Privacy Policy – How luckyi8 Protects Your Data in Pakistan

luckyi8 operates the online gaming and sports betting platform accessible at luckyi8.ws. For the purposes of this Privacy Policy, luckyi8 is the data controller — meaning we determine the purposes and means of processing your personal data.

luckyi8 is built specifically for the Pakistani market. Our operational focus, customer support team, payment infrastructure and data handling practices are all oriented toward serving Pakistani players with the level of transparency and care that Pakistani consumers deserve.

Our data protection contact is reachable at support@luckyi8.ws. All data-related enquiries — including access requests, correction requests and deletion requests — should be directed to this address. We acknowledge all data requests within 48 hours and provide a substantive response within 30 days.

luckyi8 collects personal data through several channels. Below is a complete breakdown of the categories of data we collect, why we collect each type and when the collection occurs.

We do not collect sensitive personal data such as biometric data beyond what is strictly required for identity verification, religious beliefs, political opinions or health data unless specifically required by law.

luckyi8 uses your personal data for specific, legitimate purposes only. We do not use your data for any purpose not listed below without obtaining your consent first.

• Account management: Creating and maintaining your luckyi8 account, processing your login and keeping your account details up to date.
• Payment processing: Processing PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payments; processing withdrawal requests to your registered payment method; maintaining your PKR wallet balance accurately.
• Identity verification (KYC): Verifying your identity using your CNIC to comply with anti-money laundering obligations and to protect both you and luckyi8 from fraud.
• Gaming services delivery: Making the luckyi8 game library, betting markets, crash games, jackpot slots and all other platform features available to you and recording your gaming activity for dispute resolution and audit purposes.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour; enforcing player-set deposit limits, session limits and self-exclusion requests.
• Customer support: Responding to your queries, complaints and requests via live chat and email; maintaining support history to resolve disputes fairly.
• Security and fraud prevention: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse and unauthorised access using technical and behavioural analysis.
• Platform improvement: Using anonymised, aggregated analytics data to understand how Pakistani players use luckyi8 and to improve the platform, user interface and game selection.
• Marketing communications: Sending promotional emails, bonus notifications and platform updates to registered players — but only where you have not opted out of marketing communications. You can unsubscribe at any time.
• Legal compliance: Retaining records to comply with applicable legal and regulatory obligations including anti-money laundering requirements.

Every data processing activity at luckyi8 is carried out under one of the following legal bases:

• Contractual necessity: Processing your registration data, payment data and gaming activity records is necessary to fulfil our contract with you as a luckyi8 player. Without this processing, we cannot operate your account or deliver the services you've signed up for.
• Legal obligation: KYC/CNIC verification, anti-money laundering record-keeping and fraud reporting are required by applicable legal and regulatory obligations. We must process this data regardless of consent.
• Legitimate interests: Security monitoring, fraud prevention, platform analytics and responsible gaming monitoring are carried out on the basis of luckyi8's legitimate interest in operating a safe, fair and sustainable platform. We balance this against your privacy rights before relying on this basis.
• Consent: Marketing communications and non-essential cookies are processed on the basis of your consent. You can withdraw consent at any time without affecting processing carried out before withdrawal.

luckyi8 does not sell your personal data to any third party. We share data with third parties only in the specific, limited circumstances described below:

• Payment processors: To process your deposits and withdrawals, luckyi8 shares necessary payment data with Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking networks and card processing partners. These processors receive only the minimum data required to complete your transaction and are bound by their own privacy and security standards.
• Identity verification providers: Where we use third-party services to assist with CNIC verification or liveness checks during KYC, those providers receive your verification documents under strict data processing agreements. They may not use your data for any other purpose.
• Game software providers: The third-party game providers whose titles appear on luckyi8 receive anonymised session data for game integrity purposes. They do not receive your name, CNIC, mobile number or payment details.
• Analytics providers: We use analytics services that process anonymised, aggregated data about platform usage. No personally identifiable information is shared with analytics providers.
• Legal and regulatory authorities: luckyi8 will disclose personal data to law enforcement, regulatory bodies or courts where we are legally required to do so, where there is a legal obligation to report suspicious activity, or where disclosure is necessary to protect the safety of players or the public.
• Business succession: In the event of a merger, acquisition or sale of the luckyi8 business, your data may be transferred as part of that transaction. You will be notified before any transfer takes place and given the opportunity to exercise your data rights.

