Lucky Win Privacy Policy — How We Handle Your Personal Data

1. Introduction

This Privacy Policy explains how Lucky Win ("we", "us", "our", "the Platform") collects, uses, stores, shares and protects the personal information of players and visitors who use luckywin-vip.net ("the Website"). It applies to every interaction you have with Lucky Win — from the moment you land on our homepage to account registration, depositing, playing and withdrawing.

Lucky Win is committed to protecting player privacy. We operate in compliance with applicable data protection laws and our international gaming licence requirements. This policy is part of the broader agreement between you and Lucky Win; it should be read alongside our Terms and Conditions.

If you have any questions about how your data is handled before or after reading this document, please contact our data protection team at privacy@luckywin-vip.net. We aim to respond to all privacy queries within 5 working days.

2. Personal Data We Collect

Lucky Win collects the minimum personal data necessary to operate the platform, comply with our licensing obligations and provide you with a safe, personalised experience. We do not collect data beyond what is genuinely needed.

We do not collect sensitive personal data such as biometric information, religious beliefs, political views or health records. KYC document images are processed solely for identity verification and are not used for any other purpose.

3. How We Collect Your Data

Lucky Win collects personal data through the following channels:

• Registration form — name, date of birth, mobile number, email and password when you create your Lucky Win account.
• Account settings updates — when you update your profile, change payment methods or complete KYC verification.
• Transaction processing — deposit and withdrawal activity is automatically logged by our payment systems.
• Platform usage — your betting and gaming activity is recorded automatically as part of normal platform operation.
• Customer support interactions — emails, live chat transcripts and phone call records when you contact our support team.
• Technical systems — IP address, device data and session information collected automatically via server logs and cookies.
• Third parties — identity verification services and payment processors may share verification results with us as part of the KYC process.

4. How We Use Your Personal Data

Lucky Win uses your personal data only for the specific purposes listed below. We apply the minimum-necessary principle — if a purpose doesn't require a particular data point, we don't use it for that purpose.

• Account management — creating and maintaining your Lucky Win account, processing login and authentication.
• Payment processing — processing deposits and withdrawals through your chosen PKR payment method.
• Bonus and promotion delivery — crediting eligible bonuses, processing referral rewards and managing the VIP programme.
• Regulatory compliance — meeting KYC, AML (Anti-Money Laundering) and licensing obligations.
• Fraud and security — detecting and preventing unauthorised access, fraudulent transactions and abuse of the platform.
• Responsible gaming — monitoring play patterns to identify signs of problem gambling and applying limits when required.
• Customer support — responding to your queries and resolving disputes.
• Communications — sending account notifications, promotional emails (where consented) and security alerts.
• Platform improvement — aggregated, anonymised analysis of usage patterns to improve performance and user experience.

Lucky Win does not use automated decision-making that produces legal or similarly significant effects on you without human review. Fraud detection flags are reviewed by our compliance team before any account action is taken.

5. Who We Share Your Data With

Lucky Win does not sell your personal data. We do not share your data with advertising networks or marketing data brokers. Your information is shared only with the following categories of third parties and only to the extent necessary for the stated purpose:

All third parties with whom Lucky Win shares personal data are subject to contractual data protection obligations. We carry out due diligence on data processors before engaging them and conduct periodic reviews. Any processor that cannot meet our security standards is replaced.

6. Payment Data Security

Lucky Win does not store full payment card numbers, CVV codes or complete mobile wallet credentials. Payment transactions are processed through PCI-DSS compliant payment gateways. Lucky Win acts as the merchant of record but never handles raw card data directly.

When you deposit via Easypaisa or JazzCash, the transaction is authenticated directly through the respective mobile wallet provider's secure systems. Lucky Win receives only a transaction confirmation reference and the last few digits of your wallet number for internal records.

For bank IBFT transfers, Lucky Win records the sending account's last 4 digits and the bank name for withdrawal routing purposes only. Full account numbers are not stored on Lucky Win's systems.

All financial records are retained for 7 years in compliance with anti-money laundering regulations. After this period, financial records are securely deleted from active systems.

7. KYC Document Handling

Identity documents submitted for KYC verification — CNIC scans, selfies, utility bills and bank statements — are treated with the highest level of confidentiality on Lucky Win's platform. Access to these documents is strictly limited to authorised compliance personnel.

• KYC documents are stored in encrypted form on isolated, access-controlled servers.
• Documents are never shared with third parties except identity verification service providers under strict processing agreements.
• Verification service providers process your document to confirm identity and then return a pass/fail result — they do not retain copies beyond their own compliance obligations.
• Lucky Win compliance staff who access KYC documents are subject to confidentiality agreements and background checks.
• Document images are deleted from operational systems 90 days after a successful verification, with encrypted archives retained for the regulatory minimum period.

8. Cookies & Tracking Technologies

Lucky Win uses cookies and similar technologies to make the platform function correctly, keep you logged in securely and understand how the site is used in aggregate. We do not use advertising cookies or third-party tracking pixels that follow you across the wider internet.

