This Privacy Policy explains what personal data lucki8 collects from Pakistani users, how it is used, how long it is retained, and what rights you have over your own data. We are committed to protecting your information under the requirements of our international gaming license and applicable data protection standards.
Six fundamental commitments lucki8 makes to every Pakistani user about how their personal data is handled.
lucki8 does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing agencies. Your CNIC details, mobile number, email address, and transaction history stay within the lucki8 platform and are shared externally only where required by the international gaming license or applicable law.
All data transmitted between your device — whether on Karachi Wi-Fi, Lahore 4G, or any Pakistani network — and the lucki8 servers is encrypted using 256-bit SSL/TLS. This means that your login credentials, payment details, and personal information cannot be intercepted during transmission.
You have the right to request access to, correction of, and deletion of your personal data held by lucki8, subject to the retention obligations imposed by our international gaming license. Requests can be submitted via the live chat support function in your account dashboard or by email to the address listed in this policy.
lucki8 collects only the personal data that is necessary to operate the platform, comply with our gaming license requirements, and process PKR transactions through JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. We do not collect data we do not need.
Your data is not kept indefinitely. lucki8 maintains a clear data retention schedule aligned with gaming license requirements — typically 5 years for KYC and transaction data. When data is no longer required, it is securely deleted or anonymised. Retention periods for each data category are set out in this policy.
In the unlikely event of a data breach affecting your personal information, lucki8 will notify affected users via their registered email address within 72 hours of becoming aware of the incident, in line with the data protection obligations under our international gaming license. The notification will describe what data was affected and the steps taken in response.
As a lucki8 user, you hold the following rights over your personal data. These can be exercised via live chat or by emailing [email protected].
Request a copy of all personal data lucki8 holds about you, including account details, KYC records, and transaction history.
Request correction of any inaccurate personal data held by lucki8, subject to identity verification requirements.
Request deletion of your personal data where it is no longer required for the purpose for which it was collected, subject to license retention obligations.
Request that lucki8 temporarily stops processing your personal data while the accuracy or lawful basis of processing is under review.
Request a machine-readable export of the personal data you have provided to lucki8, in a commonly used electronic format.
Object to lucki8 processing your personal data for direct marketing purposes. Opt-out requests are acted on immediately.
This Privacy Policy ("Policy") is published by the operator of the lucki8 platform ("lucki8", "we", "us") and describes how lucki8 collects, uses, retains, and protects the personal data of users accessing lucki8.onl and related services from Pakistan and other permitted territories.
lucki8 operates under an international gaming license that imposes specific data protection, KYC, and AML obligations. This Policy has been written to comply with those obligations and to provide users — particularly Pakistani users whose data includes CNIC details, JazzCash/EasyPaisa account references, and Pakistani mobile numbers — with a clear and honest account of how their data is managed.
This Policy should be read together with lucki8's Terms and Conditions, which form the overall legal framework governing your use of the platform. In the event of any conflict between this Policy and the Terms and Conditions on matters of data processing, this Policy shall prevail.
lucki8 collects the following categories of personal data from users:
lucki8 collects your personal data through the following mechanisms:
lucki8 uses your personal data for the following purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and login | Identity, contact, technical data | Contractual necessity |
| Age and identity verification (KYC) | CNIC, date of birth, identity data | Legal obligation (gaming license) |
| Processing PKR deposits and withdrawals | Financial data, identity data | Contractual necessity |
| Anti-money laundering (AML) monitoring | Financial data, gaming activity | Legal obligation (gaming license) |
| Customer support | All categories as required | Contractual necessity |
| Platform security and fraud prevention | Technical data, identity data | Legitimate interests |
| Responsible gaming monitoring | Gaming activity, financial data | Legal obligation (gaming license) |
| Marketing communications (opt-in only) | Contact data | Consent |
| Regulatory reporting | Identity, financial data | Legal obligation |
lucki8 processes your personal data only where a valid legal basis exists. The primary legal bases relied upon by lucki8 are:
lucki8 processes payment data in connection with PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. The following specific provisions apply to payment data:
As a licensed gaming operator, lucki8 is required to verify the identity of all users before processing withdrawals. The KYC process involves the collection and verification of your CNIC and, where required, supporting documentation confirming the payment method used.
KYC data — including your CNIC copy, verification status, and the date verification was completed — is retained for the duration of your account and for a minimum of 5 years following account closure, as required by lucki8's gaming license conditions.
Where lucki8 uses a third-party identity verification service to assist with CNIC validation, that provider processes only the data necessary for verification and is contractually bound to maintain confidentiality and to process the data solely for the purpose of supporting lucki8's KYC obligations.
lucki8 uses cookies and similar tracking technologies on the lucki8.onl website. The following categories of cookies are used:
You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent the lucki8 platform from functioning correctly.
lucki8 does not sell your personal data to third parties. Data may be shared in the following limited and defined circumstances only:
All third parties with whom lucki8 shares personal data are contractually required to process that data only for the purposes specified by lucki8, to maintain appropriate security standards, and not to further disclose it without authorisation.
lucki8 retains your personal data for no longer than is necessary for the purposes for which it was collected, taking into account the minimum retention periods required by lucki8's international gaming license. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account identity data (name, CNIC, DOB) | Duration of account + 5 years post-closure | Gaming license requirement |
| KYC verification records | Duration of account + 5 years post-closure | AML / gaming license |
| Financial transaction records (PKR) | 5 years from transaction date | AML / gaming license |
| Gaming activity logs | 2 years from date of activity | Responsible gaming / disputes |
| Customer support communications | 2 years from date of last communication | Legitimate interests |
| Marketing preferences | Until consent is withdrawn | Consent |
| Technical / session logs | 90 days | Security / fraud prevention |
At the end of the applicable retention period, data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.
lucki8 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:
While lucki8 takes reasonable security measures, no platform is completely immune to security risks. You are also responsible for maintaining the security of your lucki8 login credentials and should not share them with others.
lucki8 is strictly prohibited from collecting personal data from, or providing any real-money gaming services to, individuals under the age of 21. This Policy does not apply to minors. lucki8 actively enforces age verification through CNIC submission and date of birth confirmation during the account registration process.
If lucki8 becomes aware that an account has been opened by or on behalf of a person under the age of 21, that account will be immediately closed, all associated data will be handled in accordance with applicable data protection requirements, and any funds held in the account will be returned after identity verification, subject to applicable legal requirements.
lucki8 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, the requirements of our international gaming license, or changes to our data processing practices. Where amendments are material, lucki8 will notify registered users via the email address on file at least 14 days before the changes take effect.
Minor amendments — such as corrections of typographical errors or clarifications that do not alter the substance of the policy — may be updated without prior notice. The effective date displayed at the top of this page reflects the version currently in force.
We encourage you to review this Privacy Policy periodically. Continued use of lucki8 following any update constitutes acceptance of the revised Policy.
You've read how we protect your privacy. lucki8 is a licensed, transparent platform — and that extends to how we handle your personal data. Explore what we offer with confidence.