data. We will action this for all data that is not required to be retained by law. Data subject to a legal retention obligation (such as financial transaction records) cannot be deleted until the retention period expires.
• Right to Restrict Processing: You can request that Lucky95 restricts how your data is used while a dispute or correction request is being resolved.
• Right to Object: You can object to processing based on legitimate interests. Lucky95 will assess whether compelling grounds exist to continue processing and will inform you of the outcome.
• Right to Data Portability: You can request your account and gaming activity data in a structured, machine-readable format for transfer to another service.
• Right to Withdraw Consent: Where processing is based on consent — such as optional marketing communications — you can withdraw that consent at any time without affecting your account status.

To exercise any of these rights, contact Lucky95 support via live chat or email at support@lucky95.biz. We will verify your identity before processing any data rights request to protect against fraudulent claims.

Lucky95 is strictly an adult platform. The minimum age to register and use Lucky95 is 18 years. The platform does not knowingly collect personal data from any individual under the age of 18.

If Lucky95 discovers — through age verification checks, player reports, or any other means — that an account is being operated by a person under 18, the account will be immediately suspended and all data associated with it will be reviewed and deleted in accordance with child protection standards. Any deposits made during an underage period are managed under the Lucky95 Terms and Conditions.

Lucky95 applies multiple layers of technical and organisational security to protect your data from unauthorised access, alteration, disclosure, or destruction.

The technical measures in place include:

• 256-bit SSL/TLS encryption on all data in transit between your device and Lucky95 servers
• Encrypted storage for all sensitive data at rest, including identity verification records and payment references
• Two-factor authentication (2FA) via SMS OTP for account logins, available for all players and strongly recommended
• Automated fraud detection systems that monitor transaction patterns in real time, 24 hours a day
• Role-based access controls ensuring that Lucky95 staff can only access the data necessary for their specific role
• Regular security reviews and testing of platform infrastructure

Despite these measures, no digital platform can guarantee absolute security. Lucky95 takes all reasonable and practicable steps to protect your data, but we encourage you to also take responsibility for your own account security — particularly by using a strong, unique password and enabling 2FA.

Lucky95 may update this Privacy Policy from time to time to reflect changes in platform functionality, applicable laws, or best practices in data protection. When material changes are made, the following steps will be taken:

• Registered players will be notified via their registered email address or a clear notice within the Lucky95 platform dashboard
• Notification will be provided at least 7 days before any significant changes take effect
• The "Last Updated" date at the top of this policy will reflect when the current version was published

Continued use of the Lucky95 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the updated version. The current version of this policy is always available at lucky95.biz/privacy-policy.

For minor, non-material changes — such as corrections to formatting or clarifications that do not affect how your data is used — Lucky95 may update the policy without direct notification, though the updated date will always reflect any revision.

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please contact the Lucky95 privacy team through the following channels:

• Live Chat: Available 24/7 on the Lucky95 website. This is the fastest channel for all privacy queries. Average response time is under 2 minutes.
• Email: support@lucky95.biz — for formal data rights requests or written privacy correspondence. Lucky95 acknowledges all written privacy requests within 24 hours and responds fully within 30 days.

Support is available in both Urdu and English. Privacy and data rights requests are treated as high-priority cases at Lucky95 and are handled by trained staff — not automated responses.

When submitting a data rights request by email, please include your registered mobile number and the nature of your request so we can verify your identity and process your request as efficiently as possible.