Lucky505 Privacy Policy — How We Handle Your Personal Data in Pakistan

This Privacy Policy applies to all players who register, access, or use lucky505 — the online gaming and sports betting platform operated at lucky505.click and targeted at players in Pakistan. When we say "lucky505", "we", "us" or "our" in this document, we mean the operator of the lucky505 platform.

By creating a lucky505 account you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described here. If you do not agree with how lucky505 handles data, you should not register or continue using the platform.

This Policy should be read alongside the lucky505 Terms and Conditions, which together form the complete agreement between you and lucky505. In the event of any conflict between this Policy and the Terms, the Terms take precedence except where data protection law requires otherwise.

Lucky505 collects the categories of personal data listed below. We collect only what is necessary for the purposes described in this Policy — we do not collect data speculatively or "just in case."

Lucky505 does not collect or process any special category data (such as health or biometric data) unless explicitly required by a legal obligation and with appropriate safeguards in place.

Lucky505 collects your personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automatically — through cookies, session logs, and platform analytics tools that record technical information about your device and how you interact with lucky505 during each visit.
• From payment providers — Easypaisa, JazzCash, NayaPay, SadaPay, banks and card networks may pass limited transaction confirmation data to lucky505 to verify and reconcile your deposits and withdrawals.
• From identity verification services — when we are required to verify your identity using CNIC records or other officially issued document databases as part of our KYC (Know Your Customer) obligations.
• From fraud prevention services — third-party fraud detection tools that cross-reference account data against known fraud patterns and blacklists.

Lucky505 uses the data it collects for the following clearly defined purposes — and for no other purposes without your further consent:

• Account management: Creating, maintaining, and administering your lucky505 account, including processing your registration, managing your wallet balance, and recording your transaction history.
• Identity verification (KYC/AML): Verifying that you are who you say you are, that you meet the minimum age requirement of 18 years, and that your use of lucky505 is not connected to money laundering or terrorist financing activities. This is a legal obligation.
• Processing payments: Handling deposits and withdrawals in PKR via your chosen payment method (Easypaisa, JazzCash, bank IBFT, Visa/Mastercard or other accepted methods).
• Delivering gaming services: Running the games, sports betting markets, and esports betting features that make up the lucky505 platform.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, applying your self-imposed limits, and reaching out where patterns suggest you may need support.
• Customer support: Responding to your queries, resolving disputes, and improving our support processes based on interaction history.
• Fraud and security: Detecting and preventing fraudulent activity, account takeovers, bonus abuse, and other policy violations.
• Platform improvement: Analysing anonymised and aggregated usage data to improve games, features, and the overall player experience on lucky505.
• Marketing communications (opt-in only): Sending you promotional offers, bonus notifications, and platform updates — only if you have opted in and not yet withdrawn your consent.
• Legal compliance: Meeting our obligations under applicable law, responding to regulatory requests, and cooperating with lawful law enforcement investigations.

For each type of data processing that lucky505 carries out, there is a specific legal basis that justifies it. The main legal bases we rely on are:

Lucky505 shares your personal data only in the circumstances described below. We do not sell your data, and we do not share it for third-party marketing purposes.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners, and Visa/Mastercard networks receive the minimum data required to process your specific transaction (amount, account reference, confirmation). They are not permitted to use this data for any other purpose.
• Identity verification providers: KYC service providers who verify your identity against CNIC records or other official databases. These providers are bound by strict confidentiality agreements and use your data only for verification purposes on lucky505's behalf.
• Fraud prevention services: Third-party tools that help lucky505 detect and prevent fraud, account takeovers, and financial crime. These services receive only the technical and transaction data needed for risk scoring — not full account details.
• Game software providers: Where third-party game providers supply live dealer or software games on lucky505, they may receive your player ID and bet/win data for game delivery and dispute resolution purposes. They do not receive your payment data or full identity documents.
• Regulatory and law enforcement authorities: Lucky505 will disclose player data to regulators, law enforcement, or courts where required by applicable law or by a valid legal order. Where legally permitted, we will notify you of such disclosure.
• Business successors: In the event of a sale, merger, or restructuring of the lucky505 business, player data may be transferred to the acquiring entity subject to the same privacy commitments as this Policy.

