Lucky 93 Privacy Policy – How We Protect Your Data

This Privacy Policy explains how Lucky 93 collects, uses, stores, shares and protects the personal information of its users. It applies to all interactions with the Lucky 93 platform — whether you are visiting the website without an account, registering for the first time, placing a bet or contacting our support team.

Lucky 93 is operated by Lucky 93 Entertainment Ltd. and is designed primarily for users in Pakistan. All transactions are conducted in Pakistani Rupees (PKR), and the platform has been built around the payment infrastructure, identity verification standards and user expectations of the Pakistani market. This policy reflects those realities.

By using Lucky 93 — including merely browsing the website without registering — you acknowledge that you have read this Privacy Policy and understand how your information will be handled. If you disagree with anything in this policy, please do not use the platform. Questions can be directed to support@lucky93.bet at any time.

Lucky 93 collects personal data in three ways: information you provide directly, information generated automatically by your use of the platform and — in limited circumstances — information received from third-party providers such as payment processors and KYC verification services.

• Device Information: Device type, operating system, browser version, screen resolution and device identifiers.
• Usage Data: Pages visited, time spent on each page, games played, bets placed, odds viewed, search queries within the platform.
• Log Data: IP address, login timestamps, session duration, errors encountered during your session.
• Location Data: Approximate geographical location derived from your IP address (not precise GPS location unless you grant permission).
• Cookie Data: See Section 6 for full details of cookies and tracking technologies used at Lucky 93.

Lucky 93 may receive limited personal data from third parties in specific circumstances. KYC verification providers supply identity verification outcomes (pass or fail) and flag data. Payment processors confirm transaction status and payment source ownership. Fraud prevention services supply risk scores and device fingerprint information to help protect your account from unauthorised access.

Lucky 93 uses personal data for specific, clearly defined purposes. We do not use your data for any purpose not described in this policy without first obtaining your explicit consent. The main purposes for which Lucky 93 uses personal data are:

• Account Management: Creating and maintaining your Lucky 93 account, processing login requests, managing account security and handling password resets.
• Identity Verification (KYC): Verifying your identity and age in compliance with anti-money laundering and responsible gaming obligations before processing withdrawals above prescribed thresholds.
• Payment Processing: Facilitating PKR deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payments.
• Bet Settlement: Recording, settling and paying out bets across all Lucky 93 sportsbook and casino products.
• Customer Support: Responding to account queries, payment disputes, technical issues and complaints submitted through live chat or email.
• Fraud Prevention: Detecting and preventing unauthorised account access, duplicate accounts, bonus abuse, money laundering and other prohibited activity.
• Responsible Gaming: Monitoring betting patterns that may indicate problem gambling behaviour and enforcing self-exclusion requests and account limits.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the Lucky 93 betting interface, game selection and overall user experience.
• Legal Compliance: Meeting obligations under applicable anti-money laundering regulations, tax requirements and other legal obligations.
• Marketing (with consent): Sending promotional emails, SMS messages and in-app notifications about Lucky 93 offers and new products — only where you have opted in.

Lucky 93 processes your personal data on one of the following legal grounds, depending on the purpose of the processing:

• Contract Performance: Processing your deposits, withdrawals, bets and account administration is necessary to fulfil Lucky 93's contractual obligations to you as a registered user.
• Legal Obligation: Identity verification, transaction record keeping and anti-money laundering checks are required by law. Lucky 93 must process this data regardless of your preferences.
• Legitimate Interest: Fraud detection, platform security, abuse prevention and aggregated analytics are processed on the basis of Lucky 93's legitimate interest in operating a safe, fair and sustainable platform.
• Consent: Marketing communications — including promotional emails, SMS offers and push notifications — are sent only where you have given explicit, opt-in consent. You can withdraw this consent at any time.

Lucky 93 does not sell, rent or trade your personal data. We share data only in the specific circumstances described below, and only to the extent necessary for the purpose stated.

To process your PKR deposits and withdrawals, Lucky 93 shares relevant payment data with licensed payment processors including the operators of Easypaisa, JazzCash, NayaPay and SadaPay integrations, IBFT banking networks and card processing providers. These processors are bound by their own strict data protection obligations and may only use your data for payment execution.

Lucky 93 uses third-party identity verification services to complete KYC checks. Your submitted identity documents and biometric data (where applicable) are shared with these providers solely for the purpose of verifying your identity. These providers are contractually prohibited from using your data for any other purpose.

Lucky 93 uses specialist fraud prevention and device fingerprinting services to protect user accounts and detect prohibited activity. Limited technical data — including device identifiers, IP addresses and behavioural patterns — may be shared with these services. No personally identifiable information is shared beyond what is strictly necessary for the fraud detection function.

Lucky 93 will disclose personal data to regulatory bodies, law enforcement agencies or courts where required to do so by applicable law. Lucky 93 will always attempt to notify affected users of such disclosure unless prohibited from doing so by a legal order.

Lucky 93 uses cookies and similar tracking technologies to operate the platform, remember your preferences and understand how users interact with the site. Cookies are small text files stored on your device by your browser. You can control cookies through your browser settings, but disabling certain cookies may impair Lucky 93 functionality.

