luck213 Privacy Policy

luck213 ("the Company", "we", "us", "our") operates the online gaming platform accessible at luck213.net and any associated mobile applications or digital services (collectively, the "Platform"). luck213 is an internationally licensed gaming operator providing online casino games, sports betting, live dealer games, and related entertainment services primarily to players located in Pakistan, including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and Peshawar.

For the purposes of this Privacy Policy, luck213 acts as the data controller in respect of the personal data of all registered players and visitors to the Platform. This means that luck213 determines the purposes and means of processing your personal data, and bears responsibility for ensuring that such processing is lawful, fair, and transparent.

This Privacy Policy applies to all personal data collected through the luck213 website, mobile applications, customer support channels, and any other touchpoint through which you interact with luck213. It should be read together with the luck213 Terms & Conditions and the Responsible Gaming Policy.

luck213 collects personal data from you in several ways: directly when you provide it during registration or account management, automatically as you use the Platform, and in some cases from third-party sources as part of our regulatory verification obligations. The categories of personal data we collect include:

Registration & Identity Data

• Full legal name as it appears on your CNIC, passport, or driving licence.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Residential address, including city and postal code.
• Email address and mobile phone number.
• Username and encrypted account password.
• National Identity Card (CNIC) number or passport number, collected as part of KYC verification.

Financial Data

• JazzCash or EasyPaisa account number associated with your deposits and withdrawals.
• Bank account details for HBL, UBL, Meezan Bank, or other registered bank transfers.
• Visa/Mastercard details (card number, expiry date, and CVV) processed securely through our PCI-DSS compliant payment processor. Raw card data is never stored on luck213 servers.
• Transaction history including deposits, withdrawals, bonuses, and wager records.
• Source-of-funds documentation provided in response to AML compliance requests.

Gaming & Behavioural Data

• Game session logs, wager history, win/loss records, and betting patterns.
• Responsible gaming tool usage, including deposit limit settings and self-exclusion history.
• Platform preferences and account settings.

Technical & Device Data

• IP address and approximate geolocation derived from it.
• Device type, operating system, browser type and version.
• Session timestamps, login history, and platform interaction logs.
• Cookie identifiers and similar tracking technology data (see Section 6).

Communications Data

• Records of communications between you and the luck213 customer support team, including live chat transcripts and email correspondence.
• Feedback, complaint, or dispute records.

luck213 uses the personal data we collect for the following purposes:

Where luck213 uses your personal data for direct marketing purposes — such as sending you information about promotions, PSL cricket betting offers, or new game launches — we will only do so where you have provided explicit consent, or where we have a legitimate interest in doing so as an existing customer. You may opt out of marketing communications at any time by updating your account notification preferences or by contacting our support team.

luck213 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform our obligations under the contract established when you register a luck213 account — including delivering gaming services, processing payments, and managing your account.
• Legal Obligation: Processing is required to comply with our obligations under applicable gaming licence conditions, anti-money laundering legislation, and other regulatory requirements. This includes KYC verification, AML monitoring, and regulatory reporting.
• Legitimate Interests: Processing is necessary for the legitimate interests of luck213, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, and improving our services. We conduct a balancing test before relying on legitimate interests as a legal basis.
• Consent: Where we rely on your consent — for example, for direct marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing that took place before the withdrawal.

luck213 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. However, we do share personal data with carefully selected third parties in the following limited circumstances:

• Payment Processors: We share financial data with our payment processing partners — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard processing networks — solely to process your deposits and withdrawals. All payment partners are contractually bound to handle your data securely.
• Identity Verification Providers: We may share identity documents with licensed KYC and age-verification service providers to fulfil our regulatory obligations. These providers act as data processors under written data processing agreements.
• Game Software Providers: Our third-party game suppliers may receive limited technical data (such as session identifiers) that is strictly necessary to deliver their games on the luck213 Platform. Game providers do not receive your name, financial data, or contact information.
• Regulatory & Law Enforcement Authorities: luck213 is required to disclose personal data to our licensing authority, financial intelligence units, or law enforcement agencies where mandated by applicable law or by a valid legal order.
• Responsible Gaming Organisations: With your consent, or where required by our responsible gaming obligations, we may share limited data with responsible gaming support organisations or self-exclusion registers.
• IT Infrastructure & Security Providers: Trusted cloud hosting, cybersecurity, and analytics partners may process limited technical data solely to support Platform operations. All such partners are subject to data processing agreements and security requirements.

