Luck PKR Privacy Policy — Your Data and Your Rights as a Player

This Privacy Policy applies to Luck PKR Ltd ("Luck PKR", "we", "us"), the company that owns and operates the online gaming platform accessible at luckpkr.app. As a player, you are the data subject. Luck PKR is the data controller — meaning we determine the purposes for which your personal data is collected and the manner in which it is processed.

Luck PKR is a Pakistan-focused platform. We are committed to handling your personal information responsibly, transparently and in accordance with applicable data protection principles. If you have questions about how your data is handled at any point, you can contact us directly at support@luckpkr.app.

This policy applies to all personal data collected through luckpkr.app, any associated mobile-optimised web experience, and all communications between you and Luck PKR — including support interactions, email and in-app chat.

Luck PKR collects personal data in several ways — directly from you during registration and account use, automatically through your interaction with the platform, and from third-party verification services where identity confirmation is required. Here is a full breakdown of the categories of data we collect:

Data you provide directly:

• Full legal name (as it appears on your CNIC or passport)
• Date of birth
• Mobile phone number (used as your primary login identifier)
• Email address
• Residential address in Pakistan
• Payment method details — mobile wallet number (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT, or the card number associated with a Pakistani Visa/Mastercard
• Identity verification documents — CNIC number or passport number, plus a copy of the document where enhanced verification is requested
• Communications you send to our support team via email or live chat

Data collected automatically when you use the platform:

• IP address and approximate location derived from it
• Device type, operating system version and browser type
• Mobile network information
• Session timestamps — when you log in and out
• Pages visited, games played, bets placed and their outcomes
• Deposit and withdrawal history, including method and timestamps
• VIP Club points earned, tier history and bonus claims
• Cookies and similar session tracking technologies (see Section 6)

Data received from third parties:

• Identity verification outcomes from third-party KYC providers — pass/fail status and risk flags, not raw document copies
• Payment confirmation data from Easypaisa, JazzCash and other payment processors — transaction reference numbers and confirmation statuses
• Fraud and AML screening results from compliance data services

Every category of data Luck PKR collects is tied to a specific, legitimate purpose. We do not collect data speculatively. The reasons we process your personal information are:

• Account creation and operation: Your name, mobile number, date of birth and email are required to create and maintain your Luck PKR account, verify your identity and ensure you are eligible to use the platform (18+).
• Processing deposits and withdrawals: Payment method details and transaction records are required to credit your account, process withdrawals, reconcile balances and maintain accurate financial records as required by law.
• Legal and regulatory compliance: Anti-money laundering (AML) obligations and know-your-customer (KYC) requirements mean we must verify the identity of players, monitor transaction patterns and retain certain records for defined periods.
• Fraud prevention and platform security: Device data, IP addresses and behavioural patterns are used to detect and prevent account takeover attempts, fraudulent transactions, multi-accounting and other prohibited conduct.
• Customer support: Your communications with the Luck PKR support team are stored to allow us to handle queries and complaints accurately and to maintain a record of your support history.
• Responsible gaming obligations: Gaming activity data — session lengths, deposit patterns, betting behaviour — is analysed to identify potential problem gambling indicators and trigger appropriate responsible gaming interventions.
• Platform improvement: Aggregated, anonymised behavioural data helps us improve game performance, mobile optimisation and the overall player experience on Luck PKR.
• Marketing communications (where consented): If you have opted in to marketing, your email and in-app notification preferences are used to send you relevant promotions and updates from Luck PKR.

All personal data held by Luck PKR is stored on secure servers with industry-standard physical and logical access controls. Data is encrypted at rest using AES-256 encryption. All data in transit between your device and Luck PKR servers is encrypted using TLS 1.2 or higher.

Access to personal data within Luck PKR is restricted on a need-to-know basis. Only staff whose job function requires access to specific categories of data are granted it, and all access is logged and audited. Passwords are stored only as salted hashes — Luck PKR staff cannot view your account password.

Payment card data (Visa/Mastercard) is never stored in full on Luck PKR servers. Card transactions are processed through a PCI-DSS compliant payment gateway. Luck PKR stores only the tokenised reference provided by the gateway.

Luck PKR does not sell your personal data. We share data with third parties only where strictly necessary for the operation of the platform, and only to the minimum extent required for each purpose. The categories of third parties who may receive your data are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and our card payment gateway receive the transaction data necessary to process your deposits and withdrawals. These parties are contractually bound to handle your data securely and only for the stated payment purpose.
• Identity verification providers: Third-party KYC services receive your name, date of birth and document references to perform identity verification checks required under AML compliance obligations.
• Cloud infrastructure providers: The servers and storage infrastructure Luck PKR uses are provided by contracted cloud providers who process data on our behalf under strict data processing agreements.
• Fraud and AML screening services: Transaction data and account identifiers may be submitted to compliance screening services to detect money laundering and fraud patterns.
• Regulatory and law enforcement bodies: Luck PKR will disclose personal data to regulatory authorities or law enforcement agencies when legally required to do so by a valid legal instrument.

