Your Privacy Matters at lucky55

01 Introduction

lucky55 ("lucky55", "we", "us", "our") operates Pakistan's premier online casino and sports betting platform at lucky55.im. We are committed to protecting the personal information of all players who use our platform. This Privacy Policy describes how we collect, use, store, share, and protect personal data in connection with the provision of our services.

This Privacy Policy should be read alongside our Terms & Conditions, which together form the complete agreement governing your use of lucky55. Capitalised terms used but not defined in this policy have the meanings given to them in our Terms & Conditions.

We take our obligations seriously and have designed our data practices to align with internationally recognised privacy principles, including those set out in the General Data Protection Regulation (GDPR) as a global benchmark of best practice, even where such legislation may not directly apply.

02 Data We Collect

lucky55 collects personal data that is necessary to provide our gaming and betting services, verify your identity, process payments, and comply with applicable regulatory requirements. The categories of personal data we collect include:

Category	Examples	Purpose
Identity Data	Full name, date of birth, CNIC number, passport number, photograph	KYC verification, age verification, account registration
Contact Data	Email address, mobile number, city of residence (e.g., Karachi, Lahore, Faisalabad)	Account communications, support, security alerts
Financial Data	JazzCash/EasyPaisa account reference, bank account details (HBL, UBL, Meezan Bank), transaction history	Processing deposits and withdrawals
Gaming Data	Bet history, game sessions, win/loss records, bonus activity, PSL and cricket wagers	Service provision, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, browser type, operating system, session timestamps	Security, fraud prevention, platform optimisation
Usage Data	Pages visited, features used, click patterns, referral source	Service improvement, analytics
Communications Data	Live chat transcripts, email correspondence, support ticket records	Customer service, dispute resolution, quality assurance

03 How We Collect Your Data

lucky55 collects personal data through the following channels:

• Direct interactions — Data you provide when registering your lucky55 account, completing KYC verification, making deposits or withdrawal requests, contacting our support team, or participating in promotions.
• Automated technologies — When you visit and use lucky55.im, we automatically collect Technical Data and Usage Data through cookies, server logs, and similar technologies (see Section 9).
• Third parties — We may receive data about you from payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), identity verification providers, fraud prevention services, and analytics partners. Any third party providing us with your data is required to do so lawfully and in compliance with applicable privacy standards.
• Public sources — In limited circumstances related to fraud prevention and KYC compliance, we may cross-reference information against publicly available records.

04 How We Use Your Data

lucky55 uses the personal data we collect for the following purposes:

• To register and manage your lucky55 account, including verifying your identity and age in compliance with our 21+ policy.
• To process deposits in PKR and withdrawals via JazzCash, EasyPaisa, and supported bank transfer methods.
• To provide access to our full range of games and betting markets, including cricket betting, PSL odds, slots, and live casino tables.
• To detect, investigate, and prevent fraud, money laundering, underage gambling, and other prohibited activities.
• To operate our responsible gaming programme, including monitoring for signs of problem gambling and enforcing self-exclusion requests.
• To communicate with you about your account, transactions, security alerts, and changes to our Terms or policies.
• To send you marketing communications about lucky55 promotions and offers, where you have consented to receiving such communications.
• To improve and optimise the lucky55 platform through analytics and user behaviour research.
• To comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements and gaming licensing conditions.
• To resolve disputes, enforce our Terms & Conditions, and protect the rights, property, and safety of lucky55 and its users.

05 Legal Basis for Processing

lucky55 processes personal data only where we have a valid legal basis to do so. The primary legal bases on which we rely are:

• Contractual necessity — Processing required to perform the contract between you and lucky55, including account management, payment processing, and service delivery.
• Legal obligation — Processing required to comply with applicable laws and regulations, including KYC/AML obligations imposed under international gaming licensing standards.
• Legitimate interests — Processing necessary for our legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your data protection rights.
• Consent — Processing based on your freely given, specific, informed, and unambiguous consent, such as for optional marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Data Sharing & Disclosure

lucky55 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients where necessary and lawful:

• Payment processors — JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK, to facilitate deposits and withdrawals from your lucky55 wallet.
• Identity verification providers — Third-party KYC and document verification services used to confirm your identity and age in line with our 21+ policy and AML obligations.
• Fraud prevention and security services — Providers who assist us in detecting suspicious activity, preventing bonus abuse, and maintaining platform integrity.
• IT infrastructure and hosting providers — Cloud hosting and data centre providers who store lucky55 data on our behalf under strict contractual data processing agreements.
• Regulatory and law enforcement authorities — Where required by our gaming licence conditions, applicable law, or a valid legal order, we may disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies.
• Professional advisors — Legal counsel, auditors, and insurers on a need-to-know basis and subject to professional confidentiality obligations.

07 International Data Transfers

lucky55 operates under international gaming licensing standards and may use service providers located in jurisdictions outside Pakistan. Where personal data is transferred internationally, lucky55 takes steps to ensure that appropriate safeguards are in place to protect your data, including:

• Contractual clauses that impose data protection obligations equivalent to those applicable in the country from which the data originates.
• Transfers only to service providers in jurisdictions that maintain adequate data protection frameworks or who have committed to equivalent standards.
• Regular review of our international transfer arrangements to ensure ongoing compliance with evolving data protection requirements.

