luck19 Privacy Policy —
How We Handle Your Personal Data

1. Introduction

This Privacy Policy ("Policy") is issued by luck19 ("luck19", "We", "Us", "Our") and applies to all personal data collected from players, visitors, and users ("You", "Your", "Player") who access or use the luck19 online casino and sports betting platform available at luck19.net and any associated mobile or web applications (collectively, the "Platform").

luck19 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy describes our practices in detail — what we collect, why we collect it, how it is used, how long it is retained, and what choices and rights you have with respect to your own personal information.

By creating a luck19 account, accessing the Platform, or providing personal information to luck19 in any form, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please do not use the luck19 Platform.

2. Data Controller

For the purposes of applicable data protection law, luck19 acts as the data controller in respect of all personal data collected through the luck19 Platform. As data controller, luck19 determines the purposes for which and the means by which personal data is processed.

Where luck19 engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those parties act as data processors under luck19's written instruction and are bound by appropriate data processing agreements. luck19 retains responsibility for the lawful and appropriate processing of your data at all times.

If you have any questions about how luck19 processes your personal data, or wish to exercise any of your data rights described in Section 11 of this Policy, please contact luck19 using the details provided in Section 15.

3. Personal Data We Collect

luck19 collects personal data across several categories depending on how you interact with the Platform. The following table summarises the categories of personal data luck19 may collect and hold:

luck19 does not intentionally collect any special categories of personal data (such as health data, political opinions, or biometric data) unless specifically required for responsible gaming interventions with the Player's explicit consent.

4. How We Collect Your Data

luck19 collects personal data through the following mechanisms:

4.1 Direct Collection

The majority of personal data luck19 holds about you is provided directly by you. This includes data provided when you register a luck19 account, complete identity verification, make a deposit or withdrawal request, contact support, or update your account settings.

4.2 Automated Collection

When you access the luck19 Platform, we automatically collect certain technical data about your device and session through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser type, referral source, and page interaction data. See Section 10 for full details of our cookie practices.

4.3 Third-Party Sources

luck19 may receive personal data about you from authorised third parties in limited circumstances, including:

• Identity verification providers who confirm the authenticity of identity documents;
• Payment processors who confirm the status of deposit or withdrawal transactions;
• Fraud prevention and anti-money laundering screening services;
• Responsible gaming self-exclusion registers, where you have registered with such a service.

5. How luck19 Uses Your Personal Data

luck19 uses personal data collected from Pakistani players for the following purposes:

• Account Management: To create, maintain, and secure your luck19 account, authenticate your identity at login, and process account changes you request.
• Identity Verification (KYC): To verify that you meet the 21+ age requirement and that your identity documents are genuine, in compliance with responsible gaming and anti-fraud obligations.
• Payment Processing: To process your PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or bank transfer, and to process your withdrawal requests promptly and accurately.
• Gaming Services: To deliver the games, betting markets, bonus offers, and other Platform features that constitute the luck19 service.
• Customer Support: To respond to your queries, resolve complaints, process responsible gaming requests, and provide 24/7 live chat support in English and Urdu.
• Legal Compliance: To meet our anti-money laundering, responsible gaming, age verification, and other regulatory obligations.
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, and security breaches on the Platform.
• Platform Improvement: To analyse aggregated usage patterns and improve the luck19 Platform's functionality, performance, and user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and updates about luck19 — but only where you have explicitly opted in to receive such communications.

6. Legal Basis for Processing

luck19 processes personal data only where there is a valid legal basis to do so. The primary legal bases on which luck19 relies are:

• Contractual Necessity: Processing required to perform the contract between you and luck19 — including operating your account, processing payments, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering laws, age verification requirements, and responsible gaming regulations.
• Legitimate Interests: Processing carried out to pursue luck19's legitimate business interests where these do not override your own interests or rights — including fraud prevention, platform security, and service improvement.
• Consent: Where no other legal basis applies, luck19 will request your explicit consent before processing your data — most commonly for marketing communications. You may withdraw consent at any time without affecting any prior lawful processing.

7. Data Sharing & Disclosure

luck19 does not sell your personal data. We may share your personal data with third parties only in the following limited circumstances:

7.1 Authorised Service Providers

luck19 engages carefully selected third-party providers who process personal data on our behalf under written data processing agreements. These include identity verification services, payment processors (including Pakistani mobile money operators and banking partners), cloud infrastructure providers, fraud prevention services, and customer support platform providers. These parties are contractually prohibited from using your data for any purpose other than providing services to luck19.

7.2 Regulatory and Legal Authorities

luck19 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required by applicable law, court order, or regulatory directive. luck19 will notify affected Players of such disclosures wherever legally permitted to do so.

7.3 Responsible Gaming Registers

Where a Player has requested self-exclusion, luck19 may share relevant account information with licensed gambling self-exclusion registers to give effect to that request and prevent the Player from circumventing their own self-exclusion through alternative accounts or platforms.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of luck19's business assets, personal data held by luck19 may be transferred to the acquiring entity. Players will be notified of any such transfer and the Privacy Policy of the new entity prior to any change in the use of their personal data.

