Lucky Pub Privacy Policy – How We Protect Your Data in Pakistan

1Introduction

This Privacy Policy explains how Lucky Pub collects, stores, processes, and protects the personal information of its members and platform visitors. Lucky Pub is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This policy applies to all individuals who register a Lucky Pub account, visit the Lucky Pub website, or interact with Lucky Pub through any supported communication channel.

By registering at Lucky Pub and using our platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how Lucky Pub handles personal data as described here, you should not register or continue using the platform. If anything in this policy is unclear, please contact the Lucky Pub support team before proceeding — we are available 24 hours a day, 7 days a week, and happy to explain any part of this document in plain language.

Lucky Pub takes a minimal-collection approach to personal data. This means we only collect the information that is genuinely necessary to operate your account, process your PKR transactions, keep the platform secure, and comply with our legal obligations. We do not collect data simply because we can.

2Data We Collect

Lucky Pub collects personal data through several channels: directly from you when you register or use the platform, automatically through your device and browser when you interact with the Lucky Pub website, and from payment providers when you make deposits or withdrawals in PKR. The categories of data Lucky Pub may hold about you include:

Lucky Pub does not collect sensitive categories of personal data such as biometric data, health information, racial or ethnic origin, political opinions, or religious beliefs. Where identity verification documents are required as part of Know Your Customer (KYC) checks, these documents are processed securely, used only for the stated verification purpose, and stored for the legally required retention period only.

3How Lucky Pub Uses Your Data

Lucky Pub uses the personal data it holds to run a safe, functional, and fair gaming platform for Pakistani players. The specific purposes for which your data is processed include:

• Account Management: Creating and maintaining your Lucky Pub account, processing login requests, managing your preferences, and responding to account-related queries.
• Transaction Processing: Accepting deposits in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and card payments; processing withdrawals to your registered payment method; maintaining accurate transaction records.
• Identity and Age Verification: Confirming that you meet Lucky Pub's eligibility requirements (18+) and verifying your identity where required by our legal obligations.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, multiple account abuse, bot usage, money laundering, and any other conduct that violates Lucky Pub's Terms and Conditions or applicable law.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling behaviour, applying any limits or restrictions you have set yourself, and communicating relevant responsible gaming information.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game selection, platform performance, and the overall Lucky Pub member experience.
• Communications: Sending you transactional communications (deposit confirmations, withdrawal receipts, security alerts) and, where you have opted in, promotional communications about Lucky Pub offers and updates.
• Legal Compliance: Meeting obligations under applicable AML, KYC, and data protection laws and responding to lawful requests from regulatory or law enforcement authorities.

Lucky Pub does not use automated decision-making — including profiling — in ways that produce legal or similarly significant effects on individual members without human review and the ability to challenge the outcome.

4Legal Basis for Processing

Lucky Pub processes personal data only where there is a valid legal basis to do so. The legal bases Lucky Pub relies on are:

• Contractual Necessity: Processing your data is necessary to fulfil the contract between you and Lucky Pub — this covers account operation, transaction processing, and delivering the gaming services you have signed up for.
• Legal Obligation: Lucky Pub is required by law to collect and retain certain data, including identity verification records and financial transaction logs, for AML compliance and related regulatory purposes.
• Legitimate Interests: Lucky Pub processes certain data — such as IP addresses, device information, and gaming behaviour — to protect the platform from fraud, maintain security, and improve services. These interests do not override your fundamental privacy rights.
• Consent: For optional data processing — such as sending promotional emails or SMS about Lucky Pub offers — Lucky Pub will only proceed where you have given clear, specific, and freely given consent. You can withdraw consent at any time.

5Data Sharing and Third Parties

Lucky Pub does not sell, rent, or share your personal data with third parties for their own marketing purposes. Period. Your data is shared only in the following limited and necessary circumstances:

• Payment Processors: To complete deposits and withdrawals in PKR, Lucky Pub shares relevant transaction data with payment providers including Easypaisa, JazzCash, NayaPay, SadaPay, and card processors. These providers operate under their own privacy policies and receive only the data necessary to process your specific transaction.
• Game Software Providers: Third-party game studios that supply titles to the Lucky Pub platform may receive anonymised or pseudonymised data related to game performance and usage metrics. No personally identifiable information is shared with game providers without a valid contractual and legal basis.
• Identity Verification Services: Where KYC verification is required, Lucky Pub may use an accredited identity verification service provider. These providers are contractually bound to handle your data solely for the verification purpose and to comply with data protection standards.
• Legal and Regulatory Authorities: Lucky Pub will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by law, court order, or other binding legal process. Lucky Pub will notify the affected member where legally permitted to do so.
• Business Transfers: In the unlikely event of a Lucky Pub merger, acquisition, or business sale, personal data may be transferred to the new owner. Affected members will be notified in advance and given the opportunity to close their account and request data deletion if they wish.

6Cookies and Tracking Technologies

Lucky Pub uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. Lucky Pub uses the following types of cookies:

• Essential Cookies: Required for the platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. Without these cookies, Lucky Pub cannot operate as intended.
• Performance Cookies: Used to collect anonymous data about how members use the platform — which pages are visited most, where errors occur, and how loading times can be improved. This data is aggregated and contains no personally identifiable information.
• Functional Cookies: Remember your preferences — such as language settings or your preferred games lobby view — so you do not need to reset them every time you log in.
• Fraud Prevention Cookies: Used by Lucky Pub's security systems to detect suspicious behaviour, multiple account abuse, and bot activity. These cookies are essential for protecting honest members on the platform.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect the functionality of the Lucky Pub platform. Lucky Pub does not use advertising or cross-site tracking cookies.

