At Luck98, we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, who we may share it with, and what rights you have over your own information. Please read this document carefully alongside our Terms & Conditions.
A plain-English summary of your most important privacy rights and our data-handling principles. The full legal text is in the sections below.
This Privacy Policy ("Policy") sets out how Luck98 ("Company", "Platform", "we", "us", "our"), operating the website at https://luck98.cam, collects, uses, stores, discloses, transfers, and protects personal data belonging to registered users, visitors, and any other individuals who interact with the Platform ("User", "you", "your").
Luck98 is an online gaming information and entertainment platform providing access to sports betting, online casino games, live dealer tables, slots, esports markets, and related educational content. The Platform is designed to serve users in Pakistan and other markets where access is legally permitted. We are committed to handling your personal data with care, transparency, and in accordance with applicable data protection principles.
By registering an account, making a deposit, or otherwise using the Luck98 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any aspect of this Policy, you should not use the Platform.
Any information that identifies or can reasonably identify a living individual, directly or indirectly. This includes name, CNIC number, email address, mobile number, IP address, device identifiers, and financial account details.
Any operation performed on personal data, including collection, recording, storage, alteration, retrieval, use, disclosure, erasure, or destruction, whether automated or manual.
The entity that determines the purposes and means of processing personal data. Luck98 acts as the Data Controller in respect of the personal data collected through the Platform.
A third party that processes personal data on behalf of the Data Controller, subject to the Controller's instructions and applicable data processing agreements.
A freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their personal data for a stated purpose. Where consent is required, it may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Documentation collected as part of the Know Your Customer verification process, including government-issued identity documents (CNIC, passport), proof of address, and biometric/liveness verification data.
Luck98 collects personal data across the following categories:
| Category | Examples of Data Collected | Purpose |
|---|---|---|
| Registration Data | Full name, date of birth, email, mobile number, city of residence | Account creation, identity linkage |
| Identity / KYC Data | CNIC (both sides), passport, selfie/liveness check, proof of address | Age & identity verification, AML compliance |
| Financial Data | Deposit/withdrawal history, payment method references, transaction amounts in PKR or other currency | Transaction processing, AML monitoring |
| Gaming Activity Data | Game history, bet amounts, win/loss records, sports markets accessed, session durations | Service delivery, responsible gambling monitoring |
| Technical Data | IP address, device type, operating system, browser, geolocation (country/region level) | Security, fraud prevention, geo-restriction enforcement |
| Communications Data | Support chat logs, emails, feedback submissions, complaint records | Customer service, dispute resolution |
| Marketing Preferences | Opt-in/opt-out status, communication channel preferences, promotional interaction history | Marketing communications where consented |
We collect only the data that is necessary for the stated purposes. We do not collect sensitive categories of personal data (such as health or religious information) unless specifically required for responsible gambling assessments, and only with your knowledge.
Luck98 collects personal data through the following channels:
When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, respond to surveys, or interact with promotional offers.
Through cookies, web beacons, server logs, and similar tracking technologies when you browse or use the Platform. This includes IP addresses, device identifiers, session data, and clickstream analytics.
From identity verification providers (for KYC purposes), payment processors, fraud prevention services, and analytics partners — all operating under binding data processing agreements with Luck98. We do not purchase personal data from data brokers.
Luck98 processes your personal data under one or more of the following lawful bases:
Luck98 uses your personal data strictly for the purposes described at the time of collection. Primary uses include:
Luck98 does not sell your personal data. We may share your data with the following categories of recipients, subject to binding confidentiality and data processing agreements:
Third-party vendors engaged by Luck98 to provide specific services — including cloud hosting, identity verification (KYC) providers, payment gateway operators, fraud detection services, customer support platforms, and email delivery services. These processors act only on Luck98's instructions and may not use your data for their own purposes.
Where required by applicable law, court order, or regulatory direction, Luck98 may disclose personal data to governmental, regulatory, or law enforcement authorities. This includes AML reporting obligations where legally mandated. We will notify you of such disclosures where we are legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or part of Luck98's business, personal data may be transferred to the successor entity, subject to equivalent privacy protections. Users will be notified of material changes to data controllership.
Where a Player has enrolled in a self-exclusion programme or has been referred to an external responsible gambling resource, limited data (such as account exclusion status) may be shared with accredited self-exclusion scheme operators where applicable and lawfully permitted.
Luck98 processes financial transaction data — including deposit amounts in PKR, withdrawal requests, and transaction reference numbers — for the purpose of account management, AML monitoring, and payment reconciliation.
