lucky95 Privacy Policy

Introduction & Scope

This Privacy Policy ("Policy") is issued by lucky95 ("lucky95", "we", "us", or "our") and governs the collection, processing, storage, and disclosure of personal data relating to individuals ("you", "Player", or "User") who access or use the lucky95 website at lucky95.bet and all associated services, features, and functionality offered therein.

lucky95 is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with applicable data protection laws. This Policy explains what personal data we collect, why we collect it, how we use it, with whom we share it, how long we retain it, and what rights you have in relation to it.

By registering an Account with lucky95 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

Personal Data We Collect

lucky95 collects the following categories of personal data, depending on how you interact with the Platform:

lucky95 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, genetic or biometric data, or health data, except where health data is voluntarily disclosed in the context of a responsible gaming self-exclusion request, in which case it is handled with heightened confidentiality.

How We Collect Your Data

lucky95 collects personal data through several distinct channels:

• Direct Submission: Data you actively provide when registering an Account, completing the KYC verification process, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you interact with the Platform, including IP address, browser fingerprint, session duration, pages visited, clicks, and device identifiers. This is collected via server logs, cookies, and similar technologies described in Section 7.
• Payment Processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT, our payment processor partners share with lucky95 the transaction reference, amount, and payment method identifier necessary to credit or debit your Account.
• Identity Verification Providers: When you submit KYC documents, our identity verification partner processes the document and returns a verification result (pass / fail / refer) along with the extracted identity data fields necessary for compliance.
• Responsible Gaming Interactions: Data generated when you use responsible gaming tools such as deposit limit settings, cooling-off requests, or self-exclusion applications is stored as part of your Account record to ensure the restrictions are enforced.

Legal Basis for Processing

lucky95 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your Account, accept bets, process deposits and withdrawals, and provide customer support.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) requirements, age verification obligations, and responses to lawful requests from regulatory authorities or law enforcement agencies.
• Legitimate Interests: Processing for purposes such as fraud detection, security monitoring, platform improvement, responsible gaming monitoring, and direct marketing to existing players (where such interests are not overridden by your rights and interests).
• Consent: Processing for optional purposes where you have given specific, informed, and freely given consent — primarily in relation to receiving promotional communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

How We Use Your Data

lucky95 uses your personal data for the following specific purposes:

• Account Management: Creating, maintaining, and administering your lucky95 Account, including processing login credentials, managing Account preferences, and communicating transactional notifications.
• Identity & Age Verification: Verifying that you are who you say you are and that you meet the minimum age requirement of 21 years, as required under our operating obligations. KYC verification is a prerequisite for withdrawals.
• Payment Processing: Processing deposits and withdrawal requests in PKR via supported Pakistani payment methods, reconciling transactions, and investigating payment disputes.
• Sports Betting & Casino Services: Accepting and settling bets on cricket, tennis, snooker, and other sports markets; delivering casino and slot game sessions; maintaining your gaming history for account purposes.
• Fraud & Security: Detecting and preventing fraudulent activity, multi-accounting, money laundering, match-fixing, use of automated betting tools, and other prohibited conduct described in the Terms & Conditions.
• Responsible Gaming: Monitoring gaming activity for indicators of problem gambling; enforcing deposit limits, cooling-off periods, and self-exclusion restrictions; and proactively reaching out where responsible gaming concerns are identified.
• Legal Compliance: Retaining transaction and identity records as required by applicable AML legislation; responding to court orders, regulatory enquiries, or lawful requests from Pakistani law enforcement authorities.
• Marketing & Promotions: Sending you personalised bonus offers, PSL season promotions, casino announcements, and other promotional communications — but only where you have opted in to receive them. You can unsubscribe at any time.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the performance, usability, and content of the lucky95 Platform.

Data Sharing & Disclosure

lucky95 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT gateway providers receive the minimum data necessary to process your transactions. These providers are contractually bound to handle your data securely and solely for payment purposes.
• Identity Verification Providers: KYC and age verification partners receive the documents and identity data you submit solely to perform verification checks on behalf of lucky95. They do not retain your data beyond the verification period stipulated in their contracts with us.
• Game Studio Partners: Where lucky95 provides games developed by third-party studios, those studios may receive technical session data (game ID, round ID, stake amount) strictly necessary to deliver and audit the game. Game studios do not receive your name, contact details, or payment information.
• IT & Security Service Providers: Cloud infrastructure, cybersecurity, and platform hosting providers who process data on our behalf under strict data processing agreements, providing services necessary to operate and protect the Platform.
• Legal & Regulatory Authorities: Lucky95 will disclose personal data to Pakistani law enforcement, financial intelligence units, or regulatory bodies where required by law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of lucky95's assets, your personal data may be transferred to the successor entity, subject to the same or equivalent privacy protections. You will be notified of any such transfer in advance.

Cookies & Tracking Technologies

lucky95 uses cookies and similar tracking technologies (such as local storage and session tokens) on the Platform. Cookies are small text files stored on your device that help the Platform function correctly, remember your preferences, and analyse how users interact with the site.

