Lucky 95 Privacy Policy – How We Protect Your Data

Lucky 95 is an online gaming and entertainment platform built specifically for players in Pakistan. We take the privacy and security of your personal data seriously. This Privacy Policy sets out clearly and honestly what information we collect, why we collect it, how it is stored and who it may be shared with when you use Lucky 95 — whether that's through the website at lucky95.onl or through the Lucky 95 Android app.

By registering an account on Lucky 95, you confirm that you have read and understood this Privacy Policy. If you do not agree with how we handle personal data, please do not register an account or use the platform.

This policy should be read alongside the Terms and Conditions and the Responsible Gaming page, which together make up the full framework governing your relationship with Lucky 95.

Lucky 95 collects personal information in two ways — information you provide directly when registering or using the platform, and information collected automatically as you interact with the site or app.

Information you provide:

• Full name and date of birth (required for account registration and age verification)
• Email address and mobile number
• Payment method identifiers — for example, your JazzCash or Easypaisa mobile number, or the last four digits of a bank card
• Identity documents submitted for verification purposes (such as a CNIC copy where required)
• Any communication you send to Lucky 95 support via live chat or email

Information collected automatically:

• Device type, operating system and browser version
• IP address and approximate location (country and city level)
• Session data including pages visited, games played, deposit and withdrawal amounts and timestamps
• Cookie data and similar tracking identifiers (see Section 9 for full cookie details)

The data Lucky 95 collects is used for specific, legitimate purposes. We do not use your data for anything beyond what is described here without updating this policy and notifying you.

Marketing communications from Lucky 95 — including bonus offers tied to PSL season, T20 tournaments and other promotions — are only sent to users who have opted in to receive them. You can update this preference at any time from account settings.

Lucky 95 processes your personal data on the following grounds:

• Contract performance: Processing your registration details, deposits and withdrawals is necessary to provide the service you signed up for. Without this data, we cannot operate your account.
• Legitimate interests: Fraud detection, security monitoring and platform analytics are carried out in the legitimate interest of protecting both Lucky 95 and its users. These activities do not override your fundamental privacy rights.
• Consent: Marketing communications and non-essential cookies are processed only on the basis of your explicit consent, which you can withdraw at any time.
• Legal obligation: Certain records — particularly transaction histories — may be retained as required for fraud investigation, security reviews and to meet our obligations as a platform operating in Pakistan.

Lucky 95 does not sell, rent or trade your personal data. We share data only with the categories of third parties listed below, and only to the minimum extent necessary for them to perform their function:

• Payment processors: JazzCash, Easypaisa, Raast, bank transfer partners and card networks receive the transaction data needed to process your PKR deposits and withdrawals. They operate under their own privacy policies and are independently responsible for that data.
• Game suppliers: Third-party game providers that power slots, live games and bingo on Lucky 95 receive a session token and game result data. They do not receive your name, CNIC or full contact details.
• Analytics providers: Anonymised, aggregated usage data is shared with analytics tools to help Lucky 95 understand how the platform is used and where it can be improved. This data cannot be linked back to an individual user.
• Security and fraud prevention services: Device fingerprint and IP data may be shared with security partners to detect fraudulent account activity and protect the integrity of the platform.
• Legal requirements: Lucky 95 may disclose personal data if required to do so by a valid legal process or to protect the rights and safety of Lucky 95, its users or the public.

All financial transactions on Lucky 95 are denominated in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal, the payment flow works as follows:

• You select your payment method — JazzCash, Easypaisa, Raast, Bank Transfer or card — from within your Lucky 95 account.
• You are directed to that provider's secure payment interface to complete the transaction. Lucky 95 does not host the payment form itself.
• The provider sends Lucky 95 a transaction reference confirming success or failure. Lucky 95 records this reference, the amount in PKR and the timestamp against your account.
• Lucky 95 never sees or stores your full payment credentials — mobile wallet PIN, full card number or bank account password.

Transaction records are retained for security and account management purposes. If you have a query about a specific transaction, contact Lucky 95 support with the date, amount and payment method, and the team will investigate.

