Lucky 8 Privacy Policy

1Introduction

Lucky 8 ("Lucky 8", "we", "us", "our") operates the online gaming platform at lucky8.asia. When you create an account, deposit funds, place a bet or simply browse the Lucky 8 website, you share personal information with us. We take that responsibility seriously, and this Privacy Policy is our commitment to transparency about what we do with that information.

This policy applies to all data processing activities connected with your Lucky 8 account and your use of the Lucky 8 platform — whether you are a new player completing your first registration or a VIP member who has been with us for years. It covers our website, our mobile-optimised platform, our customer support communications, and any marketing messages you receive from us with your consent.

By registering a Lucky 8 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you have questions at any point, our support team can be reached at support@lucky8.asia and will respond within 24 hours.

2Data We Collect

Lucky 8 collects personal data in the following categories. We explain in Section 4 exactly why each type of data is required.

Identity Data

When you register your Lucky 8 account, we collect your full legal name, date of birth, and — when identity verification is required — a copy of your CNIC (Computerised National Identity Card) or equivalent government-issued photo ID. This information is used to verify that you meet the minimum age requirement of 18 and that you are the legitimate account holder.

Contact Data

We collect your mobile phone number and, where provided, your email address. Your phone number is used as the primary account identifier and for delivery of OTPs during login and withdrawal verification. Email is used for account notifications and, with your explicit consent, for promotional communications from Lucky 8.

Financial Data

Lucky 8 records all deposit and withdrawal transactions processed through your account, including the payment method used (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card), the transaction reference number, the PKR amount, and the date and time of the transaction. We do not store full card numbers or mobile wallet PINs — payment processing is handled by our payment partners under their own security protocols.

Gaming Activity Data

We record all bets placed on Lucky 8, including the market or game type, the stake in PKR, the outcome and the settlement amount. This data is required for dispute resolution, responsible gaming monitoring, and audit purposes. It is also used in aggregate — stripped of any personal identifiers — to improve the Lucky 8 platform.

Technical Data

Lucky 8 automatically collects technical information when you access the platform, including your IP address, browser type and version, device type, operating system, and session timestamps. This data is used for security, fraud prevention and platform optimisation.

3How We Collect Your Data

Lucky 8 collects personal data through the following channels:

• Account registration — you provide identity and contact information when creating your Lucky 8 account.
• Identity verification — you submit documents such as your CNIC or utility bill when Lucky 8 requests verification.
• Deposits and withdrawals — financial transaction data is generated automatically when you fund your account or request a payout.
• Platform usage — Lucky 8 records your betting and gaming activity as you use the platform.
• Customer support — when you contact Lucky 8 by email or live chat, the contents of those communications are recorded and stored for audit and quality purposes.
• Cookies and tracking technologies — Lucky 8 uses cookies and similar technologies on the website. See Section 7 for full details.
• Third-party payment providers — when you make a deposit via Easypaisa, JazzCash or another payment method, the payment provider shares transaction confirmation data with Lucky 8 to credit your account.

4Why We Use Your Data

Lucky 8 processes your personal data only for specific, legitimate purposes. Here is a clear breakdown of every use and the legal basis that justifies it:

• Account creation and management — to establish and maintain your Lucky 8 account. Legal basis: contract performance.
• Identity and age verification — to confirm that you meet the 18+ age requirement and are the legitimate account holder. Legal basis: legal obligation and contract performance.
• Payment processing — to credit deposits and process PKR withdrawals to your registered payment method. Legal basis: contract performance.
• Fraud and financial crime prevention — to detect and investigate unusual activity that may indicate account compromise, bonus abuse or money laundering. Legal basis: legal obligation and legitimate interest.
• Responsible gaming compliance — to monitor betting patterns and enforce deposit or loss limits you have set. Legal basis: legal obligation and legitimate interest.
• Customer support — to investigate and resolve disputes, answer questions and process requests. Legal basis: contract performance.
• Platform improvement — to analyse aggregated, anonymised usage data to improve the Lucky 8 product. Legal basis: legitimate interest.
• Marketing communications — to send you promotional offers about Lucky 8 products, PSL betting, bonuses and VIP benefits. Legal basis: consent (you may withdraw at any time).

Lucky 8 does not use your personal data for any purpose not listed above. If we introduce a new processing purpose in the future, we will update this policy and notify you where required.

5Sharing Your Data

Lucky 8 does not sell your personal data. We share it only where strictly necessary, with the following categories of recipients and for the stated purposes:

Payment Processors

When you deposit or withdraw using Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or a Visa/Mastercard, Lucky 8 shares the minimum data required to complete that transaction with the relevant payment processor. This typically includes your account reference number, the PKR amount and the transaction timestamp. Payment processors handle this data under their own privacy and security frameworks.

Game Providers

Live casino games on Lucky 8 are provided by Evolution Gaming. When you play a live table game, your account identifier and bet data are shared with the game provider solely to operate the game session. No additional personal data is shared beyond what is technically required to run the game.

Identity Verification Services

Where Lucky 8 uses a third-party service to verify your identity documents, your CNIC image and identity data are shared with that provider for the sole purpose of completing verification. The provider is contractually prohibited from using your data for any other purpose.

Regulatory and Law Enforcement Authorities

Lucky 8 may disclose personal data to regulatory bodies, law enforcement agencies or financial crime investigation authorities where required by law, court order or a legitimate investigative request. Such disclosures are made only to the extent required and are documented internally.

6Payment Data & PKR Transactions

All financial transactions on Lucky 8 are denominated in Pakistani Rupees. Every deposit and withdrawal linked to your account is recorded in our transaction ledger, including the payment method, reference number, PKR amount, date, time and settlement status. This transaction record is maintained as part of your Lucky 8 account history.

Lucky 8 does not store full debit or credit card numbers on its own servers. Card data is tokenised by the payment processor at the point of entry and never passes through Lucky 8 systems in its raw form. Mobile wallet account numbers (Easypaisa, JazzCash etc.) are stored only in a masked format — for example, the wallet number ending in the last four digits — to allow you to identify which payment method is registered without exposing the full number.

Transaction records are retained for a minimum of 5 years from the date of the transaction, in line with standard financial record-keeping requirements. You can view your complete Lucky 8 transaction history at any time through the account portal. If you need a formal transaction statement — for example, for tax purposes — contact Lucky 8 support and we will prepare one within 5 business days.

7Cookies & Tracking Technologies

Lucky 8 uses cookies and similar tracking technologies on lucky8.asia to make the platform function correctly, to understand how players use it, and — with your consent — to deliver relevant promotional content. A cookie is a small file placed on your device when you visit a website. It does not carry viruses and cannot access other files on your device.

The cookies used on Lucky 8 fall into the following categories:

You can manage your cookie preferences through the cookie settings panel, which is available on first visit and accessible at any time through the footer link. Note that disabling strictly necessary cookies will prevent the Lucky 8 platform from functioning correctly. Disabling functional cookies means the platform may not remember your preferences between sessions.

8Data Security

Lucky 8 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or alteration. These measures include:

• TLS encryption on all data in transit between your device and Lucky 8 servers.
• Encrypted storage for sensitive data including identity documents and financial records.
• Access controls limiting which Lucky 8 staff members can access personal data based on job function.
• Two-factor authentication (OTP via registered mobile number) for account login and withdrawal confirmation.
• Automated fraud detection that flags unusual login patterns, rapid location changes and payment anomalies for manual review.
• Regular security audits conducted by independent technical specialists.

No digital system is completely immune to security incidents. In the unlikely event of a data breach that poses a risk to your personal data, Lucky 8 will notify affected players within a reasonable timeframe and take immediate remedial action. We will communicate clearly what happened, what data was involved and what steps we have taken to address it.

You also have a role in keeping your Lucky 8 account secure. Use a strong, unique password. Do not share your OTP with anyone — Lucky 8 staff will never ask you for it. If you notice any suspicious activity on your account, contact Lucky 8 support immediately.

9Data Retention

Lucky 8 retains your personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable legal and regulatory obligations. The general retention schedule is as follows:

• Account identity data — retained for the duration of your Lucky 8 account and for 5 years after account closure.
• Transaction records — retained for 5 years from the date of each transaction.
• Gaming activity data — retained for 5 years from the date of each gaming session or bet.
• Customer support communications — retained for 2 years from the date of the communication.
• Identity verification documents — retained for 5 years from the date of submission, then securely destroyed.
• Marketing consent records — retained until you withdraw consent, plus an additional 12 months for audit purposes.

After the applicable retention period, Lucky 8 will securely delete or anonymise the relevant data. Where anonymisation is used, the resulting aggregate data (which cannot be linked back to any individual) may be retained indefinitely for statistical and product improvement purposes.

10Your Data Rights

As a Lucky 8 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact Lucky 8 support at support@lucky8.asia with the subject line "Data Rights Request". We will respond within 30 days.

11Children & Minors

Lucky 8 is strictly an 18+ platform. We do not knowingly collect personal data from any person under the age of 18. During registration, every applicant is required to confirm their date of birth, and Lucky 8 applies age verification checks to any account where there are reasonable grounds to suspect the holder may be a minor.

If Lucky 8 discovers that a registered account is operated by a person under the age of 18, the account will be immediately suspended, all winnings will be forfeited, and the original deposit amount will be returned to the payment method used. The personal data of the minor will be deleted as promptly as possible, consistent with the minimum retention required by applicable law.

If you believe a minor has registered a Lucky 8 account, please contact support@lucky8.asia immediately. Lucky 8 will investigate the report and take action within 24 hours.

12Updates to This Privacy Policy

Lucky 8 may update this Privacy Policy from time to time to reflect changes in our data practices, new features added to the platform, or changes in applicable law. When a material update is made — one that significantly affects your rights or the way we use your data — Lucky 8 will notify all registered players via the email address on file at least 14 days before the change takes effect.

Minor clarifications or corrections may be made without prior notification but will always be reflected in an updated "last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Lucky 8 platform after a policy update constitutes acceptance of the revised terms.

The version of this Privacy Policy published on lucky8.asia/privacy-policy at any given time is the version currently in effect for all Lucky 8 accounts. Previous versions are available on request from support@lucky8.asia.

13Contact Us About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or to your personal data held by Lucky 8, please contact our support team:

We handle all privacy communications with confidentiality and discretion. If your enquiry relates to a data breach or a suspected unauthorised access to your Lucky 8 account, please mark it URGENT in the subject line and our security team will prioritise your case.