Who this policy covers: This Privacy Policy applies to all individuals who register an account, visit the Lucky Park website, use the Lucky Park mobile application, or interact with Lucky Park's customer support team. The controller of your personal data is Lucky Park ("we", "us", "our"). By registering and using Lucky Park, you acknowledge that you have read and understood this Privacy Policy. If you have questions, our support team is reachable 24/7 via live chat or email at support@luckypark.net.
Data Stays Yours
Lucky Park does not sell your personal data to third parties. Ever. Data shared externally is limited strictly to what is needed to operate the Lucky Park platform.
256-Bit Encryption
All data in transit between your device and Lucky Park's servers is protected by AES-256 SSL encryption. Payment data is never stored in plain text on our systems.
Your Rights Apply
You can access, correct, or request deletion of your personal data at Lucky Park at any time. Your data rights are real and we honour them with a straightforward process.
1. Who We Are
Lucky Park operates the online gaming platform available at luckypark.net, including all games, payment services, promotions, customer support channels, and mobile applications associated with the Lucky Park brand. When this Privacy Policy refers to "Lucky Park", "we", "us" or "our", it refers to the entity operating the Lucky Park platform.
Lucky Park's primary user base is in Pakistan. The platform is designed for Pakistani players, uses Pakistani Rupees (PKR) as its sole currency, and integrates directly with Pakistani payment infrastructure including JazzCash, Easypaisa, NayaPay, SadaPay, IBFT bank transfer, and Visa/Mastercard issued by Pakistani banks. This Privacy Policy is written with Pakistani users in mind and reflects the data handling practices relevant to operating in this market.
For any privacy-related queries, Lucky Park's designated data point of contact is reachable at support@luckypark.net. We aim to acknowledge all privacy-related queries within 24 hours and resolve them within 14 days of receipt.
Live casino and all other Lucky Park game interactions are covered by this Privacy Policy — your data is handled consistently across the entire platform.
2. Data We Collect
Lucky Park collects personal data in several categories. The data collected depends on how you interact with the platform — a visitor who never registers will have less data collected than a registered player who has completed KYC verification and made deposits. Here is a full breakdown:
2.1 Registration Data
When you create a Lucky Park account, we collect:
- Mobile phone number (used as primary account identifier and for 2FA if enabled).
- Email address (used for account communications and promotional messages with consent).
- Date of birth (used to verify you are 18 or older).
- Username or display name chosen by you.
- Password (stored in hashed, non-reversible form — Lucky Park staff cannot see your password).
2.2 Identity Verification (KYC) Data
For account verification, withdrawal processing above threshold amounts, and fraud prevention, Lucky Park may collect:
- Full legal name as it appears on your CNIC or passport.
- CNIC number or passport number.
- Copy of CNIC (front and back) or passport photo page.
- Proof of address — utility bill, bank statement, or similar document.
- Selfie photograph for facial verification purposes.
2.3 Financial Data
When you make deposits or withdrawals at Lucky Park, we collect:
- JazzCash or Easypaisa mobile number associated with the transaction.
- NayaPay or SadaPay account identifier.
- Bank account details (account number and bank name) for IBFT transfers.
- Masked card number (last four digits only), card type, and expiry date for Visa/Mastercard.
- Transaction amounts, timestamps, and transaction reference numbers.
Lucky Park does not store full card numbers, CVV/CVC codes, or JazzCash/Easypaisa PINs. Full payment credentials are handled exclusively by our payment processing partners and are never transmitted to or stored on Lucky Park's core platform infrastructure.
2.4 Gaming & Activity Data
The following data is recorded as part of normal platform operation at Lucky Park:
- Game sessions — which games were played, when, for how long, and at what stake levels.
- Betting history — all bets placed, outcomes, and win/loss records.
- Bonus activity — bonuses claimed, wagering progress, and bonus expiry.
- Login history — timestamps and IP addresses for each account login.
- Device information — device type, operating system version, browser type.
- IP address and approximate geographic location derived from IP.
2.5 Support & Communications Data
When you contact Lucky Park support, we collect and retain:
- The content of your live chat conversations, emails, or WhatsApp messages.
- Timestamps of contact and response.
- The nature of the query and its resolution.
Support records at Lucky Park are retained as part of your account history and may be reviewed in the event of disputes.
3. How We Collect Your Data
Lucky Park collects personal data through the following channels:
3.1 Directly From You
The majority of the data Lucky Park holds about you comes directly from you — through the registration form, KYC document uploads, payment screens, support conversations, and responses to surveys or promotions. You are in control of this data at the point of collection.
3.2 Automatically Through Platform Use
Lucky Park's platform automatically records certain data as a byproduct of normal use. Session data, game activity, login records, and device/browser information are collected automatically whenever the Lucky Park platform is accessed. This data is necessary for the platform to function correctly and cannot be disabled without preventing platform access entirely.
