1Who We Are
Lucky999 is an online casino platform operating at lucky999.info, designed and built specifically for Pakistani players. In the context of this Privacy Policy, "lucky999", "we", "us" and "our" refer to the operating entity behind lucky999.info and all services offered through it.
For the purposes of data processing, lucky999 acts as the data controller — meaning we determine what data is collected, why it is collected, and how it is processed. Our contact details for all privacy-related matters are listed in Section 14 of this policy.
Lucky999 processes personal data in connection with the services offered on the platform, including account registration, identity verification, deposit and withdrawal processing, gameplay, customer support, and responsible gaming operations. All data processing by lucky999 is carried out for legitimate operational purposes only.
2What Personal Data Lucky999 Collects
Lucky999 collects personal data in two ways: information you provide directly when using the platform, and information collected automatically as you interact with lucky999.info.
2.1 — Information You Provide Directly
- Registration data: Full name, date of birth, gender, email address, and mobile phone number provided when you create your lucky999 account.
- Identity verification documents: CNIC number, CNIC scan or photograph, passport details, or other government-issued identity documents submitted in response to a KYC (Know Your Customer) request from lucky999.
- Payment information: Mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account numbers for IBFT transfers, and masked card data for Visa/Mastercard transactions. Full card numbers are never stored by lucky999 — see Section 7.
- Communications: The content of messages you send to lucky999 via live chat, email, or any support channel, including support ticket records.
- Responsible gaming preferences: Deposit limits, session reminders, cool-off periods, and self-exclusion requests made through your lucky999 account settings.
2.2 — Information Collected Automatically
- Device and browser data: IP address, browser type and version, operating system, device model, screen resolution, and language settings.
- Usage data: Pages visited on lucky999.info, games accessed, session duration, click patterns, navigation paths, and in-game activity logs.
- Transaction records: History of deposits, withdrawals, bets placed, games played, wins and losses associated with your lucky999 account.
- Cookie data: Information stored via cookies and similar technologies — described in detail in Section 8.
Lucky999 does not collect or process any sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data beyond what is strictly necessary for responsible gaming compliance purposes.
3Why Lucky999 Collects Your Data
Every category of data lucky999 collects serves a specific, legitimate purpose. The table below maps each type of data to the reason it is collected.
| Data Type |
Purpose |
| Name, date of birth, CNIC |
Account registration, age verification, KYC compliance |
| Email address, mobile number |
Account communication, OTP verification, support contact |
| Payment method details |
Processing PKR deposits and withdrawals, fraud prevention |
| Transaction history |
Account records, dispute resolution, AML compliance |
| Device and IP data |
Security monitoring, fraud detection, duplicate account prevention |
| Gameplay activity |
Game operation, RTP verification, responsible gaming monitoring |
| Support conversations |
Issue resolution, quality assurance, training |
| Responsible gaming preferences |
Enforcing player-set limits, self-exclusion compliance |
Lucky999 does not use any of this data for profiling, targeted advertising, or any purpose unrelated to the direct operation of the platform and its compliance obligations.
4Legal Basis for Processing
Lucky999 processes personal data under the following legal bases:
- Contractual necessity: Processing required to deliver the services you signed up for on lucky999 — including operating your account, processing PKR deposits and withdrawals, and providing access to games.
- Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money-laundering (AML) rules, KYC obligations, and age verification requirements.
- Legitimate interests: Processing necessary for lucky999's legitimate operational interests, including fraud prevention, security monitoring, responsible gaming operations, and platform improvement — provided those interests are not overridden by your privacy rights.
- Consent: For marketing communications and non-essential cookies, lucky999 processes data only where you have given clear, informed consent. You may withdraw consent at any time as described in Section 12.
5How Long Lucky999 Keeps Your Data
Lucky999 retains personal data only for as long as it is needed for the purpose it was collected, or as required by applicable law. Key retention periods are as follows:
- Account data (name, contact details, identity documents): Retained for the duration of your active lucky999 account plus a minimum of five years after account closure, in line with standard AML and financial record-keeping requirements.
- Transaction records (deposits, withdrawals, bets): Retained for a minimum of five years following the transaction date, as required for financial compliance and dispute resolution purposes.
- Support communications: Retained for three years from the date of the communication, or longer if the communication is relevant to an ongoing dispute or legal matter.
- Device and IP data collected for security purposes: Retained for 12 months from the date of collection unless it is relevant to an ongoing security investigation.
- Marketing consent records: Retained for the duration of your lucky999 account or until you withdraw consent, whichever is earlier.