All third parties who process data on Luck PKR's behalf are required to maintain appropriate security measures and to process data only for the purposes agreed with Luck PKR. We do not allow our third-party processors to use your personal data for their own unrelated purposes.

Luck PKR uses cookies and similar session technologies to operate the platform correctly, maintain your logged-in session and understand how players interact with the site. Here is what we use and why:

• Essential session cookies: These are required for the platform to function. They maintain your login state, preserve your active game session and process transactions. You cannot opt out of these without effectively being unable to use Luck PKR.
• Security cookies: Used to detect and prevent fraudulent login attempts, unusual session behaviour and CSRF attacks. These are a core part of our security infrastructure.
• Performance and analytics cookies: Anonymised data about which pages are visited most, how long players spend in different sections and what device types are in use. This data helps us optimise the platform. No personally identifiable information is attached to analytics data.
• Preference cookies: If you have set display preferences or language preferences within your Luck PKR account, these are stored in cookies to persist your settings across sessions.

Luck PKR does not use third-party advertising cookies or behavioural tracking networks that profile you across different websites. The cookies we use are either first-party Luck PKR cookies or cookies from contracted service providers operating within our data processing agreement.

Luck PKR retains personal data only for as long as is necessary for the purpose it was collected, or as required by applicable law and regulation. The table below summarises the standard retention periods for the main categories of data we hold:

After the applicable retention period, data is securely deleted or anonymised so it can no longer be attributed to you as an individual. If you have active regulatory obligations outstanding at the time of account closure (for example, an unresolved AML investigation), data relevant to that matter will be retained until the matter is resolved.

As a registered player on Luck PKR, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@luckpkr.app. We aim to respond to all data rights requests within 30 days.

Luck PKR is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory step for all account registrations and may be repeated at any point during your time as a Luck PKR player.

If we become aware that personal data has been collected from a player who is under 18, we will immediately suspend the account, delete all associated data and return any deposited funds to the payment method used. If you are a parent or guardian and believe your child has registered on Luck PKR, please contact us at support@luckpkr.app immediately and we will investigate and act on the report within 24 hours.

Parents and guardians are encouraged to use device-level parental controls to prevent minors from accessing online gaming platforms. Luck PKR supports this approach and will provide guidance to any concerned parent who contacts our support team.

Luck PKR sends marketing communications — including promotional offers, bonus alerts and platform news — only to players who have opted in to receive them. Marketing communications are sent via email and in-app notifications. Luck PKR does not send unsolicited SMS marketing.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link at the bottom of any Luck PKR marketing email
• Updating your notification preferences in your account settings
• Contacting support@luckpkr.app with a request to remove you from marketing lists

Opting out of marketing has no impact on essential account communications. Luck PKR will still send you transactional messages — deposit confirmations, withdrawal notifications, security alerts and important account updates — regardless of your marketing preferences, as these are necessary for the operation of your account.

Players who are on a cool-off period or have self-excluded from Luck PKR are automatically removed from marketing communication lists and will not receive promotional content during their exclusion period.

Luck PKR invests in technical and organisational security measures proportionate to the sensitivity of the data we hold and the risk environment we operate in. These measures include:

• Encryption: AES-256 at rest, TLS 1.2+ in transit, bcrypt hashing for passwords.
• Access controls: Role-based access to production data systems, with all access logged and reviewed.
• Two-factor authentication (2FA): Available to all players and mandatory for all Luck PKR staff with system access.
• Intrusion detection: Continuous monitoring of platform traffic for anomalous patterns indicative of attacks or data exfiltration attempts.
• Penetration testing: Regular independent security testing of the Luck PKR platform and infrastructure.
• Incident response: A documented security incident response plan that includes mandatory notification procedures in the event of a data breach affecting player data.

Despite these measures, no internet-based system can guarantee 100% security. You can help protect your account by using a strong, unique password, enabling two-factor authentication, never sharing your login credentials and logging out fully when using shared devices.

Luck PKR reviews this Privacy Policy at least annually and whenever significant platform changes require it. When material changes are made — meaning changes that affect your rights, how we collect data or who we share it with — registered players will be notified by email and through an in-app notification at least 14 days before the change takes effect.

Minor amendments, such as clarifications, corrected typographical errors or non-substantive wording updates, may be made without advance notice. The current version of this policy is always available at luckpkr.app/privacy-policy and is dated with the last update.

Your continued use of Luck PKR after the effective date of a policy amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with a material change, you should cease using the platform and contact us to close your account and exercise your data rights.

For any privacy-related query, data access request or complaint, please reach out to the Luck PKR data team through the following channels:

• Email (preferred for data requests): support@luckpkr.app — please include "Privacy Request" in your subject line
• Live chat: Available 24/7 in-app through your logged-in Luck PKR account
• Response time: We aim to acknowledge all privacy requests within 5 business days and provide a full response within 30 days

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter through applicable regulatory channels in your jurisdiction.