luck92 Privacy Policy – How We Handle Your Personal Data

1. Overview & Data Controller

1.1 This Privacy Policy applies to all personal data processed by luck92 ("we", "us", "the Platform") in connection with the services offered at luck92.net, including sports betting, casino games, live dealer tables, online slots, and any associated mobile or web applications.

1.2 luck92 is the data controller in respect of the personal data you provide when registering and using the platform. As data controller, luck92 determines the purposes and means by which your personal data is processed.

1.3 By registering an account on luck92 or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

1.4 This Policy should be read alongside the luck92 Terms & Conditions and Responsible Gaming Policy, which together govern your relationship with the platform.

2. Personal Data We Collect

luck92 collects personal data through a number of channels and at various points during your use of the platform. The categories of data we collect include:

2.1 Registration Data

• Full legal name;
• Date of birth (for age verification purposes);
• Pakistani mobile number (03XX format);
• Email address;
• Residential address, city (e.g. Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan);
• National Identity Card (CNIC) number and, where required for KYC, a scanned copy of your CNIC.

2.2 Financial & Transaction Data

• Payment method details (JazzCash account number, Easypaisa number, bank account details for HBL, UBL, Meezan Bank transfers, or card details for Visa/Mastercard);
• Deposit and withdrawal transaction history;
• Wallet balances;
• Cryptocurrency wallet addresses (for USDT TRC20 transactions).

2.3 Gaming Activity Data

• Bets placed, including odds, stake, and settlement outcome;
• Casino game sessions, including game titles played, duration, and results;
• Bonus and promotion usage;
• Wagering history across all luck92 sections (cricket betting, slots, live casino).

2.4 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session data including login timestamps and duration;
• Cookies and similar tracking technologies (see Section 5).

2.5 Communications Data

• Support queries and the content of any communications you send to luck92 support;
• Survey responses and feedback submitted through the platform.

3. How We Use Your Personal Data

luck92 uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your luck92 account, including processing deposits, withdrawals, and bonus credits;
• Identity verification: To verify that you are at least 18 years of age and to carry out Know Your Customer (KYC) checks as required for financial compliance;
• Anti-money laundering (AML) compliance: To monitor transactions for suspicious activity and to comply with applicable financial crime prevention obligations;
• Payment processing: To execute your deposit and withdrawal requests via JazzCash, Easypaisa, bank transfers, and other accepted payment methods;
• Responsible gaming: To monitor your gaming activity and apply any responsible gaming limits you have set — or that luck92 may apply where problem gambling indicators are detected;
• Fraud and security: To detect, prevent, and investigate fraudulent activity, unauthorised account access, and abuse of luck92's terms;
• Customer support: To respond to your queries and resolve disputes;
• Platform improvement: To analyse usage data and improve the luck92 platform experience;
• Marketing communications: To send you promotional offers, PSL odds updates, and new game notifications, where you have consented or where this is permitted under applicable law (see Section 11 for opt-out).

4. Legal Basis for Processing

luck92 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services described in the luck92 Terms & Conditions — including account management, payments, and gaming services;
• Legal obligation: Processing required to comply with KYC, AML, and other applicable regulatory requirements;
• Legitimate interests: Processing for fraud prevention, platform security, and business analytics — where these interests are not overridden by your data protection rights;
• Consent: Marketing communications and non-essential cookie placement, where consent has been obtained.

5. Cookies & Tracking Technologies

5.1 luck92 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain your login session, and analyse how the site is used.

5.2 The types of cookies used by luck92 include:

• Essential cookies: Required for the platform to function — including session authentication and security tokens. These cannot be disabled without impairing platform functionality;
• Analytical cookies: Used to understand how players navigate the luck92 platform — which game categories are most visited, average session duration, and error rates;
• Preference cookies: Store your platform preferences such as language and display settings;
• Marketing cookies: Used, with your consent, to deliver relevant promotional content. You may withdraw consent at any time by adjusting your browser settings.

