Short Version: Lucky999 collects only what is needed to run your account. We protect it with SSL encryption. We never sell it. You can access, correct, or delete it at any time. Payment data for Easypaisa, JazzCash, and IBFT is handled securely and only used for processing your transactions.
1. Introduction and Scope
This Privacy Policy governs how lucky999 collects, processes, stores, and shares the personal data of all registered members and visitors to the lucky999 platform at lucky999.plus. Lucky999 is committed to handling personal information responsibly and in accordance with the data privacy principles of transparency, purpose limitation, data minimisation, and security.
This policy applies to all lucky999 services including the website, account registration and verification, deposits and withdrawals, gaming and betting activities, customer support interactions, and marketing communications (where consent has been given). By registering an account on lucky999, you acknowledge that you have read and understood this Privacy Policy.
The definitions used in this Privacy Policy carry the same meanings as in the lucky999 Terms and Conditions. "Personal data" means any information that can identify you directly or indirectly, including your name, mobile number, CNIC number, and payment method details. "Processing" means any operation performed on personal data, including collection, storage, use, and deletion.
2. Personal Data Lucky999 Collects
Lucky999 collects personal data through several means: directly from you when you register and use the platform, automatically through cookies and technical logs, and occasionally from third-party verification providers used to confirm identity. The following table summarises the categories of personal data lucky999 may collect:
| Data Category | Specific Data Points | Source |
|---|
| Identity Data | Full legal name, date of birth, CNIC number, photograph (if verification requested) | Provided by you at registration or during verification |
| Contact Data | Mobile phone number, email address, city/province of residence | Provided by you at registration |
| Account Data | Username, password (hashed), account settings, login history, security preferences | Created by you, generated by the platform |
| Financial Data | Easypaisa/JazzCash account reference, IBFT account details, card type (last 4 digits only), deposit/withdrawal history in PKR | Provided by you during transactions |
| Gaming Activity Data | Game history, bet history, wagering totals, win/loss records, session times | Generated automatically by platform activity |
| Technical Data | IP address, device type, browser type, operating system, screen resolution | Collected automatically via logs and cookies |
| Support Data | Contents of support conversations, complaint records, resolution outcomes | Generated when you contact lucky999 support |
| Marketing Data | Communication preferences, bonus claim history, promotion responses | Generated by your platform interactions and explicit consent |
Lucky999 does not collect sensitive personal data such as biometric data, health information, religious beliefs, or political opinions. We do not collect data about your social media profiles unless you choose to share it with us directly.
3. How Lucky999 Uses Your Personal Data
Lucky999 uses personal data only for defined, legitimate purposes. Each category of data is used for specific purposes as described below. Lucky999 does not use your personal data for any purpose beyond what is set out in this policy without obtaining your separate consent.
3.1 Account Operations
Your identity and contact data are used to create and maintain your lucky999 account, verify that you meet the age and eligibility requirements, communicate with you about your account activity, and send transactional notifications such as deposit confirmations, withdrawal updates, and security alerts. These uses are necessary to perform the contract between you and lucky999 and do not require your separate consent.
3.2 Financial Transactions
Your financial data is used exclusively to process PKR deposits and withdrawals through your chosen payment methods, verify that transactions originate from accounts registered in your own name, and comply with anti-money laundering and fraud prevention obligations. Lucky999 does not use your financial data for any purpose unrelated to processing your transactions.
3.3 Platform Improvement
Technical data and aggregated gaming activity data are used to improve the lucky999 platform, fix bugs, optimise game loading speeds on Pakistani mobile networks, and understand which features Pakistani players use most. This analysis is performed on aggregated and anonymised data wherever possible rather than on individually identified member data.
3.4 Responsible Gaming
Lucky999 uses gaming activity data — including session length, deposit frequency, and betting patterns — to identify members who may be at risk of problem gambling. This is done in support of lucky999's responsible gaming commitment, not for commercial purposes. Members identified as potentially at risk may be contacted by lucky999's support team and offered access to responsible gaming tools.
3.5 Marketing Communications
Lucky999 will only send you promotional communications — including bonus offers, new game announcements, and PSL promotions — if you have given explicit consent to receive them. This consent can be withdrawn at any time through your account settings. Withdrawing marketing consent does not affect your ability to receive transactional account messages from lucky999.
3.6 Legal Compliance
Lucky999 may process your personal data when required to comply with applicable legal obligations, including responding to lawful requests from Pakistani regulatory authorities, complying with anti-money laundering requirements, and maintaining records as required by financial services regulations.
4. Sharing Your Personal Data
Lucky999 does not sell, rent, or share your personal data with third parties for their own commercial purposes. Lucky999 may share your personal data only in the following limited and defined circumstances:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing partners, and card networks receive only the data necessary to process your specific transaction. They are not given access to your gaming activity or account history.
- Identity verification providers: Where lucky999 uses a third-party KYC (Know Your Customer) service to verify your identity, the verification provider receives only the identification documents necessary for the verification task and is not permitted to use them for any other purpose.
- Game and technology providers: Where game content is provided by a licensed third-party studio, that provider may receive technical data necessary to serve the game to your device. They do not receive your identity or financial data.
- Legal and regulatory authorities: Lucky999 will share personal data with government agencies, regulators, or law enforcement bodies when required to do so by applicable Pakistani law or pursuant to a lawful order. Lucky999 does not voluntarily share data with authorities beyond what is legally required.
- Fraud prevention: Lucky999 may share limited account and transaction data with fraud prevention services to identify and prevent fraudulent activity on the platform. This is done in the legitimate interest of protecting all lucky999 members.
All third parties who receive personal data from lucky999 are required to handle it in accordance with applicable data protection standards and are not permitted to use it for purposes beyond the specific task for which it was shared.
Reminder: Lucky999 will never contact you asking for your password, PIN, or full payment account details by phone, SMS, or email. If you receive a request for this kind of information claiming to be from lucky999, please contact our official support immediately as it may be a phishing attempt.
5. Pakistani Payment Data – Easypaisa, JazzCash and IBFT
Given that the majority of lucky999's Pakistani members use Easypaisa and JazzCash for deposits and withdrawals, lucky999 applies specific care to how mobile wallet data is handled. The following principles govern lucky999's handling of Pakistani payment data specifically:
- Easypaisa and JazzCash account numbers associated with your transactions are stored in encrypted form and are accessible only to the payments processing team when actively processing a transaction related to your account
- Lucky999 does not store your Easypaisa or JazzCash PIN or password at any point — these are entered directly into the payment provider's interface and are never transmitted to or stored by lucky999
- IBFT bank account details provided for bank transfer deposits or withdrawals are encrypted and used only for the specific transaction or account verification purpose for which they were provided
- Visa and Mastercard transactions through lucky999 are processed through PCI-DSS compliant payment gateways. Lucky999 stores only the last four digits of your card number as a reference — the full card number is never stored on lucky999 systems
- Payment method data is retained for the duration of your account membership and for a defined period after account closure as required by financial services record-keeping obligations
If you change your primary payment method on lucky999, data associated with the previous method is retained for the legally required period before being securely deleted. Requests to remove payment data before this period can be accommodated where legally permissible — contact support to make such a request.
6. Cookies and Tracking Technologies
Lucky999 uses cookies and similar tracking technologies to operate the platform effectively, remember your login session, and understand how Pakistani members use the site. The following cookie categories are used by lucky999:
| Cookie Type | Purpose | Can Opt Out |
|---|
| Essential | Keep you logged in during your lucky999 session, maintain your bet slip, remember language and display preferences. Required for the platform to function. | No – essential to operation |
| Functional | Remember your display preferences, save your preferred deposit method, personalise the game lobby layout based on your gaming history on lucky999. | Yes – via account settings |
| Analytics | Understand which pages and games are most popular on lucky999 among Pakistani members, identify technical issues and slow-loading pages, improve platform performance. Data is aggregated and anonymised. | Yes – via cookie preferences |
Lucky999 does not use third-party advertising cookies or tracking pixels that follow your activity across other websites. The analytics tools used by lucky999 are configured to respect user privacy and do not send individually identified member data to external analytics providers. You can manage cookie preferences through your browser settings — note that disabling essential cookies will affect platform functionality.