Luck98 does not store full debit card or credit card numbers on its own servers. Card data, where applicable, is handled by PCI-DSS compliant payment gateway processors operating under separate security standards.
References to familiar Pakistani payment methods — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah, and cryptocurrency wallets — are for educational context only. Transaction data shared with these payment providers is limited to what is operationally required to process the specific transaction you have initiated. These providers do not receive your gaming history, bonus balances, or other Platform-specific account data.
Luck98 uses cookies and similar tracking technologies to operate the Platform effectively and improve your experience. The following categories of cookies are used:
Essential for the Platform to function. These include session management cookies that keep you logged in during your visit, security tokens, and load-balancing cookies. These cannot be disabled without affecting core Platform functionality.
Store your preferences such as language settings, display preferences, and previously visited game categories. These cookies improve usability but are not essential to the service.
Collect anonymised or aggregated data about how users navigate the Platform — page views, session duration, feature usage, and error tracking. This data is used to improve Platform performance. Analytics data does not personally identify you.
Used only where you have provided explicit consent. These cookies may track interactions with promotional content to help us understand the effectiveness of campaigns and avoid showing you the same offers repeatedly. You may opt out via your account preferences.
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit Platform functionality. Where applicable, a cookie consent mechanism will be presented on first visit.
Luck98 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles:
Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised. Where deletion is not immediately technically feasible (e.g., backup systems), data will be isolated from active processing until deletion can be completed.
Luck98 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:
Luck98 may transfer your personal data to countries or territories outside your country of residence, including to countries that may not provide the same level of data protection as your home country. Such transfers occur for the following reasons:
Where personal data is transferred internationally, Luck98 applies appropriate safeguards to ensure your data receives a comparable level of protection, including through contractual data transfer agreements with recipients. Where you have questions about specific international transfer arrangements, please contact us using the details in Section 17.
The Luck98 Platform is strictly for adults aged 18 years or above, or the higher minimum age required by the applicable operator licence jurisdiction. Luck98 does not knowingly collect personal data from individuals under the age of 18.
As part of the KYC verification process, all users are required to confirm their date of birth and submit age-verifying identity documentation (CNIC or passport). Accounts where age verification cannot be completed are suspended pending documentation submission.
If Luck98 becomes aware that personal data has been collected from a person under the minimum age requirement, that data will be deleted promptly and the associated account will be permanently closed. If you are a parent or guardian and believe your minor child has accessed Luck98, please contact us immediately at [email protected] (email — not a clickable link).
Subject to applicable law, you have the following rights in relation to your personal data held by Luck98. To exercise any of these rights, please contact us as described in Section 17.
We will respond to data rights requests within a reasonable timeframe. We may request identity verification before processing a data rights request to ensure we are fulfilling the request for the correct individual.
Luck98 will only send you direct marketing communications — including promotional emails, SMS notifications, and bonus offer alerts — if you have provided explicit opt-in consent at the time of registration or subsequently through your account settings.
Marketing consent is entirely voluntary and separate from your agreement to the Terms & Conditions. You may withdraw marketing consent at any time by:
Withdrawing marketing consent will not affect your ability to use the Platform, and will not prevent us from sending you essential service communications — such as account security alerts, KYC request notices, withdrawal confirmation emails, and this-Policy-required communications.
Luck98 reserves the right to update or amend this Privacy Policy at any time. The "Last Reviewed" date at the top of this page reflects the most recent review cycle. Where amendments are material — for example, a change in the categories of data we collect, a new third-party sharing arrangement, or a change in data retention periods — we will provide reasonable prior notice to registered users via email or a prominent Platform notice before the amendments take effect.
Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of and agreement to the amended terms. If you do not agree to the updated Policy, you should cease use of the Platform and may request account closure in accordance with our Terms & Conditions.
For any enquiries, requests, or complaints relating to this Privacy Policy or the processing of your personal data, please contact Luck98 using the following details:
Email: [email protected] (plain text only — not a clickable link)
Subject line: "Privacy Enquiry — [Your Account Username]"
Response time: We aim to acknowledge all privacy-related requests within 5 business days.
To exercise your rights under Section 14 (access, rectification, erasure, portability, restriction, or objection), please email [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request.
This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy. For frequently asked questions about your account and data, please visit our FAQ page.
Have a privacy question or want to submit a data rights request? Our support team is available 24/7. You can also browse our FAQ for quick answers, or return to the homepage to explore Luck98.
18+ only. Luck98 handles your personal data with care and in accordance with applicable data protection standards. For full details see this Privacy Policy.