1. Introduction
This Privacy Policy explains how LuckyWin ("LuckyWin", "we", "us", "our") collects, uses, stores, and protects the personal information of players who register and use the LuckyWin platform at luckywin-app.net. It also explains what rights you have over your data and how to exercise those rights.
By creating a LuckyWin account or using any part of our platform, you confirm that you have read and understood this Privacy Policy. This policy should be read alongside our Terms and Conditions and Responsible Gaming Policy.
LuckyWin takes data privacy seriously. We collect only what is necessary, use it only for the purposes described below, and never monetise your personal data by selling it to third parties. If you have questions about this policy at any point, our support team is reachable 24/7 at support@luckywin-app.net.
2. Who We Are — The Data Controller
LuckyWin is the operator of the gaming platform accessible at luckywin-app.net. For the purposes of this Privacy Policy, LuckyWin acts as the data controller — meaning we determine the purposes and means of processing your personal data.
Any personal data you provide during registration, during the course of using LuckyWin, or in communications with our support team is received and processed by LuckyWin in accordance with this policy. Our primary contact for all data-related queries is support@luckywin-app.net.
LuckyWin serves Pakistani players across the country, handling their data with care, security, and full transparency.
3. Personal Data We Collect
LuckyWin collects personal data in three ways: information you provide directly, information generated by your use of the platform, and information received from third-party services such as payment providers.
3.1 Information You Provide Directly
- Registration data: Full legal name, date of birth, Pakistani mobile number, and email address (if provided).
- Identity verification (KYC) data: CNIC number, passport number, and copies of identity documents submitted to verify your identity before first withdrawal.
- Payment information: Your Easypaisa, JazzCash, NayaPay, SadaPay, or bank account details as registered with LuckyWin for deposit and withdrawal purposes. Card details are entered directly with the payment processor and are not stored by LuckyWin.
- Support communications: Any information you include in messages to LuckyWin customer support, including game queries, account issues, or responsible gaming requests.
- Voluntary survey or feedback responses: Where LuckyWin runs satisfaction surveys or feedback requests, responses are stored if you choose to provide them.
3.2 Information Generated by Your Use of LuckyWin
- Device and technical data: IP address, browser type and version, operating system, device type, and screen resolution. This is collected automatically when you access LuckyWin.
- Session and usage data: Pages visited, games played, session duration, login timestamps, and navigation patterns within the platform.
- Transaction data: A full record of all deposits, withdrawals, bets placed, game outcomes, and balance changes associated with your account.
- Game log data: Individual game round data including bet amount, game result, and round reference numbers. These records are retained for dispute resolution and audit purposes.
3.3 Information From Third-Party Services
- Payment providers: Confirmation of transaction status, payment method type, and basic account holder details sufficient to verify ownership of the payment method.
- Fraud prevention services: Risk signals generated by industry fraud detection partners based on device fingerprinting and behavioural patterns.
| Data Category | Examples | Purpose |
|---|---|---|
| Identity | Name, DOB, CNIC | Account setup, KYC verification |
| Contact | Mobile number, email | Account access, notifications |
| Financial | Payment method reference, transaction history | Deposits, withdrawals, audit |
| Technical | IP address, device type, browser | Security, fraud prevention |
| Behavioural | Games played, session time, bet history | VIP tracking, responsible gaming, dispute resolution |
| Communications | Support chat history | Issue resolution, quality review |
4. How LuckyWin Uses Your Personal Data
LuckyWin uses the personal data we collect for specific, clearly defined purposes. We do not use your data for any purpose not listed here without first obtaining your consent or updating this policy.
- Account management: Creating and maintaining your LuckyWin account, verifying your identity, and managing login and access security.
- Processing transactions: Handling deposits, withdrawals, and all financial transactions associated with your account, including record-keeping required for audit and legal compliance.
- Game delivery: Providing access to LuckyWin's game library, processing game outcomes, and maintaining the accuracy of your balance and game history.
- VIP Club management: Tracking your wagering points, determining tier eligibility, calculating weekly cashback, and administering VIP-specific benefits such as personalised bonuses and exclusive tournament access.