Types of cookies Lucky Win uses:

• Essential cookies — required for the platform to function. These handle session management, login state and security tokens. They cannot be disabled without breaking your account experience.
• Functional cookies — remember your preferences such as language, odds format and last-used game category. These improve your experience but are not strictly required.
• Analytics cookies — collect anonymised data about page visits, load times and feature usage. This helps Lucky Win prioritise improvements. No personally identifiable data is included in analytics reporting.
• Security cookies — detect and prevent fraudulent activity such as automated login attempts and account takeover attacks.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent Lucky Win from functioning correctly. Disabling functional and analytics cookies will have no effect on your ability to play.

9. Data Retention Periods

Lucky Win does not keep your personal data for longer than necessary. Retention periods are determined by the purpose of the data and any regulatory obligations that apply.

• Account data — retained for the lifetime of your active account plus 5 years after closure.
• Financial transaction records — retained for 7 years in compliance with anti-money laundering regulations.
• Betting and gaming records — retained for 5 years from the date of each bet or session.
• Customer support records — retained for 3 years from the date of the last interaction.
• KYC documents — operational copies deleted 90 days after verification; encrypted archives for the regulatory minimum of 5 years.
• Technical logs — IP and session logs retained for 12 months and then purged.
• Marketing consent records — retained as long as your account is active and for 3 years after unsubscribing.

After applicable retention periods, data is securely and permanently deleted from Lucky Win's systems. Data subject to legal hold due to an active dispute or investigation will be retained until the matter is resolved, regardless of standard retention periods.

10. How Lucky Win Protects Your Data

Data security is a core operational priority at Lucky Win, not an afterthought. The platform employs multiple layers of technical and organisational security measures to protect player data from unauthorised access, disclosure, alteration or destruction.

• TLS 1.3 encryption on all data transmitted between your browser and Lucky Win's servers.
• AES-256 encryption for all sensitive data at rest, including account credentials and financial records.
• Multi-factor authentication available for all Lucky Win accounts — strongly recommended for all players.
• Regular independent penetration testing of the platform's infrastructure.
• Strict role-based access controls — staff access only the data their job role requires.
• 24/7 automated monitoring for suspicious access patterns and data anomalies.
• Incident response plan with defined timelines for player notification in the event of a data breach.
• Secure development practices — all Lucky Win code is reviewed for security vulnerabilities before deployment.

In the unlikely event of a data breach that affects your personal information, Lucky Win will notify you by email within 72 hours of becoming aware of the breach and provide clear information about what was affected and what steps are being taken.

11. Your Data Rights

As a Lucky Win player you have clearly defined rights over your personal data. These rights can be exercised at any time by contacting our data protection team at privacy@luckywin-vip.net. We will respond within 30 days of receiving a valid request.

Note that some rights are subject to limitations. For example, the right to erasure cannot override our legal obligation to retain financial records for 7 years under AML regulations. Where a limitation applies, Lucky Win will explain clearly what data can and cannot be deleted and why.

To opt out of marketing emails specifically, you can unsubscribe at any time using the link in any Lucky Win email, or by updating your communication preferences in your account settings. This will not affect transactional or account-related communications.

12. Under-18 Policy

Lucky Win does not knowingly collect personal data from anyone under the age of 18. The platform is strictly adults-only. Age verification is a mandatory part of the Lucky Win KYC process and all players must confirm they are 18 or older at the point of registration.

If Lucky Win discovers or is notified that a person under 18 has created an account, the account will be closed immediately, all deposits returned and any data collected from the minor deleted from our systems as promptly as possible — subject only to any legal record-keeping obligations that cannot be avoided.

Parents and guardians concerned about underage access to gambling platforms should use device-level parental controls and speak openly with young people about responsible internet use. If you believe a minor has accessed Lucky Win using your credentials, contact our support team immediately.

13. Changes to This Privacy Policy

Lucky Win reviews this Privacy Policy regularly and will update it when our data practices change or when legal requirements change. The "Last Updated" date at the top of this page reflects the most recent revision.

When material changes are made — changes that meaningfully affect how your data is used — Lucky Win will notify all registered players by email at least 14 days before the change takes effect. Minor clarifications or corrections that do not change the substance of how data is used may be made without advance notice.

We recommend bookmarking this page and checking it from time to time. Your continued use of Lucky Win after the effective date of any updated policy constitutes acceptance of the revised terms.

14. Contact Us & Complaints

If you have any questions about this Privacy Policy or want to exercise any of your data rights, contact Lucky Win's data protection team:

Email: privacy@luckywin-vip.net

General support: support@luckywin-vip.net

We aim to respond to all privacy-related queries within 5 working days and to complete subject access requests within 30 days. If your request is complex or involves a large volume of data, we may extend the response period by a further 30 days — we will let you know if this is the case.

If you are not satisfied with Lucky Win's response to a privacy complaint you have the right to escalate the matter to the relevant supervisory authority under the data protection laws applicable to Lucky Win's licensing jurisdiction. Our support team can provide details of the appropriate authority on request.