Lucky95 Privacy Policy – How We Protect Your Data

This Privacy Policy applies to the Lucky95 online betting and gaming platform, accessible at lucky95.ws ("Lucky95", "we", "us", "our"). Lucky95 is the data controller responsible for personal data collected through the platform. We are a licensed online gaming operator and are subject to data protection requirements under our operating licence as well as applicable Pakistani data protection norms.

This Privacy Policy applies to all Lucky95 members, visitors to the lucky95.ws website, and any person whose personal data is processed by Lucky95 in connection with our services. "You" and "your" in this document refers to any such individual.

For all privacy-related queries, our dedicated privacy contact point is: support@lucky95.ws. We aim to respond to all privacy-related enquiries within 72 hours.

Lucky95 collects the following categories of personal data, depending on how you interact with our platform:

Lucky95 collects personal data through several channels:

• Directly from you — when you register, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically — technical data is collected automatically when you visit lucky95.ws or use the Lucky95 mobile platform. This includes IP address, device information, session activity, and cookie data.
• From third-party payment processors — when you make a deposit or withdrawal, our payment partners (JazzCash, Easypaisa, NayaPay, SadaPay, IBFT processors, Visa/Mastercard networks) share transaction confirmation data with Lucky95 to verify that payments have been completed.
• From identity verification providers — during KYC, Lucky95 may use certified third-party identity verification services to cross-check your documents. These services confirm your identity but do not share your full document data with unrelated parties.
• From fraud prevention services — Lucky95 uses industry-standard fraud detection tools that analyse transaction patterns and device fingerprints to identify potentially fraudulent activity.

Lucky95 uses your personal data for the following specific purposes. We only process data where we have a legitimate reason to do so, as set out in Section 5 (Legal Basis):

• Account creation and management: To register your Lucky95 account, verify your identity, manage your profile, and maintain your account history.
• Processing transactions: To process deposits and withdrawals through your chosen payment method, reconcile transaction records, and issue payment confirmations.
• Regulatory compliance: Lucky95 is required by our operating licence to perform Know Your Customer (KYC) checks, verify ages, and maintain records of transactions for anti-money laundering (AML) compliance. This is a legal obligation we cannot waive.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and any other prohibited conduct under our Terms and Conditions.
• Responsible gaming: To monitor for signs of problem gambling behaviour, honour self-exclusion and deposit limit settings, and fulfil our duty of care to Lucky95 members.
• Platform improvement: To analyse usage patterns, identify technical issues, improve game performance, and develop new features based on how Pakistani members actually use Lucky95.
• Customer support: To respond to your queries, resolve complaints, and maintain a record of support interactions for quality assurance.
• Marketing communications: To send you promotions, bonus offers, and news about Lucky95 — but only if you have opted in to receive them. You can opt out at any time.

Lucky95 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil our contract with you — including account management, payment processing, and game delivery — is carried out because it is necessary to provide the services you signed up for.
• Legal obligation: Identity verification, age checks, AML record-keeping, and certain fraud prevention activities are carried out because they are required by our operating licence and applicable regulations.
• Legitimate interests: Fraud prevention, platform security, and usage analytics are carried out on the basis of Lucky95's legitimate interests in maintaining a secure, fair, and well-functioning platform, provided these interests are not overridden by your rights.
• Consent: Marketing communications by email or SMS are sent only where you have given explicit consent. You may withdraw this consent at any time by updating your marketing preferences in account settings or by contacting support.

Lucky95 does not sell your personal data. We share it only in the following limited circumstances, and only to the extent necessary:

• Payment processors: JazzCash, Easypaisa, NayaPay, SadaPay, and card processing networks receive the minimum data needed to process your transactions. These providers are contractually bound to use your data only for payment processing and are subject to their own data protection obligations.
• Identity verification providers: Third-party KYC and age verification services may process your identity documents to confirm that you meet Lucky95's eligibility requirements. These providers do not retain your data beyond the verification process.
• Game software providers: Live casino providers (such as game streaming studios) receive your account ID and session information to deliver real-time game content. They do not receive your payment or identity information.
• Regulatory authorities: Lucky95 may be required to disclose account and transaction data to regulatory bodies, law enforcement agencies, or courts when legally required to do so. We will notify you of such disclosures where we are legally permitted to do so.
• Fraud prevention networks: Anonymised or aggregated fraud signals may be shared with industry fraud prevention services to protect all players across the broader online gaming ecosystem.

Lucky95 takes payment data security extremely seriously. The following safeguards are in place specifically for financial information:

• Card payments at Lucky95 are processed exclusively through PCI-DSS Level 1 certified processors. Lucky95 never stores full card numbers, CVV codes, or card expiry dates on our own servers.
• Mobile wallet transactions via JazzCash, Easypaisa, NayaPay, and SadaPay use secure API integrations. Lucky95 stores only a reference token, not your full mobile wallet credentials or PIN.
• IBFT bank transfer details are encrypted in transit and at rest. Lucky95 stores bank account numbers only in encrypted form and only for as long as required for transaction reconciliation.
• All payment APIs used by Lucky95 are authenticated with rotating secure tokens and are monitored 24/7 for anomalous activity.