• Strictly Necessary Cookies: Essential for the Platform to operate. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without severely impacting your ability to use lucky95.
• Functional Cookies: Remember your preferences such as language settings, odds format selection, and responsible gaming tool configurations. Disabling these may reduce your personalised experience.
• Analytics Cookies: Collect anonymised data about how players use the Platform — which pages are visited most, where users encounter errors, and how long sessions last. This data helps us improve the Platform. lucky95 uses only first-party analytics tools; no third-party analytics platforms that sell data are used.
• Security Cookies: Used to detect fraudulent activity, identify suspicious login patterns, and prevent unauthorised access to Accounts.

You can manage or delete cookies at any time through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your lucky95 Account. lucky95 does not use third-party advertising cookies or cross-site tracking cookies.

Data Retention

lucky95 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention periods apply:

When personal data is no longer required and no legal obligation mandates its retention, lucky95 will securely delete or anonymise it in accordance with our internal data destruction procedures.

Data Security

lucky95 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• Encryption in Transit: All data transmitted between your browser or app and the lucky95 Platform is encrypted using TLS 1.2 or higher. We enforce HTTPS across all pages and API endpoints.
• Encryption at Rest: Sensitive personal data fields — including CNIC numbers, financial identifiers, and authentication credentials — are stored in encrypted form using industry-standard algorithms.
• Access Controls: Access to personal data within lucky95 is governed by role-based access controls on a strict need-to-know basis. All staff with access to personal data receive data protection training and are subject to confidentiality obligations.
• Penetration Testing: lucky95's platform infrastructure undergoes regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: lucky95 maintains a data breach response procedure. In the event of a security incident that poses a material risk to your rights, we will notify affected players without undue delay.

Exercising Your Data Rights

You have the following rights in relation to your personal data held by lucky95. To exercise any of these rights, please submit a written request to [email protected] with "Data Request" in the subject line. lucky95 will respond within 30 calendar days of receiving a valid request.

• Right of Access (Data Subject Access Request): Request a full copy of the personal data lucky95 holds about you, including the categories of data, processing purposes, and any third parties with whom it has been shared.
• Right to Rectification: Request correction of personal data that is inaccurate or incomplete. Corrections to identity data (name, date of birth, CNIC) require re-submission of supporting documentation.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where: (a) it is no longer necessary for the purposes it was collected; (b) you withdraw consent (where processing was based on consent); or (c) it has been processed unlawfully. Note that we may be unable to delete data that we are legally required to retain.
• Right to Restriction: Request that lucky95 restrict processing of your data while a correction request is pending, or where you have objected to processing and we are assessing your objection.
• Right to Object: Object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, processing for that purpose will cease immediately.
• Right to Data Portability: Request that lucky95 provides your Account and transaction data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service.

lucky95 will verify your identity before processing any data rights request to ensure that we do not disclose or alter personal data in response to fraudulent requests. In cases of complexity or volume, the response period may be extended by a further 60 days, and you will be notified of the extension within the initial 30-day period.

Children & Minors

lucky95 strictly prohibits access to and use of the Platform by any person under the age of 21. The Platform is not directed at children or minors, and lucky95 does not knowingly collect personal data from individuals under 21 years of age.

If lucky95 discovers or has reason to believe that personal data has been collected from a person under the age of 21, we will immediately close the associated Account, void all activity on that Account, return deposited funds to the original payment source, and securely delete all personal data associated with the Account to the extent permitted by applicable AML record-keeping obligations.

Changes to This Privacy Policy

lucky95 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The effective date at the top of this Policy indicates when the current version came into force.

Where changes are material — meaning they substantially affect how we collect, use, or share your personal data — lucky95 will provide at least 14 days' advance notice by publishing the updated Policy on the Platform and, where practicable, notifying you by email to your registered address.

Minor amendments, such as typographical corrections or clarifications that do not alter the substance of the Policy, may take effect immediately upon publication. Your continued use of the Platform following the effective date of any amended Policy constitutes acceptance of the updated terms.

Previous versions of this Privacy Policy are available on request by contacting [email protected] with "Privacy Policy Archive" in the subject line.

Contact Information

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by lucky95, please contact our Data Protection team using the details below. We are committed to responding promptly and transparently to all privacy enquiries.

• Data Privacy Enquiries: [email protected] — include "Privacy" in your subject line for prioritised routing to our data protection team
• Data Subject Access Requests: [email protected] — include "Data Request" in your subject line; identity verification required before processing
• Support Hours: 24/7, 365 days a year (PKT, UTC+5)
• Response Commitment: General privacy queries within 5 business days; formal data rights requests within 30 calendar days
• Serving: Players across Pakistan including Karachi, Lahore, Islamabad, Faisalabad, and beyond

This Privacy Policy was last updated and is effective as of 1 January 2026. All previous versions of this Policy are superseded by this document.