luck90 Privacy Policy

1.1 Identity. The data controller responsible for your personal data collected through the luck90.net platform is luck90, the legal entity operating the luck90 online betting service at https://luck90.net. References to "luck90", "we", "us", or "our" in this Privacy Policy refer to that entity.

1.2 Scope. This Privacy Policy applies to all personal data collected through your use of the luck90.net website, its mobile-optimized interface, all associated account services including the luck90 Login portal, and any communications you initiate with luck90 customer support, regardless of the channel used.

1.3 Contact. For all data protection matters, including exercising your data rights, you may contact luck90's data team at the address provided in Section 14 of this policy. luck90 aims to respond to all data-related enquiries within 30 days of receipt.

luck90 collects personal data across several categories. The following table describes each category, the specific data points within it, and the context in which collection occurs:

luck90 processes your personal data for the following clearly defined purposes, each of which rests on a specific legal basis:

• Account Registration & Management: Processing your identity and contact data to create and administer your luck90 account. Legal basis: performance of the contract between you and luck90.
• Identity Verification (KYC): Verifying your Pakistani CNIC details and age to comply with anti-money-laundering and age verification obligations. Legal basis: legal obligation.
• Payment Processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, and Pakistani bank accounts. Legal basis: performance of contract.
• Fraud Prevention & Anti-Money-Laundering: Analysing transaction patterns and account activity to detect and prevent fraud, money laundering, and terrorist financing. Legal basis: legal obligation and legitimate interests.
• Betting & Game Service Delivery: Maintaining records of your bets, game sessions, and account activity to settle wagers, resolve disputes, and provide an accurate account history. Legal basis: performance of contract.
• Responsible Gaming Enforcement: Processing your betting activity, session data, and responsible gaming tool settings to enforce deposit limits, identify potential problem gambling indicators, and administer self-exclusion. Legal basis: legal obligation and legitimate interests.
• Customer Support: Using your account data and communications history to resolve support queries, complaints, and disputes. Legal basis: performance of contract and legitimate interests.
• Platform Security: Processing IP addresses, device identifiers, and access logs to detect unauthorised access attempts and protect the integrity of your luck90 account. Legal basis: legitimate interests.
• Legal Compliance & Regulatory Reporting: Retaining transaction and identity records as required under applicable international gaming licensing obligations and financial regulations. Legal basis: legal obligation.
• Promotional Communications: Sending you information about luck90 bonuses, PSL cricket betting specials, and new platform features where you have provided consent or where permitted under applicable rules. Legal basis: consent or legitimate interests (existing customers only).

4.1 Principle. luck90 does not sell your personal data. We share your data with third parties only where necessary for the specific purposes described in this policy and only with parties bound by appropriate confidentiality and data protection obligations.

4.2 Categories of Recipients. luck90 may share your personal data with the following categories of third parties:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners — solely for the purpose of processing your PKR deposits and withdrawals.
• Identity Verification Services: Third-party KYC and CNIC verification providers used to confirm the authenticity of your identity documents.
• Game Content Providers: Casino game studios and live dealer providers whose games are hosted on the luck90 Platform — who receive the minimum data necessary for game session management.
• Fraud Detection & Security Services: Specialist providers of anti-fraud tools, IP analysis services, and cybersecurity software used to protect the luck90 Platform and its players.
• Customer Support Platforms: Third-party live chat and ticketing software providers through whom luck90 manages customer support interactions.
• Regulatory Authorities: luck90's international gaming licensing regulator and, where legally required, relevant financial intelligence or law enforcement authorities — in connection with compliance obligations and lawful requests.
• Legal and Professional Advisors: Lawyers, auditors, and compliance consultants bound by professional confidentiality obligations, where their services require access to player data.

5.1 Retention Principle. luck90 retains your personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations.

5.2 Retention Periods. The following indicative retention periods apply to the principal categories of data luck90 holds:

• Account and Identity Data: Retained for the duration of your active luck90 account and for a minimum of 5 years following permanent account closure, as required for AML compliance record-keeping.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with applicable financial record-keeping obligations.
• Betting History: Retained for a minimum of 2 years from each bet settlement date for dispute resolution and regulatory audit purposes.
• Customer Support Communications: Retained for 2 years from the date of each communication, unless the communication relates to an ongoing dispute or regulatory matter.
• Technical and Access Logs: Retained for 12 months from the date of generation, unless retention for a longer period is required for an active security investigation.
• Marketing Preferences and Consent Records: Retained for the duration of your account and for 1 year following account closure or withdrawal of consent, whichever is later.
• Self-Exclusion Records: Retained indefinitely to prevent re-registration of excluded individuals — a necessary measure for responsible gaming protection.

5.3 Deletion. Upon expiry of the applicable retention period, luck90 will securely delete or irreversibly anonymise your personal data. Where anonymisation is technically feasible, anonymised data may be retained for aggregated statistical analysis without identifying you personally.

luck90 implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, loss, destruction, or alteration. The principal security measures in place include:

• TLS 1.2/1.3 encryption for all data in transit between your device and luck90.net servers.
• AES-256 encryption for sensitive data stored at rest, including CNIC details and financial records.
• Industry-standard password hashing using bcrypt, ensuring plaintext passwords are never stored.
• SMS OTP two-factor authentication available to all luck90 account holders via their registered Pakistani mobile number.
• Strict role-based access controls ensuring luck90 staff access player data only on a need-to-know basis.
• Regular independent security audits and penetration testing of the luck90 Platform infrastructure.
• Automated anomaly detection systems monitoring for unusual login activity, suspicious transaction patterns, and potential account compromise indicators.

