Plain-Language Summary: luck213 collects your registration details, CNIC information, payment records, and gaming activity to operate the platform, process PKR transactions, and comply with applicable regulations. We do not sell your personal data to advertisers or unrelated third parties. You have the right to access, correct, or request deletion of your data at any time by contacting support@luck213.app. Reading the full policy below gives you the complete picture.
1 Introduction
This Privacy Policy describes how luck213 ("we," "us," "our," "the Platform") collects, stores, processes, and protects the personal information of individuals ("you," "your," "Player") who register for or use the luck213 website and services located at luck213.app.
luck213 is built for players in Pakistan. Everything we do with your data is shaped by that focus — the payment methods we integrate (Easypaisa, JazzCash, NayaPay, SadaPay, Bank IBFT, Visa/Mastercard), the identity verification we perform (CNIC-based), and the support we provide are all oriented toward Pakistani players and Pakistani regulatory norms.
Privacy is not an afterthought at luck213. It is a core operating principle. Pakistani players share sensitive financial and identity information when they register and transact, and we take the responsibility of protecting that information seriously. This policy is our commitment to you about how that information is handled — written as clearly as we can manage, without unnecessary legal padding.
By using luck213 — including browsing the website, registering an account, making a deposit, or placing any bet — you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described within it. This policy is read alongside our Terms and Conditions.
2 What Data We Collect
luck213 collects personal data in the categories described below. We collect only what is necessary for the purposes described in Section 4.
2.1 Registration Data
When you create a luck213 account, you provide: your full legal name as it appears on your CNIC; your date of birth; your Pakistani mobile number; and your residential address. This data is required to create your account and is verified as part of the KYC (Know Your Customer) process.
2.2 Identity Verification Data
As part of KYC compliance, luck213 may request a copy of your CNIC or other government-issued Pakistani identity document. A photograph of the document and, in some cases, a selfie for facial comparison may be required. This data is used solely for identity verification and is subject to the security measures described in Section 6.
2.3 Financial Data
luck213 processes PKR transactions via Easypaisa, JazzCash, NayaPay, SadaPay, Bank IBFT, and Visa/Mastercard. Financial data collected includes: your registered mobile wallet numbers; bank account details for IBFT transactions; transaction amounts and timestamps; and payment confirmation references. Full card numbers, CVV codes, and card expiry dates are processed by our PCI-DSS compliant payment gateway and are never stored on luck213 servers.
2.4 Gaming Activity Data
luck213 records your gameplay activity, including: games played; bet amounts and outcomes; bonus claims and wagering progress; session durations; and game preference data. This data is used to provide the gaming service, resolve disputes, detect fraud, and fulfil regulatory obligations.
2.5 Technical and Device Data
When you access luck213, we collect certain technical data automatically: your IP address; device type and operating system; browser type and version; screen resolution; referring URL; and session timestamps. This data is used for platform security, fraud detection, and service optimisation.
2.6 Communications Data
If you contact luck213 customer support via live chat, email, or any other channel, we retain records of those communications. This includes support tickets, chat transcripts, and email threads. These records are used to resolve your query, train the support team, and document the history of any formal complaints.
| Data Category | Examples | Required? |
|---|---|---|
| Registration | Name, DOB, mobile, address | Yes — to create account |
| Identity (KYC) | CNIC copy, selfie | Yes — for withdrawals |
| Financial | Wallet numbers, IBFT account, transaction records | Yes — for payments |
| Gaming Activity | Bets placed, games played, session time | Yes — to operate service |
| Technical / Device | IP address, device type, browser | Auto-collected |
| Communications | Support chat, email | When you contact us |
3 How We Collect Your Data
luck213 collects data through three primary channels:
- Directly from you: Data you provide when registering, completing KYC, making transactions, setting up payment methods, contacting support, or participating in promotions.
- Automatically through platform use: Technical and device data collected automatically when you access luck213 via web browser or mobile app, including through cookies and similar technologies (see Section 8).
- From payment processors: Transaction confirmation data received from Easypaisa, JazzCash, NayaPay, SadaPay, and banking networks when you deposit or request a withdrawal. luck213 receives only the information needed to confirm and record the transaction — it does not receive your full payment account credentials.
luck213 does not purchase personal data from data brokers or list providers. All personal data in luck213 systems is provided directly by the player or generated through the player's legitimate use of the platform.
4 Why We Use Your Data
luck213 processes personal data for specific, legitimate purposes. We do not process data for any purpose beyond what is described here without obtaining your explicit consent first.
4.1 Platform Operation
The core gaming service — account management, game access, PKR deposits and withdrawals, bonus management, and customer support — cannot function without processing your personal data. This is the primary legal basis for all data processing at luck213.
4.2 Identity Verification and KYC Compliance
luck213 is required to verify the identity of players, particularly before processing significant withdrawals. CNIC verification ensures that withdrawals are processed only to accounts registered under the correct identity, protecting players from unauthorised fund diversion. KYC also forms part of luck213's anti-money-laundering (AML) obligations.
