luck101 Privacy Policy

luck101 is committed to protecting the privacy and personal data of every player who interacts with our platform. Whether you are based in Lahore, Karachi, Islamabad, Faisalabad, or any other city across Pakistan, you deserve to know precisely how your information is handled from the moment you register an account with us.

This Policy sets out, in clear and straightforward legal-English terms, the categories of personal data we collect, the specific purposes for which we process that data, the legal grounds that authorise such processing, the circumstances under which data may be shared with third parties, the international transfer mechanisms we rely upon, and the full spectrum of rights available to you as a data subject.

luck101 takes its data protection obligations seriously. We operate in accordance with internationally recognised data protection principles and align our practices with applicable privacy frameworks as required under our international gaming licence. We review and update this Policy regularly to ensure it accurately reflects our current data practices. The date of the most recent revision is displayed at the top of this page.

For the purposes of this Privacy Policy, the data controller responsible for the collection and processing of your personal data is luck101, operating the platform accessible at luck101.pro. luck101 operates under an international gaming licence and is committed to maintaining the highest standards of player data protection as a condition of that licence.

All data protection queries, rights requests, and complaints should be directed to our dedicated support team, contactable at [email protected]. We will acknowledge all data-related correspondence within 5 business days and aim to resolve requests within 30 days, or sooner where operationally possible.

luck101 collects personal data across several categories, depending on the nature of your interaction with the Platform. The table below summarises the primary data categories and specific data points collected:

We do not collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, health data (except where voluntarily disclosed in relation to responsible gaming support), or biometric data beyond what is required for standard identity document verification.

luck101 collects personal data through the following channels and mechanisms:

• Direct submission: Information you actively provide during account registration, identity verification, deposit and withdrawal transactions, support contact, and responsible gaming tool activations.
• Automated technical collection: Technical data including IP addresses, device fingerprints, session timestamps, and browser information is collected automatically as part of standard platform operation and security monitoring.
• Payment processors: When you transact via EasyPaisa, JazzCash, HBL, UBL, or Meezan Bank, the relevant payment processor shares transaction confirmation data with luck101 necessary for deposit crediting and withdrawal verification.
• KYC verification partners: Where third-party identity verification services are engaged to process your CNIC or passport, those partners share the outcome of verification checks with luck101. Document images are processed within our secure pipeline.
• Cookie and analytics tools: Aggregate, anonymised analytics data is collected via on-platform analytics to understand how players navigate the platform and to improve usability. This data is not linked to individual player identities for marketing purposes.

luck101 uses your personal data exclusively for the following defined and legitimate purposes:

• Account creation and management: To register your Account, authenticate your identity at login, and manage your Account throughout its lifecycle on the Platform.
• KYC and age verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with our international gaming licence obligations and anti-money laundering (AML) compliance requirements.
• Payment processing: To process your deposits and withdrawals in PKR via EasyPaisa, JazzCash, and supported banking channels, including transaction reconciliation and fraud detection.
• Game provision and personalisation: To deliver our casino, live casino, and sports betting services to you, and to present game recommendations based on your play history where you have consented to personalisation.
• Customer support: To respond to your queries, resolve disputes, process complaints, and maintain a record of communications for quality assurance and dispute evidence purposes.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behaviour and, where appropriate, to apply proactive responsible gaming measures in line with our licence obligations and duty of care.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multiple account registrations, money laundering, and any other prohibited conduct as defined in our Terms & Conditions.
• Regulatory compliance: To fulfil our obligations to the relevant gaming regulatory authority, including record-keeping, reporting, and audit requirements under our international gaming licence.
• Marketing communications (where consented): To send you information about promotions, bonuses, and new game releases where you have explicitly opted in to marketing communications. You may withdraw this consent at any time via your Account settings or by contacting our support team.

Every processing activity carried out by luck101 in relation to your personal data is grounded in one or more of the following lawful bases:

• Contract performance: Processing necessary to fulfil our obligations to you under the luck101 Terms & Conditions, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws, regulations, and regulatory requirements under our gaming licence, including KYC obligations, AML reporting, and data retention mandates.
• Legitimate interests: Processing carried out for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications and non-essential personalisation features, which relies on your freely given, specific, and informed consent and which you may withdraw at any time without detriment.

luck101 does not sell, rent, or commercially trade your personal data to any third party. We share your data only in the following defined and controlled circumstances:

• Payment processors: EasyPaisa, JazzCash, HBL, UBL, Meezan Bank, Visa, and Mastercard receive the minimum data necessary to process your deposits and withdrawals. These partners are governed by their own regulatory obligations and strict data processing agreements.
• KYC verification providers: Accredited third-party identity verification partners receive identity document data solely for the purpose of verifying your identity and age in compliance with our licensing obligations.
• Game content providers: Third-party game studios that supply casino games to the luck101 Platform may receive anonymised session data necessary for game delivery. No personally identifiable information is shared with game studios for marketing or profiling purposes.
• Regulatory and law enforcement authorities: luck101 may disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or regulatory directive. Such disclosures are made in strict compliance with applicable legal requirements.
• Professional advisors: Legal, accounting, and audit professionals engaged by luck101 may access personal data in the course of providing professional services, subject to strict confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or transfer of substantially all of luck101's assets, player data may be transferred to the successor entity. Players will be notified of any such transfer and the privacy practices of the successor entity prior to the transfer taking effect.