5.3 You can control cookie settings through your browser. Note that disabling essential cookies will impair your ability to log in and use the luck92 platform.

6. Sharing Your Data with Third Parties

6.1 luck92 does not sell your personal data to any third party. We share personal data with third parties only where necessary for the following purposes:

• Payment processors: JazzCash, Easypaisa, bank partners, Skrill, Visa/Mastercard networks, and cryptocurrency infrastructure providers — for processing your transactions;
• Identity verification providers: Third-party KYC and AML compliance service providers who verify identity documents and screen against sanctions lists;
• Game software providers: Casino and sports betting software providers (including live dealer studios) who receive the minimum data necessary to deliver game services within the luck92 platform;
• IT and hosting infrastructure: Cloud and server hosting providers who process data on luck92's behalf under data processing agreements;
• Regulatory and law enforcement authorities: Where we are legally required to disclose information in connection with fraud investigations, court orders, or regulatory inquiries.

6.2 All third parties who process personal data on behalf of luck92 are required to do so under contractual data protection obligations and may not use the data for their own independent purposes.

7. Data Retention

7.1 luck92 retains personal data for as long as your account is active and for such additional periods as are required by applicable legal, regulatory, and compliance obligations. In practice:

• Account and transaction data is retained for a minimum of five (5) years following account closure, as required for AML compliance;
• KYC identity documents are retained for five (5) years from the date of verification;
• Support communications are retained for two (2) years from the date of the interaction;
• Cookie and analytics data is retained for a maximum of thirteen (13) months from collection.

7.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with luck92's data destruction procedures.

8. Data Security

8.1 luck92 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions;
• Encrypted storage of sensitive personal data including CNIC details and payment information;
• Role-based access controls ensuring that only authorised personnel can access personal data;
• Regular security testing and vulnerability assessments of the platform;
• Two-factor authentication options for User accounts.

8.2 While luck92 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You also play a role in data security by maintaining a strong, unique password for your luck92 account and by not sharing your login credentials with any third party.

9. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by luck92:

• Right of access: You may request a copy of the personal data we hold about you;
• Right of rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where there is no legal obligation for us to retain it;
• Right to restriction: You may request that we restrict the processing of your data in certain circumstances;
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes;
• Right to data portability: You may request a structured, machine-readable copy of data you have provided to us.

To exercise any of the above rights, please contact luck92 at [email protected] with your request. We will respond within 30 calendar days. We may require identity verification before processing data rights requests.

10. Children and Minors

10.1 The luck92 platform is strictly restricted to persons aged 18 years and over. luck92 does not knowingly collect personal data from persons under the age of 18.

10.2 If luck92 discovers that personal data has been collected from a person under 18, the account will be immediately closed, the data deleted, and any balance forfeited in accordance with the luck92 Terms & Conditions.

10.3 If you believe a minor has registered a luck92 account, please notify us immediately at [email protected].

11. Marketing Communications

11.1 With your consent, luck92 may send you marketing communications including promotional offers, PSL match day odds boosts, new slot announcements, and bonus offers via email or SMS to your registered Pakistani mobile number.

11.2 You may withdraw consent for marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email you receive from luck92;
• Adjusting your communication preferences in your account settings;
• Contacting luck92 support at [email protected] with a request to opt out.

11.3 Withdrawal of marketing consent does not affect the lawfulness of processing that occurred prior to withdrawal. Transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — are not affected by marketing opt-out and will continue as necessary for account operation.

12. Changes to This Privacy Policy

12.1 luck92 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Users via email notification or a prominent notice on the platform prior to the effective date of the change.

12.2 Continued use of the luck92 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you should close your account before the effective date.

12.3 The current version of this Privacy Policy is always available at luck92.net/privacy-policy. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or luck92's handling of your personal data, please contact us:

Please include your full name, registered email address, and a clear description of your request in any privacy-related correspondence. For data rights requests, we will require identity verification before processing.