4.3 Payment Processing
PKR transaction processing via Easypaisa, JazzCash, NayaPay, SadaPay, Bank IBFT, and Visa/Mastercard requires sharing relevant transaction data with those payment providers. This sharing is limited to what is strictly necessary to complete each transaction.
4.4 Security and Fraud Prevention
luck213 analyses device data, IP addresses, gaming patterns, and transaction behaviour to detect and prevent fraud, account takeover, money laundering, bonus abuse, and other prohibited conduct. This analysis is a legitimate interest of luck213 and is directly protective of all honest players on the platform.
4.5 Responsible Gaming
Gaming activity data is used to power responsible gaming tools including deposit limit tracking, loss limit enforcement, session time monitoring, and self-exclusion. This data processing is in the direct interest of player welfare and is a fundamental part of how luck213 operates responsibly.
4.6 Service Improvement
Aggregated and anonymised usage data is analysed to improve platform performance, identify technical issues, and prioritise new features. Individual player data is not used for this purpose in identifiable form.
4.7 Legal and Regulatory Obligations
luck213 retains certain records — transaction logs, KYC documents, gaming history — to comply with applicable regulatory requirements. Some records must be retained for defined minimum periods even after account closure.
Marketing Communications: luck213 may send promotional messages (bonus alerts, new game announcements, special offers) to your registered mobile number or email address. You can opt out of marketing communications at any time via your account settings or by contacting support@luck213.app. Opting out of marketing does not affect service communications such as withdrawal confirmations or security alerts.
5 Who We Share Your Data With
luck213 does not sell your personal data to any third party. Data is shared only in the following specific and limited circumstances:
5.1 Payment Processors
To process PKR deposits and withdrawals, luck213 shares transaction data with the relevant payment processor — Easypaisa, JazzCash, NayaPay, SadaPay, the interbank IBFT network, or the applicable card payment gateway. Each processor receives only the minimum data required to complete the specific transaction. These processors operate under their own privacy policies and are subject to Pakistani financial regulation.
5.2 Game Software Providers
luck213 integrates games from certified software providers. These providers receive your player identifier and bet data to operate their games within the luck213 platform. They do not receive your full personal profile, CNIC information, or payment details.
5.3 KYC and Identity Verification Services
Where luck213 uses a third-party identity verification service to process CNIC documents, that service receives only the documents necessary for verification. Verification services used by luck213 are contractually bound to process data solely for identity verification purposes and to maintain equivalent security standards to those described in Section 6.
5.4 Legal and Regulatory Authorities
luck213 will disclose personal data to regulatory bodies, law enforcement agencies, or courts when required to do so by applicable law, court order, or regulatory direction. In such cases, luck213 discloses only the minimum data required to comply with the specific legal obligation.
5.5 Business Transfers
In the event of a merger, acquisition, or transfer of all or part of luck213's business to a successor entity, personal data held by luck213 may be transferred to that successor as part of the transaction. Players would be notified of any such transfer and the successor entity would be bound by this Privacy Policy or an equivalent standard.
No Advertising Data Sales: luck213 does not share, sell, or rent personal data to advertising networks, data brokers, or any third party for marketing purposes unrelated to luck213. Your data stays within the luck213 ecosystem and the specific operational partners listed above.
How luck213 Protects Your Privacy
Six concrete security and privacy measures in place on every luck213 account.
256-bit SSL Encryption
Every connection between your device and luck213 is encrypted with 256-bit SSL. Data in transit — including login credentials, CNIC documents, and payment information — cannot be read by third parties.
PCI-DSS Card Processing
Visa and Mastercard transactions are handled by a PCI-DSS Level 1 certified payment gateway. Full card numbers and CVV codes are never stored on luck213 servers — not even temporarily.
CNIC-Verified Withdrawals
Withdrawals can only be processed to accounts registered under the same CNIC as your luck213 account. Even if someone obtains your login credentials, they cannot redirect your funds without your verified identity documents.
Two-Factor Authentication
Enable 2FA in your account settings for an extra layer of login security. A one-time code sent to your registered Pakistani mobile number is required on every login.
Encrypted Data Storage
Sensitive data stored in luck213 systems — including KYC documents and financial records — is encrypted at rest. Data is stored in access-controlled environments with strict internal permission hierarchies.
Instant Transaction Alerts
Every deposit and withdrawal on your luck213 account triggers an instant in-app notification. If you receive an alert for a transaction you did not initiate, contact support immediately.
6 Data Security
luck213 implements a layered approach to data security that covers data in transit, data at rest, and internal access controls.
- Encryption in transit: All platform connections use TLS 1.2 or higher with 256-bit AES encryption. This applies to the website, mobile access, and all API communications with payment processors and game providers.
- Encryption at rest: Sensitive personal data stored in luck213 databases — including KYC documents, financial records, and CNIC information — is encrypted using AES-256 at rest.
- Access controls: Internal access to personal data is restricted to employees and contractors who have a specific operational need. Access is logged, audited, and reviewed regularly.
- Card data: luck213 does not store card numbers, CVV codes, or card expiry dates on its own systems. All card transactions are processed by a PCI-DSS certified external gateway.
- Security monitoring: luck213 operates continuous monitoring for anomalous account activity, suspicious transaction patterns, and potential platform intrusion attempts.