luck213 uses cookies and similar technologies — including local storage, session storage, and pixel tags — to operate the Platform, remember your preferences, and understand how players use our services. The types of cookies used by luck213 are:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session management cookies that keep you logged in during your luck213 gaming session and security cookies that protect against cross-site request forgery (CSRF).
• Functional Cookies: These cookies remember your preferences, such as your chosen language, display settings, and responsible gaming limit configurations, so you do not need to re-enter them each time you visit.
• Performance & Analytics Cookies: These cookies collect anonymised or pseudonymised information about how players use the Platform — such as which pages are visited most frequently and how long sessions last — to help us improve Platform performance and user experience.
• Marketing Cookies: Where you have given consent, marketing cookies may be used to deliver relevant promotional content about luck213 games, PSL cricket betting, and bonuses. You may withdraw this consent at any time.

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. Instructions for managing cookies are available in your browser's help documentation.

luck213 retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory, legal, or licensing obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Where data must be retained to defend or pursue a legal claim, it may be retained for the duration of that claim plus a reasonable period thereafter.

As a luck213 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team using the details in Section 13.

luck213 will respond to all verified data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your data rights in the vast majority of cases.

luck213 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and luck213 servers.
• AES-256 encryption at rest for all sensitive personal and financial data stored on luck213 systems.
• Strict role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their specific role.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity firms.
• Two-factor authentication (2FA) available to all players and mandatory for all luck213 administrative staff accessing systems containing personal data.
• PCI-DSS compliant payment processing — raw payment card data is processed and tokenised by our certified payment processor and is never stored on luck213 infrastructure.
• A documented data breach response procedure, including notification protocols to notify affected players and relevant authorities within required timeframes in the event of a confirmed breach.

While luck213 takes every reasonable precaution to protect your data, no internet-based system is entirely immune from security threats. Players are strongly encouraged to use a strong, unique password for their luck213 account and to enable two-factor authentication from their account security settings after completing their luck213 login.

The luck213 Platform is strictly intended for adults aged 21 years and over. luck213 does not knowingly collect personal data from any person under the age of 21. If you are under 21 years of age, you must not access or use the Platform, and you must not provide any personal data to luck213.

luck213 employs age verification procedures at the point of registration and at the point of first withdrawal. If we become aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, any balance will be dealt with in accordance with our regulatory obligations, and all associated personal data will be deleted as soon as practicable.

Parents and guardians who believe that their child may have accessed the luck213 Platform or provided personal data to luck213 should contact our support team immediately using the contact details in Section 13. We treat all such reports as high priority.

The luck213 Platform may contain links to third-party websites or services — for example, links to responsible gaming resources or payment provider information pages. This Privacy Policy applies solely to the luck213 Platform and does not govern the privacy practices of any third-party website or service.

luck213 is not responsible for the privacy practices, content, or security of any third-party site. We encourage you to read the privacy policy of any third-party website you visit before providing any personal data to that site.

luck213 reviews this Privacy Policy regularly and may update it from time to time to reflect changes in our data processing activities, regulatory requirements, or best practices. Where changes are material, we will notify registered players via email to their registered address and/or via a prominent notice on the Platform at least seven (7) days prior to the changes taking effect.

The version number and effective date displayed at the top of this document indicate the currently applicable version. Your continued use of the luck213 Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how luck213 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data luck213 holds about you, please contact our Data Protection team. All privacy-related enquiries are handled with strict confidentiality.

If you are not satisfied with luck213's response to a privacy concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction, or with the dispute resolution body designated by our gaming licensing authority. Details of the applicable ADR body are available from our support team upon request.

For responsible gaming support or self-exclusion requests, please visit our Responsible Gaming page or contact our support team directly. All responsible gaming requests are treated as high priority and actioned the same day wherever possible.