08 Data Retention

lucky55 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, tax, or accounting requirements. Our standard retention periods are as follows:

• Account and identity data — Retained for the duration of your lucky55 account plus a minimum of 5 years following account closure, in line with AML regulatory requirements.
• Financial transaction records — Retained for a minimum of 5 years from the date of the transaction.
• Gaming and betting history — Retained for a minimum of 3 years from the date of the relevant gaming activity.
• Marketing consent records — Retained until you withdraw consent plus 12 months thereafter as evidence of prior consent.
• Support communications — Retained for 2 years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Technical and usage data — Aggregated or anonymised after 12 months where it is no longer required in identifiable form.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in such a manner that it can no longer be associated with any identifiable individual.

09 Cookies & Tracking Technologies

lucky55 uses cookies and similar tracking technologies on our platform. A cookie is a small text file placed on your device by our website. We use the following categories of cookies:

• Strictly necessary cookies — Essential for the operation of the lucky55 platform. These include session management cookies that keep you logged in and security cookies that help detect fraud. These cookies cannot be disabled.
• Functional cookies — Used to remember your preferences, such as your preferred language, display settings, and game history, so we can personalise your experience on lucky55.
• Analytics cookies — Used to collect anonymised information about how players use lucky55.im, such as which pages are visited most frequently and how players navigate through the site. This data is used solely to improve our platform.

You can control cookie settings through your browser preferences. Please note that disabling functional cookies may affect the quality of your experience on lucky55. Strictly necessary cookies cannot be disabled without significantly impairing platform functionality.

10 Third-Party Services

The lucky55 platform may contain links to third-party services, such as payment processors and game providers. These third-party services operate under their own privacy policies, which are entirely independent of this Privacy Policy. lucky55 is not responsible for the privacy practices of any third-party service, and we encourage you to review the privacy policies of any third-party services you interact with in connection with your use of lucky55.

Where lucky55 engages third-party game content providers to supply games on our platform, those providers may process limited technical data (such as session identifiers and game round data) for the purpose of delivering game content. Such providers are contractually required to process this data solely for service delivery purposes and are prohibited from using it for any other purpose.

11 Children & Minors

If lucky55 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and permanently close the associated account. If you believe that a minor may have registered on lucky55, please contact our support team via live chat immediately so that we can investigate and take appropriate action.

lucky55 employs age verification procedures as part of our KYC process to help prevent underage access to our platform. These procedures include documentary verification of date of birth using government-issued identification such as the Pakistani CNIC or passport.

12 Your Data Rights

Subject to applicable law, you have the following rights with respect to the personal data lucky55 holds about you:

• Right of access — You may request a copy of the personal data we hold about you. We will provide this information within 30 days of receiving a valid request.
• Right to rectification — If any personal data we hold about you is inaccurate or incomplete, you may ask us to correct it.
• Right to erasure — You may ask us to delete your personal data where we no longer have a lawful basis to retain it. Please note that certain data must be retained for regulatory compliance purposes and cannot be deleted at your request.
• Right to restriction — You may ask us to temporarily suspend processing of your data while a dispute or correction is being resolved.
• Right to data portability — You may request a structured, commonly used, machine-readable copy of the personal data you have provided to us directly.
• Right to object — You may object to our processing of your data on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing immediately.
• Right to withdraw consent — Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place prior to withdrawal.

To exercise any of the above rights, please contact our support team via live chat available 24/7 on the lucky55 platform. We may need to verify your identity before processing your request to ensure that data is not disclosed to the wrong person.

13 Data Security

lucky55 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• AES-256 encryption for data at rest and TLS 1.3 for data in transit.
• Multi-factor authentication requirements for internal systems that have access to player data.
• Role-based access controls ensuring that lucky55 employees can only access the minimum personal data required for their specific job function.
• Regular penetration testing and vulnerability assessments of our platform and infrastructure.
• 24/7 security monitoring with automated alerting for anomalous access patterns.
• Formal data breach response procedures, including our obligation to notify affected players and relevant authorities where required.
• Regular staff training on data protection and information security obligations.

While we take every reasonable precaution to secure your data, no internet-based platform can guarantee absolute security. We encourage you to maintain the security of your own lucky55 login credentials and to notify us immediately if you suspect any unauthorised access to your account.

14 Updates to This Privacy Policy

lucky55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services we offer. Where changes are material, we will notify registered players via email or a prominent notice on the lucky55 platform prior to the changes taking effect.

The effective date at the top of this Privacy Policy indicates when it was last updated. We encourage you to review this policy periodically to stay informed about how lucky55 protects your personal data. Your continued use of the lucky55 platform following the posting of an updated Privacy Policy constitutes your acceptance of those changes.

15 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which lucky55 processes your personal data, please contact us through the following channel:

We take all privacy-related enquiries seriously and will respond to your message within 72 hours. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority or gaming regulatory body applicable in your jurisdiction.