- Fraud prevention and security: Detecting and preventing unauthorised account access, bonus abuse, money laundering, and other fraudulent or prohibited activities on the platform.
- Customer support: Responding to your queries, resolving disputes, and managing responsible gaming requests including deposit limit changes and self-exclusion applications.
- Legal compliance: Meeting the legal and regulatory obligations applicable to LuckyWin as an online gaming operator, including anti-money laundering (AML) record-keeping.
- Platform improvement: Analysing aggregated and anonymised usage data to improve the LuckyWin platform, optimise game performance, and develop new features.
- Marketing communications (opt-in only): Sending promotional emails, bonus notifications, and relevant platform updates to players who have opted in to receive marketing communications. You can withdraw consent at any time via account settings.
LuckyWin uses player data to deliver personalised rewards and a smoother gaming experience — never for profiling or resale.
5. Legal Basis for Processing Your Data
LuckyWin processes your personal data on the following legal grounds depending on the type of data and the purpose:
- Contractual necessity: Processing your registration data, identity information, transaction records, and game data is necessary to provide the LuckyWin service you have agreed to use under the Terms and Conditions.
- Legal obligation: Identity verification (KYC), anti-money laundering record-keeping, and cooperation with regulatory inquiries are required by applicable law and cannot be avoided or opted out of.
- Legitimate interests: Fraud prevention, platform security, and anonymised analytics for product improvement are processed on the basis of LuckyWin's legitimate business interests, balanced against your rights and expectations as a player.
- Consent: Marketing communications are sent only on the basis of your active opt-in consent. You can withdraw this consent at any time without affecting your account or access to LuckyWin.
6. Who LuckyWin Shares Your Data With
LuckyWin does not sell, trade, or rent your personal data to any third party for commercial or marketing purposes. Data is shared with third parties only where necessary for the legitimate operation of the platform, for legal compliance, or with your explicit consent.
The categories of third parties who may receive your personal data, and the reason, are as follows:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processors, and card payment gateways receive the minimum data necessary to process your deposit or withdrawal. Each operates under its own privacy and security standards.
- Identity verification providers: Specialist KYC services that assist LuckyWin in verifying your identity against your submitted CNIC or passport. These providers are bound by strict data handling agreements.
- Fraud prevention and security partners: Services that help LuckyWin detect suspicious account activity, prevent bonus abuse, and identify potential money laundering risk signals.
- Cloud infrastructure providers: LuckyWin operates on secure cloud infrastructure. The infrastructure provider hosts LuckyWin's data but does not access or process it for their own purposes.
- Legal and regulatory authorities: Where required by law, LuckyWin will share account and transaction data with relevant authorities — for example, in response to a court order, AML investigation, or regulatory audit.
LuckyWin requires all third-party service providers to process your personal data only for the specific purpose for which it was shared and in accordance with applicable data protection standards. They are not permitted to use your data for their own marketing or commercial purposes.
7. Cookies and Tracking Technologies
LuckyWin uses cookies and similar tracking technologies to operate the platform, maintain your login session, and understand how players interact with the platform. A cookie is a small text file stored on your device by your browser when you access a website.
LuckyWin uses the following categories of cookies:
- Strictly necessary cookies: These are required for the platform to function. They manage your login session, maintain your account state during a game session, and handle security tokens. These cannot be disabled without preventing LuckyWin from working correctly.
- Functional cookies: These remember your preferences such as language selection and display settings so you do not need to reconfigure them on each visit.
- Analytics cookies: LuckyWin uses anonymised analytics to understand aggregate usage patterns — which game categories are most popular, where players encounter difficulties, and how platform navigation can be improved. Individual player data is not used for this analysis.
- Security cookies: Used to detect and prevent fraudulent access attempts, including cross-site request forgery (CSRF) protection tokens.
You can manage cookie preferences from your browser settings. Blocking strictly necessary cookies will impair your ability to use LuckyWin. Blocking analytics or functional cookies has no effect on your ability to play games or make transactions.
Every transaction and session on LuckyWin is secured by encryption and monitored for fraud — your privacy is protected at every step.
