lukypk Privacy Policy —
How We Protect Your Personal Data

1Definitions & Interpretation

In this Privacy Policy, the following terms carry the meanings set out below unless context otherwise requires:

• "lukypk", "we", "us", "our" — the licensed operator that owns and operates the lukypk gaming platform at lukypk.net.
• "Player", "you", "your" — any individual who has registered an account on lukypk, or who visits the lukypk website or uses any associated service.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, including name, date of birth, email address, CNIC number, payment account details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data; for data collected through lukypk, this is the lukypk licensed operator.
• "KYC Documents" — identity verification documents submitted by a Player including CNIC, passport, driving licence, and proof of address.
• "Third Party" — any person, company, or organisation that is not lukypk or the relevant Player.
• "Cookies" — small data files placed on a Player's device by the lukypk platform for session management, security, and analytical purposes.

This Privacy Policy should be read together with the lukypk Terms and Conditions, which are incorporated herein by reference and govern the overall relationship between lukypk and its Players.

2Who We Are — Data Controller

lukypk is the Data Controller responsible for the Personal Data of Players collected and processed through the lukypk platform at lukypk.net. As a licensed and regulated online gaming operator, lukypk processes Personal Data in accordance with the data protection requirements of its international gaming license and applicable data protection standards.

lukypk is committed to handling all Personal Data with integrity, discretion, and in full compliance with the privacy obligations that govern our operations as a licensed gaming operator serving Pakistani players.

3Data We Collect

lukypk collects the following categories of Personal Data from Players, collected only to the extent necessary for the legitimate purposes described in this Policy:

lukypk does not collect any Special Categories of Personal Data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) beyond what is strictly necessary for identity verification purposes under our KYC obligations.

4How We Collect Your Data

lukypk collects Personal Data through the following means:

Data that you provide directly to lukypk during account registration, KYC submission, deposit or withdrawal requests, completion of account settings, or through communications with our support team via live chat or email.

Technical Data is collected automatically when you access the lukypk platform, including your IP address, device identifiers, browser information, and session activity. This data is collected through server logs and, where applicable, cookies and similar tracking technologies as described in Section 8.

In certain circumstances, lukypk may receive or verify Personal Data from third-party sources, including:

• Payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) — to verify transaction status and payment method ownership
• Identity verification service providers — used in conjunction with our KYC process
• Fraud prevention and AML screening services — to cross-check account and transaction data against relevant databases
• Our gaming software and platform providers — who may supply anonymised or aggregated gameplay and session data for the purposes of system integrity and fraud detection

5Legal Basis for Processing

lukypk processes Personal Data on the following legal bases, each of which is tied to specific processing activities:

• Contractual necessity — Processing required to provide the lukypk platform services to you as a registered Player, including account management, payment processing, and game access.
• Legal obligation — Processing required to comply with applicable laws and the conditions of our international gaming license, including KYC verification, AML screening, responsible gaming compliance, and regulatory reporting.
• Legitimate interests — Processing conducted in pursuit of lukypk's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and analytics — provided such processing does not unduly prejudice your privacy rights.
• Consent — Where you have provided explicit consent, such as for the receipt of promotional communications and marketing materials. You may withdraw consent at any time by updating your account communication preferences or contacting [email protected].

6How We Use Your Data

lukypk uses the Personal Data it collects for the following specific purposes:

• Account creation and management: To establish, maintain, and administer your lukypk account, including profile settings, communication preferences, and responsible gaming tool configurations.
• Identity and age verification: To confirm that you are who you say you are, that you meet the 21+ age requirement, and that your withdrawal payment details match your verified identity.
• Payment processing: To facilitate PKR deposits and withdrawals via your selected payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or bank transfer) and to maintain accurate transaction records.
• Gameplay and platform services: To provide access to cricket betting, live casino, slots, bingo, and all other lukypk gaming products, and to record gameplay activity for account integrity purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, multi-accounting, and other prohibited conduct as defined in the lukypk Terms and Conditions.
• Regulatory compliance: To fulfil obligations under our international gaming license, including AML reporting, responsible gaming record-keeping, and responses to lawful regulatory or law enforcement requests.
• Customer support: To process and respond to your support enquiries, live chat sessions, and complaints, and to maintain records of those interactions for quality assurance and dispute resolution purposes.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling, to administer deposit limits, loss limits, session timers, self-exclusion requests, and to facilitate responsible gaming interventions where appropriate.
• Platform improvement: To analyse aggregate, anonymised usage data to improve the performance, reliability, and user experience of the lukypk platform for Pakistani players.
• Marketing communications: Where you have provided consent, to send you promotional offers, bonus notifications, and relevant platform updates. You may opt out at any time.

7Sharing Your Data

lukypk does not sell, rent, or trade your Personal Data. Your data may be shared with third parties only in the following limited circumstances:

lukypk engages trusted third-party service providers who process Personal Data on our behalf under strict contractual data protection obligations. These include payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), identity verification providers, cloud infrastructure providers, fraud prevention services, and gaming software suppliers. These parties are permitted to use your data only for the purposes specified in their service agreements with lukypk.

lukypk may be required to disclose Personal Data to our licensing authority, financial intelligence units, law enforcement agencies, or other regulatory bodies where such disclosure is required by law, court order, or as a condition of our gaming license. Such disclosures are made only to the extent strictly necessary to fulfil the relevant legal obligation.

In the event of a merger, acquisition, restructuring, or sale of all or part of the lukypk business, Personal Data held about Players may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such change via the email address registered to their account.

In any other circumstance not described above, lukypk will share your Personal Data with third parties only with your explicit prior consent.

8Cookies & Tracking Technologies

The lukypk platform uses cookies and similar tracking technologies to support essential platform functionality, security, and performance analysis. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the operation of the lukypk platform. These include session authentication cookies that keep you logged in during your gaming session and security cookies that protect your account from unauthorised access. These cannot be disabled without preventing platform function.
• Functional cookies: Used to remember your platform preferences, such as language settings and responsible gaming tool configurations, so that these are applied consistently across sessions.
• Analytics cookies: Used by lukypk to analyse aggregated, anonymised data about how the platform is used — including which pages are visited most frequently, typical session durations, and performance metrics. This data informs platform improvements. Individual user behaviour is not identifiable from analytics data.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and multi-accounting attempts on the lukypk platform.

You may configure your browser settings to refuse or delete cookies. Please note that disabling strictly necessary cookies will impair or prevent your ability to use the lukypk platform. lukypk does not use third-party advertising cookies or cross-site tracking technologies.

9Data Retention

lukypk retains Personal Data for no longer than is necessary to fulfil the purpose for which it was collected, subject to the following retention obligations:

• Active account data: Retained for the full duration of your registered account on lukypk and for a period of at least 5 years following account closure, as required by our international gaming license conditions for AML, fraud, and regulatory audit purposes.
• Transaction records: Financial transaction records in PKR are retained for a minimum of 5 years from the date of the transaction in accordance with applicable AML and licensing requirements.
• KYC documents: Identity verification documents are retained for a minimum of 5 years from the date of submission or the date of account closure, whichever is later.
• Support communications: Live chat transcripts and email correspondence are retained for a period of 3 years for dispute resolution, quality assurance, and regulatory compliance purposes.
• Marketing consent records: Records of consent to receive promotional communications are retained for the duration of the consent and for 3 years after withdrawal of consent.
• Technical and log data: Server logs and session data are retained for up to 12 months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to technical constraints, it is isolated from active processing until deletion is completed.

10Data Security

lukypk implements technical and organisational security measures appropriate to the sensitivity of the Personal Data it holds, including the following safeguards:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the lukypk platform
• Encrypted storage for sensitive Personal Data and KYC documents at rest
• Access controls ensuring that Personal Data is accessible only to lukypk personnel who require it for a defined operational purpose, under role-based access restrictions
• Two-Factor Authentication available for all Player accounts to protect against unauthorised access
• Regular security assessments and penetration testing of platform infrastructure
• Incident response procedures for detecting, containing, and reporting data security incidents

In the event of a data breach that poses a material risk to the rights and privacy of affected Players, lukypk will notify the affected individuals and relevant regulatory authorities as required by applicable law and our licensing obligations, within the timeframes prescribed by those obligations.

