lucky8 Privacy Policy

This Privacy Policy is published by lucky8 ("lucky8," "we," "us," or "our") and applies to all personal data processed in connection with your use of the lucky8 platform, including the website at lucky8.site, all associated games and betting services, customer support interactions, and payment transactions.

lucky8 acts as the data controller in respect of personal data collected directly from users through the platform. Where we engage third-party service providers to process personal data on our behalf, those parties act as data processors and are contractually bound to process data only in accordance with our written instructions and in compliance with applicable data protection standards.

By registering an account, making a deposit, placing a wager, or otherwise using the lucky8 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you should not use the lucky8 platform.

lucky8 collects personal data through several channels and at different points in your interaction with the platform. The categories of data we collect are outlined below.

When you create a lucky8 account, we collect: your full legal name, date of birth, email address, mobile telephone number (typically a Pakistani mobile number registered with Jazz, Telenor, Zong, or Ufone), chosen username, and account password (stored in hashed, non-readable form).

To comply with our obligations under our international gaming license and applicable anti-money laundering requirements, lucky8 may request: a copy of a valid government-issued identity document (such as a Pakistani CNIC or passport), a selfie or live verification image, and proof of payment method ownership. This data is processed solely for verification purposes and handled with heightened security protocols.

We collect records of all deposits and withdrawals conducted through your lucky8 account, including transaction amounts in PKR, timestamps, and references to the payment method used (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank). We do not store full bank account numbers or mobile wallet PINs.

We maintain records of all wagers placed, games played, bet outcomes, bonus claims, and session activity associated with your lucky8 account. This data is used for account management, regulatory reporting, responsible gaming monitoring, and dispute resolution.

We automatically collect certain technical information when you access lucky8, including your IP address, device type and operating system, browser type and version, session duration and timestamps, and general geographic location derived from your IP address.

lucky8 uses the personal data we collect for the following specific purposes:

• Account Registration and Management: Creating, maintaining, and administering your lucky8 account, including processing changes to your account details and managing login credentials.
• Age and Identity Verification: Confirming that you are at least 21 years of age and that your identity matches the information provided at registration, in accordance with our licensing obligations.
• Payment Processing: Facilitating deposits to and withdrawals from your lucky8 account through JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and maintaining accurate financial records for each transaction.
• Service Delivery: Providing access to all lucky8 games, sports betting markets, live casino services, and promotional offers, and personalising your experience based on your activity and preferences.
• Responsible Gaming: Monitoring your gaming activity to detect patterns that may indicate problem gambling behaviour and delivering responsible gaming interventions such as limit notifications and cooling-off prompts where appropriate.
• Regulatory Compliance: Meeting our obligations under our international gaming license, applicable anti-money laundering legislation, and any other regulatory requirements that apply to the operation of lucky8.
• Fraud and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the lucky8 platform.
• Customer Support: Responding to your queries, complaints, and account-related requests through lucky8's 24/7 live chat and email support channels.
• Platform Improvement: Analysing aggregated usage data to understand how the platform is used and to make technical and content improvements that benefit our user base.

lucky8 processes your personal data on the basis of the following legal grounds, depending on the specific processing activity:

Processing of your registration data, financial transaction data, and gaming activity data is necessary for the performance of the contract between you and lucky8 constituted by our Terms and Conditions. Without this processing, lucky8 cannot provide you with account access, payment services, or gaming functionality.

Processing of identity verification (KYC) data, financial records, and regulatory reporting data is required for lucky8 to comply with its obligations under applicable anti-money laundering legislation and the conditions of its international gaming license. This processing is mandatory and cannot be waived on the basis of a user's preferences.

lucky8 processes technical and device data for fraud prevention, security monitoring, and platform analytics on the basis of our legitimate interest in maintaining a secure and well-functioning gaming environment. This processing does not override your fundamental rights and freedoms.

Where lucky8 sends you optional marketing communications — such as promotional emails or SMS notifications regarding special offers — such communications are sent only where you have provided explicit consent during registration or through your account communication preferences. You may withdraw this consent at any time through your account settings or by contacting lucky8 support.

lucky8 does not sell, rent, or trade your personal data. We share personal data only in the following limited and defined circumstances:

To process deposits and withdrawals, lucky8 shares necessary transaction data with our integrated payment service providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. Each provider operates under its own terms and privacy practices and processes your payment data only to the extent required to execute the relevant transaction.

Where lucky8 uses a third-party KYC or identity verification provider, your identity documents and verification data may be transmitted to and processed by that provider. All such providers are bound by confidentiality obligations and may use your data solely for the verification purpose specified.

lucky8's game library includes titles from providers such as PG Soft, Pragmatic Play, and Jili Games. These providers may receive anonymised session data for the purpose of delivering game functionality. They do not receive your personally identifiable registration or financial data through game delivery.

lucky8 may disclose your personal data to regulatory bodies, our licensing authority, law enforcement agencies, or other governmental entities where required to do so by applicable law, a court order, or our licensing obligations. We will notify you of such disclosure where legally permitted to do so.

In the event of a merger, acquisition, restructuring, or sale of all or part of lucky8's business assets, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer that materially affects how your data is processed.

lucky8 uses cookies and similar tracking technologies to support platform functionality, security, and analytics. Cookies are small data files stored on your device when you access lucky8.site.

