Lucky8 Privacy Policy — How We Protect Your Data in Pakistan

Lucky8 operates the online betting and casino platform at lucky8.cash. For the purposes of this Privacy Policy, Lucky8 is the data controller — meaning we determine the purposes for which your personal data is collected and processed. When you create a Lucky8 account, deposit funds or place a bet, you are sharing information with Lucky8 directly.

Lucky8 serves players across Pakistan — from Karachi and Lahore to Islamabad, Peshawar, Quetta and every city in between. Our platform handles PKR deposits and withdrawals, cricket betting markets, live baccarat tables, fishing games and card games. All of these activities involve the processing of personal data, and this Privacy Policy applies to all of them without exception.

If you have any question about this Privacy Policy or how Lucky8 handles your information, contact us at support@lucky8.cash at any time. We will respond within 2 business days.

Lucky8 collects personal data in three ways: information you provide directly when registering and using the platform, information collected automatically through your device and browsing behaviour, and information received from third-party verification and payment partners where necessary to operate your account securely.

Information You Provide Directly

• Registration details: Full legal name, date of birth, mobile number, email address and — where identity verification is required — CNIC number and a copy of your identity document.
• Financial details: Payment method information used for deposits and withdrawals — including Easypaisa or JazzCash account numbers, bank account details for IBFT transfers, or card numbers and billing details for Visa/Mastercard payments. Lucky8 does not store full card numbers — payment card data is handled by our certified payment processor.
• Support communications: Any messages, emails or chat transcripts you send to Lucky8 support — including the content of your query, your account details referenced in the conversation and any attachments you provide.
• KYC documentation: Where Lucky8 is required by its licensing obligations to verify your identity or source of funds, you may be asked to provide additional documents such as a utility bill, bank statement or proof of income.

Information Collected Automatically

• Device and connection data: IP address, device type, operating system, browser type and version, mobile network operator and screen resolution.
• Usage data: Pages visited on lucky8.cash, time spent on each page, game sessions played, betting markets accessed, search queries within the platform and click paths through the site.
• Transaction records: Full history of deposits, withdrawals, bets placed, game rounds played and bonus credits or deductions — maintained as part of the standard operating record of your account.
• Cookies and tracking technologies: As described further in Section 6 of this Privacy Policy.

Lucky8 uses your personal data only for the purposes described in this Privacy Policy. We do not use your data for purposes that would surprise you or that go beyond what is reasonably necessary to operate a safe, functional online betting platform for Pakistani players. The primary purposes are as follows:

• Account management: Creating, maintaining and securing your Lucky8 account — including processing logins, managing account settings and communicating account-related notifications such as withdrawal confirmations and deposit receipts.
• Payment processing: Receiving PKR deposits through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, and processing withdrawals back to your registered payment method. This requires sharing relevant data with our payment processor partners.
• Identity and fraud verification: Verifying that you are who you say you are, that you meet the minimum age requirement of 18, and that your account activity does not indicate money laundering, identity theft or other financial crime.
• Platform operation and improvement: Understanding how Pakistani players use Lucky8 so we can fix problems, improve navigation, optimise game performance and prioritise features that matter to our users.
• Responsible gaming: Monitoring account activity to identify patterns that may indicate problem gambling behaviour, and applying responsible gaming interventions where appropriate under our duty of care obligations.
• Legal and compliance obligations: Retaining records as required by our operating licence, responding to lawful requests from regulatory and law enforcement bodies, and meeting anti-money-laundering reporting obligations.
• Marketing communications (with consent): Sending you promotional emails, SMS messages or in-app notifications about Lucky8 bonuses, cricket betting offers and new game launches — but only if you have opted in. You can unsubscribe at any time as described in Section 11.

Lucky8 processes your personal data only when there is a valid legal basis to do so. The legal bases applicable to Lucky8's data processing activities are:

• Contractual necessity: Processing required to fulfil the contract between you and Lucky8 — your account registration, placing bets and processing PKR deposits and withdrawals all fall under this basis.
• Legal obligation: Processing required to comply with the laws and regulations governing Lucky8's operating licence — including KYC (Know Your Customer) verification, AML (Anti-Money Laundering) record-keeping and regulatory reporting.
• Legitimate interests: Processing that serves Lucky8's reasonable business interests and does not override your privacy rights — such as fraud prevention, platform security, product improvement and responsible gaming monitoring.
• Consent: Processing based on your explicit opt-in — specifically marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting your ability to use Lucky8.

Lucky8 does not sell, rent or trade your personal data to any third party. Data is shared only in the specific, limited circumstances described below — and in every case, the recipient is contractually required to handle your data securely and only for the stated purpose.

