luky365
Privacy Policy

This Privacy Policy applies to all personal data collected, processed, and stored by luky365 in connection with the operation of the luky365.app platform — including the casino lobby, sports betting section, Cockfighting arena, PKR cashier, luky365 Login system, customer support interactions, promotional communications, and all other services offered to registered Pakistan players.

This Policy applies to all individuals who: (a) register a Player Account on luky365; (b) browse luky365.app without registering; (c) contact luky365 customer support by any channel; or (d) receive marketing communications from luky365. It applies regardless of the device or browser used to access the platform.

This Policy should be read alongside the luky365 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Privacy Policy and the Terms & Conditions specifically relating to data matters, this Privacy Policy takes precedence.

luky365 collects the following categories of personal data from Pakistan players and platform users:

• Full legal name as appearing on CNIC (Computerised National Identity Card)
• Date of birth (for age verification — all luky365 accounts require the player to be 18 or above)
• CNIC number and CNIC document images (front and back)
• Selfie photograph for identity matching purposes
• Pakistan mobile telephone number
• Email address (if provided during registration)
• Residential address (for enhanced KYC where required)

• Easypaisa account number and transaction reference details
• JazzCash account number and transaction reference details
• Pakistan bank account details (HBL, MCB, Meezan Bank, Bank Alfalah, UBL) where banking channel is used for PKR deposits or withdrawals
• Raast ID where applicable
• USDT TRC20 wallet address where cryptocurrency deposits are made
• PKR deposit amounts, withdrawal amounts, and transaction timestamps

• luky365 username, account ID, and session logs
• Login timestamps, IP addresses, and device identifiers associated with luky365 account access
• Complete game history — bets placed, game titles, outcomes, PKR amounts wagered and won
• Bonus and promotional credit history
• VIP tier status and wagering milestones
• Responsible gaming settings configured by the Player (deposit limits, session alerts, self-exclusion status)

• IP address and approximate geolocation at the time of login
• Device type, operating system, and browser version
• Cookie data and session identifiers (see Section 7)
• Platform access logs used for security and fraud detection

• Live chat transcripts between the Player and the luky365 support team
• Email correspondence with [email protected]
• Records of bonus claims and promotional opt-ins

luky365 collects personal data through the following means:

• Direct provision by the Player: Data provided at registration, during KYC verification, when submitting a PKR deposit or withdrawal request, when contacting luky365 customer support, or when completing a bonus claim form.
• Automated collection: Technical data collected automatically when a Player accesses luky365.app — including IP address, device identifiers, browser type, and session duration — via cookies, server logs, and analytics tools.
• Payment providers: Transaction confirmation data returned by Easypaisa, JazzCash, Pakistan banking institutions, Raast, and USDT TRC20 network providers following a deposit or withdrawal instruction by the Player.
• Identity verification partners: Where luky365 uses a third-party KYC verification service to validate CNIC documents and selfie images submitted by Pakistan players, that provider returns a verification result to luky365. The CNIC document and selfie images are processed by the KYC provider under their own privacy terms.
• Anti-fraud and security systems: Data from device fingerprinting, login anomaly detection, and IP reputation systems used to protect the platform and Pakistan player accounts from fraud, unauthorised access, and money laundering.

luky365 uses the personal data it collects for the following purposes:

luky365 does not use your personal data for purposes beyond those described in this table without first obtaining your explicit consent or satisfying a new legal basis for processing.

luky365 processes personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your luky365 account, process PKR transactions, and deliver the gaming services you have contracted for — including the game lobby, sports betting, and Cockfighting arena.
• Legal obligation: Processing required to comply with applicable anti-money laundering regulations, KYC requirements, responsible gaming obligations, and any direction from a competent regulatory or law enforcement authority.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and the improvement of luky365 services — where such interests are not overridden by your fundamental privacy rights.
• Consent: Where luky365 relies on your consent as the legal basis — specifically for marketing communications — you may withdraw that consent at any time by contacting [email protected] or using the opt-out mechanism in any luky365 marketing message.

luky365 does not sell, rent, or trade personal data for commercial gain. We share personal data only with the following categories of third parties, strictly for the purposes described:

• Payment processors: Easypaisa, JazzCash, Raast, HBL, UBL, MCB Bank, Meezan Bank, Bank Alfalah, and USDT TRC20 network providers — solely to facilitate PKR deposits and withdrawals instructed by the Player.
• KYC and identity verification providers: Third-party services used to verify CNIC documents and selfie images submitted by Pakistan players during the verification process. These providers are contractually bound to process data only for the verification purpose and not to retain or repurpose it.
• Game content providers: Providers of games available in the luky365 lobby — such as live dealer studios and slot game developers — receive the minimum player session data required to deliver the game (typically a session token, not directly identifiable personal data).
• Anti-fraud and security partners: Services that assist luky365 in detecting fraudulent accounts, money laundering patterns, and unauthorised access attempts. These partners process technical and transaction data under strict data processing agreements.
• Legal and regulatory authorities: Government bodies, law enforcement agencies, and regulatory authorities — where luky365 is legally required to disclose information, for example in response to a valid court order or regulatory investigation.
• Professional advisors: Legal counsel, auditors, and accountants — where data access is necessary for the provision of professional services to luky365, under binding confidentiality obligations.

luky365 uses cookies and similar tracking technologies on the luky365.app platform to deliver core functionality, maintain your login session, and improve platform performance. The following categories of cookies are used by luky365:

• Strictly Necessary Cookies: Essential for the platform to function — including session management, luky365 Login authentication state, and security tokens. These cannot be disabled without breaking core platform functionality.
• Performance Cookies: Collect anonymised data about how Pakistan players use luky365 — pages visited, time spent, game categories accessed — to help luky365 improve its services. No individually identifiable data is collected via these cookies.
• Functional Cookies: Remember your luky365 preferences — such as language setting, preferred game lobby view, and "Remember Me" login status — so you do not need to reconfigure them on every visit.
• Analytics Cookies: Used by luky365's internal analytics systems to understand aggregate usage patterns and optimise the platform for Pakistan players. Data processed via these cookies is anonymised before analysis.

