Lucky 213 Privacy Policy — Your Data Is Safe With Us

Lucky 213 ("Lucky 213", "we", "us", "our") is the operator of the online gaming platform accessible at lucky213.im and any associated mobile applications. For the purposes of data protection, Lucky 213 is the data controller — meaning we determine how and why your personal information is processed.

This Privacy Policy governs the collection and use of personal data for all registered players, visitors to lucky213.im and anyone who contacts Lucky 213 through any official communication channel. It is designed to be read alongside the Lucky 213 Terms and Conditions, which form the full contractual framework between Lucky 213 and its players.

Lucky 213 is specifically designed and operated for Pakistani players. Our platform is built around Pakistani payment infrastructure, the PKR currency and the gaming preferences of the Pakistani community. This policy reflects the data handling practices appropriate for that context and player base.

Lucky 213 collects personal data through several channels — at account registration, during the KYC verification process, through your gaming and transaction activity on the platform, and through your communications with our support team. The categories of data we collect are as follows:

Lucky 213 does not collect sensitive categories of personal data — such as health information, political opinions, religious beliefs or biometric data — unless specifically required for regulatory compliance purposes, in which case we will obtain your explicit consent beforehand.

Lucky 213 uses your personal data for the following specific purposes. We do not use personal data for any purpose not listed here without first updating this policy and, where required, seeking your consent.

• Account management: Creating, maintaining and securing your Lucky 213 account, processing your login and managing your account preferences.
• Identity verification (KYC): Confirming that you are who you say you are, verifying your age as 18 or above, and confirming ownership of your registered payment methods. This is a legal requirement that Lucky 213 cannot waive.
• Payment processing: Executing PKR deposits from and withdrawals to your registered Easypaisa, JazzCash, NayaPay, SadaPay, bank account or card. Transaction records are maintained for accounting and compliance purposes.
• Game provision: Enabling you to access and play games, maintaining your gaming history, settling bets and calculating bonuses and VIP loyalty points accurately.
• Fraud prevention and anti-money laundering: Monitoring account activity for suspicious patterns, duplicate account detection, unusual transaction behaviour and compliance with applicable anti-money laundering obligations.
• Customer support: Responding to your queries, resolving complaints and maintaining a record of communications sufficient to resolve disputes fairly.
• Responsible gaming: Monitoring gaming patterns that may indicate problem gambling behaviour and facilitating the use of the responsible gaming tools available in your Lucky 213 account settings.
• Marketing communications: Sending you information about promotions, bonuses and new Lucky 213 features by email, SMS or push notification — only where you have not opted out of such communications.
• Platform improvement: Analysing aggregate, anonymised usage data to improve the Lucky 213 platform, identify technical issues and optimise the player experience for Pakistani users.

Lucky 213 processes your personal data on one or more of the following legal bases. Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before your withdrawal.

• Contractual necessity: Processing that is necessary to fulfil the player agreement between you and Lucky 213 — including account management, payment processing and game provision.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, age verification, anti-money laundering checks and transaction record-keeping.
• Legitimate interests: Processing that Lucky 213 reasonably requires for fraud prevention, platform security, dispute resolution and service improvement, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and optional personalisation features, where you have explicitly opted in and retain the right to opt out at any time.

Lucky 213 does not sell your personal data. We share your information only with the categories of recipient listed below and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banks and card networks receive the transaction data necessary to execute deposits and withdrawals. These providers process data under their own privacy policies and applicable financial regulations.
• Game software providers: Providers of the casino games, live dealer tables and sports betting markets available on Lucky 213 receive the minimum game session data necessary to operate fair gameplay and settle outcomes. They do not receive your full account profile.
• KYC verification services: Identity and document verification service providers who assist Lucky 213 in confirming player identity and age. These providers are contractually bound to use your data only for verification purposes.
• Regulatory and law enforcement authorities: Where required by applicable law, court order or regulatory instruction, Lucky 213 will disclose personal data to the relevant authority. We will notify you of such disclosure where we are legally permitted to do so.
• Professional advisers: Lawyers, accountants and auditors who provide services to Lucky 213 under strict confidentiality obligations, to the extent necessary for those services.

Financial data — your payment method details, PKR deposit and withdrawal amounts and transaction timestamps — is treated with the highest level of protection at Lucky 213. We do not store full card numbers or mobile wallet PINs on our servers. Payment processing is handled by certified payment gateway providers who maintain their own PCI-DSS compliant infrastructure.

When you complete a withdrawal from Lucky 213, we record the payment method used, the PKR amount, the timestamp and the recipient account identifier. This record is maintained for a minimum of five years to meet applicable financial record-keeping requirements. You can request a copy of your transaction history from your Lucky 213 account at any time.

KYC documents — including your CNIC or passport copy — are stored in an encrypted document management system with access restricted to authorised Lucky 213 staff involved in the verification process. These documents are not visible to customer support staff who are not involved in the KYC function, and they are deleted once the applicable legal retention period has passed.

Lucky 213 uses cookies and similar browser storage technologies on lucky213.im. A cookie is a small text file stored on your device that helps the platform remember information about your visit. The cookies we use fall into three categories:

Lucky 213 does not use third-party advertising cookies or cross-site tracking technologies. You can manage cookie preferences through your browser settings at any time. Note that disabling essential cookies will affect your ability to remain logged in and use core platform features.

Lucky 213 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the full period your Lucky 213 account is active and for a minimum of five years after account closure to meet financial record-keeping requirements.
• KYC and identity documents: Retained for five years following account closure or the last transaction, in line with applicable anti-money laundering requirements.
• Transaction records: Financial transaction data is retained for a minimum of five years from the date of the transaction.
• Support communications: Customer support correspondence is retained for three years from the date of the last communication in a thread.
• Marketing preferences: Records of your marketing consent or opt-out status are retained for the lifetime of your account to ensure we respect your stated preferences consistently.
• Technical and usage data: Anonymised analytics data may be retained indefinitely in aggregate form. Identifiable technical data (such as IP address logs) is deleted after 12 months unless required for an active security investigation.

When data is no longer needed and the applicable retention period has elapsed, Lucky 213 deletes or anonymises it securely. Deletion requests from players are acted upon within 30 days, subject to any overriding legal retention obligations.

Lucky 213 applies multiple layers of technical and organisational security to protect your personal information from unauthorised access, disclosure, alteration and destruction. Our security measures include:

• SSL/TLS encryption for all data in transit between your device and Lucky 213's servers
• AES-256 encryption for sensitive data stored in our databases, including identity document files
• Two-factor authentication available on all player accounts and mandatory for Lucky 213 staff with administrative system access
• Role-based access controls ensuring that Lucky 213 team members can only access the data necessary for their specific job function
• Automated threat detection and security monitoring operating 24/7 across our infrastructure
• Regular penetration testing and security audits conducted by independent security professionals
• Secure data centres with physical access controls, redundant power and backup systems

Despite these measures, no system is completely immune to security risks. In the event of a data breach that affects your personal information, Lucky 213 will notify affected players promptly and take immediate steps to contain and investigate the incident.

As a Lucky 213 player, you have the following rights in relation to your personal data. All requests are handled by our support team and processed within 30 days. There is no charge for exercising any of these rights.

To exercise any of these rights, contact our support team via live chat or email with your account username and a description of your request. We may need to verify your identity before processing the request to protect against unauthorised data access.

Lucky 213 is strictly for adults aged 18 and above. We do not knowingly collect or process personal data relating to individuals under 18. All registrations are subject to age verification checks. Where Lucky 213 identifies or receives credible information that an account belongs to a minor, the account is closed immediately, all data associated with it is deleted as soon as legally permissible, and any deposits are returned to the originating payment method.

If you are a parent or guardian and believe your child has registered at Lucky 213, please contact our support team immediately with the relevant account details. We will investigate and take appropriate action within 24 hours.

Lucky 213 uses gaming activity data — bet frequency, session duration, deposit patterns and game type — as part of our responsible gaming monitoring programme. This analysis is used specifically to identify players who may be experiencing difficulty managing their gaming activity so that we can proactively offer support and relevant tools.

Data processed for responsible gaming purposes is never used for marketing. If our monitoring identifies a pattern of concern on your account, you may receive a wellbeing check from our support team. This is genuinely a welfare action and not a commercial contact. You can also access responsible gaming tools — deposit limits, session timers, self-exclusion — directly from your Lucky 213 account settings at any time without waiting for a support interaction.

Self-exclusion data is retained for the full period of the exclusion plus five years, to ensure that any attempt to re-register during or after an exclusion period can be identified and prevented. This is a protective measure, not a punitive one, and is standard practice across responsible gaming platforms.

Lucky 213 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or platform features. When we make material changes — those that affect your rights or how your data is used — we will notify registered players by email and via an in-platform notification at least 7 days before the changes take effect.

The "Last updated" date at the top of this policy reflects the most recent revision. Non-material corrections — such as fixing typographical errors or clarifying existing practices without changing them — may be made without advance notice. We encourage you to review this policy periodically. Continued use of Lucky 213 following the effective date of any update constitutes your acceptance of the revised policy.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how Lucky 213 has handled your personal information, please contact us through any of the following channels:

• Live chat: Available 24/7 on lucky213.im — quickest way to reach us
• Email: support@lucky213.im — privacy and data requests are typically acknowledged within 4 hours and resolved within 30 days

When contacting us about a data rights request, please include your registered account username and a clear description of your request. This helps our team process your request without unnecessary back-and-forth. We may ask you to verify your identity before actioning certain requests to protect your account from unauthorised access.