Lucky 3 Privacy Policy – How We Protect Your Data in Pakistan

1 Who We Are

Lucky 3 is an online casino and sports betting platform operating at lucky3.bet, primarily serving players based in Pakistan. When this Privacy Policy refers to "Lucky 3", "we", "us", or "our", it means the entity responsible for operating the Lucky 3 platform and for decisions about how personal data is collected, stored, used, and shared.

This Privacy Policy applies to all personal data processed in connection with the Lucky 3 website, mobile site, and any associated services — including account registration, game play, sports betting, deposits, withdrawals, customer support interactions, and use of responsible gaming tools.

This Privacy Policy should be read alongside the Lucky 3 Terms and Conditions. By registering an account on Lucky 3 or using any of its services, you confirm that you have read and understood this Privacy Policy. If you have any questions about it, contact us at support@lucky3.bet before registering.

2 What Data We Collect

Lucky 3 collects only the personal data that is necessary to provide its services safely, securely, and in compliance with applicable legal and regulatory requirements. We do not collect data speculatively or unnecessarily.

2.1 Registration Data

When you create a Lucky 3 account, we collect your full legal name as it appears on your CNIC, your Pakistani mobile number, your date of birth (for age verification), and the password you choose for your account. This information is mandatory — without it, we cannot create a compliant account.

2.2 Identity Verification Data

To verify your identity as required for player protection and anti-money laundering compliance, Lucky 3 may request a copy of your Computerised National Identity Card (CNIC), a recent utility bill or bank statement confirming your address, and a selfie or photograph for facial match verification. This documentation is typically requested before processing your first significant withdrawal, or when Lucky 3's compliance systems flag an account for enhanced verification.

2.3 Financial Data

Lucky 3 collects information about your deposits and withdrawals, including the payment method used (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa, or Mastercard), transaction amounts in PKR, transaction timestamps, and transaction reference numbers. Lucky 3 does not store full card numbers or complete bank account details — this information is handled directly by our payment processors, who maintain their own security standards.

2.4 Gaming Activity Data

Lucky 3 records your game and betting activity on the platform, including games played, bets placed, stakes wagered, results, bonuses used, and session durations. This data is used for account management, dispute resolution, bonus verification, and responsible gaming monitoring.

2.5 Technical Data

When you access Lucky 3, we automatically collect certain technical information, including your IP address, device type and operating system, browser type and version, and the pages or sections of Lucky 3 you visit. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

2.6 Communications Data

When you contact Lucky 3 support — by email or live chat — we retain records of those communications, including their content, timestamps, and any attachments. This allows us to maintain continuity in customer service interactions and to refer back to previous conversations when resolving ongoing issues.

3 How We Collect Your Data

Lucky 3 collects personal data through three primary channels:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or interact with any Lucky 3 feature that requires you to input information
• Automatically — through cookies, server logs, and similar tracking technologies when you access and navigate the Lucky 3 platform
• From third parties — from identity verification providers who confirm the authenticity of documents you submit, from payment processors who confirm transaction details, and from fraud prevention services who flag known risk indicators associated with your device or IP address

4 How We Use Your Data

Lucky 3 uses your personal data for the following specific purposes:

Lucky 3 does not use your personal data for automated individual decision-making that produces significant legal or similarly significant effects without human review — including in relation to account closures, bonus decisions, or withdrawal assessments.

5 Legal Basis for Processing

Lucky 3 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

5.1 Contract Performance

The majority of data processing at Lucky 3 is necessary to perform the contract we have with you — i.e., to operate your account, process your bets and payments, and provide the gaming services you have registered to access. Without processing registration data, financial data, and gaming activity data, Lucky 3 simply cannot provide its services.

5.2 Legal Obligation

Some processing is required by law. Age verification, identity verification for AML purposes, and the retention of transaction records for defined regulatory periods are all driven by legal obligations that apply to Lucky 3 as an operator, regardless of your individual preferences.

5.3 Legitimate Interests

Lucky 3 processes certain technical data and gaming activity data based on its legitimate interests in maintaining platform security, preventing fraud, and improving service quality. Where we rely on legitimate interests, we have assessed that those interests are not overridden by your rights and freedoms.

5.4 Consent

For non-essential cookies and for any optional marketing communications, Lucky 3 relies on your consent. Consent-based processing can be withdrawn at any time — see Section 9 (Cookies) and Section 11 (Your Rights) for details on how to do this.

6 Who We Share Your Data With

Lucky 3 shares your personal data only where necessary and only with the categories of recipients described below. We do not sell your data to any third party. All third parties with whom Lucky 3 shares data are required to handle it in accordance with applicable data protection standards and may only use it for the specific purpose for which it was shared.

• Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, banking partners, and card processors receive transaction data necessary to process your deposits and withdrawals in PKR
• Identity verification providers — third-party services that verify the authenticity of CNIC documents and match selfies to identity documents as part of KYC compliance
• Fraud prevention services — specialist providers that assess device fingerprints, IP addresses, and behavioural patterns to identify fraudulent account activity
• Game providers — casino game providers (e.g., Pragmatic Play, NetEnt) receive the minimum data necessary to deliver game content to your session; they do not receive your full identity or financial data
• Regulatory authorities — Lucky 3 will disclose personal data to competent authorities where required by applicable law, court order, or regulatory request
• Customer support infrastructure — support ticket and live chat systems operated by vetted service providers under data processing agreements with Lucky 3

7 How Long We Keep Your Data

Lucky 3 retains personal data for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable legal and regulatory obligations — whichever is longer. The specific retention periods for key data categories are:

Where you request deletion of your personal data and Lucky 3 is not subject to a conflicting legal obligation requiring retention, we will delete or anonymise your data as promptly as possible — typically within 30 days of a confirmed deletion request. Anonymised data (data from which all identifying information has been removed) may be retained indefinitely for statistical and analytical purposes.

8 Payments & PKR Transactions

All financial transactions on Lucky 3 are conducted in Pakistani Rupees (PKR). When you make a deposit or withdrawal using Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa, or Mastercard, the payment processor involved will handle the transaction data directly using their own security infrastructure.

Lucky 3 receives confirmation of successful transactions from payment processors but does not store full card numbers, full bank account numbers, or full mobile wallet credentials. We store only the information needed to link a transaction to your account — such as a masked payment method identifier, transaction amount, and reference number.

Where a payment processor shares transaction data with Lucky 3, that data is handled in accordance with this Privacy Policy. Lucky 3 may use transaction history in combination with other account data for fraud detection, AML monitoring, and responsible gaming assessment purposes.

9 Cookies & Tracking Technologies

Lucky 3 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. Lucky 3 uses the following categories of cookies:

This panel is for illustration only — your actual cookie preferences can be managed from your Lucky 3 account settings or via your browser's cookie controls. Essential cookies cannot be disabled as the platform requires them to function.

You can configure your browser to refuse or delete cookies at any time. Disabling non-essential cookies will not prevent you from using Lucky 3, but may affect certain personalisation features. Disabling essential cookies will prevent you from logging in or completing payment flows.

10 How We Protect Your Data

Lucky 3 implements a layered set of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and Lucky 3's servers
• Encryption at rest for sensitive stored data including identity documents and payment references
• Hashed and salted password storage — Lucky 3 staff cannot view your account password in plain text
• Access controls that restrict internal access to personal data to staff who need it to perform specific functions
• Continuous automated monitoring of server and application logs for suspicious activity patterns
• Regular security assessments and penetration testing of the Lucky 3 platform
• Staff training on data protection responsibilities and incident response procedures

Despite these measures, no online platform can guarantee absolute security against all possible threats. If Lucky 3 becomes aware of a data security incident that is likely to result in a risk to your rights and freedoms, we will notify affected players as promptly as possible and take all reasonable steps to contain and remediate the incident.

11 Your Data Rights

As a Lucky 3 player, you have a set of rights in relation to your personal data. These rights can be exercised by contacting us at support@lucky3.bet. We will respond to all data rights requests within 30 days of receipt.

Lucky 3 will not charge a fee for exercising any of these rights in normal circumstances. If a request is manifestly unfounded, repetitive, or excessive, we reserve the right to charge a reasonable administrative fee or decline to respond, with written explanation.

12 Children & Minors

Lucky 3 does not knowingly collect or process personal data relating to persons under the age of 18. Registration on Lucky 3 requires age verification, and accounts found to belong to minors are closed immediately with all associated data reviewed in accordance with applicable child protection standards.

If you believe that a minor has registered on Lucky 3 using false age information, please contact us immediately at support@lucky3.bet. We take such reports seriously and act on them promptly. Parents and guardians are encouraged to use parental control software to prevent underage access to online gambling platforms.

13 Changes to This Privacy Policy

Lucky 3 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or the introduction of new platform features. When we make material changes — those that significantly affect how your data is processed or your rights in relation to it — we will notify registered players by email and by in-platform notification at least seven days before the changes take effect.

Minor updates — such as corrections of typographical errors or clarifications that do not alter the substance of existing terms — may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the most recent revision. The current version of this Privacy Policy is always accessible at lucky3.bet/privacy-policy.

Continued use of Lucky 3 after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not accept an updated Privacy Policy, please contact support to close your account before the changes take effect.

14 Contact Us

For any questions about this Privacy Policy, to exercise your data rights, or to report a data protection concern, please contact Lucky 3 through the following channel:

For general support queries unrelated to data protection, visit the Lucky 3 FAQ page or contact support via the standard support channels available in your account.