lu88cy Privacy Policy —
How We Collect, Use, and Protect Your Data

This Privacy Policy describes how lu88cy ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Player") who visit or register on the lu88cy platform at lu88cy.pro. It applies to all Pakistan players and any other individuals who interact with lu88cy's website, account systems, live chat, or email communications.

lu88cy takes data privacy seriously. We are committed to handling your personal information with care, transparency, and in accordance with responsible data protection practice. This policy explains your rights clearly so that you are in full control of how your data is used.

This Privacy Policy should be read alongside lu88cy's Terms & Conditions, which together form the complete legal framework governing your lu88cy account. By registering an account or using the lu88cy platform, you confirm that you have read and understood this Privacy Policy.

lu88cy is the data controller responsible for the personal data collected through the lu88cy.pro platform. As data controller, lu88cy determines the purposes for which your personal data is processed and the means by which that processing takes place.

For all data-related enquiries, access requests, or complaints, Pakistan players may contact the lu88cy data team directly via:

• Email: [email protected] — mark your email with the subject line "Data Privacy Request" for prioritised handling.
• Live Chat: Available 24/7 inside your lu88cy account — identify your query as a data privacy matter at the start of the conversation.

lu88cy aims to acknowledge all data-related requests within 48 hours and to resolve them within 30 days of receipt.

lu88cy collects only the personal data that is necessary to provide our services to Pakistan players, comply with legal obligations, and maintain the security and integrity of the platform. The categories of personal data we collect are:

lu88cy does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is required for standard photo-ID verification during KYC.

lu88cy collects personal data through the following channels:

• Direct submission: Data you provide when registering, completing KYC, making deposits or withdrawals, contacting support, or setting account preferences.
• Automated collection: Technical and session data collected automatically when you visit lu88cy.pro — including your IP address, device details, browser type, and pages visited — via server logs and session tracking systems.
• Cookies and similar technologies: Data collected via cookies placed on your device when you visit lu88cy.pro. See Section 11 (Cookies) for full details.
• Third-party verification providers: Identity and age verification data received from KYC service providers in response to verification submissions you make.
• Payment providers: Confirmation and status data received from Easypaisa, JazzCash, SadaPay, HBL, and UBL in connection with deposit and withdrawal processing. lu88cy does not receive or store full payment account credentials from these providers.
• Fraud detection partners: Risk scoring data received from third-party fraud prevention services used to protect lu88cy accounts and detect suspicious activity.

lu88cy uses the personal data of Pakistan players for the following purposes:

• Account creation and management: To register your lu88cy account, verify your identity and age, maintain your account profile, and administer your login credentials securely.
• Service delivery: To provide access to all lu88cy products — sports betting, live casino, jackpot slots, cockfighting, and virtual sports — and to process your PKR bets, wins, and transactions.
• Payment processing: To process PKR deposits and withdrawals via Easypaisa, JazzCash, SadaPay, HBL, and UBL, and to maintain an accurate record of your transaction history.
• KYC and regulatory compliance: To verify your identity, age, and source of funds as required for anti-money-laundering (AML) compliance and responsible gaming obligations.
• Security and fraud prevention: To detect, investigate, and prevent fraud, account takeovers, bonus abuse, money laundering, and other prohibited conduct on the lu88cy platform.
• Responsible gaming: To monitor gaming patterns, apply responsible gaming tools you have activated, and identify players who may need additional support or intervention.
• Customer support: To handle your queries, complaints, and disputes through live chat and email, and to maintain records of communications for quality and compliance purposes.
• Platform improvement: To analyse aggregate usage data and improve the lu88cy platform — game loading performance, payment flow efficiency, and mobile experience for Pakistan players.
• Marketing communications: To send promotional emails, bonus notifications, and platform updates to Pakistan players who have opted in to marketing communications. You can opt out at any time.
• Legal obligations: To comply with applicable laws, respond to lawful regulatory requests, and enforce lu88cy's Terms & Conditions.

lu88cy processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil the Terms & Conditions agreement between you and lu88cy — including account management, service delivery, and payment processing.
• Legal obligation: Processing required for lu88cy to comply with applicable legal obligations — including KYC/AML identity verification, age verification, and responsible gaming requirements.
• Legitimate interests: Processing conducted for lu88cy's legitimate business interests — including fraud prevention, platform security, customer support quality, and platform improvement — where these interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit consent — specifically, the sending of marketing communications and the placement of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

lu88cy shares personal data with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, SadaPay, HBL, and UBL — to process PKR deposits and withdrawals from your lu88cy account. These providers receive only the data required to complete transactions and are bound by strict data protection obligations.
• KYC and identity verification providers: Third-party identity verification services that process your CNIC data and selfie to confirm your identity and age. These providers operate under contractual data processing agreements with lu88cy.
• Game software providers: Casino and slot game developers whose titles are available on the lu88cy platform. Certain gameplay data is shared with these providers to deliver their games correctly. Personal identity data is not shared with game providers.
• Fraud prevention and security services: Third-party security and risk analytics providers who help lu88cy detect fraudulent accounts, suspicious betting patterns, and money laundering activity.
• IT and infrastructure providers: Cloud hosting, database, and technical support providers who process data on lu88cy's behalf under strict data processing agreements.
• Legal and regulatory authorities: Where lu88cy is required by law, court order, or regulatory direction to disclose personal data — for example, in response to a fraud investigation. lu88cy will challenge any request that it considers disproportionate or legally invalid.

All third-party processors used by lu88cy are required to maintain appropriate technical and organisational security measures and to process data only in accordance with lu88cy's documented instructions.

All financial transactions on lu88cy are processed in Pakistani Rupees (PKR) through integrated payment provider APIs. When you make a deposit or request a withdrawal via Easypaisa, JazzCash, SadaPay, HBL, or UBL, the following data handling applies:

• lu88cy receives confirmation of payment success or failure, the PKR transaction amount, and a masked reference to your payment account (e.g., the last four digits of a phone number). lu88cy does not store full Easypaisa PINs, JazzCash passwords, or banking login credentials.
• Transaction records — including deposit amounts in PKR, withdrawal requests, dates, and payment method types — are retained for a minimum of five years in accordance with financial record-keeping obligations.
• All PKR financial data is stored on encrypted servers. Access to financial records within lu88cy is restricted to authorised personnel with a documented operational need.
• Source of funds verification may be requested for high-value deposits or withdrawal patterns that trigger lu88cy's AML monitoring thresholds. In such cases, Pakistan players may be asked to provide additional documentation such as bank statements or salary slips.

lu88cy retains personal data for as long as it is needed to fulfil the purpose for which it was collected, or as required by legal obligations. The following retention periods apply:

When data is no longer required for its stated purpose and no legal obligation requires its continued retention, lu88cy securely deletes or anonymises it. Anonymised aggregate data that cannot identify any individual may be retained indefinitely for statistical and platform improvement purposes.

lu88cy implements technical and organisational security measures designed to protect the personal data of Pakistan players against unauthorised access, loss, alteration, or disclosure. These measures include:

• 128-bit SSL/TLS encryption for all data transmitted between your device and lu88cy's servers — the same standard used by international banks.
• Encrypted storage for all sensitive personal data, including identity documents and financial records, held on lu88cy's server infrastructure.
• Hashed and salted passwords — your lu88cy account password is never stored in plain text. Even lu88cy's internal teams cannot retrieve your actual password.
• Two-factor authentication (2FA) available on all lu88cy accounts — strongly recommended for all Pakistan players as an additional login security layer.
• Access controls — internal access to personal data is restricted on a strict need-to-know basis. All access is logged and subject to regular review.
• Fraud monitoring — automated and human-reviewed systems monitor for unusual access patterns, login anomalies, and suspicious financial activity on a 24/7 basis.
• Regular security assessments of lu88cy's platform infrastructure, including vulnerability testing and review of third-party integrations.

lu88cy uses cookies and similar technologies on the lu88cy.pro website. A cookie is a small text file placed on your device by a website you visit. Cookies allow the site to remember information about your visit — for example, keeping you logged in across pages or remembering your language preferences.

lu88cy uses the following categories of cookies:

• Strictly necessary cookies: Essential to the operation of the lu88cy platform — for example, session authentication cookies that keep you logged in while you navigate between pages. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences on lu88cy.pro — such as your preferred sports bet layout or game view settings. These improve your experience but are not essential.
• Performance and analytics cookies: Collect anonymised data about how Pakistan players navigate and use lu88cy.pro — which pages are visited most, where players encounter difficulties, and how the platform performs on different devices. This data is used to improve the platform and is not linked to individual identities.
• Marketing cookies: Used only with your consent, to track which lu88cy promotional content you have seen or interacted with, and to avoid showing you the same offer repeatedly.

You can control cookie settings via your browser's privacy settings. Most modern browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent the lu88cy platform from functioning correctly — you will not be able to log in or maintain a betting session without these cookies active.

lu88cy does not use third-party advertising network cookies that track your activity across other websites outside of lu88cy.pro.

As a Pakistan player whose personal data is processed by lu88cy, you have the following rights with respect to your personal information. To exercise any of these rights, contact the lu88cy data team via live chat or email at [email protected] with the subject "Data Privacy Request".

lu88cy performs mandatory age verification on all Pakistan accounts as part of the KYC process. This is not optional — no withdrawal will be processed until age has been confirmed via CNIC documentation.

If lu88cy discovers that personal data has been collected from an individual under 18, that data will be immediately and permanently deleted, the associated account will be closed, and any funds held will be handled in accordance with lu88cy's underage gambling policy.

Parents and guardians in Pakistan who are concerned that a minor may have registered on lu88cy should contact lu88cy's 24/7 English support team immediately via live chat or at [email protected]. lu88cy will act on such reports promptly.

lu88cy may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made — particularly changes that affect your rights or how your data is used — lu88cy will notify registered Pakistan players via email to their registered address or via a prominent notice on the lu88cy platform.

The "Last Updated" date at the top of this document reflects the most recent revision. Continued use of the lu88cy platform following notification of an updated Privacy Policy constitutes your acknowledgement of the revised terms.

We encourage all Pakistan players to review this Privacy Policy periodically. If you have any questions about a recent change, contact lu88cy support via live chat or email — our team is available 24/7.

For any question, request, or complaint relating to this Privacy Policy or the personal data lu88cy holds about your Pakistan account, please use one of the following contact channels:

• Live Chat: Available 24/7 inside your lu88cy account. Identify your query as a data privacy matter at the start of the conversation for prioritised routing.
• Email: [email protected] — use the subject line "Data Privacy Request" for direct routing to the lu88cy data team.

lu88cy acknowledges all data privacy requests within 48 hours. Complex access or erasure requests are typically resolved within 30 days. If you are not satisfied with lu88cy's response to a data privacy complaint, you have the right to escalate the matter through the appropriate regulatory channel — lu88cy's support team will provide guidance on the correct escalation route at the time of your complaint response.