As an internationally licensed gaming platform, luck101 may process and store personal data on servers located in jurisdictions outside Pakistan. Where personal data is transferred internationally, luck101 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under our licensing jurisdiction's applicable data protection framework.

Safeguards for international data transfers include:

• Standard contractual clauses (SCCs) with all data processors and sub-processors located outside the primary data processing jurisdiction.
• Data processing agreements requiring recipient organisations to maintain equivalent data security and privacy standards.
• Transfer only to jurisdictions or service providers recognised as providing adequate levels of data protection under applicable frameworks.

If you would like specific information about the international transfer mechanisms applicable to your personal data, please contact our support team at [email protected].

luck101 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymised data is retained for aggregate statistical or platform improvement purposes, it no longer constitutes personal data and is not subject to data protection obligations.

luck101 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies serve a range of functions, from keeping you logged in during a session to helping us understand how players use the Platform in aggregate.

The types of cookies used on luck101 are as follows:

• Strictly Necessary Cookies: These are essential for the Platform to function and cannot be switched off. They include session authentication cookies, security tokens, and cookies that remember your cookie preferences. No opt-out is available for these cookies as they are required for core functionality.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, display settings, and responsible gaming tool configurations, to provide a more personalised experience. You can disable these without affecting core functionality, though some features may behave differently.
• Analytics Cookies: Aggregate, anonymised data about how players interact with the Platform is collected via analytics cookies. This data helps us identify usability issues, popular content, and areas for improvement. Analytics data is not linked to your individual identity.

You can manage and control cookies through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to use the Platform. For information on how to manage cookies in your specific browser, refer to your browser's help documentation.

luck101 implements a comprehensive, multi-layered security framework designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption across all data transmission channels, including account login, payment processing, and API communications.
• Data-at-rest encryption for all stored personal data, including identity documents, financial records, and gaming history held on our servers.
• Access controls and least-privilege principles ensuring that luck101 staff can only access personal data to the extent necessary for their specific job function. All data access is logged and subject to audit.
• Multi-factor authentication (MFA) available for player accounts and mandatory for all administrative access to backend systems containing player data.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals to identify and remediate potential weaknesses in our platform and infrastructure.
• Incident response procedures ensuring that any suspected personal data breach is investigated promptly, contained, and — where required under applicable law — reported to the relevant regulatory authority and affected players within the required timeframe.

As a data subject, you hold a comprehensive set of rights in relation to the personal data that luck101 holds about you. These rights are summarised below. To exercise any of these rights, please contact our support team at [email protected] with your request clearly described and your Account details for verification purposes.

• Right of Access: You have the right to request a copy of all personal data we hold about you, together with information about how it is being processed. We will provide this information in a structured, commonly used, machine-readable format where technically feasible.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that this right is subject to our legal obligation to retain certain data for the periods set out in Section 9.
• Right to Restrict Processing: You may request that we restrict our processing of your personal data in certain circumstances — for example, while we are verifying the accuracy of data you have contested, or pending the outcome of an objection you have raised.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used format and to transmit it to another data controller.
• Right to Object: You have the right to object to processing based on our legitimate interests at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.
• Right not to be Subject to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing — including profiling — that produce legal or similarly significant effects, except where necessary for contract performance, authorised by law, or based on your explicit consent.

We will respond to all rights requests within 30 days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further two months, notifying you accordingly. All rights requests are free of charge unless manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee.

luck101 is strictly an adult platform. Access to our services is only permitted for individuals who are aged 21 years or older. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in our registration and KYC process, and we take a zero-tolerance approach to underage access.

If we become aware that we have inadvertently collected personal data from a minor, we will immediately suspend the associated Account, delete all personal data relating to that individual, and — where required — report the matter to the relevant regulatory authority.

The luck101 Platform does not contain links to third-party websites for advertising or referral purposes. Any informational references to external payment processors such as EasyPaisa or JazzCash are made solely in the context of describing our supported payment methods and do not constitute endorsement of, or data-sharing arrangements with, those third parties beyond what is described in Section 7 of this Policy.

luck101 accepts no responsibility or liability for the privacy practices of any third-party services that players may independently access. If you follow a link to an external site from any context outside the luck101 Platform itself, we recommend reviewing that site's own privacy policy before submitting any personal data.

luck101 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the services we offer. When we make material changes to this Policy, we will notify registered players by email and/or via a prominent notice displayed on the Platform prior to the changes taking effect.

The date of the most recent revision is always displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how we are protecting your personal data. Your continued use of the luck101 Platform following notification of any changes constitutes your acceptance of the revised Policy.

Where a proposed change materially alters the basis on which we process data that was collected under a prior version of this Policy, we will seek fresh consent from affected players where required by applicable law before the new processing begins.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way luck101 processes your personal data, our dedicated support team is available to assist you. You can reach us at:

If you are not satisfied with our response to a privacy concern or data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the gaming regulatory body that oversees our international gaming licence. We take all complaints seriously and will cooperate fully with any regulatory investigation.

We genuinely value the trust that players from Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan place in us when they share their personal data with luck101. Protecting that trust is not just a legal obligation for us — it is a core part of who we are as a platform.