lucky31 Privacy Policy

lucky31 is an online casino and sports betting platform accessible at lucky31.bio. The lucky31 platform is operated for and marketed to players based in Pakistan, offering casino games, live dealer tables, PSL and cricket sports betting markets, slots, and fast-format card games including Double Fortune and Hi-Lo. All account balances are maintained in Pakistani Rupees (PKR).

For the purposes of this Privacy Policy, "lucky31", "we", "us", and "our" refer to the operators of the lucky31.bio platform and their authorised representatives. "You" and "your" refer to any individual who accesses or uses the lucky31 platform in any capacity, including as a registered account holder, a prospective player, or a visitor to the lucky31.bio website.

If you have any questions about this Privacy Policy, the data we hold about you, or the way in which your personal information is processed, please contact the lucky31 Data Support team at [email protected]. We are available 24 hours a day, 7 days a week via live chat on the platform and via email.

lucky31 collects personal data in three principal ways: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information received from third-party service providers involved in payment processing, identity verification, and fraud prevention.

• Registration data: Full legal name, date of birth, Pakistani mobile number, email address, and residential address (city, province, and postal code).
• Identity verification (KYC) documents: A copy of your valid Computerised National Identity Card (CNIC), passport, or other government-issued photo ID, and where required, a recent utility bill or bank statement as proof of address.
• Payment data: JazzCash account number, EasyPaisa wallet number, HBL / UBL / Meezan Bank account details, Visa or Mastercard card number (partial), Raast ID, and 1LINK bank reference — as applicable to your chosen deposit and withdrawal methods.
• Communications: The content of live chat conversations, support emails, feedback submissions, and any other correspondence you send to lucky31 support.
• Responsible gaming preferences: Deposit limits, loss limits, session time settings, cooling-off periods, and self-exclusion requests you submit through your lucky31 account.

• Device & technical data: IP address, device type, operating system version, browser type and version, screen resolution, and device identifiers.
• Session data: Login timestamps, session duration, pages viewed, game titles launched, bets placed, outcomes recorded, and navigation paths through the platform.
• Location data: General geographic location inferred from IP address (city-level only). lucky31 does not collect precise GPS location data.
• Cookies and similar tracking technologies: As detailed in Section 05 of this Privacy Policy.

• Payment processors: Transaction confirmation references, payment status updates, and where applicable, chargeback or dispute notifications from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard.
• Identity verification providers: Verification outcomes and risk scores from KYC and anti-money-laundering screening services.
• Fraud prevention services: Device fingerprint scores, velocity check results, and known fraud indicator flags from third-party fraud detection providers.
• Game providers: Anonymised game round identifiers, RNG outcome logs, and RTP data from licensed game studios whose titles are hosted on the lucky31 platform.

lucky31 uses the personal data we collect for the following clearly defined purposes. We do not use your data for any purpose beyond what is described in this Privacy Policy without first obtaining your explicit consent.

lucky31 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and lucky31 — specifically, to operate your account, process your PKR deposits and withdrawals, settle your bets, and provide access to casino and sports betting services.
• Legal obligation: Processing is required to comply with applicable anti-money-laundering regulations, know-your-customer obligations, responsible gaming requirements, and any other legal or regulatory obligations applicable to the operation of the lucky31 platform.
• Legitimate interests: Processing is necessary for the legitimate interests of lucky31, including fraud prevention, platform security, network and data integrity, product improvement, and the detection and prevention of cheating and prohibited conduct — provided those interests are not overridden by your own rights and interests.
• Consent: Where lucky31 processes your data for optional purposes — such as sending you personalised promotional offers based on your gaming preferences — we do so on the basis of your freely given and withdrawable consent. You may withdraw consent for marketing communications at any time by contacting lucky31 support or using the unsubscribe feature in any promotional SMS or email.

The lucky31 platform uses cookies and similar client-side technologies to ensure the platform functions correctly, to maintain your login session, to remember your preferences, and to support platform security. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the lucky31 platform to function. They maintain your authentication session, remember your preferred language and currency (PKR), and ensure that responsible gaming tools such as session timers operate correctly. These cookies cannot be disabled without preventing core platform functionality.
• Functional cookies: These cookies remember optional preferences such as your game lobby layout, notification settings, and last-visited game category. Disabling functional cookies may affect your platform experience but will not prevent you from placing bets or accessing your account.
• Analytics cookies: lucky31 uses first-party analytics to understand how players navigate the platform, which game categories are most popular, and where technical errors are occurring. Analytics data is aggregated and anonymised. No personally identifiable data is included in analytics reports.
• Security & fraud prevention cookies: These cookies support device fingerprinting and multi-account detection. They are strictly necessary for the integrity of the platform and cannot be disabled.

lucky31 does not use third-party advertising cookies or cross-site tracking cookies. You may manage your cookie preferences through your browser settings, but please be aware that disabling certain cookies may impair your experience on the lucky31 platform.

lucky31 does not sell your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, Raast, and 1LINK receive the minimum payment data necessary to process your PKR deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial sector data protection requirements.
• Identity verification providers: KYC screening services receive copies of your identity documents and registration data solely for the purpose of verifying your identity and screening against anti-money-laundering watchlists. Verification providers are contractually prohibited from using your data for any other purpose.
• Game content providers: Licensed game studios whose titles are hosted on the lucky31 platform receive anonymised game round identifiers and technical session data to support game integrity auditing and RNG certification. No personally identifiable data is shared with game providers.
• Fraud prevention services: Device fingerprint and fraud scoring providers receive technical device data and anonymised session patterns. These providers do not receive your name, CNIC, payment account details, or contact information.
• Legal and regulatory authorities: lucky31 will disclose personal data to competent authorities — including financial intelligence units, law enforcement agencies, and regulatory bodies — where required to do so by applicable law, court order, or regulatory directive. In such cases, lucky31 will disclose only the data specifically required and will notify you where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the lucky31 business, personal data held by lucky31 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transaction.