Despite these measures, no online platform can guarantee absolute security. You are encouraged to maintain a strong, unique password for your luck90 account and to enable two-factor authentication. Report any suspected account security issue immediately to luck90 support via live chat.

7.1 What We Use. luck90 uses cookies and similar browser-based tracking technologies on luck90.net. These include session cookies (which expire when you close your browser) and persistent cookies (which remain for a defined period).

7.2 Purposes. luck90 uses cookies for the following purposes:

• Essential Cookies: Required for the luck90 Platform to function correctly, including maintaining your logged-in session state, remembering your responsible gaming settings, and ensuring secure transactions. These cannot be disabled without preventing core Platform functionality.
• Analytics Cookies: Used to understand aggregated usage patterns on luck90.net — such as which betting markets are most visited by Pakistani players — so we can improve the Platform experience. Data collected through analytics cookies does not identify you individually.
• Security Cookies: Used to detect bot activity, prevent fraudulent login attempts, and protect the integrity of luck90 accounts.

7.3 Your Controls. You may configure your browser to block or delete cookies. However, disabling essential cookies will affect the functionality of your luck90 account, including your ability to access the luck90 Login portal and maintain an authenticated session.

8.1 Strict 21+ Policy. luck90 does not knowingly collect personal data from individuals under the age of 21. The luck90 Platform is strictly intended for adults aged 21 and above. This age threshold is enforced through mandatory CNIC age verification during the KYC process.

8.2 Discovery of Minor's Data. If luck90 discovers that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete or securely destroy the relevant personal data, and take appropriate steps to prevent re-registration by the same individual.

As a luck90 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact luck90 via the details provided in Section 14. luck90 will respond within 30 days and will not charge a fee for standard requests.

10.1 Cross-Border Processing. As an internationally licensed betting platform, luck90's data processing infrastructure may involve the transfer of your personal data to servers or service providers located outside Pakistan. This may include locations in the jurisdiction under which luck90 holds its international gaming licence, as well as locations where key technical service providers operate.

10.2 Safeguards. Where personal data is transferred internationally, luck90 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards include contractual data protection clauses in agreements with all third-party service providers who receive your data.

10.3 Your Acknowledgement. By registering a luck90 account and using the Platform, you acknowledge that your personal data may be transferred and processed in jurisdictions outside Pakistan as described in this section.

The luck90 Platform integrates game content from third-party providers including live casino studios and slot game developers. When you play games provided by these third parties, certain technical data — including your session identifier and game activity — may be processed by those providers on behalf of luck90 under data processing agreements that restrict their use of your data to game service delivery only.

luck90 is not responsible for the privacy practices of third-party game providers' own standalone platforms or websites. This Privacy Policy applies solely to data processed through luck90.net and the luck90 account environment.

12.1 Opt-In Communications. Where you have given explicit consent, luck90 may contact you with information about current bonus offers, PSL cricket betting promotions, new game launches, and Platform updates via SMS to your registered Pakistani mobile number or via email where provided.

12.2 Existing Customer Communications. Where you are an existing luck90 player and have not opted out, luck90 may send you communications about similar services and promotions to those you have already engaged with, on the basis of legitimate interests.

12.3 Opting Out. You may opt out of marketing communications at any time by updating your communication preferences within your luck90 account settings, or by contacting luck90 customer support. Marketing opt-outs are processed within 5 business days. Opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications, or security alerts.

13.1 Right to Update. luck90 reserves the right to update or amend this Privacy Policy at any time, including to reflect changes in applicable data protection law, changes to luck90's data processing activities, or the introduction of new Platform features involving the collection of additional data.

13.2 Notification. Where changes to this Privacy Policy are material — meaning they affect your rights or the ways in which your data is used in a significant way — luck90 will provide advance notice by posting the updated policy on luck90.net with a revised "Last Updated" date and, where reasonably practicable, by notifying you via your registered Pakistani mobile number.

13.3 Continued Use. Your continued use of the luck90 Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept a material change to this policy, you should close your luck90 account before the changes take effect.

14.1 Data Enquiries. For any queries related to this Privacy Policy, to exercise your data rights, or to report a suspected data breach involving your luck90 account, please contact luck90 using the details below:

14.2 Complaints. If you believe luck90 has not handled your personal data in accordance with this Privacy Policy or applicable law, you have the right to lodge a complaint with luck90 directly in the first instance. luck90 will acknowledge all formal data complaints within 5 business days and provide a substantive response within 30 days. If you remain unsatisfied following luck90's response, you may escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.

14.3 Further Policy Documents. This Privacy Policy should be read in conjunction with luck90's Terms & Conditions and Responsible Gaming page, which together form the complete framework governing your use of the luck90 Platform.