Privacy Policy – How LuckyPKR Protects Your Data in Pakistan

1. Introduction

This Privacy Policy explains how LuckyPKR (operating through luckypkr.im) collects, uses, stores, and protects the personal information of players and visitors based in Pakistan. It applies to all interactions with LuckyPKR — whether you're browsing the site, registering an account, making a deposit, placing a bet, or contacting our support team.

We take privacy seriously. Not because a policy page requires it, but because the members who play on LuckyPKR trust us with their names, contact details, identity documents and financial information. That trust has real weight, and this document is our commitment to handling that data with care, transparency and minimal footprint.

By using LuckyPKR, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please do not use the platform. This policy should be read alongside our Terms and Conditions for a full picture of how the platform operates.

2. What Personal Data We Collect

The categories of personal data that LuckyPKR may hold about you depend on how you use the platform. Here is a full breakdown:

LuckyPKR does not collect sensitive categories of personal data such as racial origin, political opinions, religious beliefs, biometric data, or health information unless specifically required for responsible gaming purposes and with your explicit consent.

3. How We Collect Your Data

LuckyPKR collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit, place a bet, contact support, or update your account settings.
• Automatically — through cookies, log files and analytics tools that record technical and usage data when you browse or use the platform. See Section 6 for full cookie details.
• From third parties — identity verification providers who assist with KYC checks may return data about the outcome of verification (e.g., document validity confirmed). Payment processors return transaction confirmation data. We do not receive any financial credentials directly from payment providers.

LuckyPKR does not purchase data lists from third parties or acquire your data through social media scraping or any other indirect collection method.

4. Why We Use Your Data – Lawful Bases

Every use of your personal data by LuckyPKR is based on one of the following lawful grounds. We do not process data unless a valid basis applies.

• Contractual necessity: To fulfil the service you signed up for — creating and managing your account, processing deposits and withdrawals, settling bets, crediting bonuses, and providing customer support.
• Legal obligation: To comply with applicable anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, fraud prevention duties, and any instructions from competent authorities.
• Legitimate interests: To protect the security and integrity of the platform, detect and prevent fraud and bonus abuse, improve our services based on usage patterns, and maintain accurate financial records.
• Consent: For marketing communications (promotional emails, SMS messages). You can withdraw consent at any time — see Section 11.

5. Who We Share Your Data With

LuckyPKR does not sell your personal data to any third party. We share data only where necessary to deliver our services, comply with legal requirements, or protect the platform. The categories of recipients are:

• Payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, banking partners, Visa/Mastercard networks): To process deposits and withdrawals. Only the data necessary for the transaction is transmitted — typically your account reference and the transaction amount.
• KYC / identity verification providers: To verify your identity documents as required by our AML obligations. Verification providers operate under strict data protection contracts with LuckyPKR.
• IT infrastructure providers: Hosting and cloud service providers who store and process platform data on LuckyPKR's behalf, under contractual data processing agreements.
• Fraud and security services: Automated fraud detection tools that analyse transaction and usage patterns to identify suspicious activity. Data processed is technical and behavioural — not shared with third-party advertisers.
• Regulatory and legal authorities: Where required by law, court order, or instruction from a competent authority. LuckyPKR will notify you of such disclosures where legally permitted to do so.

All third-party service providers engaged by LuckyPKR are required to handle personal data under strict confidentiality obligations and use it only for the specific purpose for which it was shared. We do not permit service providers to use your data for their own commercial purposes.

6. Cookies & Tracking Technologies

LuckyPKR uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your logged-in session, and understand how visitors use the site.

Types of cookies used:

• Essential cookies: Required for the platform to function. These include session authentication tokens that keep you logged in during a visit. You cannot opt out of these without losing access to your account.
• Functional cookies: Remember your preferences, such as language setting and display options. These improve your experience but are not essential to core functionality.
• Analytics cookies: Track aggregate page views, game usage patterns, and navigation flows to help us understand how the platform is used and where improvements are needed. Data is processed at an aggregate, anonymised level.
• Security cookies: Used to detect and prevent fraudulent behaviour, including bot traffic and credential stuffing attempts.

LuckyPKR does not use third-party advertising or retargeting cookies. No advertising networks have access to your browsing behaviour on luckypkr.im.

