1. Introduction
Lucky 999 ("we", "us", "our", "the Platform") respects the privacy of every person who visits lucky999.cash and uses our services. This Privacy Policy explains in plain language what personal information we collect from you when you use Lucky 999, why we collect it, how we store and protect it, who we may share it with, how long we keep it, and what rights you have over your own data.
Lucky 999 is designed primarily for Pakistani players, and we understand the importance our members place on data privacy — particularly when it comes to financial information linked to PKR transactions through Easypaisa, JazzCash, and local bank accounts. This policy is written to be as clear and direct as possible. We don't want you hunting through paragraphs of legal language to understand what happens to your personal information.
By registering an account on Lucky 999, making a deposit, or simply browsing lucky999.cash, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside our Terms and Conditions, which govern your use of the platform as a whole.
This Privacy Policy applies to all personal data collected through lucky999.cash — including registration forms, deposits, game activity, customer support interactions, and any communications between you and the Lucky 999 team. It does not apply to third-party websites or services that may be linked from this platform.
2. Data We Collect
2.1 Information You Provide Directly
When you register an account with Lucky 999, make a deposit or withdrawal, complete identity verification, contact our support team, or participate in a promotion, you provide us with personal information. The categories of data we collect directly from you include:
- Registration data: Full name, date of birth, mobile phone number, and email address (if provided)
- Identity verification data: CNIC (Computerised National Identity Card) number and a copy of the card image where KYC is required
- Payment data: Your Easypaisa or JazzCash mobile number, NayaPay or SadaPay account identifier, bank account details for IBFT transfers, or card details (card number last four digits only — full card numbers are processed by our payment partner and not stored by Lucky 999)
- Communication records: Messages sent to Lucky 999 support via live chat or email, including their content and timestamps
- Promotional participation: Bonus claims, referral activity associated with your account, and responses to any surveys or feedback requests
2.2 Information Collected Automatically
When you access lucky999.cash — whether to browse, log in, or play — certain technical information is collected automatically by the platform's systems:
- Device information: Device type, operating system version, browser type and version, screen resolution, and device language settings
- Network information: IP address, mobile network operator (e.g. Jazz, Telenor, Ufone, Zong), and approximate geographic location derived from IP
- Session data: Login timestamps, pages visited, session duration, game rounds played, bet amounts, win/loss results, and in-platform navigation patterns
- Cookie and tracking data: As described in Section 6 below
3. How We Use Your Personal Data
Lucky 999 uses the personal data it collects for specific, legitimate purposes. We do not use your data for anything beyond what is described here without first seeking your consent or being required to do so by law.
- Account creation and management: To register your account, authenticate your identity at login, and maintain your account in good standing
- Payment processing: To process deposits, verify outgoing withdrawals, and confirm that withdrawals reach the correct payment method registered in your name
- Identity verification and AML compliance: To verify your age and identity in accordance with responsible gaming requirements and anti-money laundering (AML) obligations, including FATF guidance applicable to Pakistan
- Game delivery and platform functionality: To serve game content, save game state, calculate and credit winnings, apply bonuses, and maintain your transaction history
- Responsible gaming: To monitor betting patterns for signs of problem gambling behaviour and to apply any self-imposed limits or restrictions you have set on your account
- Customer support: To respond to your queries, resolve disputes, and maintain a record of communications for quality assurance and dispute resolution purposes
- Fraud prevention and security: To detect and prevent fraudulent account activity, duplicate account creation, bonus abuse, money laundering, and unauthorised access attempts
- Platform improvement: To analyse aggregated and anonymised usage data to improve Lucky 999's features, performance, game catalogue, and payment processes
- Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, account alerts) and, where you have opted in, promotional communications about relevant bonuses and offers
Lucky 999 will only send you promotional messages (bonus offers, event alerts, new game announcements) if you have opted in to receive them during registration or through your account settings. You can unsubscribe from marketing communications at any time by updating your preferences in your account or by contacting support@lucky999.cash.
4. Legal Basis for Processing
Lucky 999 processes your personal data on the following legal grounds, depending on the specific purpose:
- Contract performance: Processing necessary to deliver the services you have signed up for — account management, payments, game delivery, and support
- Legal obligation: Processing required by applicable law, including identity verification for AML compliance, age verification, and record-keeping obligations
- Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improving the platform — provided these interests do not override your fundamental rights
- Consent: Processing for marketing communications and optional data uses, where you have explicitly opted in. You may withdraw consent at any time
5. Data Sharing and Disclosure
Lucky 999 does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing companies. Full stop. Your data is never shared for commercial purposes beyond operating the Lucky 999 platform itself.
We do share limited personal data with specific categories of trusted third parties where it is strictly necessary to operate our services:
- Payment processors: Your payment method details are shared with our payment processing partners (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing partners, and card processing services) solely to complete your deposit or withdrawal transaction. These partners process your data under their own privacy frameworks and security standards.
- Identity verification providers: Where KYC is required, your CNIC data may be shared with a third-party identity verification service to confirm document authenticity. These providers are contractually bound to use your data only for verification purposes.
- Fraud prevention services: IP addresses, device fingerprints, and transaction patterns may be checked against fraud detection databases to identify and prevent fraudulent activity on the platform.
- Legal and regulatory authorities: Lucky 999 will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by a valid legal obligation, court order, or regulatory directive. We will make reasonable efforts to notify you of such disclosure unless prohibited by law.
- Platform infrastructure providers: Cloud hosting, database, and platform technology providers who process data on our behalf under strict data processing agreements that prohibit them from using your data for any purpose other than delivering the agreed services.
Lucky 999 does not share your personal data with advertising networks, social media platforms, or any entity for the purpose of targeted advertising. Your browsing and gaming behaviour on Lucky 999 is not sold or shared with external advertisers under any circumstances.
6. Cookies and Tracking Technologies
6.1 What Are Cookies?
Cookies are small text files stored on your device when you visit a website. Lucky 999 uses cookies and similar local storage technologies to make the platform work correctly, keep you logged in, remember your preferences, and understand how the platform is being used.
6.2 Types of Cookies We Use
- Strictly necessary cookies: These are required for the platform to function at all — session authentication, keeping you logged in, and maintaining your game state. These cannot be disabled without breaking the platform's core functionality.
- Functional cookies: These remember your preferences — language, display settings, and recently played games — to give you a better experience each time you log in.
- Analytics cookies: These help us understand which parts of the platform are used most, where performance bottlenecks occur, and how navigation flows work. Data is aggregated and does not identify individual users.
- Security cookies: These help detect and prevent fraudulent session activity, bot traffic, and brute-force login attempts.
6.3 Managing Cookies
You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in or using Lucky 999's core features. Analytics and functional cookies can be disabled without affecting core platform access.
7. Data Security
Protecting your personal and financial data is something Lucky 999 takes seriously — not as a compliance tick-box, but because the trust Pakistani players place in us depends on it. The security measures in place include:
- 256-bit SSL/TLS encryption: All data transmitted between your device and Lucky 999's servers is encrypted using industry-standard TLS protocols. The padlock icon in your browser confirms this when you access lucky999.cash.
- Encrypted data storage: Sensitive personal data including identity documents and payment references are stored encrypted at rest. Plain-text storage of sensitive data is not permitted in Lucky 999's infrastructure.
- Access controls: Access to personal data within Lucky 999's systems is restricted to staff members with a clear operational need — for example, support agents who need to verify your account to resolve a query. All access is logged and audited.
- Payment security: Full card numbers are never stored by Lucky 999. Card processing is handled by our PCI-DSS compliant payment partners. Easypaisa and JazzCash transactions use tokenisation to avoid storing wallet credentials in our systems.
- Incident response: In the event of a data security incident affecting your personal data, Lucky 999 will notify affected members and relevant authorities within the timeframes required by applicable law.
While Lucky 999 takes all reasonable technical and organisational precautions to protect your data, no internet-based platform can guarantee absolute security against all threats. You can help protect your account by using a strong, unique password and never sharing your login credentials with anyone.
8. Data Retention
Lucky 999 does not keep your personal data for longer than necessary. The retention periods we apply are based on the purpose for which data was collected and any legal obligations that require us to keep it for a minimum period:
- Active account data: Retained for the full duration of your account being active on Lucky 999
- Transaction records: Retained for a minimum of 5 years following each transaction, in compliance with AML record-keeping requirements
- Identity verification documents: Retained for 5 years following account closure or the date of the relevant verification check, whichever is later
- Customer support communications: Retained for 3 years following the close of the relevant support interaction
- Anonymised analytics data: May be retained indefinitely as it cannot be linked back to any individual
When data is no longer needed and no legal retention obligation applies, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.
9. Your Privacy Rights
As a Lucky 999 member, you have the following rights over your personal data. To exercise any of these rights, contact us at support@lucky999.cash:
10. Children's Privacy
Lucky 999 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation of minimum age, and identity verification can be requested at any time to confirm this.
If Lucky 999 discovers that a registered account belongs to a person under 18, the account will be immediately suspended, any balance will be reviewed in accordance with our Terms and Conditions, and the personal data associated with the minor's account will be securely deleted as soon as is practicable. If you believe a minor has registered on Lucky 999, please contact support@lucky999.cash immediately.
11. Third-Party Links
Lucky 999's platform does not contain links to external third-party websites. All navigation on lucky999.cash stays within the Lucky 999 platform. This Privacy Policy applies only to data collected through lucky999.cash and does not extend to any external sites or services. Lucky 999 is not responsible for the privacy practices of any third-party platforms, including payment providers' own websites or apps.
12. Updates to This Privacy Policy
Lucky 999 may update this Privacy Policy from time to time to reflect changes in our services, applicable data protection requirements, or industry best practice. When we make material changes — changes that meaningfully affect how your data is used or what rights you have — we will notify you via your registered contact details or through an in-platform notification, giving at least 14 days' notice before the updated policy takes effect.
The current version of this policy is always available at lucky999.cash/privacy-policy. The effective date at the top of this page indicates when the current version was last reviewed. Your continued use of Lucky 999 after a policy update constitutes your acceptance of the revised terms.
13. Contact Us — Privacy Queries
If you have any question about how Lucky 999 handles your personal data, want to exercise a data right, or have a concern about a specific use of your information, please get in touch:
- Email: support@lucky999.cash
- Live Chat: Available 24/7 directly within the Lucky 999 platform
- Response Time: Data rights requests are responded to within 30 days of receipt
Lucky 999 takes all privacy-related queries seriously. If you submit a data rights request, we will acknowledge it within 72 hours and aim to resolve it fully within 30 days. Where a request is complex or involves a large volume of data, we may extend this period and will inform you of the extension and the reason.