lucky8 Privacy Policy – How We Handle Your Personal Data

1 Who We Are and How to Contact Us

Lucky8 is an internationally licensed online gaming platform operating the website at lucky8.blog. The lucky8 platform provides casino games, live dealer tables, sports betting markets including cricket, PSL, football, kabaddi, and UFC, as well as associated payment, promotional, and customer support services.

For all data protection enquiries, please contact our support team using the details below. Do not send sensitive personal documents via live chat — use email and reference your Account username in the subject line:

• Email: [email protected] (plain text — not a clickable link; please copy and paste into your mail application)
• Live Chat: Available directly on the lucky8 platform, 24 hours a day, 7 days a week, in Urdu and English

Lucky8 is committed to handling all data protection queries promptly and will respond to written data requests within 30 days of receipt.

2 Data We Collect About You

Lucky8 collects personal data across several categories. The specific data collected depends on how you interact with the platform — registering an account, depositing funds, placing bets, contacting support, or simply browsing the site.

2.1 Identity and Contact Data

• Full legal name as it appears on your National Identity Card (CNIC) or passport
• Date of birth (for mandatory 21+ age verification purposes)
• Residential address, including city (Karachi, Lahore, Islamabad, Faisalabad, Multan, Peshawar, or other)
• Pakistani mobile number registered to your JazzCash or EasyPaisa account
• Email address used for account registration and communications

2.2 Verification and KYC Data

• Copy of government-issued identity document (CNIC, passport, or driving licence)
• Proof of address documentation (utility bill, bank statement, or similar)
• Proof of payment method (screenshot or statement confirming ownership of JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank account used for deposits)
• Selfie or photograph for identity verification purposes

2.3 Financial and Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method identifiers (mobile wallet numbers, masked bank account references)
• Transaction history including game wagering, bonus usage, and withdrawal requests
• Currency denomination (PKR) and any applicable conversion records

2.4 Technical and Usage Data

• IP address and approximate geolocation at time of login
• Device type, operating system, and browser information
• Session duration, pages visited, and interaction patterns on the platform
• Game session data including bet history, game outcomes, and RNG outputs
• Login timestamps and account activity logs

2.5 Communications Data

• Records of live chat conversations with our support team
• Emails and messages sent to [email protected]
• Complaint and dispute correspondence
• Responses to surveys or feedback requests where you choose to participate

2.6 Responsible Gaming Data

• Self-imposed deposit limits, loss limits, and session time limits you have configured
• Self-exclusion requests and their duration
• Any responsible gaming assessments or support interactions

3 How We Collect Your Data

Lucky8 collects personal data through several mechanisms:

• Direct provision: Information you submit when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or entering a promotion.
• Automated collection: Technical data collected automatically as you use the platform, including via cookies, server logs, and analytics tools embedded in the lucky8 website.
• Third-party sources: Data received from payment processors (JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank) when you initiate transactions; identity verification service providers used to confirm your CNIC details; fraud prevention and AML screening services.
• Game providers: Game session data transmitted by our integrated game studio partners (such as Evolution Gaming and Pragmatic Play) relating to your real-money gaming activity on their titles.

4 Why We Use Your Data

Lucky8 uses your personal data for the following purposes. We use only the minimum data necessary for each purpose — this is the principle of data minimisation:

5 Legal Bases for Processing

Lucky8 processes personal data on the following legal bases under applicable data protection law:

• Contract performance: Processing is necessary to fulfil our obligations to you as a registered lucky8 player — including providing access to games, processing PKR transactions, and delivering customer support.
• Legal obligation: Lucky8 is required to collect and retain certain data to comply with its international gaming licence conditions, anti-money laundering regulations, and age verification requirements. Failure to provide this data may result in restricted platform access.
• Legitimate interest: Lucky8 processes certain technical and usage data to maintain platform security, detect fraud, prevent multi-accounting, and improve the platform experience. We conduct balancing tests to ensure our legitimate interests do not override your fundamental rights.
• Consent: Where lucky8 processes data for optional purposes — such as sending you promotional emails about new games or PSL betting offers — we will first obtain your explicit consent. You may withdraw consent at any time by contacting support or updating your Account communication preferences.

6 Sharing Your Data

Lucky8 does not sell your personal data to third parties. We share data only with carefully selected partners where necessary to deliver our services or meet legal obligations:

6.1 Payment Processors

Transaction data is shared with JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank as required to process your deposits and withdrawals. These processors operate under their own privacy policies and applicable Pakistani financial regulations.

6.2 Game Studio Providers

Game session data is transmitted to and from providers such as Evolution Gaming and Pragmatic Play to deliver and settle game outcomes. These providers are contractually bound to handle data in accordance with their gaming licences and applicable data protection standards.

6.3 Identity Verification Services

Where automated identity or document verification is used, your CNIC or passport data may be shared with a third-party KYC verification provider operating under strict data processing agreements with lucky8.

6.4 Regulatory and Law Enforcement Bodies

Lucky8 may disclose personal data to its licensing authority, relevant financial intelligence units, or law enforcement agencies where required by law, court order, or to protect the integrity of the platform from fraud, money laundering, or criminal activity. Lucky8 will comply with lawful requests from Pakistani authorities or applicable international regulatory bodies where legally required.

6.5 IT and Infrastructure Providers

Lucky8 uses cloud infrastructure, data hosting, and cybersecurity service providers who may process personal data on our behalf under data processing agreements. These providers are prohibited from using your data for any purpose other than delivering services to lucky8.