8. How LuckyWin Secures Your Personal Data
LuckyWin implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or disclosure. These measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and LuckyWin servers.
- Encrypted data storage for all sensitive personal and financial data at rest.
- Access controls that restrict employee access to personal data on a strict need-to-know basis. No LuckyWin employee can access your full payment details.
- Two-factor authentication (2FA) available to all players and required for large withdrawal requests.
- Continuous security monitoring including anomaly detection on account activity, login attempts, and transaction patterns.
- Regular security reviews of infrastructure, code, and data handling practices conducted by LuckyWin's internal and external security teams.
Despite these measures, no internet transmission is 100% secure. If you suspect unauthorised access to your LuckyWin account, please contact support immediately at support@luckywin-app.net and change your password from a secure device.
9. How Long We Keep Your Data
LuckyWin retains personal data for as long as it is needed to fulfil the purpose for which it was collected and to meet our legal obligations. The general retention periods that apply to different categories of data are as follows:
- Active account data: Retained for the lifetime of your account plus a post-closure period of five years to meet AML and audit requirements.
- KYC documents: Retained for a minimum of five years from the date of submission, in line with standard financial compliance requirements.
- Transaction records: Retained for five years from the date of the transaction for financial audit and legal compliance purposes.
- Game log data: Individual round data is retained for two years. After that period, game records are retained in anonymised aggregate form only.
- Support communications: Retained for three years to support dispute resolution and quality review, then deleted.
- Marketing consent records: Retained until you withdraw consent, plus one year after withdrawal for compliance documentation.
When personal data is no longer required, LuckyWin will either securely delete it or anonymise it so it can no longer be linked to an individual player.
10. Your Data Rights as a LuckyWin Player
As a player on LuckyWin, you have rights over your personal data. These are not difficult to exercise — simply contact support@luckywin-app.net with your request and we will respond within a reasonable timeframe, typically within 14 business days.
Right of Access
Request a copy of all personal data LuckyWin holds about you, including what data categories, how they are used, and who they have been shared with.
Right to Rectification
Request correction of any personal data LuckyWin holds about you that is inaccurate or incomplete. Account name and mobile number corrections require identity verification.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected. Note: some data must be retained for legal compliance and cannot be deleted on request.
Right to Restriction
Request that LuckyWin restrict processing of your data while a data accuracy complaint or objection is being reviewed.
Right to Portability
Request your personal data in a machine-readable format (CSV or JSON) so you can transfer it to another service if you wish.
Right to Object
Object to processing of your data for marketing purposes at any time. You can also object to processing based on legitimate interests where you believe your rights override them.
To exercise any of these rights, email support@luckywin-app.net with "Data Rights Request" in the subject line and a description of your request. We may need to verify your identity before processing the request. LuckyWin will not charge a fee for standard requests.
11. Children's Privacy
LuckyWin is strictly an 18+ platform. We do not knowingly collect, store, or process personal data from individuals under 18 years of age. If you are under 18, you must not register on LuckyWin or attempt to use any part of the platform.
If LuckyWin discovers that an account has been created by someone under 18, the account will be closed immediately, all activity will be voided, and any deposited funds will be returned to the original payment source after identity verification. The personal data associated with the underage account will be deleted as soon as legally permissible.
If you are a parent or guardian and believe that your child has registered on LuckyWin, please contact support@luckywin-app.net immediately with details of the account so we can act quickly.
12. Updates to This Privacy Policy
LuckyWin may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements to how we explain our data practices. The "Last updated" date at the top of this page shows when the policy was most recently revised.
Where changes are material — meaning they significantly affect how your data is collected or used — LuckyWin will notify registered players by email and/or account notification at least 7 days before the changes take effect. For minor or administrative changes, the updated policy will be posted on this page without separate notification.
Continued use of LuckyWin after an updated policy takes effect constitutes your acceptance of the revised terms. If you disagree with any update, you should stop using LuckyWin and may request closure of your account by contacting support.
13. Contact LuckyWin About Privacy
For any questions, requests, or concerns about this Privacy Policy or how LuckyWin handles your personal data, please reach out through the following channels. Our team is available 24/7 and will treat all privacy-related queries as a priority.