11Your Data Rights

As a registered Player on lukypk, you hold the following rights in respect of your Personal Data. Requests to exercise these rights should be submitted to [email protected] with the subject line "Data Rights Request", along with sufficient information to verify your identity:

• Right of access: You have the right to request a copy of the Personal Data that lukypk holds about you and to receive information about how that data is used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held about you.
• Right to erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to lukypk's legal and regulatory retention obligations.
• Right to restrict processing: You have the right to request that lukypk restricts the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to its use.
• Right to data portability: You have the right to request that lukypk provides your Personal Data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to object: You have the right to object to the processing of your Personal Data for legitimate interests or direct marketing purposes. Objection to direct marketing will always be honoured without requiring justification.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

lukypk will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by up to a further 60 days, in which case you will be informed of the extension and the reasons for it.

12Children & Minors

The lukypk platform is strictly for individuals aged 21 years and above. lukypk does not knowingly collect or process the Personal Data of any individual under the age of 21. Age verification is conducted as a mandatory part of the KYC process before any withdrawal can be processed.

If lukypk becomes aware that Personal Data has been collected from an individual under the age of 21, that account will be immediately closed, all associated data will be deleted (subject to any mandatory legal retention requirements), and any deposits will be returned to the verified payment method used for deposit.

If you believe that a minor has registered on the lukypk platform, please contact our support team immediately at [email protected]. We take reports of underage access very seriously and investigate all such reports promptly. We also recommend that parents and guardians use parental control software to restrict access to gaming and betting websites on devices accessible to individuals under 21.

13Third-Party Services

The lukypk platform may contain links to or integrations with third-party services — including payment processors such as JazzCash and EasyPaisa, and banking platforms including HBL, UBL, and Meezan Bank — which operate under their own separate privacy policies.

When you interact with a third-party payment service in connection with a lukypk deposit or withdrawal, you are subject to that provider's privacy policy in addition to this Privacy Policy. lukypk is not responsible for the privacy practices of third-party services. We recommend that you review the privacy policies of any third-party service you use in connection with your lukypk account.

lukypk's gaming software is provided by certified third-party gaming suppliers. These suppliers process anonymised or pseudonymised gaming data for integrity and RNG certification purposes. No personally identifiable data is shared with gaming software suppliers beyond what is necessary for technical integration and regulatory audit.

14Changes to This Policy

lukypk reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we begin processing a new category of Personal Data, or where we change the purposes for which data is used — we will notify registered Players by email to the address associated with their account, and by displaying a prominent notice on the lukypk platform, at least 14 days before the amended Policy takes effect.

Minor amendments — such as clarifications of existing language, corrections of typographical errors, or updates to contact details — may be made without prior notice. The effective date shown at the top of this page reflects when the current version was last updated. We recommend that you review this Privacy Policy periodically to remain informed of how lukypk protects your data.

Your continued use of the lukypk platform following the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to any amendment, you must cease using the platform and may request account closure by contacting [email protected].

15Contact — Data Enquiries

All privacy-related enquiries, data rights requests, and concerns regarding the processing of your Personal Data by lukypk should be directed to our support team using the contact details below. Please include "Privacy Enquiry" or "Data Rights Request" in the subject line so that your message is routed to the appropriate team member promptly.

• Email: [email protected] — response within 5 business days for privacy and data matters
• Live Chat: Available 24/7 from your lukypk account dashboard for immediate assistance; data rights requests submitted via live chat will be followed up by email for documentation purposes
• Support Hours: Peak staffing 7 PM – 2 AM PKT daily, aligned with cricket match schedules and peak gaming hours across Karachi, Lahore, Islamabad, and Faisalabad

If you are not satisfied with lukypk's response to a privacy concern or data rights request, you may escalate the matter to the relevant regulatory authority under whose license lukypk operates. Details of the applicable regulatory body are available upon request from our compliance team via [email protected].