Lucky8 uses cookies — small text files stored on your device — and similar tracking technologies to operate core platform functions and understand how players interact with the site. This section explains what types of cookies we use and why.

• Essential cookies: Required for the platform to function at all — maintaining your login session, keeping your bet slip intact between pages, and ensuring your chosen language and interface settings are preserved. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences to improve your experience — for example, your preferred cricket tournament view or baccarat table layout. Optional but recommended for a smoother experience.
• Analytical cookies: Collect anonymised data about how users navigate lucky8.cash — which pages are visited most, where users drop off, and how long sessions last. This data helps Lucky8 improve the platform for Pakistani users. Analytics data is aggregated and not linked to individual identities.
• Security cookies: Help Lucky8 detect and prevent fraudulent login attempts, automated bot activity and suspicious account behaviour. These are a core component of platform security and cannot be disabled.

You can manage cookie preferences through your browser settings at any time. Blocking all cookies will impair your ability to log in and use Lucky8, since session management relies on essential cookies. Lucky8 does not use third-party advertising cookies and does not allow external advertising networks to place cookies on lucky8.cash.

Lucky8 invests significantly in technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. The key security measures in place are described below.

No digital platform can guarantee absolute security — but Lucky8 meets and exceeds standard industry benchmarks for protecting player data. In the event of a data breach that affects your personal information, Lucky8 will notify affected players without undue delay and take immediate steps to contain and remediate the incident.

Lucky8 retains your personal data for as long as necessary to fulfil the purposes for which it was collected — subject to any longer retention periods required by law or regulation.

• Active account data: Held for the full duration of your Lucky8 account plus a standard post-closure period required by our operating licence.
• Transaction records: PKR deposit and withdrawal records, bet histories and game round data are retained for a minimum of 5 years from the date of the transaction to meet anti-money-laundering record-keeping requirements.
• KYC and identity verification documents: Retained for the period specified under applicable AML regulations — typically 5 years from the date of account closure or the last transaction, whichever is later.
• Support communications: Retained for 2 years from the date of the last communication, unless the communication relates to a dispute or legal matter, in which case it is retained until the matter is fully resolved.
• Marketing preference data: Retained until you withdraw consent, plus a short additional period for record-keeping purposes to confirm consent was properly withdrawn.

When data is no longer required and there is no legal basis to retain it, Lucky8 deletes it securely or anonymises it so it can no longer be linked to you personally.

As a Lucky8 account holder, you have the following rights over your personal data. To exercise any of these rights, contact Lucky8 at support@lucky8.cash with your account username and the specific right you are exercising. We will respond within 30 days.

Lucky8 is strictly for adults aged 18 and over. We do not knowingly collect or process personal data from anyone under the age of 18. Our registration process includes date-of-birth verification, and we apply additional identity checks where age cannot be confirmed from registration data alone.

If Lucky8 discovers that a player account belongs to someone under 18, the account will be immediately suspended, all balances will be frozen and the account will be permanently closed after investigation. If you are a parent or guardian and believe your child has created a Lucky8 account, contact us immediately at support@lucky8.cash. We will act within 24 hours of receiving your report.

Lucky8 sends marketing communications — including bonus offers, cricket betting promotions and new game announcements — only to players who have explicitly opted in to receive them. Opting in is voluntary and does not affect your ability to use any Lucky8 service.

You can withdraw your marketing consent at any time using any of the following methods:

• Click the unsubscribe link included in every Lucky8 marketing email. Unsubscription takes effect within 48 hours.
• Update your communication preferences in the notifications section of your Lucky8 account settings.
• Email support@lucky8.cash stating that you wish to opt out of all marketing communications from Lucky8.

Please note: withdrawing marketing consent does not affect transactional communications — Lucky8 will still send you deposit confirmations, withdrawal receipts and important account notices regardless of your marketing preference. These operational communications are necessary for the safe functioning of your account and cannot be opted out of while your account remains active.

Lucky8 reviews and updates this Privacy Policy periodically — for example, when our data processing practices change, when new services are added or when legal obligations require it. When a material change is made, Lucky8 will notify registered players via email and display a notice on lucky8.cash at least 14 days before the new policy takes effect.

The "Last Updated" date at the top of this page reflects when the most recent change was made. Minor updates — such as clarifications that do not alter the substance of how your data is handled — may be made without advance notice. We recommend revisiting this Privacy Policy periodically to stay informed, particularly after you receive a policy update notification from Lucky8.

For any question, concern or request related to this Privacy Policy or the way Lucky8 handles your personal data, please contact our team directly. We take privacy queries seriously and aim to respond to all written communications within 2 business days.