luky8 Privacy Policy — How We
Handle Your Data in Pakistan

1About This Policy

This Privacy Policy describes how luky8 ("the Platform", "we", "us") collects, stores, uses and — where applicable — shares personal information belonging to players and visitors who use the luky8 website at luky8.onl.

This policy applies to all players accessing luky8 from Pakistan. It covers every section of the platform — Sports betting, Live Casino, Game Lobby, Fish Games, Bingo and the VIP programme — as well as all account-related activities including registration, deposits, withdrawals and customer support interactions.

By registering an account or continuing to use luky8, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how your data is handled as described here, please do not use the platform.

2Data We Collect

luky8 collects personal information through two main channels: information you provide directly, and information collected automatically when you use the platform.

Information you provide directly:

• Full name and date of birth provided at registration — used to verify your identity and confirm you are 18 or older.
• Contact number and email address — used to communicate account-related information and, where opted in, promotional updates.
• Payment information — account numbers, mobile wallet identifiers (JazzCash, Easypaisa), Raast IDs or bank details provided when making a deposit or requesting a withdrawal in PKR.
• Identity verification documents — CNIC copy or other documents submitted when requested as part of account verification before withdrawal processing.
• Support communications — messages, chat transcripts and email correspondence sent to the luky8 support team.

Information collected automatically:

• Device and browser information — device type, operating system, browser version and screen resolution.
• IP address — used to determine general location for security checks and to detect unusual login activity.
• Session data — pages visited, time spent on the platform, games played, bets placed and betting history.
• Cookies and similar tracking technologies — see Section 5 for full details.

3How We Use Your Data

The personal information collected by luky8 is used for the following purposes:

• Account creation and management — processing your registration, verifying your identity and maintaining your luky8 account in good standing.
• Transaction processing — facilitating PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer and card payments.
• Customer support — responding to queries, resolving disputes and reviewing complaints submitted through live chat or email.
• Security and fraud prevention — detecting unusual account activity, identifying potential duplicate accounts and protecting the platform from abuse.
• Responsible gaming — monitoring betting patterns to identify signs of problem gambling and making self-exclusion and deposit-limit tools available where needed.
• Platform improvement — analysing aggregated, anonymised usage data to understand how players use luky8 and where the experience can be improved.
• Communications — sending account-related notifications and, where you have opted in, promotional messages about bonuses, PSL cricket offers and other relevant updates.

4Payment Data

All financial transactions on luky8 are conducted in PKR. The platform supports JazzCash, Easypaisa, Raast instant bank transfer, standard bank transfers and debit/credit cards.

When you make a deposit or request a withdrawal, the payment details you provide are transmitted directly and securely to the relevant payment processor. luky8 does not store full card numbers, full bank account credentials or complete mobile wallet PINs on its own servers.

• JazzCash and Easypaisa transactions are processed through their respective secure APIs. Your mobile wallet number is retained for the purpose of processing future withdrawals to the same account.
• Bank transfer details — account title, account number and bank name — are stored securely and used only to initiate withdrawal transfers you have authorised.
• Payment transaction records — amounts, dates and references — are retained for account history and any dispute resolution that may be required.

5Cookies & Tracking

luky8 uses cookies and similar technologies to keep the platform running smoothly, maintain your login session and understand how players interact with different sections of the site.

Types of cookies used:

• Essential cookies — required for the platform to function. These include session cookies that keep you logged in and security cookies that help protect your account. These cannot be disabled without breaking core platform functionality.
• Functional cookies — remember your preferences such as language settings and notification options so you do not need to set them again on each visit.
• Analytics cookies — collect anonymised data about pages visited, time spent on each section and which games or betting markets are most popular. This data is used in aggregate to improve the platform and is not linked to your personal identity.
• Security cookies — help detect unusual login attempts, identify potential account takeover activity and protect the integrity of your balance and bet history.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using luky8 but may affect some personalisation features. Essential cookies cannot be blocked without logging out of the platform.

6Sharing Your Data

luky8 does not sell your personal data to any third party. Your information is shared only in the limited circumstances described below:

• Payment processors — JazzCash, Easypaisa, Raast, banking partners and card networks receive only the data strictly required to complete a specific transaction. They are not given access to your full account profile or betting history.
• Identity verification services — where CNIC or document verification is required, data may be processed by a trusted verification provider operating under strict confidentiality obligations.
• Technology and hosting providers — the servers and infrastructure that power luky8 are managed by third-party providers. These partners have contractual obligations to protect data and may not use it for any purpose beyond providing their service to luky8.
• Legal and security obligations — if required by a valid legal process or to prevent fraud, luky8 may disclose account information to the extent necessary to comply. We will always assess such requests carefully before responding.

7Data Retention

luky8 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required for legitimate operational and security reasons.

• Active account data — including your profile, transaction history and betting records — is retained for as long as your account remains open.
• Following account closure, core account data and transaction records are retained for a period of up to five years for the purposes of dispute resolution, fraud investigation and security review.
• Support communications and chat transcripts are retained for up to two years after the relevant interaction.
• Identity verification documents are retained only until verification is complete and for the minimum period required thereafter for security audit purposes, after which they are securely deleted.
• Anonymised and aggregated analytics data — which cannot be linked back to any individual — may be retained indefinitely for the purpose of platform analysis and improvement.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised so it can no longer be linked to your identity.

8Data Security

luky8 takes the security of your personal data seriously and applies a range of technical and organisational measures to protect it from unauthorised access, loss or misuse.

• Encryption in transit — all data transmitted between your browser and luky8 is protected by TLS (HTTPS) encryption.
• Access controls — internal access to personal account data is restricted to authorised team members who require it for a specific operational purpose. Access is logged and reviewed regularly.
• Password storage — account passwords are stored as hashed values using industry-standard algorithms. We never store plain-text passwords.
• Security monitoring — the platform runs continuous monitoring for unusual login activity, suspicious transactions and potential account compromise. Alerts are reviewed by the security team in real time.
• Incident response — in the event of a data security incident that could affect your personal data, luky8 will notify affected players promptly and take immediate steps to contain and address the issue.

9Your Rights

As a luky8 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact the support team via live chat or email at [email protected].

• Right of access — you may request a summary of the personal data luky8 holds about you. We will respond within a reasonable timeframe.
• Right to correction — if any personal data held about you is inaccurate or out of date, you may request that it be corrected. You can also update standard account details directly in your account settings.
• Right to erasure — you may request deletion of your personal data. Note that some data may need to be retained for the retention periods described in Section 7 — we will explain this clearly if a deletion request cannot be fulfilled in full immediately.
• Right to restrict processing — you may request that luky8 limits how it uses your data in certain circumstances, such as while a dispute is being resolved.
• Right to withdraw consent — where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to data portability — you may request a copy of certain personal data in a structured, commonly used format for your own records.

10Children's Privacy

luky8 is strictly an adult platform. Players must be 18 years of age or older to register, deposit or participate in any game or betting activity.

luky8 does not knowingly collect personal data from anyone under the age of 18. If we become aware that a person under 18 has registered an account or submitted personal data, we will close the account immediately, delete all associated data and return any deposited funds to the original payment source after verification.

If you are a parent or guardian and believe that someone under 18 in your household has accessed or registered on luky8, please contact us immediately via live chat or email. We will act on your report as a priority.

11Policy Updates

luky8 may update this Privacy Policy from time to time to reflect changes in how the platform operates, updates to the payment methods supported, or changes in applicable standards and best practices.

When material changes are made, a notice will be displayed on the platform and the "Last updated" date at the top of this page will be revised. For significant changes that affect how your data is used, we will make a reasonable effort to notify you directly via email or an in-account message before the changes take effect.

Continued use of luky8 after any update to this Privacy Policy constitutes your acceptance of the revised version. We recommend reviewing this page periodically — bookmarking it is the easiest way to stay up to date.

12Contact Us

If you have questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal information has been handled, please get in touch with the luky8 team — we are available around the clock.

• Live chat — available directly on the platform at any time, seven days a week. This is the fastest channel for urgent privacy-related queries.
• Email — reach us at [email protected] for non-urgent questions or formal data rights requests. We aim to respond within one business day for general queries and within 30 days for formal data requests.
• FAQ — the FAQ page covers common questions about accounts, payments, data and privacy in plain language.