These cookies are strictly necessary for the lucky8 platform to function. They maintain your login session, preserve your account preferences, and support the security mechanisms that protect your account. Essential cookies cannot be disabled without impairing core platform functionality.

lucky8 uses analytics tools to understand how users interact with the platform in aggregate — which game categories are most popular, where users encounter navigation difficulties, and how platform performance can be improved. Analytics data is aggregated and does not identify individual users.

Certain cookies support lucky8's fraud detection and account security systems by maintaining device fingerprinting data that helps identify anomalous login attempts or suspicious transaction patterns.

You may manage cookie settings through your browser preferences. Please note that disabling certain cookies may impair your ability to use some or all features of the lucky8 platform, including maintaining a persistent login session.

lucky8 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, destruction, or loss.

• Transmission Security: All data exchanged between your device and lucky8's servers is encrypted using 256-bit SSL/TLS protocols — the same standard used by international financial institutions and major banks.
• Password Hashing: Your account password is never stored in readable form. lucky8 stores only a one-way cryptographic hash of your password, meaning even lucky8's own personnel cannot read your password directly.
• Access Controls: Access to personal data held by lucky8 is restricted on a strict need-to-know basis. Employees, contractors, and service providers who access personal data are subject to confidentiality obligations and data access logging.
• Security Monitoring: lucky8's systems are monitored continuously for intrusion attempts, anomalous access patterns, and potential data security incidents.
• Incident Response: In the event of a data security incident affecting your personal data, lucky8 will notify affected users and relevant regulatory authorities within the timeframes required by applicable law and our licensing obligations.

lucky8 retains your personal data for the period necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active Accounts: Personal data associated with an active lucky8 account is retained for the duration of the account's existence, plus the post-closure retention period applicable to each data category as described below.
• Financial Records: Transaction records and financial data are retained for a minimum of five (5) years following the date of the transaction, in compliance with anti-money laundering record-keeping obligations applicable to our licensing jurisdiction.
• KYC and Identity Documents: Copies of identity documents submitted for KYC verification are retained for the duration of your account relationship with lucky8 and for a minimum of five (5) years following account closure, in line with our licensing requirements.
• Gaming Activity Logs: Records of bets placed, game sessions, and account activity are retained for a minimum of three (3) years following the date of the activity, for the purposes of dispute resolution and regulatory audit.
• Support Communications: Records of customer support interactions are retained for two (2) years following the closure of each support case.
• Closed Accounts: Following account closure, lucky8 will delete or anonymise personal data that is no longer required to fulfil legal, regulatory, or contractual obligations within a reasonable time, subject to the minimum retention periods described above.

Subject to applicable law and the limitations arising from lucky8's legal and regulatory obligations, you hold the following rights in relation to your personal data held by lucky8:

To exercise any of these rights, please contact lucky8's customer support team via live chat. lucky8 will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) days, or within such other period as may be required by applicable law. Where a request is complex or numerous, this period may be extended, and you will be notified accordingly.

Please note that certain rights — particularly the right of erasure — may be limited by lucky8's obligations to retain data under our gaming license, anti-money laundering legislation, or other regulatory requirements. Where we are unable to fully comply with a deletion request for these reasons, we will explain the basis for limitation.

lucky8 is strictly a platform for adults aged 21 and above. We do not knowingly collect personal data from individuals below this age. Age verification is a mandatory component of the lucky8 account lifecycle — all withdrawal requests trigger a KYC review that includes confirmation of the account holder's age against identity documents.

In the event that lucky8 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to close the relevant account, delete the personal data collected, and, where appropriate, notify relevant regulatory authorities.

If you are a parent or guardian and believe that a minor in your care has registered or used a lucky8 account, please contact our support team immediately via live chat so that we can investigate and take appropriate action without delay.

lucky8 is operated under an international gaming license, and certain of our service providers — including game content providers, identity verification partners, and cloud infrastructure providers — may be located in jurisdictions outside of Pakistan. As a result, your personal data may be transferred to, stored in, and processed in countries other than the country in which you are located.

Where such international transfers occur, lucky8 takes appropriate steps to ensure that your personal data receives a standard of protection consistent with this Privacy Policy and applicable data protection standards. This includes entering into data processing agreements with service providers that impose appropriate data protection obligations on those providers.

By using the lucky8 platform, you acknowledge that your personal data may be processed internationally in connection with the delivery of lucky8's services, as described in this Policy.

lucky8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the structure of the lucky8 platform itself.

When we make a material change to this Policy, we will update the effective date displayed at the top of this document and publish the revised version on lucky8.site. Where a change is significant, we may also notify registered account holders by email or via an in-platform notification.

Your continued use of the lucky8 platform following the publication of any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you should discontinue your use of lucky8 and may request account closure in accordance with the account closure process described in our Terms and Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how lucky8 has handled your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the lucky8 platform. For data-related enquiries, please identify your request as a "Privacy / Data Request" at the start of the conversation so that it can be routed to the appropriate team member.
• Email: [email protected] (displayed as plain text — not a clickable link). Please include "Privacy Enquiry" in the subject line. Responses to formal data requests are provided within thirty (30) days.

For general support queries, responsible gaming assistance, or account management, visit the FAQ page or the Responsible Gaming section of lucky8.site.