7 International Data Transfers

Lucky8 operates as an internationally licensed platform. As a result, your personal data may be processed or stored on servers located outside Pakistan. Where data is transferred to jurisdictions that do not have data protection laws equivalent to those in your country of residence, lucky8 implements appropriate safeguards to protect your data, including:

• Standard contractual clauses approved by applicable regulatory authorities;
• Data processing agreements with all third-party processors that include binding data protection obligations;
• Technical security measures including encryption and access controls that apply regardless of where data is stored.

If you have concerns about international data transfers in relation to your lucky8 Account, please contact [email protected] (copy and paste — not a clickable link).

8 Data Retention

Lucky8 retains personal data for as long as necessary to fulfil the purposes described in this Policy and to meet applicable legal obligations. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your active Account plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 7 years to comply with applicable financial and gaming regulatory requirements.
• KYC verification documents: Retained for the duration of your Account plus 5 years post-closure.
• Customer support communications: Retained for 3 years from the date of the last communication, or longer where a formal complaint or legal matter is unresolved.
• Technical and usage logs: Retained for up to 2 years from collection, except where fraud investigation requires a longer retention period.
• Self-exclusion records: Retained for a minimum of 5 years from the expiry of the exclusion period to prevent re-registration during any active exclusion.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9 Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. Lucky8 uses cookies and similar tracking technologies to operate the platform, improve user experience, maintain session security, and analyse aggregate usage patterns.

9.2 Types of Cookies Used by lucky8

• Strictly necessary cookies: Required for the platform to function — including session authentication, account login state, and security tokens. These cannot be disabled without impacting platform functionality.
• Functional cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data about how players navigate the platform to help lucky8 improve page performance and game loading times — particularly relevant for users on Pakistani mobile networks.
• Security cookies: Detect and prevent fraudulent login attempts, multi-accounting, and session hijacking.

9.3 Managing Cookies

You may control cookie settings through your browser's privacy settings. Disabling strictly necessary cookies will prevent you from accessing your lucky8 Account. Lucky8 does not use third-party advertising cookies or behavioural targeting cookies.

10 Your Data Rights

Depending on your jurisdiction of residence, you may hold the following rights in relation to your personal data held by lucky8. To exercise any of these rights, please contact [email protected] (copy and paste — not a clickable link) with the subject line "Data Rights Request – [Your Account Username]":

• Right of access: Request a copy of all personal data lucky8 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where there is no overriding legal basis for continued processing. Note that AML and gaming licence obligations may prevent full erasure in certain cases.
• Right to restriction: Request that lucky8 limit the processing of your data in certain circumstances, such as during a dispute about accuracy.
• Right to data portability: Receive a structured, machine-readable copy of personal data you have provided to lucky8 where processing is based on consent or contract performance.
• Right to object: Object to processing based on legitimate interest, including profiling for responsible gaming monitoring purposes, where you have compelling grounds to do so.
• Right to withdraw consent: Where lucky8 processes data on the basis of your consent (such as promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Lucky8 will respond to data rights requests within 30 days of receipt. In complex cases, this may be extended by a further 60 days with prior notification. Lucky8 does not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.

11 Security Measures

Lucky8 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the lucky8 platform;
• Encryption at rest for all personal and financial data stored on lucky8 infrastructure;
• Two-factor authentication (2FA) available on all lucky8 accounts via your registered Pakistani mobile number;
• Role-based access controls ensuring that lucky8 staff can only access personal data to the minimum extent required for their specific job function;
• Regular security audits and penetration testing conducted by independent third-party security specialists;
• Intrusion detection systems monitoring the platform 24/7 for anomalous activity;
• Incident response procedures ensuring that any confirmed data breach is assessed promptly, and affected players notified within the timeframes required by applicable regulations.

While lucky8 employs industry-standard security practices, no online platform can guarantee absolute security. You are also responsible for protecting your own Account credentials and notifying lucky8 immediately if you suspect unauthorised access.

12 Children and Minors

Lucky8 is strictly prohibited to any person under the age of 21. Lucky8 does not knowingly collect personal data from individuals under 21 years of age. If lucky8 becomes aware that personal data from a minor has been collected — including through a fraudulent age declaration during registration — the relevant Account will be immediately suspended, all data will be deleted to the extent permitted by law, and any Real Money Balance deposited will be returned to the originating payment method after applicable verification.

13 Changes to This Privacy Policy

Lucky8 may update this Privacy Policy from time to time to reflect changes in applicable data protection law, our data processing practices, or the scope of services we offer. Where changes are material — meaning they affect your rights or how we use your data in a significant way — we will provide advance notice via email to your registered address and through a prominent notice on the lucky8 platform before the changes take effect.

The "Last Updated" date at the top of this page reflects when the most recent version of this Policy was published. We recommend reviewing this Policy periodically to stay informed about how lucky8 protects your personal data. Continued use of the lucky8 platform following the effective date of any update constitutes acknowledgement of the revised Policy.

14 Complaints and Contact

If you have a concern about how lucky8 handles your personal data, we encourage you to contact us first so that we can attempt to resolve the matter directly:

• Email: [email protected] — subject line: "Privacy Complaint – [Your Account Username]" (plain text — not a clickable link; copy and paste into your email application)
• Live Chat: Available 24/7 on the lucky8 platform in Urdu and English — average response time 3–5 minutes

Lucky8 will acknowledge all privacy complaints within 24 hours and aim to provide a substantive response within 10 business days. Where a matter requires detailed investigation, we will provide regular progress updates.

If you are not satisfied with lucky8's response to your privacy complaint, you may escalate the matter to the data protection supervisory authority applicable to lucky8's operating jurisdiction, or to the independent dispute resolution mechanism available through our gaming licence authority.