8. Data Retention

luck19 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention principles applied by luck19 are as follows:

• Active Account Data: Retained for the duration of your luck19 account and for a minimum period of five (5) years following account closure, to satisfy anti-money laundering and regulatory record-keeping obligations.
• Identity Verification Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial regulatory requirements.
• Gaming History: Retained for a period of five (5) years following each gaming session, for regulatory audit and responsible gaming purposes.
• Support Correspondence: Retained for three (3) years following resolution of the relevant support interaction.
• Marketing Consent Records: Retained for three (3) years following the withdrawal of consent, as evidence of the consent history.
• Technical / Log Data: Typically retained for twelve (12) months for security and fraud analysis purposes, subject to aggregation and anonymisation thereafter.

Upon expiry of the applicable retention period, luck19 will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you.

9. Security Measures

luck19 implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and luck19's servers;
• Encryption of sensitive data at rest, including financial account details and identity documents;
• Role-based access controls ensuring that luck19 staff can only access personal data where strictly necessary for their role;
• Multi-factor authentication requirements for all internal system access by luck19 personnel;
• Regular security audits, penetration testing, and vulnerability assessments of the Platform;
• Automated anomaly detection systems that identify and alert on unusual account activity or access patterns;
• Secure, geographically redundant data storage with regular encrypted backups.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, luck19 will notify you without undue delay and will take all necessary steps to contain the breach and prevent recurrence.

10. Cookies & Tracking Technologies

luck19 uses cookies and similar tracking technologies on its Platform to ensure the site functions correctly, to analyse usage patterns, and to remember your preferences. A cookie is a small text file placed on your device when you visit a website.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without preventing Platform use.
• Functional Cookies: Remember your preferences such as language settings, account settings, and last-visited game categories to personalise your luck19 experience.
• Analytical Cookies: Collect anonymised usage data to help luck19 understand how players interact with the Platform and identify areas for improvement. No individual player is identifiable from this data.
• Fraud Prevention Cookies: Used to detect and prevent fraudulent sessions, bonus abuse, and account security threats.

10.2 Managing Cookies

You may configure your browser to refuse some or all cookies or to alert you when cookies are being set. Please be aware that disabling strictly necessary cookies will prevent you from accessing your luck19 account and using the Platform. Analytical and functional cookies can be disabled through your browser settings without affecting core Platform functionality.

11. Your Data Rights

As a luck19 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact luck19 support using the details in Section 15. luck19 will respond to all valid rights requests within a reasonable timeframe and at no charge to you.

Please note that certain rights are subject to exceptions — for example, luck19 cannot delete identity verification or financial transaction records that it is legally required to retain. In such cases, luck19 will explain the applicable exception clearly when responding to your request.

12. Minors

The luck19 Platform is strictly restricted to individuals aged 21 and above. luck19 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the luck19 registration process and is enforced rigorously.

If luck19 discovers or is informed that personal data has been collected from a person under the age of 21, we will take immediate steps to close the relevant account, delete all associated personal data, and report the matter to appropriate authorities where required.

Parents and guardians who are concerned that a minor may have registered a luck19 account are urged to contact luck19 support immediately using the contact details in Section 15. luck19 treats all such reports as a highest-priority matter.

13. International Data Transfers

luck19 primarily stores and processes personal data within its core infrastructure. Where personal data is transferred to or processed by service providers located outside Pakistan, luck19 ensures that appropriate safeguards are in place to protect your data. These safeguards may include standard contractual clauses, data processing agreements with adequate data protection provisions, or transfers to jurisdictions that provide an adequate level of data protection as assessed by luck19.

luck19 will not transfer personal data to any country or jurisdiction that does not provide adequate protection for that data without first implementing appropriate contractual or technical safeguards and, where required, obtaining your explicit consent for such transfer.

14. Changes to This Privacy Policy

luck19 may update this Privacy Policy from time to time to reflect changes in applicable law, our data practices, or the services we provide. When we make material changes to this Policy, we will notify you by email or through a prominent notice on the luck19 Platform, with a minimum of fourteen (14) days' notice before the changes take effect.

The version date at the top of this Policy indicates when it was last reviewed. We encourage you to review this Policy periodically to stay informed of how luck19 protects your personal data. Continued use of the luck19 Platform after the effective date of any updated Policy constitutes acceptance of the revised terms.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way luck19 handles your personal data, please contact our support team through any of the following channels:

• Live Chat: Available 24/7 directly through the luck19 Platform, in English and Urdu. This is the fastest way to reach us for urgent data concerns.
• Email: [email protected] — please include "Privacy Request" in the subject line so your message is routed to the correct team. We aim to respond within 48 hours.

For formal data rights requests — such as access requests, erasure requests, or data portability requests — please contact us via email with the subject line "Data Rights Request" and include your full name, registered email address or mobile number, and a description of your request. luck19 may ask you to verify your identity before processing any data rights request to protect the security of your personal information.