3.3 From Payment Partners
When you make a deposit or withdrawal using JazzCash, Easypaisa, NayaPay, SadaPay, or a bank transfer, the relevant payment partner confirms the transaction to Lucky Park. This confirmation includes transaction reference numbers, amounts, timestamps, and the masked identifier for your payment account. Lucky Park does not receive your full payment credentials from these partners.
3.4 Cookies and Tracking Technologies
Lucky Park uses cookies and similar tracking technologies on its website and app. Full details of what cookies are used and how to manage them are set out in Section 8 of this Privacy Policy.
Whether you access Lucky Park on mobile or desktop, this Privacy Policy governs all data collected through every channel.
4. Why We Use Your Data
Lucky Park uses personal data for the following purposes. Where a purpose requires a specific legal basis under applicable data protection law, that basis is identified in Section 5.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Create and manage your Lucky Park account | Registration data, device data | Contract performance |
| Age and identity verification (KYC) | KYC documents, date of birth | Legal obligation |
| Process deposits and withdrawals | Financial data, transaction records | Contract performance |
| Fraud detection and prevention | Login history, IP, device, transaction data | Legitimate interest |
| Anti-money laundering (AML) compliance | Identity, financial data, transaction patterns | Legal obligation |
| Responsible gaming monitoring | Gaming activity, session data, deposit patterns | Legal obligation / legitimate interest |
| Customer support | Communications data, account data | Contract performance |
| Platform improvement and analytics | Anonymised gameplay and usage data | Legitimate interest |
| Marketing communications | Email, phone number, game preferences | Consent |
| Legal compliance and dispute resolution | All relevant data as required | Legal obligation |
5. Legal Basis for Processing
Lucky Park processes personal data on one or more of the following legal grounds:
5.1 Contract Performance
Processing is necessary to deliver the Lucky Park service you signed up for — creating your account, processing your deposits and withdrawals, providing game access, and resolving support queries. Without processing data on this basis, Lucky Park could not operate as a platform.
5.2 Legal Obligation
Lucky Park is subject to legal requirements including anti-money laundering (AML) obligations, Know Your Customer (KYC) verification requirements, and responsible gaming regulations. Processing data on this basis is non-negotiable — it is required by law and cannot be opted out of by players.
5.3 Legitimate Interests
Lucky Park processes certain data where it has a legitimate interest in doing so that is not overridden by your interests or rights. This includes fraud prevention, platform security, and improving Lucky Park's product based on anonymised usage analytics. Where Lucky Park relies on legitimate interests, we consider and balance our interests against the potential impact on you before proceeding.
5.4 Consent
Where processing is based on your consent — most notably for marketing communications — Lucky Park will ask for your explicit consent at the relevant point. You can withdraw consent at any time by contacting Lucky Park support or using the unsubscribe link in any marketing email. Withdrawing marketing consent does not affect your ability to use the Lucky Park platform.
6. Sharing Your Data
Lucky Park does not sell personal data. Data is shared with third parties only where necessary to operate the platform or comply with legal requirements. The categories of third parties who may receive your data are:
6.1 Payment Service Providers
JazzCash, Easypaisa, NayaPay, SadaPay, IBFT banking partners, and Visa/Mastercard payment processors receive transaction data necessary to process your deposits and withdrawals. Each of these partners operates under its own data protection obligations and Lucky Park requires contractual commitments to data security from all payment partners before integration.
6.2 Game Software Providers
Lucky Park's game content is provided by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Ezugi, and others. These providers may receive anonymised session identifiers to support game delivery and fairness auditing. Personal identity data is not shared with game providers in the ordinary course of operations.
6.3 Identity Verification Providers
KYC document verification at Lucky Park is supported by third-party identity verification services. These providers receive the specific documents you upload for verification purposes and process them in line with their own privacy policies and applicable law. Lucky Park uses reputable, commercially established KYC technology partners only.
6.4 Regulatory and Law Enforcement Authorities
Lucky Park may share personal data with regulators, law enforcement agencies, or courts where required to do so by applicable law. This includes reporting obligations under AML regulations. Lucky Park will notify you of any such disclosure where we are legally permitted to do so, but in many AML-related circumstances, disclosure to the player is legally prohibited (a process known as "tipping off").
6.5 Analytics and Security Partners
Lucky Park uses third-party platform analytics and cybersecurity tools. These systems process anonymised or pseudonymised data about platform usage and potential security threats. They do not receive personal identity data in identified form as part of their normal operation.
No data sales, ever: Lucky Park does not sell, rent, or trade personal data with any third party for commercial or marketing purposes. This is an absolute commitment — not a qualified one.