7. How Long Lucky999 Keeps Your Data
Lucky999 retains personal data for as long as it is needed for the purpose it was collected and for any additional period required by applicable law. Retention periods for the main data categories are as follows:
- Account and identity data: For the duration of your lucky999 account membership, plus a standard period of five years after account closure to comply with anti-money laundering record-keeping obligations
- Financial transaction data: Seven years from the date of each transaction, as required by financial services regulations applicable to PKR payment processing
- Gaming activity data: For the duration of your membership plus three years, used to support responsible gaming monitoring and dispute resolution if required
- Support interaction data: Three years from the date of each support interaction, retained for dispute resolution and service improvement purposes
- Technical and log data: Twelve months from collection, after which it is deleted or fully anonymised
- Marketing preference data: For the duration of your lucky999 account, or until you withdraw marketing consent, whichever comes first
When data reaches the end of its retention period, lucky999 securely deletes it using industry-standard deletion methods that prevent recovery. Lucky999 conducts regular data audits to ensure that data is not retained beyond its applicable retention period.
8. Security Measures Lucky999 Applies
Lucky999 applies a layered approach to data security designed to protect Pakistani members' personal and financial information from unauthorised access, disclosure, loss, or destruction. The following measures are in place:
- All data transmission between your device and lucky999 servers is protected by TLS 1.2 or higher encryption, providing the same level of security used by major banking applications
- All stored passwords are hashed using industry-standard one-way algorithms — lucky999 staff cannot view passwords in plain text, and password resets require identity verification
- Access to systems containing personal data is restricted by role, with staff having access only to data necessary for their specific job functions
- All access to production systems containing member data is logged and reviewed regularly for anomalies
- Lucky999 maintains an incident response plan covering data breach detection, containment, assessment, and notification to affected members in accordance with applicable obligations
- Regular security assessments are conducted on platform infrastructure, including penetration testing and vulnerability scanning
While lucky999 applies robust technical and organisational security measures, no system can guarantee absolute security. Members are encouraged to contribute to their own account security by using strong, unique passwords and contacting lucky999 support immediately if they suspect their account has been compromised.
9. Your Privacy Rights as a Lucky999 Member
As a lucky999 member, you have specific rights over your personal data. These rights can be exercised at any time by contacting lucky999 support. Lucky999 will respond to rights requests within a reasonable timeframe and without charge in standard cases.
1
Right of Access
You have the right to request a copy of all personal data lucky999 holds about you. This includes your account data, gaming history, transaction records, and any communications you have had with lucky999 support. Lucky999 will provide this data in a readable format within a reasonable timeframe upon request.
2
Right to Correction
If any personal data lucky999 holds about you is inaccurate or incomplete, you have the right to request a correction. For most account data, you can update this directly through your lucky999 account settings. For identity data that requires re-verification, contact support directly.
3
Right to Deletion
You may request the deletion of your personal data in circumstances where it is no longer needed for the purpose it was collected, or where you withdraw consent for processing that was based on consent. This right is subject to lucky999's legal obligation to retain certain data — financial and identity records required for anti-money laundering compliance cannot be deleted before the applicable retention period expires.
4
Right to Object to Processing
You have the right to object to lucky999 processing your data for purposes based on legitimate interest, including marketing profiling and certain analytics activities. You can exercise this by adjusting your marketing preferences in account settings or contacting support to request that specific processing activities cease.
5
Right to Withdraw Consent
Where lucky999 processes your data based on your consent — primarily for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal, and it does not affect your ability to use the lucky999 platform.
6
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used format so you can transfer it to another service if you wish. Contact lucky999 support to request a data export in your preferred format.
To exercise any of these rights, contact lucky999 support at support@lucky999.plus or through live chat. Lucky999 may request proof of identity before fulfilling a data rights request to ensure the request is legitimate and to protect member privacy.
10. Children's Privacy
Lucky999 does not knowingly collect personal data from any person under the age of 18. The lucky999 platform is strictly for adults (18+) and our registration process includes age verification steps to prevent underage registration. If lucky999 becomes aware that personal data has been collected from someone under 18, that data will be deleted immediately and the account closed.
If you are a parent or guardian and believe that a minor has created a lucky999 account using your details or those of another adult, please contact lucky999 support immediately at support@lucky999.plus. Lucky999 will investigate and take appropriate action, including refunding any deposits made and closing the account promptly.
11. Changes to This Privacy Policy
Lucky999 may update this Privacy Policy from time to time to reflect changes in our data practices, new features on the platform, or applicable legal requirements. Material changes to this policy will be communicated to registered lucky999 members via the mobile number or email address on their account before the changes take effect.
The "Last Updated" date at the top of this page reflects the most recent revision. We recommend that you review this Privacy Policy periodically. Your continued use of lucky999 after a policy update constitutes acknowledgement of the revised terms. If you have concerns about any change to this policy, please contact lucky999 support before the effective date.
