Summary: Lucky 98 collects personal data only to operate the platform, process PKR transactions, verify identity, prevent fraud, and improve your experience. We do not sell your data to third parties. We do not share it beyond what is required to run the platform. You can request access, correction, or deletion of your data at any time by emailing support@lucky98.im.
1. Who We Are
Lucky 98 operates the online gaming and sports betting platform accessible at lucky98.im. This Privacy Policy applies to all data processing activities carried out by Lucky 98 in connection with the platform — including the website, mobile experience, live casino games, sports betting services, VIP Club, Refer a Friend programme, and all related communications.
Lucky 98 is the data controller for the personal information you provide when registering and using the platform. This means we determine the purposes and means of processing your data, and we are responsible for ensuring that processing is carried out lawfully and in line with the commitments set out in this policy.
If you have any questions about how Lucky 98 handles your personal data, the fastest route to a response is emailing support@lucky98.im. We aim to respond to all privacy-related queries within 5 working days.
2. Personal Data We Collect
Lucky 98 collects different types of personal data depending on how you interact with the platform. Below is a complete breakdown of what we collect and when.
2.1 Registration Data
When you create a Lucky 98 account, we collect:
- Full legal name
- Date of birth (to verify you are 18 or over)
- Pakistani mobile number
- Email address
- Residential address in Pakistan
- Username and encrypted password
2.2 Identity Verification Data
Lucky 98 is required to verify the identity of players as part of its Know Your Customer (KYC) obligations. This may involve collecting:
- Copy of CNIC (Computerised National Identity Card) — front and back
- Passport (where CNIC is unavailable)
- Proof of address (utility bill, bank statement dated within 90 days)
- Selfie photograph for identity match purposes
Identity documents are processed securely and stored in encrypted form. They are used solely for age verification, fraud prevention, and compliance with applicable regulations.
2.3 Financial Data
When you deposit or withdraw, Lucky 98 records transaction amounts, dates, payment method identifiers (e.g., Easypaisa mobile number, JazzCash account reference, last four digits of card), and transaction status. We do not store full card numbers, CVV codes, or complete bank account details on Lucky 98 servers — these are handled directly by our certified payment processors.
2.4 Gaming and Betting Activity
Lucky 98 records your activity on the platform including: games played, bets placed, bet amounts in PKR, outcomes, session duration, device type, and IP address associated with each session. This data is used for account management, responsible gaming monitoring, dispute resolution, and service improvement.
2.5 Technical and Device Data
When you access Lucky 98, our servers automatically log: IP address, browser type and version, operating system, device model, screen resolution, referring URL, and pages visited. This is standard web analytics data collected by virtually every online platform.
2.6 Communications Data
If you contact Lucky 98 support via live chat, email, or any other channel, we retain records of those communications. This helps us provide consistent support and resolve any disputes that reference prior conversations.
3. How Lucky 98 Uses Your Personal Data
Every piece of data Lucky 98 collects is used for a defined purpose. We do not collect data speculatively. Below is the complete list of purposes for which we process personal data.
| Purpose | Data Used | Category |
|---|---|---|
| Account creation and management | Registration data, device data | Operations |
| Age and identity verification (KYC) | ID documents, selfie, DOB | Compliance |
| Processing PKR deposits and withdrawals | Financial data, identity data | Operations |
| Fraud prevention and security monitoring | IP data, transaction data, device data | Security |
| Responsible gaming monitoring | Gaming activity, session data | Welfare |
| Customer support and dispute resolution | Communications data, transaction data | Support |
| Promotional communications (with consent) | Contact data, gaming preferences | Marketing |
| Platform analytics and improvement | Anonymised usage data | Analytics |
| Legal and regulatory obligations | All data categories as required | Compliance |
4. Legal Basis for Processing
Lucky 98 processes personal data only where a lawful basis exists. The primary bases we rely on are:
- Contract performance: Processing necessary to provide you with the services you signed up for — account management, transactions, game access, and support.
- Legal obligation: Processing required to comply with applicable laws, including age verification, anti-money laundering checks, and record-keeping obligations.
- Legitimate interests: Processing carried out in pursuit of Lucky 98's legitimate business interests — fraud prevention, platform security, analytics — where those interests do not override your fundamental rights.
- Consent: For optional communications such as promotional emails, SMS, and push notifications. You may withdraw consent at any time without affecting other aspects of your account.
5. Sharing Your Personal Data
Lucky 98 does not sell, rent, or trade personal data. We share data only with the categories of third parties listed below, and only to the extent necessary for the stated purpose.
5.1 Payment Processors
Lucky 98 shares transaction-relevant data with certified payment processors — including Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners — to process PKR deposits and withdrawals. These processors handle payment data under their own security certifications and are not permitted to use your data for any purpose beyond the specific transaction.
5.2 Identity Verification Providers
KYC checks are conducted using certified identity verification technology. Identity documents submitted during verification are transmitted to our verification partner in encrypted form and are not retained by the third party beyond the period required to complete the check.
5.3 Fraud Prevention and Security
Lucky 98 uses specialised fraud detection services that receive device fingerprint data, IP addresses, and behavioural signals to identify and prevent fraudulent account activity. These services operate under strict data processing agreements and are not permitted to use Lucky 98 player data for any other purpose.