All financial transactions on the lucky31 platform are denominated in Pakistani Rupees (PKR). lucky31 handles payment data with a heightened level of care and applies the following specific safeguards to financial information:

• Full payment account numbers — whether JazzCash mobile wallet numbers, EasyPaisa wallet numbers, or bank account numbers — are stored in encrypted form and are never displayed in full in your lucky31 account interface or in any communication from lucky31.
• Visa and Mastercard numbers are truncated to the last four digits for display purposes. lucky31 does not store full card numbers on its own servers; card data is tokenised by our payment gateway partners.
• Lucky31 applies transaction monitoring to all PKR deposits and withdrawals as part of its anti-money-laundering compliance obligations. Unusual transaction patterns may trigger additional identity verification requirements or temporary account holds.
• Withdrawal requests are processed only to payment methods registered in your own name and previously used for a qualifying deposit, except where otherwise expressly approved by lucky31 support in writing.

lucky31 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following standard retention periods apply:

Once the applicable retention period has expired, personal data is securely deleted or irreversibly anonymised in accordance with lucky31's data disposal procedures.

lucky31 implements a layered approach to data security, combining technical controls, organisational procedures, and staff training to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in transit: All data transmitted between your device and lucky31 servers is encrypted using TLS 1.2 or higher. HTTPS is enforced across the entire lucky31.bio domain.
• Encryption at rest: Sensitive data fields — including identity document references, payment account identifiers, and KYC verification results — are stored using AES-256 encryption in lucky31's database infrastructure.
• Access controls: Access to personal data within lucky31 systems is restricted on a strictly need-to-know basis. Staff access is role-based, logged, and subject to regular access reviews. Privileged access requires multi-factor authentication.
• Network security: lucky31's server infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability scanning. Penetration testing is conducted periodically by independent security specialists.
• Incident response: lucky31 maintains a documented data breach response procedure. In the event of a security incident that is likely to result in a risk to your rights and interests, you will be notified without undue delay and provided with clear guidance on steps you should take to protect yourself.

While lucky31 takes all reasonable and appropriate technical and organisational measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your lucky31 account credentials and for logging out from shared or public devices after each session.

As a lucky31 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact lucky31 support at [email protected] or via 24/7 live chat. lucky31 will respond to all valid data rights requests within 30 calendar days.

• Right of access: You may request a copy of all personal data lucky31 holds about you, including the categories of data held, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to rectification: If any personal data lucky31 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For changes to your registered name or date of birth, KYC verification of the updated details will be required.
• Right to erasure: Subject to our legal retention obligations, you may request the deletion of your personal data from lucky31 systems after your account has been permanently closed and all financial obligations have been settled.
• Right to restriction of processing: In certain circumstances — for example, where you contest the accuracy of data we hold, or where you have objected to processing and a determination is pending — you may request that lucky31 restrict its processing of your data to storage only.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to lucky31, where that data is processed on the basis of your consent or the performance of a contract.
• Right to withdraw consent: Where lucky31 processes your data on the basis of your consent — such as for personalised promotional communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object to marketing: You may opt out of receiving promotional SMS messages and emails from lucky31 at any time by contacting support or using the unsubscribe link in any marketing communication. Opting out of marketing will not affect your ability to receive transactional account notifications.

The lucky31 platform is strictly intended for individuals who are 21 years of age or older. lucky31 does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the lucky31 account registration process, and KYC document verification is used to confirm date of birth before full account access is granted.

If lucky31 identifies or is notified that a registered account belongs to a person under 21 years of age, that account will be immediately suspended, all associated personal data will be deleted in accordance with our data disposal procedures, and any balance held in the account will be handled in accordance with applicable responsible gaming regulations.

If you are a parent or guardian and believe that a minor under your care has registered a lucky31 account without your knowledge, please contact lucky31 support immediately at [email protected]. We will investigate and take appropriate action within 24 hours of your notification.

lucky31 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the lucky31 platform. When material changes are made to this Privacy Policy, we will notify registered players by SMS to their registered Pakistani mobile number and/or by a prominent notice on the lucky31 platform at least 14 days before the changes take effect.

The updated Privacy Policy will be published on this page with a revised effective date. Continued use of the lucky31 platform after the effective date of a revised Privacy Policy constitutes your acceptance of those revisions. If you do not agree with any revisions, you must stop using the platform and may request account closure and withdrawal of your PKR balance prior to the effective date.

We encourage you to review this Privacy Policy periodically to stay informed about how lucky31 collects, uses, and protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way lucky31 processes your personal data, please reach out to our support team through any of the following channels:

• Email: [email protected] — for formal data access requests, erasure requests, and privacy-related complaints. We aim to respond to all email enquiries within 2 business days.
• Live Chat: Available 24/7 directly on the lucky31.bio platform. For general privacy questions and account-related queries, live chat is the fastest way to reach the lucky31 support team.
• Written correspondence: For formal legal notices or regulatory correspondence relating to data protection, please address your communication to the Data Protection Officer, lucky31, and send it via email to [email protected] with the subject line "Data Protection — Formal Notice".

lucky31 is committed to resolving all privacy-related concerns promptly, transparently, and in good faith. If you feel that your concern has not been adequately addressed after contacting lucky31 support, you may escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.