Lucky PK Privacy Policy — Your Data, Your Rights, Our Responsibility

Lucky PK is an online casino and sports betting platform operating at luckypk.im, serving players located in Pakistan. When this Privacy Policy refers to "Lucky PK", "we", "us", or "our", it means the operator of the Lucky PK platform.

Lucky PK is the data controller for all personal information collected through the platform, meaning we determine the purposes and means of processing your data. If you have any questions about how your data is handled, the contact details for our data-related queries are in Section 12 of this policy.

This Privacy Policy applies to all Lucky PK services — including the online casino, the PSL and sports betting section, all promotional programmes (including the refer a friend programme), and all account management and payment services.

Lucky PK collects personal data in two broad categories: data you provide directly, and data we collect automatically when you use the platform. Here is a full breakdown:

2.1 Data You Provide to Us

2.2 Data Collected Automatically

Lucky PK collects personal data through the following channels:

• Direct collection: When you fill in registration forms, submit KYC documents, make a deposit or withdrawal, contact support, or update your account settings.
• Automated collection: When you visit and interact with the Lucky PK platform, our systems automatically record certain technical and usage data as described in Section 2.2.
• Payment processors: When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, or bank transfer, the relevant payment processor shares transaction confirmation data with us to reconcile your account.
• Referral programme: If you were referred to Lucky PK by another player, we receive your registration data in the normal way — the referring player only knows whether their referral was "successful" (registered, deposited, and bet), not your specific personal details.
• Verification services: For KYC compliance, Lucky PK may share limited identity data with licensed identity verification service providers who confirm the validity of your documents.

Lucky PK processes personal data only where we have a legitimate legal basis for doing so. The table below maps each processing purpose to its legal basis:

Lucky PK does not use your personal data for automated decision-making that produces significant legal effects on you — for example, we do not use algorithms to automatically determine whether you win or lose (that is determined by certified RNG systems), and we do not use AI profiling to make account-level decisions without human review.

Lucky PK does not sell your personal data to any third party. We share data only with the following categories of recipients, and only to the minimum extent necessary:

5.1 Payment Processors

When you make a deposit or request a withdrawal, we share the relevant transaction details with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, or your bank — to execute the transaction. These providers process your data under their own privacy policies and applicable Pakistani financial regulations.

5.2 Identity Verification Partners

For KYC purposes, Lucky PK works with licensed identity verification service providers. We share only the minimum data necessary (name, CNIC number, document image) for the verification check. These partners are contractually bound to process data solely for that purpose and not to retain it beyond what is necessary.

5.3 Technology and Infrastructure Providers

Lucky PK uses third-party technology providers for services including cloud hosting, game software, customer support platforms, and cybersecurity monitoring. These providers act as data processors on our behalf under written contracts that require them to protect your data and use it only for the specific service they provide to us.

5.4 Legal and Regulatory Authorities

Lucky PK may be required to disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required by applicable law or where we are under a legal obligation to report — for example, under anti-money laundering regulations. In such cases, we will disclose only what is legally required and will not volunteer additional information.

5.5 What We Will Never Do

• Sell your data to advertising networks or data brokers
• Share your data with other gambling platforms or their affiliates
• Provide your contact details to any third party for their own marketing purposes
• Transfer your data outside of our approved provider network without equivalent data protection safeguards in place

Lucky PK uses cookies and similar tracking technologies to make the platform work properly, remember your preferences, and understand how players use the site so we can improve it. Here is what we use and why:

6.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in during a gaming session and cookies that maintain your deposit preferences. You cannot opt out of these without losing core platform functionality.
• Preference cookies: Remember your settings, such as preferred language, responsible gaming limits you've set, and display preferences. Stored for the duration of your account.
• Analytics cookies: Used to understand how players navigate the platform — which pages are visited most, where sessions end, and how features are used. This data is aggregated and does not identify you individually. We use this to improve the Lucky PK experience.
• Security cookies: Help detect unusual login behaviour, prevent cross-site request forgery, and identify potential fraud patterns. These are strictly necessary for platform security.

