Privacy Policy

Luky55 ("Luky55", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses our online gaming and sports betting platform (the "Platform"). This Privacy Policy ("Policy") describes how we collect, use, store, share and protect personal data in connection with your use of the Platform, including our website at https://luky55.cam and all associated services.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. By registering an Account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and may request Account closure in accordance with our Terms & Conditions.

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, contact details, financial information, device identifiers and behavioural data.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer and deletion.
• "Data Controller" — Luky55, as the entity that determines the purposes and means of Processing your Personal Data.
• "Data Processor" — a third party that Processes Personal Data on behalf of Luky55 under a data processing agreement.
• "Account" — the registered user profile you create on the Platform.
• "KYC" — Know Your Customer; the identity verification process required before certain Account actions, including withdrawals.
• "Cookies" — small text files placed on your device by the Platform to store session and preference information.
• "You" / "User" — any individual who accesses, browses or holds an Account on the Platform.

We collect Personal Data through several channels, including your Account registration, your ongoing use of the Platform and communications you initiate with our support team. The categories of data we collect are set out in the table below.

Luky55 processes your Personal Data on one or more of the following legal bases, depending on the nature and purpose of the Processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted — including Account management, transaction processing and dispute resolution.
• Legal Obligation: Processing required to comply with applicable law and regulatory requirements, including anti-money laundering (AML) obligations, counter-terrorism financing (CTF) checks and age verification mandates.
• Legitimate Interests: Processing carried out for Luky55's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud detection, platform security, analytics and service improvement.
• Consent: Where we rely on your consent for specific Processing activities — such as marketing communications or non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of Processing carried out prior to withdrawal.

We use the Personal Data we collect for the following purposes:

• Account Creation and Management: To register your Account, verify your identity, authenticate your login sessions and keep your Account information current.
• Transaction Processing: To handle deposits, withdrawals and bonus allocations securely. Payment method references — including those associated with services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are used solely for transactional verification and do not imply endorsement of gambling by any such provider.
• Regulatory Compliance: To conduct KYC and AML checks, screen against sanctions lists, verify age and residency, and retain records as required by our licensing obligations.
• Customer Support: To respond to your queries, resolve complaints and maintain records of communications for quality assurance and audit purposes.
• Platform Personalisation: To remember your preferences, display relevant content and, where you have opted in, send you promotional communications about Luky55 offers.
• Fraud Prevention and Security: To detect, investigate and prevent fraudulent activity, multi-accounting, money laundering and any other conduct that violates our Terms & Conditions.
• Responsible Gambling: To operate and enforce the responsible gambling tools you configure, including deposit limits, self-exclusion periods and session reminders, and to monitor usage patterns that may indicate problem gambling behaviour.
• Analytics and Service Improvement: To analyse aggregated usage data, understand platform performance and develop new features that improve the user experience.
• Legal Proceedings: To establish, exercise or defend legal claims where necessary.

Luky55 does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data only in the following circumstances:

• KYC and Identity Verification Providers: Accredited third-party verification services that process identity documents and conduct liveness checks on our behalf under binding data processing agreements.
• Payment Processors: Financial technology partners that facilitate the processing of deposits and withdrawals. These parties receive only the minimum data required to complete a transaction and are contractually prohibited from using it for any other purpose.
• Fraud and AML Screening Services: Providers that screen user data against sanctions lists, politically exposed persons (PEP) databases and fraud intelligence networks as required by our regulatory obligations.
• Responsible Gambling Service Providers: Where you interact with self-exclusion schemes or third-party responsible gambling tools integrated with our Platform, the relevant data is shared with those providers solely to give effect to your request.
• IT Infrastructure and Cloud Providers: Hosting, database and security service providers that process data on our infrastructure on a strictly processor basis.
• Legal and Regulatory Authorities: Where we are required by law, court order or regulatory direction to disclose Personal Data to competent authorities, we will do so. Where permitted, we will notify you of such disclosure.
• Business Transfers: In the event of a merger, acquisition or sale of assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

All third-party Data Processors engaged by Luky55 are required to process Personal Data only in accordance with our instructions and to implement appropriate technical and organisational security measures.

Your Personal Data may be transferred to and processed in countries outside your country of residence, including countries where data protection laws may differ from those in your jurisdiction. Where such transfers occur, Luky55 takes appropriate steps to ensure that your Personal Data receives an adequate level of protection, including:

• Entering into standard contractual clauses approved by relevant data protection authorities with recipient entities;
• Transferring data only to recipients in jurisdictions recognised as providing adequate data protection standards;
• Implementing supplementary technical measures — such as encryption — where additional protection is warranted.

By using the Platform, you acknowledge that your Personal Data may be processed internationally in accordance with the safeguards described in this section.