7. Payments & Financial Data — Special Handling
Financial data at Lucky Park deserves specific attention because of its sensitivity. Here is exactly how Lucky Park handles payments data:
7.1 What Lucky Park Does Not Store
- JazzCash PINs or Easypaisa PINs — these are entered on your own device directly within the payment app and are never transmitted to Lucky Park.
- Full card numbers — Lucky Park stores only the last four digits of any card used for reference purposes.
- CVV or CVC security codes — these are never stored at Lucky Park under any circumstances.
- Online banking passwords — these are handled entirely by your bank's own infrastructure, never by Lucky Park.
7.2 Transaction Records
Lucky Park maintains records of all deposit and withdrawal transactions associated with your account. These records include the amount, date, time, payment method type, and transaction status. These records are necessary for accounting, dispute resolution, and regulatory compliance. You can access your full transaction history at any time from within your Lucky Park account dashboard.
7.3 AML Monitoring
Lucky Park is obligated to monitor financial transactions for patterns that may indicate money laundering, terrorist financing, or other financial crimes. This monitoring is automated and analyses transaction patterns, amounts, frequencies, and payment method combinations. Where suspicious activity is detected, Lucky Park is legally required to file reports with the relevant authorities without informing the player.
Lucky Park takes financial crime extremely seriously and cooperates fully with Pakistani financial intelligence and law enforcement authorities. Accounts found to be involved in money laundering or financial crime are closed immediately and all relevant data is provided to authorities.
Lucky Park serves Pakistani players across the country — this Privacy Policy applies equally to all registered players regardless of city, province, or device.
8. Cookies & Tracking Technologies
Lucky Park uses cookies and similar technologies on its website and mobile application. Cookies are small data files stored on your device that help the platform function correctly and improve your experience.
8.1 Strictly Necessary Cookies
These cookies are essential for the Lucky Park platform to function. They manage your login session, maintain your account state across pages, and ensure that the correct game content and account balance are displayed. These cookies cannot be disabled without breaking platform functionality.
8.2 Functional Cookies
Functional cookies at Lucky Park remember your preferences — such as language settings, display preferences, and game lobby filter configurations — so you don't have to reset them every session. These can be disabled but doing so means Lucky Park will not remember your preferences between sessions.
8.3 Analytics Cookies
Lucky Park uses analytics tools to understand how players navigate the platform — which pages are visited most, where users encounter problems, and how different features are used. This data is aggregated and anonymised before analysis. Analytics cookies can be opted out of without affecting your ability to play games or make transactions at Lucky Park.
8.4 Marketing Cookies
Where you have consented to receive personalised marketing, Lucky Park may use cookies to track which promotions you have seen and to avoid showing you the same offer repeatedly. Marketing cookies are only active if you have given consent for marketing communications. They can be withdrawn at any time by contacting Lucky Park support.
8.5 Managing Cookies
You can manage cookie preferences through your device browser settings. Most modern browsers allow you to view, block, or delete specific categories of cookies. Note that blocking strictly necessary cookies will prevent the Lucky Park platform from functioning correctly. If you have concerns about specific cookies in use at Lucky Park, please contact our support team and we will provide detailed information.
9. Data Retention
Lucky Park retains personal data for as long as is necessary to fulfil the purpose for which it was collected, meet regulatory obligations, or resolve disputes. The following general retention periods apply:
- Active account data: Retained for the duration of your account with Lucky Park and for 5 years following account closure, to comply with AML and gaming regulatory requirements.
- KYC verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, in line with AML record-keeping obligations.
- Financial transaction records: Retained for a minimum of 5 years to comply with financial crime regulations and tax requirements.
- Support communications: Retained for 3 years from the date of the communication to support dispute resolution and service improvement.
- Gaming activity logs: Retained for 3 years from the date of activity.
- Marketing consent records: Retained until consent is withdrawn, plus 12 months thereafter as evidence of the original consent.
After applicable retention periods expire, Lucky Park securely deletes or anonymises personal data so that it can no longer be attributed to any individual. Where anonymisation is used rather than deletion, the resulting data may be retained indefinitely as aggregate statistical information.
Why 5 years on AML records? Anti-money laundering regulations require Lucky Park to retain identity and transaction records for this period. This is a legal requirement, not a business preference, and it applies even after you close your account.
10. Data Security
Lucky Park takes data security seriously and implements multiple layers of technical and organisational protection across the platform. The following measures are in place:
10.1 Encryption
All data transmitted between your device and Lucky Park's servers is protected by AES-256 SSL/TLS encryption. This applies to game traffic, payment data, login credentials, and all other communications between the Lucky Park platform and player devices. Data at rest in Lucky Park's databases is also encrypted using industry-standard methods.
10.2 Access Controls
Access to personal data within Lucky Park's operational systems is restricted to staff who need it to perform their job functions. All staff access to sensitive data is logged and audited. Privileged access — to financial systems, KYC data, and administrative account tools — requires multi-factor authentication and is reviewed on a quarterly basis.