• Essential Cookies: Required for core platform functions — login sessions, bet slip management, deposit flows. These cannot be disabled without breaking the platform.
• Performance Cookies: Collect anonymised data about how users navigate Lucky 93 pages. Used to identify slow pages, common error points and improvement opportunities.
• Functionality Cookies: Remember your preferences such as language, display settings and notification preferences between sessions.
• Security Cookies: Help detect suspicious login attempts, device changes and other potential account security threats.
• Analytics Cookies: Lucky 93 uses web analytics tools to understand aggregate user behaviour. Data collected through analytics cookies is anonymised and is never linked back to individual user accounts.

Lucky 93 does not use advertising tracking cookies or any technology designed to track you across third-party websites for retargeting purposes. The only tracking that occurs is within the lucky93.bet domain and mobile application.

Lucky 93 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by law. The following general retention periods apply:

• Active Account Data: Retained for the lifetime of your Lucky 93 account plus a minimum of five years after account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later. After this period, documents are permanently deleted from our systems.
• Transaction Records: All deposit, withdrawal and bet records are retained for a minimum of seven years for financial compliance purposes.
• Support Correspondence: Chat logs and email records are retained for 24 months from the date of the interaction, after which they are deleted unless subject to an ongoing dispute or investigation.
• Marketing Consent Records: Consent records are retained indefinitely to evidence that you gave consent, even after you withdraw it. The actual marketing data — your contact details — is removed from active marketing lists immediately upon withdrawal of consent.
• Anonymised Analytics Data: Anonymised usage data with no link to individual identities may be retained indefinitely for platform improvement purposes.

Lucky 93 respects your rights over your personal data. The following rights apply to all registered users. To exercise any of these rights, contact us at support@lucky93.bet with the subject line "Data Rights Request".

Lucky 93 takes data security seriously and has implemented a range of technical and organisational measures to protect your personal information against unauthorised access, loss, destruction or disclosure.

• TLS/SSL Encryption: All data in transit between your device and Lucky 93 servers is encrypted using current-generation TLS protocols. The Lucky 93 site operates exclusively over HTTPS.
• Encrypted Storage: Sensitive data at rest — including identity documents, payment identifiers and KYC records — is encrypted using AES-256 or equivalent encryption standards.
• Access Controls: Lucky 93 employee access to personal data is strictly limited on a need-to-know basis. All internal data access is logged and audited regularly.
• Two-Factor Authentication: Lucky 93 offers two-factor authentication (2FA) for user accounts and requires it for privileged internal administrative access.
• Penetration Testing: Lucky 93 undergoes regular third-party security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.
• Incident Response: Lucky 93 maintains a documented incident response plan. In the event of a security breach that poses risk to user data, affected users will be notified within 72 hours of Lucky 93 becoming aware of the incident.

While Lucky 93 takes every reasonable precaution, no online platform can guarantee absolute security. You also have a role to play — use a strong, unique password for your Lucky 93 account, enable 2FA, and contact us immediately at support@lucky93.bet if you suspect any unauthorised access to your account.

Lucky 93 is strictly an adults-only platform. No person under the age of 18 may register an account or use any Lucky 93 service. Lucky 93 does not knowingly collect personal data from minors. If we discover that an account has been registered by a person under 18, that account is closed immediately, all deposits are returned to the source payment method and all collected data is deleted.

If you are a parent or guardian and believe your child has created a Lucky 93 account, please contact us immediately at support@lucky93.bet. We will investigate promptly and take all necessary action. Lucky 93 strongly encourages parents to use parental control software to prevent minors from accessing online gambling platforms.

Lucky 93 sends promotional and marketing communications — including offers, bonus announcements, tournament alerts and new product information — only to users who have explicitly opted in to receive them. Marketing opt-in is a separate, voluntary choice from account registration; you can create and use a Lucky 93 account without ever consenting to receive marketing.

Marketing channels used by Lucky 93 include email, SMS to your registered Pakistani mobile number and in-app push notifications (where you have enabled these on your device). Lucky 93 does not use third-party advertising networks to deliver targeted ads based on your personal data.

To unsubscribe from any marketing channel, use the unsubscribe link in any Lucky 93 email, reply STOP to any SMS, turn off push notifications in your device settings or contact support@lucky93.bet. Unsubscribe requests are processed within 48 hours. Please note that unsubscribing from marketing will not affect transactional communications such as deposit confirmations, withdrawal notifications and account security alerts — these are sent as a necessary part of running your account.

Lucky 93 may update this Privacy Policy from time to time to reflect changes in our data practices, new product features, legal requirements or other operational changes. When material changes are made, we will notify registered users via the email address on their account at least 7 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.

For minor or non-material changes — such as clarifications of existing language or corrections of typographical errors — we may update the policy without sending a direct notification. We recommend bookmarking this page and checking it periodically. Continued use of Lucky 93 after the effective date of any update constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy, want to exercise a data right, have a concern about how Lucky 93 has handled your personal data or want to make a complaint, please contact us using the details below. Our data protection team reviews all privacy-related enquiries with full confidentiality.

• Email: support@lucky93.bet — use the subject line "Privacy Policy Enquiry" or "Data Rights Request" for fastest routing
• Live Chat: Available from within your Lucky 93 account 24 hours a day, 7 days a week
• Response Time: Lucky 93 aims to acknowledge all privacy enquiries within 24 hours and resolve them within 30 days

Lucky 93 takes all data privacy complaints seriously. If you are not satisfied with our response to a complaint, you may have the right to escalate the matter to a relevant data protection authority in your jurisdiction. Lucky 93 will co-operate fully with any such authority and will not penalise users for exercising this right.