7Data Security

Lucky Pub implements multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL Encryption: All data transmitted between your device and Lucky Pub's servers is encrypted using Transport Layer Security (TLS). This is the same encryption standard used by major financial institutions and is industry-recognised as the minimum appropriate standard for handling sensitive personal and financial data.
• Secure Data Storage: Personal data is stored on servers with restricted access controls. Only authorised Lucky Pub personnel whose role requires it can access personal member data, and all such access is logged and audited.
• Two-Factor Authentication: Lucky Pub provides optional two-factor authentication (2FA) for all member accounts. Enabling 2FA significantly reduces the risk of unauthorised account access even if your password is compromised. Lucky Pub strongly recommends all members activate 2FA.
• Fraud and Intrusion Detection: Lucky Pub runs continuous automated monitoring of platform activity to detect and respond to security threats, unusual access patterns, and potential data breaches in real time.
• Staff Training: All Lucky Pub personnel with access to personal data are trained on data protection obligations and the correct procedures for handling member information securely.

Despite these measures, no digital platform can guarantee absolute security against all possible threats. If Lucky Pub becomes aware of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law without undue delay.

8Data Retention

Lucky Pub retains your personal data for as long as your account is active and for a defined period thereafter to meet our legal, regulatory, and audit obligations. The specific retention periods applicable to different categories of data are as follows:

• Account Data: Retained for the lifetime of your active Lucky Pub account plus a minimum of five years after account closure, as required for financial audit and AML compliance purposes.
• Transaction Records: All PKR deposit, withdrawal, and wagering records are retained for a minimum of seven years from the date of each transaction in line with financial record-keeping requirements.
• Identity Verification Documents: KYC documents are retained for five years from the date of verification or from the date of account closure, whichever is later.
• Support Communications: Records of support interactions are retained for three years from the date of the last communication, for training, audit, and dispute resolution purposes.
• Cookie and Technical Data: Session and security cookie data is retained only for the duration of your active session or up to 13 months for analytics purposes, in anonymised form.

When the applicable retention period expires and there is no other legal basis requiring continued retention, Lucky Pub securely deletes or anonymises your data so it can no longer be linked to you as an individual.

9Your Data Rights

As a Lucky Pub member, you have specific rights over the personal data we hold about you. Lucky Pub is committed to honouring these rights promptly and without unnecessary bureaucracy. Your rights include:

To exercise any of these rights, contact the Lucky Pub data protection team at support@luckypub.net with the subject line "Data Rights Request". We will verify your identity before processing any request to ensure your data is only shared with or actioned by you. Requests are free of charge and will be responded to within 30 days.

10Children's Privacy

Lucky Pub is strictly an adult platform. The minimum age requirement for registration and participation is 18 years. Lucky Pub does not knowingly collect personal data from anyone under the age of 18. Our registration process requires users to confirm their date of birth and agree to the age restriction, and Lucky Pub performs age verification checks where required.

If a parent or guardian becomes aware that their child has registered a Lucky Pub account or provided personal information without parental consent, they should contact Lucky Pub immediately at support@luckypub.net. Lucky Pub will promptly investigate the matter, close the account, delete all associated personal data, and return any deposited funds to the appropriate payment method in accordance with our underage gaming policy.

11Third-Party Links and Services

The Lucky Pub platform may contain links to third-party websites or services — for example, payment processor portals or game provider information pages. This Privacy Policy applies solely to Lucky Pub and does not extend to any third-party website or service. Lucky Pub has no control over the content, privacy practices, or data handling of third-party sites and is not responsible for them.

When you click a link that takes you away from the Lucky Pub platform, you are subject to the privacy policy of the destination website. Lucky Pub recommends reviewing the privacy policy of any third-party site before submitting your personal information there. The presence of a link on Lucky Pub does not constitute an endorsement of the linked site's privacy practices.

12Updates to This Privacy Policy

Lucky Pub reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable laws, or the services we offer. The date at the top of this page reflects when the policy was last revised.

When we make material changes to this policy — changes that affect how your personal data is used in a way that is meaningfully different from before — Lucky Pub will notify registered members via their registered email address or through a prominent notice on the platform, at least 14 days before the changes take effect. Minor clarifications and typographical corrections may be made without formal notice.

Continued use of Lucky Pub after the stated effective date of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the changes, you should stop using Lucky Pub and contact support to close your account and request the deletion of your personal data where legally permitted.

13Contact Lucky Pub About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Lucky Pub handles your personal data, please do not hesitate to get in touch. Lucky Pub's support and data protection team is available around the clock:

• Email: support@luckypub.net — for data rights requests, privacy concerns, or questions about this policy
• Live Chat: Available from your Lucky Pub account dashboard after logging in — for general privacy queries
• FAQ: Visit the Lucky Pub FAQ page — many common questions about data and privacy are answered there

Lucky Pub aims to respond to all privacy-related queries within 5 working days. Formal data rights requests — such as subject access requests or erasure requests — will receive a full response within 30 days of receipt, in line with applicable data protection obligations. If you are not satisfied with Lucky Pub's response to any privacy concern, you have the right to escalate the matter to the relevant regulatory authority in your jurisdiction.