5.4 Legal and Regulatory Bodies
Lucky 98 may be required to disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where required by law. In such cases, we disclose only the minimum information required to satisfy the legal obligation.
5.5 Business Transfers
In the event of a merger, acquisition, or sale of all or part of Lucky 98's business, player data may be transferred to the successor entity as part of that transaction. In such circumstances, Lucky 98 will notify registered players via email and in-platform notice before data is transferred, and the successor entity will be bound by privacy commitments at least equivalent to those in this policy.
6. Cookies and Tracking Technologies
Lucky 98 uses cookies and similar technologies to operate the platform, remember your preferences, and analyse usage patterns. The categories of cookies in use are:
- Strictly Necessary Cookies: Required for the platform to function — session management, login state, security tokens. These cannot be disabled without breaking core platform functionality.
- Functional Cookies: Remember your preferences such as odds format selection, language choice, and game history display settings. Disabling these will reset your preferences on each visit.
- Analytics Cookies: Collect anonymised data about page visits and interactions to help Lucky 98 understand how the platform is used and where improvements are needed. No personally identifiable information is included in analytics data.
- Marketing Cookies (with consent only): Used where you have consented to receive personalised promotional content. You can withdraw this consent at any time via your account settings or by contacting support.
You can manage cookie preferences through your browser settings at any time. Blocking strictly necessary cookies will prevent the Lucky 98 platform from functioning correctly.
7. Data Security
Lucky 98 applies industry-standard technical and organisational measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. The principal security measures in place include:
Despite these measures, no online platform can guarantee absolute security. If you become aware of any unauthorised access to your Lucky 98 account, contact support immediately at support@lucky98.im. Lucky 98 will investigate and respond within 24 hours of a reported security incident.
8. Data Retention Periods
Lucky 98 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulation. The general retention schedule is as follows:
- Active account data: Retained for the duration of your account's active status and for 5 years after account closure. This reflects regulatory obligations relating to financial record-keeping and anti-money laundering compliance.
- Identity verification documents: Retained for 5 years from the date of verification or account closure, whichever is later.
- Transaction records: Retained for 7 years in line with standard financial record-keeping obligations applicable to licensed gaming operators.
- Customer support communications: Retained for 3 years from the date of the interaction.
- Analytics data (anonymised): Retained indefinitely in anonymised, aggregated form with no link to individual identities.
- Marketing consent records: Retained while consent is active and for 1 year after withdrawal, to demonstrate that communications were sent on a valid consent basis.
When data reaches the end of its retention period, it is securely deleted or permanently anonymised. Lucky 98 conducts periodic data audits to ensure retention schedules are applied consistently.
9. Your Rights Over Your Personal Data
As a Lucky 98 player, you have the following rights in relation to your personal data. You can exercise any of these rights by emailing support@lucky98.im. Lucky 98 will respond to all rights requests within 14 working days.
10. Children's Privacy
Lucky 98 is strictly an 18+ platform. We do not knowingly collect personal data from persons under the age of 18. If Lucky 98 becomes aware that an account has been created by or on behalf of a person under 18, the account will be closed immediately, any balance will be returned to the depositing payment method, and all associated data will be deleted. If you believe a minor has registered on Lucky 98, please contact us immediately at support@lucky98.im.
As a parent or guardian, if you are concerned about a young person's access to online gaming platforms, we recommend using parental control software and keeping devices password-protected. Our Responsible Gaming page has additional resources.
11. Marketing Communications
Lucky 98 may send you promotional emails, SMS messages, and in-platform notifications about new games, bonuses, and VIP Club offers. We will only send marketing communications where you have given explicit consent during registration or subsequently through your account settings.
You can withdraw consent for marketing communications at any time by:
- Clicking the "Unsubscribe" link at the bottom of any Lucky 98 promotional email
- Updating your notification preferences in your Lucky 98 account settings
- Contacting our support team at support@lucky98.im and requesting removal from marketing lists
Withdrawal of marketing consent does not affect transactional communications — Lucky 98 will continue to send you account-related notifications such as deposit confirmations, withdrawal updates, and security alerts regardless of your marketing preferences, as these are necessary for the operation of your account.
12. Changes to This Privacy Policy
Lucky 98 reviews this Privacy Policy regularly and updates it as required to reflect changes in the platform, applicable law, or data processing practices. For material changes — those that affect how your data is used or your rights as a player — Lucky 98 will notify registered players by email and in-platform notice at least 14 days before the changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision.
Your continued use of Lucky 98 following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you may close your account and request data deletion before the effective date.
13. How to Contact Lucky 98 About Privacy
For any questions, concerns, or requests relating to this Privacy Policy or the way Lucky 98 handles your personal data, please use the following contact routes:
- Email: support@lucky98.im — for all privacy rights requests, data queries, and complaints
- Live Chat: Available in-platform 20+ hours daily — for quick questions about your data or account privacy settings
- FAQ: Visit our FAQ page for answers to common account and privacy questions
Lucky 98 responds to privacy-related emails within 5 working days. Complex rights requests — data access, deletion, portability — are fulfilled within 14 working days. If a request cannot be fulfilled within that period, we will inform you of the reason and provide an updated timeline.