Lucky 103 Privacy Policy – Protecting the Data of Every Pakistani Player

1Who We Are

Lucky 103 operates the online gaming platform accessible at https://lucky103.app. When this Privacy Policy refers to "Lucky 103", "we", "us" or "our", it refers to the operator of the Lucky 103 platform. Lucky 103 is the data controller in relation to the personal data of registered players and website visitors based in Pakistan.

This Privacy Policy applies to all personal data collected and processed in connection with your use of the Lucky 103 website, its games, payment processing, customer support interactions, marketing communications, and any other service offered under the Lucky 103 brand. It should be read alongside our Terms and Conditions, which govern the contractual relationship between you and Lucky 103.

If you have any questions about how Lucky 103 handles your personal data, the first step is always to contact us directly at support@lucky103.app. Our team in Pakistan is available 24/7 and will respond to data-related queries with priority.

2Information We Collect

Lucky 103 collects personal data through several channels — directly from you when you register and use the platform, automatically as you browse the website, and in some cases from third-party verification providers. Here is a clear breakdown of the categories of data we collect:

Lucky 103 does not collect special category data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data beyond what is strictly required for age and identity verification purposes. We do not collect payment card numbers directly — card transactions are processed by certified payment processors who handle card data under their own PCI-DSS compliant systems.

3How We Use Your Data

Lucky 103 uses the personal data it holds for specific, legitimate purposes. We do not use data for purposes that are incompatible with the reason it was originally collected. Here is a clear account of why we process each type of data:

• Account management: Your identity and contact data is used to create and maintain your Lucky 103 account, authenticate your logins, and communicate important account information such as transaction confirmations, security alerts, and policy updates.
• Processing transactions in PKR: Your financial data and identity data are used to process deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa, and Mastercard, and to process withdrawal requests to your verified payment method.
• Identity verification (KYC): We are required to verify the identity of all players before processing withdrawals. KYC documents are used solely for this purpose and are not shared beyond the verification process.
• Fraud prevention and security: Technical data and usage data are monitored to detect account hacking attempts, bonus abuse, multi-accounting, money laundering patterns, and other prohibited conduct as defined in our Terms and Conditions.
• Responsible gaming: Usage data including session lengths, bet sizes, frequency of play, and deposit patterns is monitored to identify players who may be showing signs of problem gambling. Lucky 103 uses this information to trigger responsible gaming interventions where appropriate.
• Customer support: Communications data is used to resolve your queries and complaints, and to train our support team to provide a better service to all Lucky 103 players.
• Marketing communications: With your consent, we use your contact data to send you information about Lucky 103 promotions, bonus offers, new game launches, and VIP Club updates. You can withdraw this consent at any time through your account settings or by contacting support.
• Platform improvement: Aggregated, anonymised usage data is used to understand how players use the Lucky 103 platform and to improve navigation, game selection, and overall user experience.
• Legal compliance: Lucky 103 is required to maintain certain records and share certain data with regulators and law enforcement agencies where mandated by applicable law.

4Legal Basis for Processing

Lucky 103 processes personal data only where there is a valid legal basis for doing so. The applicable legal bases for our data processing activities are:

• Contract performance: Processing necessary to fulfil the contract between you and Lucky 103 — including operating your account, processing your PKR deposits and withdrawals, and providing access to games. Without this processing, Lucky 103 cannot operate your account.
• Legal obligation: Processing required to comply with applicable laws — including anti-money laundering regulations, identity verification requirements, and tax reporting obligations. Lucky 103 cannot waive these obligations.
• Legitimate interests: Processing necessary for Lucky 103's legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, and improving the service — provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. Where consent is the basis, you have the right to withdraw it at any time without affecting any processing already carried out before the withdrawal.

5Who We Share Your Data With

Lucky 103 does not sell your personal data to any third party under any circumstances. We share data only in the following limited and controlled circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card processing partners receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data security standards.
• Identity verification providers: KYC service providers receive your CNIC data, document scans, and selfie images solely for the purpose of verifying your identity as required before your first withdrawal. Document data is not retained by these providers beyond the verification process.
• Game software providers: Game providers that supply games to the Lucky 103 lobby receive anonymised session data (such as bet size and game result) in order to generate game statistics and verify RNG certification. They do not receive your personal identity or contact data.
• Fraud detection services: Technical data including IP addresses and device fingerprints may be shared with fraud prevention tools to identify known fraud patterns and protect the integrity of the Lucky 103 platform.
• Regulatory and law enforcement authorities: Lucky 103 will share data with government authorities, regulators, or law enforcement agencies where required to do so by law, court order, or regulatory direction. We will notify you of such disclosure unless legally prohibited from doing so.
• Business successors: If Lucky 103 is involved in a merger, acquisition, or asset sale, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified in advance of such a transfer.

6Cookies & Tracking Technologies

The Lucky 103 website uses cookies and similar tracking technologies to make the platform work properly and to understand how it is being used. A cookie is a small text file placed on your device when you visit a website. Cookies allow the website to remember information about your visit — such as your logged-in state, your preferred language, and your session details.

Lucky 103 uses the following categories of cookies:

• Strictly necessary cookies: These are required for the Lucky 103 platform to function. They maintain your login session, store your PKR balance display preferences, and enable core functionality such as the game lobby and the deposit flow. These cookies cannot be disabled without breaking the platform.
• Functional cookies: These remember choices you make — such as your preferred deposit method or your notification preferences — so you don't have to set them again on every visit.
• Analytics cookies: These collect anonymised information about how visitors use the Lucky 103 platform — which pages are visited most, where players navigate after landing on a page, and how long sessions last. This data helps us improve the platform.
• Security cookies: These help Lucky 103 detect and prevent fraudulent login attempts and unusual account activity by identifying session patterns associated with known attack vectors.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect the functionality of the Lucky 103 platform and may prevent you from logging in or placing bets. Analytics and functional cookies can be disabled without affecting the core platform experience.

7Data Retention

Lucky 103 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of 5 years after account closure. This retention period is required to satisfy anti-money laundering record-keeping obligations and to enable resolution of any late-arising dispute or legal claim.
• KYC documents (CNIC scans, proof of address): Retained for the duration of your active account plus 5 years after closure. This aligns with regulatory requirements for identity record-keeping in licensed gaming operations.
• Customer support communications: Retained for 2 years from the date of the interaction. Support logs may be accessed if a dispute arises relating to the subject of a previous communication.
• Marketing preference records: Retained for as long as you maintain an active Lucky 103 account, plus 1 year after closure, to demonstrate consent history if required.
• Analytics and usage data: Anonymised usage data may be retained indefinitely for the purpose of platform analysis and improvement, as it is no longer personally identifiable at the point of anonymisation.

When data is no longer required and the applicable retention period has expired, Lucky 103 deletes or anonymises it in a secure manner. Data that is anonymised (rendered incapable of identifying you) may be retained for statistical and analytical purposes without limit, as it no longer constitutes personal data.

8Data Security

Lucky 103 takes the security of your personal data seriously. The platform implements the following technical and organisational measures to protect data against unauthorised access, loss, destruction, or disclosure:

• TLS/SSL encryption: All data transmitted between your device and the Lucky 103 servers is encrypted using industry-standard Transport Layer Security. The padlock icon in your browser confirms an active TLS connection whenever you are on the Lucky 103 platform.
• Encrypted data storage: Sensitive personal data including passwords (stored as one-way hashes), payment method references, and KYC documents are stored in encrypted form. Plain-text storage of sensitive data is not permitted under Lucky 103's internal security standards.
• Access controls: Access to personal data within Lucky 103's systems is restricted to staff members who require it to perform their specific job function. All staff access is logged, audited, and subject to periodic review.
• Two-factor authentication: All Lucky 103 staff accounts with access to player data are required to use two-factor authentication. Players are strongly encouraged to enable 2FA on their own accounts through the account security settings.
• Regular security testing: Lucky 103 conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: Lucky 103 maintains a documented data breach response procedure. In the event of a breach that poses a risk to player data, affected players will be notified within 72 hours of Lucky 103 becoming aware of the breach.

9Your Rights Over Your Data

As a Lucky 103 player, you have a number of rights in relation to the personal data we hold about you. These rights are set out below along with how to exercise each one: