Lucky 1 Privacy Policy — Your Data, Handled with Care

This Privacy Policy applies to Lucky 1 (the "Platform", "we", "us"), accessible at lucky1.vu. It explains how Lucky 1 collects, uses, stores, and protects the personal data of players and visitors, with particular reference to players based in Pakistan.

When you visit lucky1.vu, create a Lucky 1 account, make a PKR deposit via JazzCash or Easypaisa, place a bet on cricket or PSL, or use any other feature of the platform, you are providing us with personal information. This policy is intended to give you a clear and honest picture of what happens to that information.

By using Lucky 1, you acknowledge that you have read this Privacy Policy and agree to the collection and use of your data as described here. This policy should be read alongside the Terms and Conditions, which govern your use of the platform overall.

Lucky 1 collects personal data in several ways: directly from you when you register or use the platform, automatically through your use of the site or app, and from third-party providers involved in payment processing and identity verification.

The personal data Lucky 1 holds is used for specific, defined purposes. We do not use your data in ways that go beyond what is necessary or proportionate. Here is how each category of data is used:

• Registration Data — to create and manage your Lucky 1 account, verify your identity, and communicate with you about your account.
• Identity Verification Data — to confirm you are over 18, to comply with anti-money laundering (AML) obligations, and to validate withdrawal requests.
• Payment Data — to process PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer, and other supported methods; to detect and prevent payment fraud.
• Activity Data — to settle bets correctly, maintain your account history, detect unusual account activity, and identify potential problem gambling patterns as part of our responsible gaming commitment.
• Device & Technical Data — to detect multiple accounts from the same device, prevent fraud and bot activity, and improve platform performance.
• Communications Data — to respond to your support queries and to record interactions for quality and compliance purposes.
• Preference Data — to personalise your experience, show relevant promotions (such as cricket or PSL offers), and send you account-related notifications if you have opted in.

Every time Lucky 1 processes your personal data, there is a legal basis for doing so. The main legal bases we rely on are:

• Contract performance — processing necessary to provide the services you have signed up for, including account management, bet settlement, and payment processing.
• Legal obligation — processing required to comply with applicable legal requirements, including identity verification, AML checks, and fraud prevention obligations.
• Legitimate interests — processing for purposes such as platform security, fraud detection, responsible gaming monitoring, and improving service quality, where these interests are not overridden by your rights.
• Consent — for certain types of marketing communications and non-essential cookies, where we rely on your explicit consent. You may withdraw consent for these at any time.

Lucky 1 does not sell your personal data. We share data with third parties only where it is necessary to deliver our services, comply with legal obligations, or protect the security of the platform. The categories of third parties we may share data with are:

• Payment processors — JazzCash, Easypaisa, Raast, and bank transfer partners receive transaction data necessary to process your PKR deposits and withdrawals. Their own privacy practices apply to how they handle this data.
• Identity verification providers — third-party KYC (Know Your Customer) services that help us verify your CNIC or passport against databases to confirm your identity and age.
• Fraud prevention services — technology providers that help Lucky 1 detect unusual account activity, multiple accounts from the same device, and suspicious payment patterns.
• Casino and game providers — where you play live casino or slot games hosted by third-party studio providers, limited gameplay data is shared with the provider to deliver and settle the game. These providers do not receive your full personal profile.
• Platform infrastructure providers — cloud hosting and server providers that store platform data. These providers operate under strict data processing agreements and do not use your data independently.
• Legal and regulatory authorities — where we are required by law to disclose information, for example in response to a formal legal request or as part of an anti-money laundering investigation.

Because Lucky 1 operates in PKR and processes deposits and withdrawals via Pakistani payment methods — including JazzCash, Easypaisa, Raast and standard bank transfer — we want to be particularly clear about how payment data is handled.

When you initiate a deposit or withdrawal, here is what happens from a data perspective:

• You are redirected to or interact with your payment provider's own interface (for example, the JazzCash or Easypaisa gateway). Lucky 1 does not see or record your PIN or full wallet credentials at this stage.
• Upon successful transaction, Lucky 1 receives a payment reference number, the PKR amount, and confirmation of the account holder name. This is used to credit or debit your Lucky 1 balance.
• For withdrawals, we verify that the destination account belongs to you by matching the account name against your registered profile. This is an anti-fraud and anti-money-laundering measure.
• PKR transaction records are stored in your account history and may be reviewed by our compliance team in the course of a standard account review or withdrawal verification.

Lucky 1 uses cookies and similar technologies (local storage, session tokens) on the website and in the mobile app. These are small pieces of data stored on your device that help the platform function correctly and give us insight into how players use the platform.

The types of cookies Lucky 1 uses:

• Essential cookies — required for the platform to work. These include session cookies that keep you logged in and security tokens that protect your account. You cannot opt out of essential cookies without stopping using the platform.
• Functional cookies — remember your preferences such as language settings, notification choices, and favourite sports markets (for example, cricket or PSL markets you follow).
• Analytics cookies — help us understand how players navigate the platform, which features are used most, and where issues occur. This data is aggregated and does not identify you individually. We use this to improve the platform experience.
• Security and fraud-detection cookies — help identify unusual login patterns, device fingerprinting for multiple-account detection, and other security purposes.

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will affect your ability to log in and use core platform features. For mobile app users, similar tracking preferences can be managed through your device's app settings.

Lucky 1 retains your personal data for as long as your account is active and for a defined period after account closure, as required by applicable legal and compliance obligations. The following general retention periods apply:

• Account and registration data — retained for the duration of your account and for a minimum of five years after account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction records — PKR deposit and withdrawal records are retained for a minimum of five years from the date of the transaction.
• Identity verification documents — retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later.
• Betting and gaming history — retained for the duration of your account and for three years after account closure.
• Support communications — retained for two years from the date of the interaction, unless the communication relates to a dispute or compliance matter, in which case it is retained for longer.
• Analytics and technical data — typically aggregated or anonymised after 13 months, so that it no longer identifies individual players.

Lucky 1 takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, loss, alteration, or disclosure:

• Encryption in transit — all data exchanged between your browser or app and Lucky 1 servers is encrypted using TLS (Transport Layer Security).
• Encryption at rest — sensitive personal data including identity documents and payment references is encrypted when stored on our systems.
• Access controls — access to personal data is restricted to authorised Lucky 1 staff who need it to do their job. Access is logged and audited.
• Account security — Lucky 1 accounts are protected by password authentication. We strongly recommend using a unique, strong password for your Lucky 1 account that is not shared with your JazzCash, Easypaisa, email or other financial accounts.
• Fraud monitoring — automated systems monitor account activity for unusual patterns that may indicate unauthorised access or fraudulent activity.

Despite these measures, no online platform can guarantee complete security. In the unlikely event of a data breach that poses a risk to players, Lucky 1 will take prompt action to contain it and notify affected players as appropriate.

As a Lucky 1 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact Lucky 1 support using the email address in the footer.

Lucky 1 is strictly an adult platform and is not directed at or intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If we become aware that an account has been registered by or on behalf of a person under 18, that account will be closed immediately and any associated data will be handled in accordance with our legal obligations.

If you are a parent or guardian and believe that a minor has registered on Lucky 1 using your details or their own, please contact Lucky 1 support immediately so that we can take appropriate action.

Lucky 1 may update this Privacy Policy from time to time to reflect changes in the platform, our data practices, or applicable legal requirements. When we make changes, the "Last Updated" date at the top of this page will be revised accordingly.

For significant changes — such as a new type of data collection or a change in how we share data — we will make reasonable efforts to notify registered players via email or an in-platform notification before the change takes effect.

Your continued use of Lucky 1 after a Privacy Policy update constitutes your acknowledgement of the revised policy. If you disagree with any changes, you should stop using the platform and contact support to close your account and request data handling in line with your rights.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how your personal data has been handled, please get in touch with Lucky 1 support.

Our support team can be reached by email at the address listed in the footer of this page. Please include your registered account email address and a brief description of your query so that we can direct it to the right team promptly.

We aim to respond to all privacy-related queries within five business days. For data access or deletion requests, please allow up to 30 days for full processing, depending on the complexity and volume of data involved.