Privacy Policy – How Lucky 200 Protects Your Data

1. Who We Are

Lucky 200 is an online gaming and sports betting platform built for players in Pakistan. When you register an account with Lucky 200, we act as the data controller responsible for your personal information. This means we determine how your data is collected, stored, used and — when the time comes — deleted.

This Privacy Policy applies to all Lucky 200 services, including the web platform, mobile app, live casino, sports betting, slots, fish games, VIP programme and any communications we send to you. It applies to all registered account holders and to visitors who browse the platform without an account.

By using Lucky 200, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal information as described here. This policy should be read alongside the Terms and Conditions, which govern your use of the platform overall.

2. Information We Collect

Lucky 200 collects personal information through several channels — directly from you when you register and use the platform, automatically through your browser and device, and from payment providers when you make deposits or withdrawals. The categories of information we collect are:

Registration and account information:

• Full name and date of birth
• Email address and mobile number
• Username and encrypted account password
• Preferred currency (PKR) and language settings

Identity verification (KYC) documents:

• National identity card (CNIC) or passport copy
• Proof of address where required for withdrawal processing
• Selfie or photo verification where requested

Financial and transaction data:

• Deposit and withdrawal history in PKR
• Payment method identifiers (e. g. JazzCash mobile number, Easypaisa account reference, last four digits of card)
• Transaction timestamps and amounts

Betting and gaming activity:

• Bets placed, stakes, odds accepted and outcomes
• Casino game sessions, slots play history and fish game activity
• Bonus usage and wagering progress
• VIP tier status and loyalty point accumulation

Technical and device data:

• IP address and approximate location (city level)
• Device type, operating system and browser version
• Session timestamps, page views and navigation paths
• App version if you use the Lucky 200 mobile app

3. How We Use Your Data

The personal data Lucky 200 collects is used exclusively for running the platform and delivering a secure, personalised experience. Specific uses include:

• Account management — creating and maintaining your Lucky 200 account, processing logins, and managing account settings and preferences
• Payment processing — facilitating PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, Bank Transfer and other supported channels
• Identity verification — confirming your age and identity as required before processing withdrawals or activating certain account features
• Fraud prevention and security — detecting unusual account activity, preventing unauthorised access, identifying multi-accounting and protecting against financial crime
• Customer support — responding to your queries, resolving disputes and following up on account issues through live chat and email
• Promotions and bonuses — calculating bonus eligibility, tracking wagering requirements and sending relevant promotional communications where you have opted in
• Platform improvement — analysing anonymised usage data to improve game performance, navigation and the overall user experience
• Responsible gaming — monitoring account activity to support responsible gaming features including deposit limits, session reminders and self-exclusion requests

Lucky 200 does not use your personal data for automated profiling that produces legal effects or similarly significant decisions without human review. If you have questions about a specific data use not listed above, you are welcome to contact the support team for clarification.

4. Legal Basis for Processing

Lucky 200 processes your personal data on the following legal grounds depending on the nature of the processing activity:

• Contract performance — most data processing is necessary to provide the services you have signed up for. Without collecting and using your account and payment information, we simply cannot operate your account or process your bets and transactions.
• Consent — where we send optional marketing communications or use non-essential cookies, we do so based on your consent. You can withdraw consent at any time through your account settings or by contacting support.
• Legitimate interests — processing for fraud detection, platform security and improving our services is based on our legitimate interest in operating a secure and functional platform. We apply this basis only where it does not override your rights.
• Legal obligation — certain data retention and identity verification requirements are necessary to comply with applicable financial and anti-money-laundering obligations.

5. Payment Data & PKR Transactions

All financial transactions at Lucky 200 are processed in Pakistani Rupees (PKR). We support JazzCash, Easypaisa, Raast, Bank Transfer, debit and credit cards, and other mobile wallets as listed on the platform. When you make a deposit or request a withdrawal, the following applies to your payment data:

• Payment transactions are handled through certified third-party payment processors. Lucky 200 does not store full card numbers, CVV codes or mobile wallet PINs on our own servers.
• We retain payment method identifiers — such as a masked JazzCash number or the last four digits of a card — solely for the purpose of verifying the ownership of withdrawal methods and preventing fraud.
• Transaction records including amounts, timestamps, payment channel and status are retained in accordance with our data retention policy and applicable financial record-keeping requirements.
• Where identity verification is required before a withdrawal, KYC documents are handled securely and used only for the purpose of confirming your identity. They are not shared beyond what is necessary for this verification purpose.

6. Cookies & Tracking Technologies

Lucky 200 uses cookies and similar tracking technologies to keep the platform working correctly and to understand how it is being used. Cookies are small text files stored on your device. They do not contain executable code and cannot directly identify you by name.

We use the following categories of cookies:

• Essential cookies — required for the platform to function. These handle your login session, keep you authenticated while you navigate the site, and maintain your account state. Disabling these through your browser will prevent the platform from working correctly.
• Functional cookies — remember your preferences such as language settings, preferred game categories and display options, so you do not have to reconfigure them on every visit.
• Analytics cookies — collect anonymised data about how players use the platform, which pages are visited most and where navigation issues occur. This data is used to improve the platform experience. It does not identify you personally.
• Security cookies — help detect and prevent fraudulent login attempts and unusual account activity by identifying session anomalies.

You can manage or delete cookies through your browser settings at any time. Note that disabling functional or analytics cookies will not affect your ability to place bets or manage your account, but you may lose personalisation preferences between sessions.