We retain your Personal Data for as long as your Account remains active and for such additional periods as are required to meet our legal, regulatory and business obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in line with standard AML record-keeping requirements.
• Financial and Transaction Records: Retained for a minimum of five (5) years from the date of each transaction to satisfy regulatory audit requirements.
• KYC Verification Documents: Retained for the period required by the applicable licensing jurisdiction, typically five (5) years from Account closure.
• Support Communications: Retained for up to three (3) years from the date of the interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing Preferences: Retained until you withdraw consent or request deletion, at which point we will cease marketing communications promptly.
• Cookie and Analytics Data: Session cookies expire when you close your browser. Persistent analytical cookies are retained for up to thirteen (13) months.

Once the applicable retention period expires, Personal Data is securely deleted or anonymised so that it can no longer be associated with any individual.

The Platform uses cookies and similar tracking technologies to provide essential functionality, improve performance and — where you have given consent — to support analytics. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens and load-balancing cookies. These cannot be disabled without significantly impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences such as language settings, session timeout durations and responsible gambling tool configurations. Disabling these may reduce personalisation.
• Analytical Cookies: Used to understand how users interact with the Platform — for example, which pages are most visited and where errors occur. This data is aggregated and does not identify individual users. These cookies are only set with your consent.
• Security and Fraud Prevention Cookies: Help us detect suspicious activity, enforce geographic restrictions and protect against automated abuse of the Platform.

You can manage your cookie preferences at any time through your browser's settings. Note that blocking strictly necessary cookies will impair Platform functionality. For a full list of the cookies we use and their individual retention periods, please contact our support team via the Help Centre.

Luky55 takes the security of your Personal Data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration or destruction. These include:

• Encryption in Transit: All data exchanged between your browser and our servers is protected using TLS 1.2 or higher (SSL encryption), ensuring that data cannot be intercepted in transit.
• Encryption at Rest: Sensitive Personal Data stored in our databases is encrypted using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to authorised employees and contractors who require it to perform their role. All access is logged and audited regularly.
• Two-Factor Authentication: We encourage users to enable two-factor authentication (2FA) on their Accounts for an additional layer of login security.
• Regular Security Audits: Our platform and infrastructure undergo regular vulnerability assessments and penetration testing by qualified security professionals.
• Incident Response: In the event of a data breach that poses a risk to your rights, Luky55 will notify affected users and relevant authorities within the timeframes required by applicable law.

Subject to applicable law and certain conditions, you have the following rights in respect of your Personal Data held by Luky55:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you may request that we correct or update it. You may also update most Account details directly through your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where Processing is unlawful. This right is subject to our legal retention obligations — for example, AML record-keeping requirements may override erasure requests for certain data categories.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict Processing of your Personal Data — for example, while the accuracy of data is being disputed.
• Right to Data Portability: Where Processing is based on consent or contract and is carried out by automated means, you may request that we provide your Personal Data in a structured, machine-readable format.
• Right to Object: You may object to Processing based on our legitimate interests or for direct marketing purposes. We will cease such Processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where Processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior Processing.

To exercise any of these rights, contact our support team via Live Chat or the Help Centre. We will acknowledge your request within five (5) business days and aim to resolve it within thirty (30) days. Where a request is complex or we receive a high volume of requests, we may extend this period by a further two months with notification to you.

The Platform is strictly intended for adults aged 18 or older — or the higher minimum age required by the operator's license jurisdiction. Luky55 does not knowingly collect Personal Data from individuals under the age of 18. Age verification is a mandatory part of our KYC process.

If we become aware that Personal Data has been collected from a minor without verifiable parental consent, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered on the Platform, please notify us immediately via our support channels so we can take appropriate action.

Parents and guardians are encouraged to use available parental control tools to restrict minors' access to online gaming content. For information on responsible gambling tools available on the Platform, please visit our Responsible Gambling page.

The Platform may from time to time reference third-party services or resources in an informational context. Luky55 does not control the privacy practices of any third-party websites or services. This Policy applies solely to data processed by Luky55 in connection with your use of the Platform. We recommend reviewing the privacy policies of any third-party service you access independently.

Luky55 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations or business operations. Where changes are material, we will provide advance notice via email or a prominent notice on the Platform prior to the changes taking effect. The "Last updated" date at the top of this page will be revised accordingly.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the amended Policy, you should discontinue use of the Platform and may request Account closure in accordance with our Terms & Conditions.

If you have any questions, concerns or requests regarding this Privacy Policy or the way Luky55 handles your Personal Data, please contact us through any of the following channels:

• Live Chat: Available 24/7 within your Account dashboard — the fastest and most direct way to reach our support team for privacy-related matters.
• Help Centre: Accessible from the support section of the Platform, where you can raise a formal privacy request or complaint ticket.
• Email: [email protected] (plain text only — not a clickable link; please copy and paste this address into your email client).

Our support team is available in English and Urdu, 24 hours a day, seven days a week. Formal privacy complaints and data rights requests will be acknowledged within five (5) business days and resolved within thirty (30) days wherever possible.