Privacy Policy – How Lucky 999 Protects Your Data

01. Overview

Lucky 999 is an online gaming and entertainment platform serving players in Pakistan. When you use the platform — whether through the website at lucky999.pw or the Lucky 999 mobile app — certain personal information is collected as part of normal operations. This includes information you provide directly during registration and verification, information generated automatically during your use of the platform, and information provided by payment processors when you deposit or withdraw in PKR.

This policy covers the full scope of personal data that Lucky 999 handles. It explains the legal basis on which data is processed, the purposes for which it is used, how long it is kept, and the rights available to you as a user. Lucky 999 is committed to handling your data responsibly and keeping it secure. We do not sell personal data to advertisers or unrelated third parties.

This policy uses plain language to make it easy to understand. Where a technical term is necessary, it is explained in context. The full Terms and Conditions, which include additional obligations related to your account, are available at Terms and Conditions.

02. What We Collect

Lucky 999 collects personal data across several categories depending on how you interact with the platform.

Lucky 999 does not collect data that is not necessary for platform operation. We do not request social media passwords, CNIC copies beyond what is required for identity verification, or any information unrelated to your account.

03. How We Use Your Data

Personal data collected by Lucky 999 is used for clearly defined purposes. We do not use your data for purposes beyond those listed here without obtaining fresh consent or updating this policy.

• Account Management: Creating and maintaining your Lucky 999 account, verifying your identity and age, and keeping your account details up to date.
• Platform Delivery: Providing access to casino games, live casino tables, sports betting markets, the mobile app and all other platform features.
• Financial Transactions: Processing PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer and other supported payment methods.
• Verification and Compliance: Age verification, identity checks and fraud prevention. Keeping records required for financial and operational compliance purposes.
• Security and Fraud Prevention: Monitoring for unusual account activity, detecting prohibited behaviour described in the Terms and Conditions, and protecting the platform from abuse.
• Customer Support: Responding to queries, resolving disputes, investigating complaints and maintaining records of support interactions.
• Responsible Gaming: Monitoring gaming activity to support responsible use features such as deposit limits, session reminders and self-exclusion tools.
• Platform Improvement: Analysing aggregated usage data to improve platform performance, game selection and the overall user experience.
• Communications: Sending account-related notifications, deposit confirmations, withdrawal updates and important policy changes.

04. Payment Data and PKR Transactions

All financial transactions on Lucky 999 are processed in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal, payment-related data is handled as follows:

• JazzCash and Easypaisa wallet references are collected to process transactions and verify that payment methods belong to the registered account holder.
• Bank account details provided for bank transfer withdrawals are stored securely and used only for processing the specific withdrawal to your verified account.
• Card details, where applicable, are processed through a secure payment gateway. Lucky 999 does not store full card numbers on its own servers.
• Transaction records — amounts, dates, methods, status — are retained for the period required by our operational and compliance obligations.

You may only use payment methods registered in your own name. Providing another person's JazzCash or Easypaisa account number constitutes a breach of the Terms and Conditions and this privacy commitment, as it means the data provided does not correspond to the account holder.

05. Data Sharing

Lucky 999 does not sell or rent your personal data to third parties for marketing or advertising purposes. Data may be shared only in the circumstances listed below, and only to the extent necessary for the stated purpose.

• Payment Processors: JazzCash, Easypaisa, Raast and banking partners receive the transaction data needed to process your PKR deposits and withdrawals. These processors operate under their own privacy policies and data handling obligations.
• Identity Verification Services: Where third-party verification tools are used to confirm age or identity, the minimum necessary data is shared for that specific purpose only.
• Technology and Hosting Providers: Platform infrastructure and hosting services that process data on Lucky 999's behalf are bound by contractual data protection obligations.
• Game Providers: Where games are supplied by third-party studios, those providers may receive anonymised or session-specific data necessary to deliver the game. They do not receive your full identity or financial details.
• Legal and Regulatory Obligations: Lucky 999 will disclose data where required by a valid legal process, court order or other binding obligation. We will notify you of such a disclosure where permitted to do so.
• Fraud Prevention: Where there is a credible suspicion of fraud, money laundering or criminal activity related to your account, relevant data may be shared with appropriate bodies as required.