You can control cookie settings through your browser. Disabling essential cookies will affect your ability to use account features. Disabling analytics or functional cookies has no impact on gameplay.

7. How We Protect Your Data

LuckyPKR employs a layered security approach to protect personal data from unauthorised access, loss, alteration, or disclosure.

• Encryption in transit: All data passed between your browser and our servers uses TLS (Transport Layer Security), the same standard used by banks and payment institutions.
• Encryption at rest: Sensitive stored data — including identity documents and financial details — is encrypted using AES-256 or equivalent protocols.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Employees with access to sensitive data are subject to confidentiality obligations and security training.
• Infrastructure security: Our hosting infrastructure includes firewalls, intrusion detection systems, and regular security audits conducted by qualified third parties.
• Two-factor authentication: LuckyPKR supports two-factor authentication (2FA) for player accounts. We strongly encourage all members to enable 2FA in their account security settings.

Despite these measures, no system is perfectly immune to security incidents. In the event of a data breach that poses a risk to your personal information, LuckyPKR will notify affected users promptly and take immediate steps to contain and remediate the incident.

8. How Long We Keep Your Data

LuckyPKR retains personal data only for as long as it is necessary for the purpose it was collected, or as required by applicable law. General retention periods are:

• Account and identity data: Retained for the duration of your account plus 5 years after account closure, to comply with AML and financial record-keeping obligations.
• Transaction and bet records: Retained for 7 years to satisfy financial audit and legal compliance requirements.
• Support communications: Retained for 3 years after the last interaction, to provide context for any future queries or disputes.
• Technical and usage data: Retained for 13 months, after which it is aggregated or deleted.
• Marketing preference records: Retained for the duration of your account, or 2 years after opt-out, to maintain an accurate suppression list.

When retention periods expire, LuckyPKR securely deletes or anonymises the data so that it can no longer be linked to your identity.

9. Your Privacy Rights

As a user of LuckyPKR, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected]. We respond to all data rights requests within 30 days.

Where we cannot fulfil a data request due to a conflicting legal obligation — for example, a statutory requirement to retain financial records — we will explain the reason clearly and specify the minimum period for which the data must be retained before deletion can occur.

10. Children's Privacy

LuckyPKR is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you are not permitted to register or use the platform under any circumstances.

If LuckyPKR discovers that personal data has been collected from a minor, the account will be immediately closed and all data permanently deleted. If you are a parent or guardian and believe a minor has registered an account on LuckyPKR, please contact us immediately at [email protected].

Our age verification process is designed to catch underage registration at the point of sign-up. All accounts are subject to identity verification, which includes date of birth confirmation.

11. Marketing Communications

LuckyPKR sends promotional communications — including bonus offers, new game announcements, PSL betting promotions, and VIP Club updates — to members who have opted in to receive them at registration or through their account settings.

Marketing messages are sent via email and, where you have provided consent, via SMS. LuckyPKR never sends unsolicited marketing messages to users who have not opted in.

How to opt out:

• Click the "Unsubscribe" link at the bottom of any marketing email
• Update your communication preferences in the Notifications section of your LuckyPKR account settings
• Contact support at [email protected] and request removal from all marketing lists

Opting out of marketing does not affect transactional communications — you will still receive account-related notifications such as deposit confirmations, withdrawal status updates, and important account security alerts.

12. Changes to This Privacy Policy

LuckyPKR may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make changes, we will:

• Update the "Last Updated" date at the top of this page
• Send a notification to your registered email address when changes are material
• Display an in-platform alert for a period following any significant update

We encourage you to review this page periodically. Your continued use of LuckyPKR after any policy update constitutes acceptance of the revised terms, unless you contact us to exercise your rights or close your account.

13. Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a privacy concern about how LuckyPKR handles your information, please get in touch:

• Email: [email protected]
• Subject line for data requests: "Privacy / Data Request – [Your Username]"
• Live Chat: Available 24/7 from the chat widget on luckypkr.im
• Response time: Privacy and data requests are handled within 30 calendar days of receipt. We will acknowledge receipt within 2 working days.

When submitting a data access or deletion request, please include your registered username and the email address on your account so we can verify your identity before processing the request.