Lucky95 uses cookies and similar tracking technologies on the lucky95.ws website and mobile platform. A cookie is a small text file stored on your device by your browser. Cookies help Lucky95 deliver a secure, functional, and personalised experience.

Lucky95 uses the following types of cookies:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in, security tokens that protect your account, and cookies that maintain your basket or bet slip. You cannot opt out of essential cookies without stopping the platform from working.
• Functional cookies: Remember your preferences, such as language settings, display preferences, and last-viewed games. These improve your Lucky95 experience but are not strictly essential.
• Analytics cookies: Help Lucky95 understand how members use the platform — which pages are visited most, where users drop off, and how long sessions last. This data is used in aggregate form to improve the platform. Analytics data is not tied back to your individual identity.
• Fraud prevention cookies: Used to detect unusual activity patterns and protect your account from unauthorised access.

You can manage your cookie preferences through your browser settings. Note that disabling functional or analytics cookies will not stop you from using Lucky95, but may affect your experience. Disabling essential cookies will prevent you from logging in or placing bets.

Lucky95 retains personal data for as long as your account is active and for a defined period after account closure, as set out below:

• Active account data (identity, contact, activity) — retained throughout the life of your Lucky95 account.
• Transaction records — retained for a minimum of five years after the transaction date, as required by anti-money laundering regulations.
• KYC documents — retained for five years following account closure, in line with regulatory requirements.
• Support communications — retained for two years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Marketing preference records — retained for three years from the date of consent or last interaction, whichever is later.

When the applicable retention period expires, Lucky95 securely deletes or anonymises the relevant data. Anonymised data — which cannot be linked back to any individual — may be retained indefinitely for statistical and analytical purposes.

Lucky95 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security programme includes:

• TLS 1.3 encryption for all data transmitted between your device and Lucky95 servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Multi-factor authentication for all Lucky95 internal systems and administrative access.
• Role-based access controls — Lucky95 staff can only access the data they need to perform their specific job functions.
• Continuous intrusion detection and 24/7 security monitoring of all Lucky95 infrastructure.
• Regular independent security audits and penetration testing by certified third-party security firms.
• Comprehensive staff training on data protection obligations and secure data handling practices.

As a Lucky95 member, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting our support team at support@lucky95.ws:

Lucky95 is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18 years of age. If Lucky95 becomes aware that a member is under 18, their account will be closed immediately and any data collected will be deleted, except where retention is required by law to support an age violation investigation.

If you are a parent or guardian and believe your child has created a Lucky95 account, please contact our support team immediately at support@lucky95.ws. We will investigate and resolve the issue as quickly as possible.

The Lucky95 platform integrates with third-party services to deliver game content, process payments, and verify identities. These integrations are essential to the Lucky95 service. However, Lucky95 is not responsible for the privacy practices of third-party providers operating their own separate services. Each third-party provider operates under its own privacy policy.

Lucky95 selects all third-party providers through a diligence process that includes review of their data protection practices. All providers who process Lucky95 member data are required to sign a data processing agreement that binds them to data protection obligations consistent with this Privacy Policy.

Lucky95 sends marketing communications — including bonus offers, promotions, and platform news — by email and SMS only where you have given explicit consent during registration or subsequently through account settings. We do not send unsolicited marketing messages.

You can withdraw your consent and opt out of Lucky95 marketing at any time by:

• Updating your communication preferences in your Lucky95 account settings.
• Clicking the unsubscribe link in any Lucky95 marketing email.
• Replying "STOP" to any Lucky95 SMS message.
• Contacting Lucky95 support at support@lucky95.ws and requesting removal from marketing lists.

Opting out of marketing does not affect your account status or your ability to use any Lucky95 service. You will still receive important account-related communications such as deposit confirmations, withdrawal notifications, and security alerts.

Lucky95 may update this Privacy Policy from time to time as our services evolve, as new regulatory requirements emerge, or as we adopt new data practices. When we make significant changes, we will notify registered members by email and display a prominent notice on the Lucky95 platform at least seven days before the changes take effect.

We recommend revisiting this page periodically. The "Last Updated" date at the top of this page will always reflect when the policy was most recently revised. Your continued use of Lucky95 after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

If you do not agree with any changes to this Privacy Policy, please stop using Lucky95 and contact our support team to close your account. We will process your request and return any withdrawable balance in line with our standard withdrawal procedures.

If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a privacy concern, please reach out to the Lucky95 privacy team through any of the following channels:

This Privacy Policy was last reviewed and updated in January 2025. Lucky95 reserves the right to amend this policy in accordance with Section 15. All historical versions of this policy are available on request from our support team.