Privacy Policy — lacky101 Casino

This Privacy Policy applies to all personal data collected, processed, and stored by lacky101 ("we", "us", "our", or "the Platform") in connection with your use of the lacky101 website at lacky101.net, including all subpages, account features, game products, sportsbook markets, payment facilities, and customer support channels.

By registering an account with lacky101 or by continuing to use the lacky101 website, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent, you must not use the lacky101 platform.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which incorporate additional obligations and rights relevant to your use of lacky101.

lacky101 collects personal data in the following categories. We collect only what is necessary for the specific purpose stated against each category.

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, or genetic data. Health data is collected only in the limited context of responsible gaming self-exclusion requests, and is handled with additional care.

lacky101 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, filling out a support request, or communicating with our team via live chat or email.
• Automated collection: Technical and behavioural data collected automatically as you use the lacky101 website, including through cookies, web beacons, log files, and analytics tools. See Section 9 for full details.
• Third-party sources: Identity verification data obtained from licenced KYC and identity verification service providers; fraud risk signals obtained from payment processors; and publicly available sources used to verify the accuracy of information you have provided to us.
• Payment providers: Transaction confirmation data shared with us by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and blockchain network confirmations for USDT transactions on the TRC-20 network.

lacky101 uses your personal data for the following purposes. We will never use your data for a purpose that is incompatible with the reasons for which it was originally collected without first obtaining your explicit consent.

• Account management: Creating and maintaining your lacky101 player account, authenticating your identity at login, and managing your account settings and preferences.
• Identity and age verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 21 years. This is both a legal obligation and a core part of our responsible gaming commitment.
• Payment processing: Facilitating deposits via JazzCash, EasyPaisa, bank transfer, and USDT; processing approved withdrawals to your verified payment method; and maintaining accurate financial records.
• Anti-money laundering (AML) compliance: Monitoring transactions for unusual patterns, conducting enhanced due diligence where required, and reporting suspicious activity to competent authorities as mandated by our licensing obligations.
• Fraud prevention and security: Detecting and preventing unauthorised account access, bonus abuse, payment fraud, and other prohibited activities that could harm you or the platform.
• Game provision and personalisation: Delivering the lacky101 game catalogue — including cricket betting, live casino, slots, and instant games — and tailoring the platform experience based on your demonstrated preferences and activity.
• Responsible gaming: Monitoring gaming patterns to identify indicators of problem gambling; enforcing deposit limits, cooling-off periods, and self-exclusion orders; and proactively reaching out to players who may need support.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — but only where you have expressly opted in. You can opt out at any time.
• Legal and regulatory compliance: Meeting our obligations under applicable gaming laws, data protection regulations, tax reporting requirements, and court or regulatory orders.

lacky101 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and lacky101 — i.e., to provide the gaming and betting services you have registered to use. Without this processing, we cannot operate your account.
• Legal obligation: Processing required to comply with applicable laws, including KYC identity verification, AML transaction monitoring, age verification, and regulatory reporting.
• Legitimate interests: Processing carried out for lacky101's legitimate business interests, including fraud prevention, platform security, product improvement, and responsible gaming monitoring — provided those interests are not overridden by your fundamental rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — in particular, the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

lacky101 does not sell your personal data. We share personal data only in the following circumstances and only to the extent strictly necessary for the stated purpose:

• Licensed game providers: We share limited account and session data with our licensed game providers to enable you to access their games within the lacky101 platform. These providers are contractually bound to process your data only for the purpose of game provision.
• Payment processors: We share the transaction data required to process your deposits and withdrawals with our payment partners, including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. Crypto transactions on the TRC-20 network are processed on-chain — transaction details are public by nature of the blockchain.
• KYC and identity verification providers: We use licenced third-party identity verification services to process your identity documents during the KYC process. These providers act as data processors under our instruction.
• Fraud prevention and AML services: We may share transaction and behavioural data with fraud prevention platforms and AML screening services to protect the platform and comply with our legal obligations.
• Regulatory authorities and law enforcement: We will disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, and courts where required to do so by law or by a valid legal order.
• Professional advisers: We may share data with our legal advisers, auditors, and insurers on a strictly need-to-know basis and subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of lacky101's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer in advance.

lacky101 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law and our gaming licence conditions. The following general retention periods apply:

Upon expiry of the applicable retention period, your personal data will be securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

lacky101 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or mobile device and our servers is encrypted in transit using the latest TLS standard.
• AES-256 encryption at rest: Sensitive personal data — including identity documents, financial records, and authentication credentials — is encrypted at rest using AES-256.
• Password hashing: Account passwords are never stored in plaintext. We use a strong one-way hashing algorithm with per-user salt to store credentials securely.
• Two-factor authentication (2FA): lacky101 supports optional 2FA for player accounts. We strongly encourage all players — particularly those in Karachi, Lahore, and Islamabad — to enable 2FA for an added layer of account protection.
• Access controls: Internal access to personal data is strictly limited to lacky101 staff who need it to perform their job functions. All staff with data access are subject to background checks and confidentiality obligations.
• Regular security audits: Our platform undergoes regular penetration testing and security assessments conducted by qualified independent security professionals.
• Incident response plan: lacky101 maintains a documented data breach response plan. In the event of a data breach that is likely to result in risk to your rights, you will be notified without undue delay.

lacky101 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to detect fraud, and — where you have consented — to personalise your experience and measure the effectiveness of our marketing.

The following categories of cookies are used on the lacky101 website:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in during your visit, security tokens that protect against CSRF attacks, and load-balancing cookies. These cannot be disabled.
• Functional cookies: Remember your preferences such as your preferred language, display settings, and responsible gaming limits you have set on your account. Disabling these may affect your experience.
• Analytics cookies: Help us understand how players use the lacky101 platform — which pages are visited most, where users drop off, and how performance can be improved. Analytics data is aggregated and anonymised where possible.
• Marketing cookies: Used to show you relevant promotional content and to measure the effectiveness of lacky101 marketing campaigns. Marketing cookies are only set with your explicit consent and can be withdrawn at any time via your browser settings or our cookie preferences panel.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent the lacky101 platform from functioning correctly and you will be unable to log in or place bets.

As a lacky101 player, you have the following rights in relation to the personal data we hold about you. These rights apply regardless of whether you are based in Karachi, Lahore, Islamabad, or anywhere else in Pakistan.