luckyi8.ws uses cookies and similar tracking technologies to operate the platform correctly, remember your preferences and understand how Pakistani players interact with the site. Here is a breakdown of the cookie types we use:

You can manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling essential cookies will affect the functionality of your luckyi8 account — you may not be able to log in or play games if essential cookies are blocked.

luckyi8 does not use advertising cookies or third-party tracking pixels that would share your browsing behaviour with advertising networks.

luckyi8 takes the security of Pakistani players' personal data seriously. The following technical and organisational measures are in place to protect your data:

• Encryption in transit: All connections to luckyi8.ws use 256-bit SSL/TLS encryption. Your data cannot be intercepted in a readable form while in transit.
• Encryption at rest: Sensitive data including CNIC documents, password hashes and payment references are stored encrypted in our databases. Even in the event of unauthorised database access, this data cannot be read in plain text.
• Access controls: Personal data is accessible only to luckyi8 staff members who require it to perform their job. Access is role-based and logged. No staff member has unrestricted access to all player data.
• Two-factor authentication: Internal luckyi8 systems that hold player data require two-factor authentication for staff access. We strongly recommend that players also enable two-factor authentication on their own luckyi8 accounts.
• Regular security audits: luckyi8 conducts periodic security reviews of its data handling practices, infrastructure and access controls.
• Data breach response: In the unlikely event of a data breach that affects your personal data, luckyi8 will notify affected players within 72 hours of becoming aware of the breach, describing what happened and what steps we are taking.

luckyi8 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal obligations. The following retention periods apply:

• Active account data (registration details, gaming history, transaction records): Retained for the duration of your active luckyi8 account plus 5 years after account closure, in compliance with standard financial record-keeping requirements.
• KYC / Identity verification documents: Retained for 5 years after account closure or the last transaction date, whichever is later, in compliance with anti-money laundering regulations.
• Payment transaction records: Retained for 5 years after each transaction date in accordance with financial record-keeping obligations.
• Customer support communications: Retained for 3 years from the date of the communication or the resolution of any related dispute, whichever is later.
• Analytics and usage data: Anonymised aggregated data has no fixed retention limit. Personally identifiable session data is anonymised after 12 months.
• Marketing consent records: Retained for 3 years from the date consent was given or withdrawn, to demonstrate compliance with consent obligations.

When a retention period expires, data is securely deleted or irreversibly anonymised. luckyi8 does not retain data beyond what is legally required or operationally necessary.

As a player registered at luckyi8, you have the following rights over your personal data. To exercise any of these rights, email support@luckyi8.ws with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and provide a full response within 30 days.

luckyi8 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes a date of birth field and age verification is applied to all accounts.

If a parent or guardian believes their child has created a luckyi8 account, they should contact us immediately at support@luckyi8.ws. We will investigate and, if confirmed, close the underage account, delete the associated personal data and return any deposits made.

We encourage parents and guardians in Pakistan to use device-level parental controls to prevent underage access to online gaming platforms. luckyi8 also supports the use of third-party parental control software as part of our responsible gaming commitment.

luckyi8 reviews this Privacy Policy periodically and updates it when necessary to reflect changes in how we operate, changes in the services we offer or changes in applicable law. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Send an email notification to all registered luckyi8 players at least 7 days before the changes take effect.
• Display a prominent in-platform notification upon your next login.

Continued use of luckyi8 after the effective date of a policy update constitutes acceptance of the updated policy. If you do not accept material changes, you may request account closure and we will return your eligible PKR balance in full.

For any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact our data protection team: