This Privacy Policy explains what personal data luck98 collects from Pakistan players, why we collect it, how it is used, who it may be shared with, and what rights you have over your own information. We have written it in plain English rather than legal boilerplate because we want you to actually understand it.
luck98 ("the Platform", "we", "us") operates the online casino and sports betting platform accessible at luck98.win, including the Android and iOS mobile applications. We are the data controller for all personal data collected through the platform and are responsible for how that data is handled.
This Privacy Policy covers all data collected from you as a registered player or visitor, including information provided at registration, data generated through your use of the platform (game play, deposits, withdrawals, betting activity), technical data from your devices, and communications you have with our support team.
We wrote this policy in straightforward English because we want Pakistan players to understand exactly what they are agreeing to — not wade through pages of legal text designed to obscure rather than explain. If anything here is unclear, you can contact our support team through live chat and we will explain it directly.
luck98 collects personal data in three broad categories: data you provide directly, data generated by your activity on the platform, and technical data from your device and connection. We only collect what we actually need to operate the platform and comply with our obligations.
Most data collected by luck98 comes directly from you — through the registration form, KYC submission, deposit process and in-app actions. Some data is collected automatically as a normal part of operating any web or mobile application.
luck98 uses your personal data for specific, legitimate purposes connected to running the platform and providing services to you as a player. We do not use your data for purposes unrelated to the platform or your account.
| Purpose | Data Used | Basis |
|---|---|---|
| Account creation & management | Name, contact details, date of birth | Contract performance |
| Age & identity verification (KYC) | Identity documents, selfie | Legal obligation |
| Processing deposits & withdrawals | Payment method data, PKR amounts | Contract performance |
| Fraud prevention & security | IP address, device data, activity logs | Legitimate interest |
| Responsible gaming monitoring | Deposit history, session data, limits set | Legitimate interest |
| Customer support | Support communications, account history | Contract performance |
| Platform improvements | Anonymised usage & device data | Legitimate interest |
| Promotional communications | Contact details, preferences | Consent |
Promotional communications — such as emails or push notifications about new promotions, PSL betting offers or VIP programme updates — are only sent to players who have opted in. You can withdraw this consent at any time through your account notification settings or by contacting support.
Payment data — including your JazzCash mobile number, Easypaisa account, bank account details or card information — is handled with particular care at luck98. Full payment credentials are processed by our payment partners rather than stored in their entirety on luck98's own servers. luck98 stores only the reference data needed to link your transactions to your account (for example, the last few digits of an account number or the name of the payment method).
All payment data in transit between your device and luck98's systems is encrypted using industry-standard SSL/TLS protocols. Stored payment references are encrypted at rest. luck98 staff cannot view your full payment credentials through any internal system.
luck98 uses cookies and similar technologies on the website and within the mobile app. Cookies are small text files stored on your device that help the platform function correctly, remember your session, and understand how the platform is being used at an aggregate level.
These are required for the platform to function. They manage your login session, keep you authenticated between pages, and ensure your balance and account data load correctly. You cannot opt out of essential cookies without losing the ability to use the platform.
These remember your preferences — such as your preferred language settings, last-used payment method and notification preferences. They make your experience more convenient but are not strictly required for basic platform use.
luck98 uses anonymised analytics to understand how players navigate the platform — which sections are visited most, where users drop off in a registration flow, and how the app performs across different device types. This data is aggregated and does not identify individual players. It informs platform improvements only.
You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies on the browser version of luck98 may affect some features, but will not prevent you from logging in, depositing, playing or withdrawing.
luck98 retains your personal data for as long as your account is active and for a period after account closure as required by our obligations. Financial transaction records — deposits, withdrawals, and betting history — are retained for a minimum of five years from the date of the transaction for anti-money laundering and audit purposes. This retention period applies even if you close your account voluntarily.
KYC documents are retained for the duration of your account and for a minimum of five years after account closure. Support communications are retained for three years unless a longer period is needed in connection with an ongoing complaint or dispute.
When data is no longer required and the retention period has passed, it is securely deleted or anonymised. Anonymised data — which cannot be linked back to your identity — may be retained indefinitely for statistical and platform improvement purposes.
luck98 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or loss. These include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls that limit which staff can view player data based on their role, and automated monitoring systems that detect unusual access patterns.
Two-factor authentication is available on all luck98 accounts and is strongly recommended. Enabling 2FA means that even if your password is somehow compromised, an attacker cannot access your account without the one-time code sent to your registered mobile number.
No security system is completely infallible. In the unlikely event of a data breach that affects your personal data, luck98 will notify affected players through the contact details on their account as promptly as possible and will provide details of what was affected and what steps are being taken to address it.
As a luck98 player, you have several rights in relation to your personal data. These rights can be exercised by contacting the luck98 support team through live chat, and requests will be handled within a reasonable timeframe.
You can request a copy of the personal data we hold about you at any time. We will provide this in a readable format within a reasonable period.
If any personal data we hold is inaccurate or incomplete, you have the right to request correction. Some corrections may require re-verification of your identity documents.
You can request deletion of your data. Note that data subject to legal retention obligations (financial records, KYC documents) cannot be deleted before the end of the applicable retention period.
You can object to processing based on legitimate interest — for example, receiving marketing communications. Opting out of promotional messages is available directly in account settings.
For data you provided directly and which is processed on a consent or contract basis, you can request it in a structured, machine-readable format.
You can request that we restrict processing of your data in certain circumstances — for example, while a rectification request is being reviewed.
luck98 is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has created an account or submitted personal data to luck98, please contact our support team immediately. We will investigate and, if confirmed, will close the account and delete the associated data as quickly as possible.
As part of the account registration and KYC process, luck98 verifies the date of birth provided and may request documentary proof of age. Any account found to belong to a player under 18 will be closed immediately and any balance held will be returned to the originating payment method.
luck98 may update this Privacy Policy from time to time to reflect changes in how we operate the platform, new features we introduce, or changes in data protection obligations. The date at the top of this page indicates when the policy was last revised.
Where changes are material — meaning they significantly affect how your data is used or your rights as a player — we will notify registered players through the contact details on their account before the changes take effect. Continued use of luck98 after a policy update constitutes acceptance of the revised Privacy Policy.
If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a concern about how your data has been handled, please contact the luck98 support team. The fastest way to reach us is through the live chat function available 24/7 in the app and on the website.
You can also reach our support team at the email address listed in the footer of every page on luck98.win. Please include your registered account details and a description of your request or concern so we can assist you efficiently.
Six things luck98 commits to every Pakistan player when it comes to how your data is handled.
Your personal information is never sold, rented or traded to third-party marketers, data brokers or any party unconnected to the operation of luck98.
We only collect data that is genuinely needed to verify your age, process your payments in PKR, operate your account and keep the platform secure.
All data between your device and luck98 is encrypted in transit. Sensitive stored data including payment references and identity documents is encrypted at rest.
You can access, correct, restrict or request deletion of your personal data at any time by contacting support. Promotional opt-out is available directly in account settings.
Full payment credentials are processed by our payment partners — JazzCash, Easypaisa and banks — and are never stored in full on luck98 servers.
Have a question about your data or want to make a rights request? Our support team is available around the clock through live chat in the app and on the website.
Register with luck98 knowing that your personal data is handled with care, your payments in PKR are processed securely, and your rights over your own information are fully respected. 18+ players only.