When data is no longer required and the retention period has expired, lucky999 securely deletes or anonymises it so that it can no longer be associated with an individual player.
6Who Lucky999 Shares Your Data With
Lucky999 does not sell your personal data. We do share specific data with a limited set of third parties where it is strictly necessary to operate the platform or meet legal obligations.
6.1 — Payment Processors
To process PKR deposits and withdrawals, lucky999 shares the minimum necessary payment data with the relevant payment service provider — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, or card payment processors. These providers receive only the data required to complete your specific transaction. They are contractually prohibited from using your data for their own marketing or secondary purposes.
6.2 — Identity Verification Providers
When lucky999 requires KYC verification, identity documents may be processed by a third-party identity verification service. These services verify authenticity and return a verification result to lucky999 — they do not retain copies of your documents beyond what their own regulatory obligations require.
6.3 — Game Software Providers
Lucky999's games are provided by third-party game developers and live dealer studios. These providers may receive technical session data (such as a session token or anonymised player ID) to operate the game, but they do not receive your personal contact information, payment details, or identity documents.
6.4 — Regulatory and Law Enforcement Bodies
Lucky999 will disclose personal data to regulatory authorities, law enforcement agencies, or other government bodies where legally required to do so, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity.
Lucky999 never shares your personal data with advertisers, social media platforms, data brokers, or any commercial third parties for marketing or profiling purposes. If you ever receive what appears to be a marketing communication claiming to be from lucky999 via a channel you did not authorise, please report it to support@lucky999.info immediately.
7How Lucky999 Handles Payment Data
Payment data receives special treatment within lucky999's data handling framework due to its sensitivity. The following practices apply specifically to financial information.
- Lucky999 does not store full card numbers on its own servers. Card payment processing is handled entirely by PCI DSS-compliant third-party processors. Lucky999 retains only masked card data (e.g., the last four digits) for account-matching and withdrawal routing purposes.
- Mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay) are stored in encrypted form and are only accessed for the purpose of processing your withdrawal requests.
- Bank account details provided for IBFT withdrawals are stored in encrypted form and used only for processing your withdrawal to your specified account.
- All payment data is transmitted using TLS encryption. No payment information is ever transmitted in plain text.
- Lucky999's internal access to payment data is restricted to employees with a direct need to process transactions or investigate disputes. Access is logged and audited regularly.
8Cookies and Similar Technologies
Lucky999 uses cookies and similar browser storage technologies on lucky999.info. A cookie is a small text file stored on your device that helps the platform recognise you and remember your preferences between visits. Here is how lucky999 uses each type.
Essential Cookies
Required for lucky999 to function. These maintain your login session, remember your language preference, and keep your shopping basket or active bet session intact. Essential cookies cannot be disabled without breaking the platform's core functionality.
Functional Cookies
Store your preferences — such as game settings, table preferences, and notification choices — so that lucky999 can display the platform in the way you've configured it on your next visit. These can be disabled but doing so will reset your preferences on each visit.
Analytics Cookies
Allow lucky999 to understand how players use the platform — which pages are most visited, where players encounter friction, and how game lobbies are navigated. Analytics data is aggregated and anonymised. Lucky999 uses this data solely to improve the platform experience. These cookies require your consent and can be declined.
Lucky999 does not use advertising or tracking cookies that share your behaviour with third-party advertising platforms. You can manage cookie preferences through your browser settings at any time. Note that disabling essential cookies will affect platform functionality.
9How Lucky999 Protects Your Data
Lucky999 implements multiple layers of technical and organisational security measures to protect personal data from unauthorised access, loss, alteration, or disclosure.
- Encryption in transit: All data exchanged between your browser or app and lucky999's servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms this is active on every lucky999 page.
- Encryption at rest: Sensitive data fields stored in lucky999's databases — including identity document references, payment account details, and CNIC numbers — are encrypted at the database level.
- Access controls: Lucky999 staff access to personal data is restricted on a need-to-know basis. All internal access to player data is logged and subject to regular audit review.
- Fraud detection systems: Automated systems monitor lucky999 accounts and transactions for patterns consistent with fraud, account sharing, or money laundering. These systems trigger manual review when anomalies are detected.
- Regular security reviews: Lucky999 conducts periodic security reviews of its data handling infrastructure, including vulnerability assessments and review of third-party provider security certifications.
- Incident response: In the unlikely event of a data security incident affecting personal data, lucky999 has a documented incident response protocol that includes notifying affected players where required.