Lucky 95 retains your personal data for as long as your account is active and for a defined period after account closure. The general retention principles are:

• Active account data (name, contact details, preferences) is retained for the duration of your account and for up to 2 years after account closure.
• Transaction records (deposits, withdrawals, bonus usage) are retained for a minimum of 5 years for security and fraud prevention purposes.
• Support communications are retained for up to 2 years after the matter is resolved.
• Identity verification documents are retained for the duration of your account and may be held for an additional period as required by security obligations.
• Anonymised analytics data has no fixed deletion date, as it cannot be linked back to an individual.

When data is no longer required, it is securely deleted or anonymised. You may request early deletion of your personal data — see Section 10 for your rights.

Lucky 95 uses a range of technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure:

• SSL/TLS encryption is enforced on all connections to lucky95.onl and the Lucky 95 Android app. Your data is encrypted in transit at all times.
• Password hashing: Account passwords are stored using strong one-way hashing. Lucky 95 staff cannot view your password — only you know it.
• Access controls: Access to user data within Lucky 95's internal systems is restricted to staff who genuinely need it to perform their role. All access is logged.
• Session security: Account sessions are managed with secure tokens that expire after a period of inactivity. Logging out from your account invalidates your current session token immediately.
• Fraud monitoring: Automated systems monitor for unusual login patterns, multiple account attempts and suspicious transaction behaviour. Flagged accounts are reviewed by the security team before any action is taken.

Lucky 95 uses cookies and similar technologies to make the platform function correctly and to understand how it is being used. Cookies are small text files stored on your device by your browser when you visit the site.

The types of cookies used on Lucky 95 are:

• Essential cookies: Required for the platform to work. These manage your login session, remember your language preference and keep your account secure. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to understand how users navigate the platform — which pages are visited most, how long sessions last and which games are most popular. This data is aggregated and anonymised. Analytics cookies are set only with your consent.
• Preference cookies: Remember your settings and choices — such as display preferences or previously selected deposit methods — so you don't have to re-enter them every visit.

When you first visit Lucky 95, a cookie consent banner is displayed. You can choose to accept all cookies or essential-only. You can change your cookie preferences at any time from the cookie settings link in the footer. Note that blocking all cookies will affect how the platform functions.

As a Lucky 95 user, you have the following rights regarding your personal data. To exercise any of these rights, contact Lucky 95 support via live chat or at [email protected], including your registered username and a description of your request.

• Right of access: You can request a copy of the personal data Lucky 95 holds about you. We will provide this within 30 days of receiving a valid request.
• Right to correction: If any personal data we hold is inaccurate or out of date, you can request that it be corrected. Basic details like your email address or mobile number can be updated directly from your account settings.
• Right to deletion: You can request that your personal data be deleted. Certain data — such as transaction records — may be retained for security reasons even after deletion is requested. We will inform you of anything that cannot be deleted and explain why.
• Right to withdraw consent: Where we rely on your consent to process data (for example, marketing emails or analytics cookies), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
• Right to data portability: You can request a copy of your data in a structured, commonly used format so that you can take it elsewhere if you wish.
• Right to object: You can object to processing carried out on the basis of legitimate interests, including direct marketing. On receiving an objection to marketing, Lucky 95 will stop sending promotional communications immediately.

Lucky 95 is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Age verification is carried out as part of the registration process and may be repeated at withdrawal stage.

If Lucky 95 discovers or has reason to believe that a registered account belongs to someone under 18, that account will be immediately suspended. Any deposits made will be returned to the original payment method after investigation. No winnings from an underage account will be paid out.

If you are a parent or guardian and believe your child has registered on Lucky 95, please contact support immediately so the matter can be investigated and the account closed. We take underage access very seriously and work to prevent it through our verification processes.

Lucky 95 may update this Privacy Policy from time to time to reflect changes in how we operate, improvements to our security practices or updates to the platform's features. When changes are made, the "Last Updated" date at the top of this page will be revised.

For material changes — those that meaningfully affect how we collect or use your personal data — registered users will be notified via in-account notification or email at least 7 days before the change takes effect. Minor clarifications or formatting updates may be applied without advance notice.

Continuing to use Lucky 95 after a policy update has been published constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, please stop using the platform and contact support to arrange account closure and any applicable data deletion.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how Lucky 95 handles personal information, please get in touch through the following channels:

When contacting us about a data rights request, please include your registered username, the email address associated with your account and a clear description of your request. This helps us locate your records and respond accurately.