10.3 Infrastructure Security
Lucky Park's platform infrastructure is hosted on enterprise-grade servers with physical and logical access controls. Regular penetration testing is conducted by independent security professionals. Vulnerability scanning runs continuously across the platform. Security patches are applied on a defined schedule prioritising critical vulnerabilities.
10.4 Incident Response
Lucky Park maintains a documented data security incident response plan. In the event of a data breach that is likely to result in risk to affected individuals, Lucky Park will notify the relevant regulatory authorities within the legally required timeframe and will directly notify affected players without undue delay. Notifications will be sent to the email address registered with your Lucky Park account.
10.5 Your Responsibility
Lucky Park's security measures protect data on our side. The security of your device, your JazzCash app, your email account, and your Lucky Park password are your responsibility. Lucky Park strongly recommends using a unique, strong password for your Lucky Park account and enabling all available security features on the payment apps linked to your account.
Security Measures at Lucky Park — Summary
Hashed Passwords
Your Lucky Park password is stored as a one-way hash. Not even our own staff can see it in plain text.
Secure Servers
Enterprise hosting with physical access controls, continuous monitoring, and regular independent security audits.
Minimal Data Access
Lucky Park staff access to personal data is need-based, logged, audited, and reviewed quarterly.
Breach Notification
In a security incident, Lucky Park will notify affected players and regulators promptly and transparently.
11. Your Rights Over Your Data
As a Lucky Park player, you have meaningful rights over your personal data. These rights can be exercised by contacting Lucky Park support at support@luckypark.net. We will respond to all rights requests within 14 days.
Right of Access
You can request a copy of all personal data Lucky Park holds about you. We will provide this in a structured, readable format within 14 days of a valid request.
Right to Rectification
If personal data Lucky Park holds about you is inaccurate or incomplete, you can request that it be corrected. This can often be done directly in your account settings.
Right to Erasure
You can request deletion of your personal data where Lucky Park no longer has a legal basis to retain it. Note that AML and regulatory obligations may require us to retain certain data for a fixed period regardless of this request.
Right to Restrict Processing
You can ask Lucky Park to restrict processing of your data in certain circumstances — for example, while a data accuracy dispute is being resolved.
Right to Data Portability
For data you provided to Lucky Park and which is processed by automated means, you can request a structured, machine-readable copy for transfer to another service.
Right to Object
You can object to Lucky Park processing your data for direct marketing at any time, with immediate effect. You can also object to processing based on legitimate interests, though Lucky Park may have compelling grounds to continue in some cases.
How to exercise your rights: Email support@luckypark.net with the subject line "Data Rights Request" and describe what you are asking for. Please include your registered mobile number or email address so we can identify your account. We do not charge a fee for handling data rights requests in normal circumstances.
12. Contact & Updates to This Policy
12.1 Contacting Lucky Park on Privacy Matters
For any questions, concerns, or requests relating to this Privacy Policy or Lucky Park's handling of your personal data, please contact us:
- Email: support@luckypark.net — mark the subject line "Privacy" so queries are routed to the right team.
- Live Chat: Available 24/7 on the Lucky Park platform — live chat is the fastest channel for general queries.
- WhatsApp and Telegram: Available for player support including privacy queries.
Lucky Park acknowledges all privacy-related emails within 24 hours. Substantive responses, including responses to data rights requests, are provided within 14 days. Complex requests — for example, requests involving large volumes of data or that require legal review — may take up to 30 days, in which case we will notify you of the extended timeline.
12.2 Updates to This Privacy Policy
Lucky Park will update this Privacy Policy when our data practices change, when we add new features or payment methods that affect data collection, or when there are changes in applicable law. The "Last updated" date at the top of this page reflects the most recent version.
Where changes are significant — for example, a new category of data being collected, a new third-party data recipient, or a material change to retention periods — Lucky Park will notify registered players by email at least 14 days before the change takes effect. Minor clarifications may be made without advance notice.
Continued use of the Lucky Park platform after an updated Privacy Policy takes effect constitutes your acknowledgment of the revised terms. If you disagree with changes to this Privacy Policy, please stop using the Lucky Park platform and contact us to close your account and request deletion of your data where applicable.
12.3 Relationship with Other Lucky Park Policies
This Privacy Policy should be read alongside Lucky Park's Terms and Conditions and Responsible Gaming policy, both of which reference data processing activities described in this document. In the event of any conflict between this Privacy Policy and another Lucky Park document, this Privacy Policy governs on matters of personal data.
Simple version: Lucky Park collects your data to run the platform, pay you when you win, keep bad actors out, and comply with the law. We don't sell it. We protect it with serious security. You can ask us what we have, correct it, or ask us to delete it. Any questions — email us at support@luckypark.net any time.