While lucky999 takes all reasonable measures to protect your data, no digital system is entirely immune from risk. You also play an important role in account security — use a strong, unique password for your lucky999 account, enable any available two-factor authentication, and never share your login credentials with anyone.
10Your Data Rights
As a lucky999 player, you have clear rights regarding the personal data we hold about you. These rights are explained below. To exercise any of them, contact lucky999 at support@lucky999.info with "Data Rights Request" in the subject line, along with your registered username and a clear description of your request.
You have the right to request a copy of all personal data that lucky999 holds about your account. This includes your registration details, KYC records, transaction history, support communications, and any profile data. Lucky999 will provide this within a reasonable period of your verified request, typically within 30 days.
If any personal data lucky999 holds about you is inaccurate or out of date, you have the right to request that it be corrected. For example, if your mobile number has changed or your name was entered incorrectly during registration, contact support and we will update your records promptly after verifying your identity.
In certain circumstances, you have the right to request that lucky999 delete your personal data. This right applies where the data is no longer needed for the purpose it was collected, or where you withdraw consent and no other legal basis applies. Note that lucky999 is required to retain certain financial and identity records for a minimum period by law (as described in Section 5), and erasure requests cannot override these legal obligations.
You have the right to object to lucky999 processing your personal data for purposes based on legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes — see Section 12 for how to opt out of marketing communications.
Where lucky999 processes your personal data on the basis of consent or contract, and by automated means, you have the right to receive that data in a structured, commonly used, machine-readable format. Contact support to make a data portability request. Lucky999 will provide the data in CSV format within 30 days of your verified request.
11Children and Minors
Lucky999's services are strictly for adults aged 18 and above. Lucky999 does not knowingly collect or process personal data from any person under the age of 18. If you believe a minor has registered on lucky999 or provided personal data to the platform, please contact support immediately at support@lucky999.info. Lucky999 will investigate and, if confirmed, close the account, delete all associated data, and return any deposits made minus amounts wagered.
Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms including lucky999. Lucky999 cannot be responsible for minors who circumvent parental controls, but we take every measure available to enforce our 18+ requirement at the platform level, including age checks at registration and during KYC verification.
12Marketing Communications
Lucky999 may send you promotional communications — including bonus offers, new game announcements, and platform updates — via email or SMS, but only where you have consented to receive such communications. Consent is requested during registration and can be updated at any time from your lucky999 account settings.
You may withdraw your consent to receive marketing communications from lucky999 at any time by:
- Clicking the unsubscribe link in any lucky999 marketing email.
- Updating your notification preferences in your lucky999 account settings.
- Contacting lucky999 support at support@lucky999.info and requesting removal from all marketing lists.
Withdrawing marketing consent does not affect your ability to use your lucky999 account. You will continue to receive transactional communications — such as deposit confirmations, withdrawal updates, and account security alerts — as these are necessary for the operation of your account and cannot be opted out of while your account is active.
13Changes to This Privacy Policy
Lucky999 reviews and updates this Privacy Policy periodically to reflect changes in the platform's data practices, applicable law, or operational requirements. When material changes are made, lucky999 will notify registered players by email and update the effective date shown at the top of this page.
We recommend bookmarking this page and checking it from time to time, particularly when you notice the effective date has changed. Continued use of lucky999 following the effective date of any update constitutes acceptance of the revised Privacy Policy.
If any change would significantly reduce your rights under this policy, lucky999 will provide advance notice of at least 14 days before the change takes effect, allowing you time to review the changes and, if you do not accept them, close your account before they apply.
14Contact Us and Data Requests
All privacy-related queries, data subject rights requests, and data protection concerns should be directed to lucky999 using the contact details below.
- Email: support@lucky999.info — please use the subject line "Privacy Request — [your username]" for data rights requests to ensure prompt routing.
- Live Chat: Available 24/7 inside your lucky999 account — suitable for general privacy questions. For formal data rights requests, email is preferred as it creates a documented record.
Lucky999 will acknowledge receipt of all formal privacy requests within 48 hours and will respond substantively within 30 days. If the request is complex or if lucky999 receives a high volume of requests simultaneously, we may take up to an additional 60 days, in which case we will notify you of the extension within the initial 30-day period.
Lucky999 will never ask for your account password in any privacy-related communication. All staff handling data rights requests are subject to confidentiality obligations and receive regular privacy training.
If you feel that lucky999 has not adequately addressed a privacy concern, you have the right to escalate to the appropriate regulatory authority in the jurisdiction applicable to lucky999's operations. Lucky999 will cooperate fully with any regulatory investigation into its data practices.
