luky55
Privacy Policy

luky55 takes the privacy and security of your personal data seriously. We are committed to handling all personal information collected through the luky55 Platform in a lawful, transparent, and responsible manner. This Privacy Policy is designed to clearly explain what personal data we collect from Pakistani users and international visitors, why we collect it, how we use it, with whom we share it, how long we retain it, and what rights you have in relation to it.

This Policy applies to all personal data processed by luky55 in connection with the operation of the Platform, including data collected through the website at https://luky55.asia, the account registration and KYC process, deposit and withdrawal transactions, gaming sessions, customer support communications, and any marketing communications sent by luky55.

This Policy should be read in conjunction with the luky55 Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your relationship with luky55.

For the purposes of applicable data protection legislation, luky55 is the Data Controller in respect of all personal data collected and processed through the Platform. As Data Controller, luky55 determines the purposes for which, and the means by which, your personal data is processed.

luky55 operates under an international online gaming licence that imposes specific data protection obligations on the Platform, including requirements to collect and retain certain categories of personal data for anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming compliance purposes. These obligations exist independently of this Policy and cannot be waived by individual users.

luky55 collects and processes the following categories of personal data about registered users and visitors to the Platform:

luky55 does not intentionally collect or process Special Category Data (including health data, racial or ethnic origin data, or religious belief data) except where strictly necessary for responsible gaming assessments or where you have explicitly provided such information in a support communication. Where special category data is inadvertently collected, it will be deleted as soon as practicable.

luky55 collects personal data through the following channels and mechanisms:

• Directly from you: Information you provide during account registration (name, mobile number, date of birth, address), during KYC document submission, when contacting customer support, when completing responsible gaming self-assessment questionnaires, and when opting into promotional communications.
• Automatically during Platform use: Technical data including your IP address, device identifiers, browser type, session data, login timestamps, and game interaction data collected automatically through cookies, server logs, and analytics systems when you access and use the luky55 Platform.
• From payment service providers: Transaction confirmation data, account verification information, and payment status updates received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast in connection with deposit and withdrawal processing.
• From identity verification service providers: Identity document validation results and risk assessment data received from third-party KYC/AML verification agencies used to confirm the authenticity of documents submitted during the KYC process.
• From publicly available sources: Sanctions list checks, politically exposed person (PEP) screening data, and adverse media checks conducted as part of luky55's AML compliance programme using publicly available regulatory databases.

luky55 processes your personal data on the following legal bases, depending on the specific purpose of the processing activity in question:

• Contractual Necessity: Processing necessary for luky55 to perform its contractual obligations to you as a registered Platform user — including account management, game provision, deposit processing, withdrawal payments, and customer support. Without this processing, luky55 cannot provide the services you have contracted for.
• Legal Obligation: Processing required by luky55's international gaming licence, anti-money laundering legislation, Know Your Customer regulations, and responsible gaming compliance obligations. This includes identity verification, transaction monitoring, age verification, and mandatory data retention requirements. This processing cannot be refused by users.
• Legitimate Interests: Processing necessary for luky55's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, system improvement, and the detection of multi-accounting or prohibited conduct — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional purposes, including the sending of marketing communications and the use of non-essential cookies, which luky55 carries out only where you have provided clear, freely given, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

luky55 uses the personal data we collect for the following specific and documented purposes:

• To create, verify, and maintain your luky55 account, including processing your KYC documents and confirming your age eligibility (21+ requirement).
• To process your deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast, and to facilitate withdrawal payments back to your verified payment method.
• To provide you with access to all luky55 gaming products — cricket betting, live casino, slots, tennis markets, and Pearls of Bingo — and to record your gaming activity for account management and dispute resolution purposes.
• To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling, applying account-level limits or restrictions where necessary, and proactively reaching out to players who may be showing signs of harm.
• To detect, investigate, and prevent fraud, money laundering, bonus abuse, multi-accounting, match-fixing, and any other prohibited conduct on the Platform.
• To conduct mandatory AML screening, PEP checks, sanctions screening, and source-of-funds verification in accordance with luky55's licensing obligations.
• To send you transactional communications — including deposit confirmations, withdrawal processing notifications, security alerts, and account management updates — which are sent regardless of your marketing preferences as they relate to your use of the Platform.
• To send you promotional communications about luky55 bonuses, new games, and special offers, where you have provided consent to receive such communications and have not subsequently opted out.
• To respond to and resolve customer support enquiries, complaints, and disputes.
• To comply with requests from regulatory authorities, law enforcement agencies, courts, and other bodies with legal authority to require disclosure of personal data.