06. Cookies and Tracking

Lucky 999 uses cookies and similar technologies on the website and app to support platform functionality and improve the user experience. Cookies are small text files stored on your device when you visit the platform.

• Essential Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security cookies that protect your account. These cannot be disabled without breaking core platform features.
• Functional Cookies: Remember your preferences — such as language settings and game interface options — so you do not need to re-set them on each visit.
• Analytics Cookies: Aggregated, anonymised data about how pages are used, which features are accessed and where errors occur. This data helps improve the platform and has no personally identifying information attached.

You can manage cookie preferences through your browser settings. Blocking essential cookies will affect platform functionality, including login and account access. Lucky 999 does not use third-party advertising cookies or cross-site tracking technologies.

07. Data Retention

Lucky 999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable obligations. The general retention periods below apply unless a specific circumstance requires a longer period.

When the retention period expires, data is securely deleted or anonymised. Where data is anonymised it may be retained indefinitely in aggregated form for statistical analysis, but it can no longer be linked to any individual.

08. Security Measures

Lucky 999 takes the security of your personal data seriously. The following measures are in place to protect your information against unauthorised access, disclosure, alteration or loss.

• Encryption in Transit: All data exchanged between your device and the Lucky 999 platform is transmitted over HTTPS using TLS encryption. This applies to the website and the mobile app.
• Encryption at Rest: Sensitive stored data — including identity information and financial records — is encrypted at the database level.
• Access Controls: Internal access to personal data is restricted on a need-to-know basis. Staff who handle support queries or account reviews can only access the data relevant to their role.
• Fraud Detection: Automated systems monitor for suspicious login patterns, unusual transaction behaviour and account anomalies in real time.
• Account Security: Two-factor authentication and login notification features are available to all registered accounts and are strongly recommended.

While Lucky 999 implements strong technical and procedural safeguards, no platform can guarantee absolute security. You are responsible for keeping your account credentials secure and not sharing your login details with others. If you suspect your account has been accessed without your permission, contact support immediately and change your password.

09. Your Rights Over Your Data

As a Lucky 999 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact support through your account dashboard.

Lucky 999 will respond to data rights requests within a reasonable time. Where we cannot fulfil a request — for example, where retention obligations apply — we will explain the reason clearly.

10. Minors and Under-18 Users

Lucky 999 is strictly an adult platform. We do not knowingly collect or process personal data from individuals under the age of 18. Age verification is carried out during registration, and accounts found to belong to underage users are closed immediately with all associated data deleted in line with our retention policy.

If you are a parent or guardian and believe that a minor has registered on Lucky 999, please contact support immediately providing relevant details. We will investigate promptly and close any confirmed underage account.

11. Changes to This Privacy Policy

Lucky 999 may update this Privacy Policy periodically to reflect changes in platform operations, data handling practices or applicable requirements. The revision date at the top of this page is updated whenever changes are made.

When significant changes occur — such as new categories of data being collected or changes to how data is shared — registered players will be notified via an in-platform message or to the email address on file. Minor clarifications may be made without direct notification, but the revision date will always reflect the most recent update.

Continued use of the platform after the effective date of any policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you should contact support to close your account.

12. Contact and Data Requests

For any questions about this Privacy Policy, to exercise your data rights, or to raise a privacy concern, please contact the Lucky 999 support team. The fastest way to reach support for account-specific queries is through the in-account support channel once you are logged in.

General privacy enquiries can be directed to the support email address listed on the platform. Please include your registered account username and a clear description of your request so we can handle it efficiently. Lucky 999 aims to acknowledge all data rights requests promptly and to resolve them within a reasonable timeframe.