You may adjust cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the luky365 platform, including the luky365 Login system and cashier functionality. Disabling performance and analytics cookies will not affect your ability to play games or make PKR transactions.

luky365 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account data: Retained for the full duration of the Player's active luky365 account plus a minimum of five (5) years following account closure, in compliance with standard anti-money laundering record-keeping requirements.
• KYC documents (CNIC images, selfie): Retained for a minimum of five (5) years following the date of verification or account closure, whichever is later, in line with applicable financial crime regulations.
• PKR transaction records: Retained for a minimum of five (5) years following the date of each transaction.
• Customer support communications: Chat transcripts and email correspondence retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained for the duration of marketing communications activity plus two (2) years, to evidence consent where required.
• Technical and session logs: Retained for twelve (12) months from the date of generation for security and fraud investigation purposes.

Following the expiry of the applicable retention period, luky365 will securely delete or anonymise your personal data in accordance with industry-standard data destruction practices.

luky365 implements technical and organisational security measures appropriate to the risk level associated with the personal data it processes. These measures include:

• SSL/TLS 256-bit encryption for all data transmitted between Pakistan players' devices and luky365 servers — the same standard employed by major Pakistan banks including HBL and MCB.
• Encrypted storage of all sensitive personal data and financial records at rest.
• Access controls limiting personal data access to luky365 personnel whose job function requires it — based on least-privilege principles.
• Multi-factor authentication for luky365 system access by internal staff.
• Regular security assessments, penetration testing, and vulnerability reviews of the luky365 platform.
• Incident response procedures designed to detect, contain, and report data security incidents in a timely manner.

While luky365 takes robust security seriously, no online platform can guarantee absolute security against all threats. Pakistan players can reduce their exposure by using strong unique passwords, enabling two-factor authentication on their luky365 account, and reporting any suspected account compromise to [email protected] immediately.

As a luky365 player in Pakistan, you hold the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request".

The luky365 platform is strictly intended for adults aged 18 years and above. luky365 does not knowingly collect personal data from individuals under 18 years of age. Age verification (CNIC date of birth check and document verification) is a mandatory step in the KYC process for all Pakistan player accounts.

If luky365 discovers or is notified that an account has been created by or operated by an individual under 18, the account will be immediately closed, any deposited funds will be returned to the source payment method after completing required AML checks, and all associated personal data will be deleted as soon as legally permissible. Any individual with information about underage gambling at luky365 is encouraged to report it to [email protected] immediately.

With your explicit consent, luky365 may send you promotional communications about new games, bonus offers, VIP programme updates, and platform features — via SMS to your Pakistan mobile number and/or email where an address was provided at registration.

You may opt out of marketing communications from luky365 at any time by:

• Clicking the "unsubscribe" link in any luky365 marketing email;
• Replying STOP to any luky365 promotional SMS received on your Pakistan mobile number;
• Contacting luky365 at [email protected] with the subject line "Marketing Opt-Out".

Opting out of marketing communications does not affect the delivery of transactional messages — such as PKR deposit confirmations, withdrawal notifications, 2FA codes, and account security alerts — which are part of the luky365 service and cannot be disabled while your account is active.

The luky365 platform does not contain links to external websites for commercial or affiliate purposes. All navigation within luky365.app remains within the luky365 domain. This Privacy Policy does not extend to any third-party websites that a user may access independently of the luky365 platform. luky365 is not responsible for the privacy practices of any third-party website, application, or payment provider — each operates under its own privacy terms.

luky365 processes gaming activity data — including bet history, deposit frequency, session duration, and PKR amounts wagered — for the purpose of fulfilling its responsible gaming obligations to Pakistan players. This includes identifying patterns that may indicate problem gambling behaviour, enforcing self-exclusion settings configured by the Player, and complying with any intervention required under luky365's Responsible Gaming Policy.

Responsible gaming data held by luky365 — particularly self-exclusion status — is treated with the highest level of sensitivity. It is shared only with luky365's responsible gaming compliance team and, where required by law, with relevant regulatory authorities. It is never used for marketing purposes.

Players who wish to activate self-exclusion or adjust responsible gaming limits on their luky365 account may do so at any time through Account Settings or by contacting the support team at [email protected]. For further information, visit the Responsible Gaming page.

luky365 reviews and updates this Privacy Policy periodically to reflect changes in platform functionality, legal requirements, or data processing practices. The "Effective Date" at the top of this page reflects the date of the most recent revision.

Where luky365 makes material changes to this Privacy Policy — particularly changes that affect how your personal data is used or shared — we will notify registered Pakistan players via their registered contact details or via a prominent notice on the luky365 platform prior to the changes taking effect. Your continued use of luky365 following such notification constitutes your acceptance of the updated Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data luky365 holds about you, please contact the luky365 Data Team through the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing to the appropriate team member.
• Live Chat: Available 24 hours a day, 7 days a week via the luky365 platform. Live chat agents can handle general privacy questions and escalate formal data rights requests to the appropriate team.

luky365 aims to acknowledge all privacy-related correspondence within 24 hours and to resolve all requests within 30 calendar days. Complex requests or those requiring extensive data retrieval may take up to 60 calendar days, with written notice provided to the requesting Pakistan player at the 30-day mark.