6.2 Cookie Consent

When you first visit Lucky PK, you are presented with a cookie consent notice. Strictly necessary and security cookies are always active. You may decline analytics and preference cookies — doing so will not affect your ability to register, deposit, play, or withdraw, but some personalised features may not function as expected.

The above is an example of the Lucky PK cookie consent interface — not a functional consent mechanism on this page.

6.3 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Note that deleting session cookies will log you out of Lucky PK. Most modern browsers (Chrome, Firefox, Safari, Edge) have cookie management options in their privacy settings.

Lucky PK retains personal data only for as long as it is needed for the purpose it was collected, or as long as we are legally required to keep it. The table below sets out our standard retention periods:

When data reaches the end of its retention period, Lucky PK securely destroys or anonymises it. Anonymised data (from which all identifying information has been removed) may be retained for statistical and analytical purposes without limitation, as it can no longer be linked back to you.

Lucky PK implements a layered security approach to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• Encryption in transit: All data transferred between your device and Lucky PK's servers is encrypted using TLS 1.2 or higher (256-bit AES encryption). This includes account data, payment details, and game session data.
• Encryption at rest: Sensitive data stored in our databases — including personal identification details and payment references — is encrypted at the storage level using industry-standard encryption.
• Password security: Passwords are never stored in plain text. They are processed using strong one-way hashing with a unique salt per account, meaning that even internal staff cannot see your password.
• Access controls: Internal access to player data is role-based and need-to-know only. All access is authenticated and every access event is logged and audited. Staff members cannot access data beyond what their specific role requires.
• Two-factor authentication: Lucky PK supports and encourages two-factor authentication (2FA) for player accounts. When 2FA is enabled, a one-time code is required on login in addition to your password.
• Penetration testing: Lucky PK conducts regular external security audits and penetration tests to identify and address vulnerabilities before they can be exploited.
• Incident response: In the event of a security breach, Lucky PK has a documented incident response plan. Affected players will be notified within 72 hours of a confirmed breach, with details of what happened and what steps to take.

Lucky PK respects your rights over your personal data. Here are the rights you have and how to exercise them:

To exercise any of these rights, contact Lucky PK support with your registered email address or mobile number and a clear description of your request. We will acknowledge your request within 3 business days and respond fully within 14 business days. Complex requests may take up to 30 days — we will inform you if this is the case.

Lucky PK is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, do not attempt to register or use any Lucky PK service.

If Lucky PK becomes aware that personal data has been collected from a person under the age of 18, that account will be immediately closed, all data associated with it will be deleted, and any funds deposited will be returned via the original payment method after any required investigation.

If you believe a minor may have registered on Lucky PK using your payment details or contact information, please contact our support team immediately so we can investigate and take action. Protecting minors from gambling harm is an absolute priority for Lucky PK.

Lucky PK reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. The "Last Updated" date at the top of this policy shows when the most recent revision was published.

When we make material changes to this policy — changes that significantly affect how we use your data or your rights — we will notify registered players via email at least 7 days before the changes take effect. Minor clarifications or corrections may be made without advance notice.

The current version of this policy is always available at luckypk.im/privacy-policy. We recommend reviewing it periodically. Continued use of Lucky PK after a policy update constitutes acceptance of the revised terms.

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data at Lucky PK, please reach out through the following channels:

• Live Chat: Available 24/7 on the Lucky PK platform. For data rights requests, start with "Data Request:" to ensure your query is routed to the right team.
• Email: support@luckypk.im — please include your registered mobile number or email address and describe your request clearly.

When submitting a data rights request, we may need to verify your identity before proceeding — this is to ensure we do not disclose your data to an unauthorised third party. Verification typically involves confirming the mobile number or email address associated with your Lucky PK account.