luky55 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the following circumstances, and only to the minimum extent necessary for each stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast receive the financial data necessary to process your deposit and withdrawal transactions. Each payment provider processes your data under its own privacy policy and regulatory framework.
• KYC & Identity Verification Partners: Third-party identity verification agencies receive your identity document images and personal details for the purpose of verifying your identity and age as required by our licensing obligations. These providers are contractually bound to process your data only for this stated purpose.
• Game Software Providers: Licensed game studios and platform providers whose games are featured in the luky55 lobby may receive technical session data necessary to deliver the gaming experience. Game providers operate under their own data protection frameworks and gaming licences.
• Fraud Prevention & Security Providers: Specialist third-party fraud detection and platform security providers may receive technical data (IP addresses, device identifiers, session patterns) for the purpose of identifying and preventing fraudulent activity on the Platform.
• Legal & Regulatory Authorities: luky55 may disclose personal data to its gaming licensing authority, financial intelligence units, law enforcement agencies, courts, or other regulatory bodies where we are legally required or permitted to do so, or where disclosure is necessary to protect the rights, property, or safety of luky55, its users, or the public.
• Professional Advisers: Lawyers, auditors, accountants, and other professional advisers engaged by luky55 may receive personal data to the extent necessary for the provision of their professional services, under professional secrecy obligations.

As an internationally licensed online gaming operator serving Pakistani users, luky55 may transfer your personal data to countries outside Pakistan in the course of providing Platform services — for example, to data centres hosting the Platform's infrastructure, to game providers based in European or Asian jurisdictions, or to identity verification agencies operating cross-border verification services.

Where personal data is transferred internationally, luky55 ensures that appropriate safeguards are in place to protect the data and that the transfer meets the requirements of applicable data protection legislation. These safeguards may include:

• Transferring data only to jurisdictions recognised as providing an adequate level of data protection by the relevant regulatory authority.
• Entering into data transfer agreements with recipient organisations that incorporate internationally recognised standard contractual clauses for data protection.
• Ensuring that recipient organisations are subject to binding corporate rules or other approved transfer mechanisms providing equivalent data protection standards.

You may request further information about the specific safeguards in place for international transfers of your personal data by contacting luky55 at the data protection contact details set out in Section 16 of this Policy.

luky55 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the luky55 Platform is protected by TLS 1.3 / 256-bit SSL encryption, preventing interception by third parties during transmission.
• Encryption at rest: Personal and financial data stored in luky55's databases is encrypted using AES-256 encryption. All passwords are stored using bcrypt hashing with salt — luky55 systems cannot view your actual password.
• Access controls: Access to personal data is restricted to authorised luky55 personnel and approved third-party processors on a strict need-to-know basis, enforced through role-based access controls, multi-factor authentication for system administrators, and comprehensive access logging.
• Security monitoring: luky55's security operations centre monitors Platform systems and data access logs continuously for suspicious activity, with automated alerting and incident response protocols.
• Regular security audits: Independent third-party security professionals conduct penetration testing and security audits of the luky55 Platform infrastructure on a regular basis, the results of which inform ongoing security improvement programmes.
• Incident response: luky55 maintains a documented data breach response procedure. In the event of a data breach affecting registered users, luky55 will notify affected users and the relevant regulatory authority within the timeframes required by applicable law.

luky55 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in any event for the minimum periods required by our licensing obligations and applicable law. The following retention periods apply to the main categories of personal data luky55 processes:

At the end of applicable retention periods, personal data is securely deleted or anonymised in accordance with luky55's data deletion procedures. Anonymised or aggregated data that no longer relates to an identifiable individual may be retained indefinitely for statistical and analytical purposes.

luky55 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device when you visit a website. They serve different functions depending on their type:

• Strictly Necessary Cookies: Essential for the operation of the luky55 Platform. These cookies enable core functionality such as maintaining your login session, remembering your account security settings, and enabling the shopping basket functionality for deposit selection. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
• Performance & Analytics Cookies: Collect information about how visitors use the luky55 Platform — which pages are visited most frequently, how long sessions last, and where errors occur — in order to improve Platform performance. Information collected by these cookies is aggregated and anonymised. These cookies are only set with your consent.
• Functional Cookies: Allow the Platform to remember choices you make — such as your language preference or your last-visited game category — to provide a more personalised experience. These cookies are set with your consent.
• Security Cookies: Used by luky55's fraud detection systems to identify unusual login patterns, detect bot activity, and protect your account from unauthorised access. These are set as part of the Platform's security infrastructure.

luky55 does not use third-party advertising or behavioural targeting cookies. You can manage your cookie preferences at any time through your browser's cookie settings. Please note that disabling certain cookies may affect the functionality of the luky55 Platform. For detailed information about the specific cookies used, please refer to the Cookie Information section of the Platform's footer.

Subject to applicable law and certain limitations imposed by our legal and regulatory obligations, you have the following rights in relation to the personal data luky55 holds about you:

• Right of Access: You have the right to request a copy of the personal data luky55 holds about you. luky55 will provide this information in a structured, commonly used, and machine-readable format within 30 days of receiving your request.
• Right to Rectification: If you believe that any personal data luky55 holds about you is inaccurate or incomplete, you have the right to request correction. You can update certain information directly in your luky55 account settings, or contact support for other data corrections.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request the deletion of personal data luky55 holds about you. This right is subject to important limitations — luky55 is legally required to retain certain data (particularly KYC and transaction records) for minimum periods under our licensing and AML obligations, which override erasure requests for that data.
• Right to Restriction: You may request that luky55 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and we are verifying the grounds for doing so.
• Right to Data Portability: You have the right to receive certain personal data you have provided to luky55 in a structured, machine-readable format, and to request that luky55 transmit this data directly to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of luky55's legitimate interests. luky55 will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

To exercise any of these rights, please contact luky55 using the data protection contact details set out in Section 16. We will respond to all valid requests within 30 days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason within the initial 30-day period. We will not charge a fee for exercising your rights in normal circumstances.

The luky55 Platform is strictly intended for adults aged 21 years and older. luky55 does not knowingly collect, process, or retain personal data from persons under the age of 21. Age verification is a mandatory part of the luky55 registration and KYC process, and any account found to have been registered by a person under 21 years of age will be immediately suspended.

If you are a parent or guardian and you believe your child has accessed luky55 and provided personal data to the Platform, please contact us immediately at the data protection contact details set out in Section 16. We will investigate the matter promptly and take all necessary remedial action.

luky55 may send you promotional communications about our latest bonuses, game launches, VIP programme updates, cricket betting promotions, PSL specials, and other Platform offers — but only where you have provided explicit consent to receive such communications during the registration process or subsequently through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your luky55 account settings dashboard.
• Clicking the unsubscribe link included in any marketing email sent by luky55.
• Contacting luky55 customer support and requesting removal from marketing communications.

Please note that opting out of marketing communications will not affect the sending of transactional and account management communications (such as deposit confirmations, withdrawal notifications, security alerts, and support responses), which are sent as necessary operational communications in connection with your use of the Platform and cannot be fully opted out of while your account is active.

luky55 reserves the right to amend or update this Privacy Policy at any time, for example to reflect changes in our data processing activities, our legal obligations, or our business operations. The effective date at the top of this document indicates when the current version of the Policy came into effect.

Where luky55 makes a material change to this Privacy Policy that may affect your privacy rights or how we process your personal data in a materially different way, we will provide advance notice to registered users via email to the address associated with their Account, or via a prominent notice on the Platform, not less than seven (7) days prior to the change taking effect.

Your continued use of the luky55 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the revised Policy. We recommend that you review this page periodically to remain informed about how luky55 is handling your personal data.

For any enquiry, request, or complaint relating to the processing of your personal data by luky55, or to exercise any of your data subject rights as described in Section 12 of this Policy, please contact us using the following details:

If you are not satisfied with luky55's response to your data protection enquiry or complaint, you have the right to escalate the matter to the data protection supervisory authority in your country of residence. Pakistani users may contact the relevant data protection authority established under Pakistani data protection legislation. Alternatively, users may escalate data protection complaints to the supervisory authority in the jurisdiction where luky55 holds its gaming licence.

For information about luky55's responsible gaming programme, self-exclusion options, and player protection tools, please visit our Responsible Gaming page. For information about the general rules governing your use of the Platform, please refer to our Terms & Conditions.