7. Sharing Your Data

Lucky 200 does not sell, rent or trade your personal data. We share data only in the following limited and necessary circumstances:

• Payment processors — transaction data is shared with payment service providers (such as JazzCash, Easypaisa and banking partners) solely for the purpose of processing your deposits and withdrawals in PKR.
• Identity verification providers — KYC document data may be passed to a certified identity verification partner for processing. These partners are contractually bound to handle your data securely and only for the stated verification purpose.
• Game and software providers — where you play a casino game or live dealer table provided by a third-party studio, your gameplay session data (not your personal identity data) is passed to that provider to run the game. These providers operate under their own data security standards.
• Fraud and security services — in cases of suspected fraud, money laundering or account abuse, account data may be shared with specialist fraud detection services or, where legally required, with relevant authorities.
• Legal requirements — where required by applicable law or legal process, Lucky 200 may disclose personal data to the extent necessary to comply with that obligation.

8. Data Security

Lucky 200 takes data security seriously and applies technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. Key security practices include:

• All data transmitted between your device and the Lucky 200 platform is encrypted using TLS (Transport Layer Security).
• Account passwords are stored using one-way cryptographic hashing. Lucky 200 staff cannot read your password — if you forget it, it must be reset rather than retrieved.
• Access to personal data within Lucky 200 is restricted on a need-to-know basis. Only team members who require access to perform their job function can access specific categories of data.
• Payment data is handled by certified payment processors and is not stored in full on Lucky 200 servers.
• Regular security reviews and monitoring are carried out to detect and respond to potential vulnerabilities or suspicious activity.

While Lucky 200 applies robust security measures, no online platform can guarantee absolute security. You play an important role in keeping your account safe by using a strong, unique password, not sharing your login details and contacting support promptly if you suspect unauthorised access to your account.

9. Data Retention

Lucky 200 retains your personal data only for as long as it is needed for the purposes described in this Privacy Policy. Retention periods vary by data type:

• Account and profile data — retained for the duration of your account and for a defined period after closure to allow for dispute resolution and audit purposes.
• Transaction records — financial transaction records in PKR are retained for a minimum period to satisfy standard financial record-keeping practices. This typically means several years following the transaction date.
• KYC documents — identity verification documents are retained for as long as required by applicable verification and anti-fraud obligations, after which they are securely deleted.
• Support communications — chat logs and email correspondence with the Lucky 200 support team are retained for a reasonable period to allow for follow-up and quality review, then deleted.
• Analytics data — anonymised platform usage data may be retained indefinitely as it cannot be linked back to any individual account or person.

When data reaches the end of its retention period and there is no continuing legal or operational reason to keep it, Lucky 200 securely deletes or anonymises it in line with standard data disposal practices.

10. Your Rights Over Your Data

As a Lucky 200 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact the Lucky 200 support team through live chat or email.

• Right of access — you can request a summary of the personal data Lucky 200 holds on your account. We aim to respond to access requests within a reasonable timeframe.
• Right to rectification — if any personal information in your account is inaccurate or out of date, you can request that it be corrected. Some details, such as your registered name, may require supporting documentation to update.
• Right to erasure — in certain circumstances you can request deletion of your personal data. Note that this right is subject to exceptions — for example, we may be required to retain transaction records for a defined period regardless of a deletion request.
• Right to restrict processing — you can ask Lucky 200 to limit how your data is used in certain situations, for example while a correction request is being processed.
• Right to withdraw consent — where processing is based on your consent (such as marketing communications), you can withdraw that consent at any time through your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object — you can object to processing based on legitimate interests in specific circumstances. We will assess each objection on its merits and respond accordingly.

11. Children's Privacy

Lucky 200 is strictly an adult platform. No person under the age of 18 is permitted to create an account or use any feature of the platform. Lucky 200 does not knowingly collect personal data from anyone under 18.

If you are a parent or guardian and believe that a minor has registered an account on Lucky 200 using false age information, please contact our support team immediately. We will investigate and close the account promptly, and any balance held will be returned via the registered payment method after verification.

We encourage parents and guardians to use parental control tools available through mobile devices and home routers to restrict access to online gaming platforms for users under 18.

12. Updates to This Privacy Policy

Lucky 200 may update this Privacy Policy from time to time to reflect changes in how we handle data, changes in the services we offer, or to stay current with applicable data handling practices. When we make material changes, we will update the "Last Updated" date shown at the top of this page.

Where changes are significant, we may also notify registered account holders via email or a platform notification. Your continued use of Lucky 200 after an updated policy has been posted constitutes your acceptance of the revised terms.

We recommend reviewing this Privacy Policy periodically, particularly before making significant deposits or enabling new platform features. If you have questions about any change to this policy, contact the support team before continuing to use the platform.

13. How to Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the personal data Lucky 200 holds on your account, the support team is available 24 hours a day, seven days a week.

You can reach us via live chat on the platform at any time for the fastest response. For written enquiries, you can also contact us by email — our support address is displayed in the footer of every page on the Lucky 200 website.

For data access requests, correction requests or deletion requests, please contact support via live chat or email and state clearly which right you wish to exercise and the details of your account. We will acknowledge your request and aim to respond fully within a reasonable period.

For responsible gaming concerns — including setting deposit limits, requesting a self-exclusion or getting guidance on managing your play — please visit the Responsible Gaming page or raise the matter directly with the support team.