Lucky505 keeps your personal data only for as long as it is necessary for the purpose it was collected, or for as long as required by legal and regulatory obligations. The retention periods below reflect both operational needs and applicable law:

Lucky505 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it. These include:

• TLS/SSL encryption on all data transmission between your browser or device and the lucky505 platform — the padlock icon in your browser confirms this is active.
• Encryption at rest for all stored personal data including identity documents, payment data, and account credentials.
• Access controls — internal access to personal data is restricted to staff whose role requires it. All access is logged and audited.
• Two-factor authentication (2FA) available to all players and mandatory for all staff with access to platform administration systems.
• Regular security testing including penetration testing and vulnerability scanning of the lucky505 platform infrastructure.
• Incident response procedures — in the event of a data breach, lucky505 has documented procedures for containing the incident, assessing its impact, notifying affected players and relevant authorities within required timeframes.

Lucky505 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help the platform function correctly and allow us to understand how players use lucky505.

The categories of cookies lucky505 uses are:

• Strictly necessary cookies: Required for the platform to operate — login sessions, wallet balance display, game loading, and security functions. These cannot be disabled without breaking the platform's functionality.
• Performance cookies: Anonymous analytics data about how players navigate lucky505 — which pages are visited most, where players exit, and how quickly pages load. This data is used in aggregate only and does not identify individual players. Lucky505 uses a self-hosted analytics solution rather than third-party platforms for this data.
• Functional cookies: Remembering your platform preferences — language setting, display preferences, and notification settings — so you don't have to reconfigure them on every visit.
• Marketing cookies (optional): Used only if you have opted in to marketing communications. These help lucky505 display relevant promotional content on the platform based on your gaming history. You can withdraw consent at any time from your account settings.

You can manage cookie preferences from your browser settings. Note that disabling strictly necessary cookies will affect platform functionality. Disabling performance or functional cookies will not affect gameplay but may reduce the quality of your platform experience.

Lucky505 does not knowingly collect personal data from anyone under the age of 18. Our platform is strictly for adults and we operate age verification procedures as part of the registration and KYC process specifically to prevent underage access.

Parents and guardians in Pakistan who are concerned about underage access to online gaming platforms are encouraged to use parental control software on shared or family devices to restrict access to gaming websites, including lucky505.

As a lucky505 player, you have the following rights over your personal data. To exercise any of these rights, send a request to support@lucky505.click. Lucky505 will respond within 30 days of receiving a valid request.

Lucky505 does not charge a fee for exercising any of these rights. If your request is manifestly unfounded or excessive, we may charge a reasonable administrative fee or decline to respond — in which case we'll explain why. All requests must be submitted in writing to support@lucky505.click.

Lucky505 primarily stores and processes player data on servers located within the region. In limited circumstances — such as where a game software provider or fraud prevention service operates servers internationally — personal data may be transferred outside Pakistan.

Where such transfers occur, lucky505 ensures that appropriate safeguards are in place to protect your data to at least the same standard as applies within Pakistan. These safeguards may include contractual clauses requiring the recipient to meet specific data protection standards, or reliance on the recipient's membership of a recognised data protection framework.

If you would like more detail about the international transfers that lucky505 carries out and the safeguards applied, contact us at support@lucky505.click.

Lucky505 sends marketing communications — bonus offers, promotional notifications, and platform news — only to players who have opted in to receive them. You can manage your marketing preferences at any time from the Notifications section of your account settings or by following the unsubscribe link in any marketing email.

Lucky505 sends marketing via the following channels (where you have opted in):

• Email to your registered address
• SMS to your registered mobile number
• In-platform notifications visible when you are logged into lucky505

Withdrawing marketing consent does not affect your access to lucky505 or any contractual communications — you will still receive transactional messages such as deposit confirmations, withdrawal notifications, and security alerts regardless of your marketing preference.

Lucky505 reviews this Privacy Policy at least once a year and whenever significant changes occur to how we collect or process data. When material changes are made, we will notify registered players via email and display a notice on the platform for a minimum of fourteen days before the updated Policy takes effect.

The date of the most recent update is always displayed at the top of this page. Archived versions of previous Privacy Policies are available on request from support@lucky505.click.

Continued use of lucky505 after the effective date of a Policy update constitutes acceptance of the revised terms. If you do not accept a material change, you should close your account before the effective date — your balance will be returned in full (subject to standard KYC requirements).

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, contact lucky505 through the channels below. We aim to acknowledge all data-related requests within 5 working days and to resolve them within 30 days.