- Incident response: In the event of a data security incident that affects player data, luck213 will investigate promptly and notify affected players within 72 hours if the incident poses a risk to their personal data.
Your Responsibility: luck213 cannot protect data that is compromised due to actions on your side — such as sharing your password, using an insecure device, or accessing luck213 on a public Wi-Fi network without a personal VPN. Use a strong, unique password for your luck213 account and enable two-factor authentication to give your account maximum protection.
7 Data Retention
luck213 retains personal data for only as long as it is needed for the purpose for which it was collected, subject to any regulatory minimum retention periods.
- Account data: Retained for the duration of your active account plus 5 years following account closure, to allow for regulatory inquiries, dispute resolution, and legal compliance.
- KYC and identity documents: Retained for a minimum of 5 years following the conclusion of the customer relationship, as required by applicable AML regulations.
- Transaction records: All PKR transaction records — deposits, withdrawals, and bet history — are retained for a minimum of 5 years following each transaction.
- Support communications: Customer support records are retained for 3 years from the date of the final interaction in that case.
- Technical logs: Server and security logs are retained for 12 months and then deleted unless they contain records relevant to an ongoing investigation or dispute.
- Marketing preferences: Opt-out records are retained indefinitely to ensure that opted-out players are not inadvertently re-subscribed to marketing communications.
When retention periods expire, data is securely deleted or anonymised so that it can no longer be associated with a specific individual. Anonymised, aggregated data (such as platform usage statistics) may be retained indefinitely as it does not constitute personal data.
8 Cookies and Tracking Technologies
luck213 uses cookies and similar tracking technologies to operate the platform and improve the player experience. A cookie is a small text file stored on your device by your browser when you visit a website.
8.1 Types of Cookies Used
- Essential cookies: Required for the platform to function — session management, login state, security tokens. These cannot be disabled without breaking the platform's core functionality.
- Functional cookies: Remember your preferences such as language settings, game lobby view, and responsible gaming limit configurations.
- Analytics cookies: Collect anonymised data about how players navigate luck213 — which pages are visited most, where users drop off during registration, which games are most popular. This data is used in aggregate only and is not linked to individual identities.
- Security cookies: Used to detect suspicious activity such as repeated failed login attempts, unusual geographic access patterns, and device fingerprint anomalies.
8.2 Managing Cookies
You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent you from logging in to luck213 or making transactions. Blocking analytics cookies will not affect your ability to use the platform but will limit luck213's ability to improve it based on usage data. luck213 does not use third-party advertising cookies and does not allow advertising networks to place cookies on luck213 pages.
9 Your Privacy Rights
As a luck213 player, you have the following rights regarding your personal data. These rights can be exercised at any time by contacting support@luck213.app.
Request a copy of all personal data luck213 holds about you. We respond within 48 hours with a complete data export.
Request correction of inaccurate or incomplete personal data. Update your mobile number and address directly in account settings.
Request deletion of your personal data following account closure. Regulatory retention obligations (Section 7) may prevent immediate deletion of some records.
Request that luck213 limit how it processes your data in specific circumstances — for example, while a dispute is being resolved.
Request your personal data in a structured, machine-readable format (CSV or JSON) for transfer to another platform.
Opt out of promotional messages via your account settings or by emailing support@luck213.app. Service communications are not affected.
To exercise any of these rights, email support@luck213.app with the subject line "Privacy Request" and a description of your request. luck213 acknowledges all privacy requests within 24 hours and fulfils them within 48 hours where technically possible. Requests that require document verification may take up to 5 business days.
10 Pakistani Payment Methods and CNIC Data
Because luck213 is built specifically for Pakistan, it is worth addressing the two most sensitive data categories for Pakistani players specifically: payment account data and CNIC information.
10.1 Easypaisa and JazzCash Numbers
Your Easypaisa and JazzCash mobile numbers are stored in luck213 systems in encrypted form and are used exclusively to process deposits and withdrawals to those specific accounts. They are never shared with third parties other than the relevant payment provider for transaction processing. You can update your registered wallet numbers via account settings, subject to identity verification.
10.2 Bank Account Details (IBFT)
Bank account numbers and branch details provided for IBFT transactions are stored encrypted and used only for processing the specific withdrawals you request to those accounts. luck213 does not initiate IBFT transactions to your bank account without an explicit withdrawal request from your account.
10.3 CNIC Information
CNIC number and CNIC document copies are the most sensitive data luck213 holds. They are stored in an encrypted, access-controlled environment with the strictest internal access controls on the platform. CNIC data is accessed internally only by the KYC verification team for the specific purpose of verifying account identity. CNIC documents are not used for any purpose other than identity verification and are retained in line with the timelines in Section 7.
CNIC Security Commitment: luck213 will never share your CNIC number or CNIC document copy with any party other than a contracted KYC verification service or a regulatory authority acting under legal authority. No luck213 employee will ever ask you to share your full CNIC number via live chat, email, or phone call outside the formal KYC submission process.
11 Minors and Under-18 Players
luck213 does not knowingly collect personal data from individuals under the age of 18. The platform is intended exclusively for adult players. CNIC-based age verification is performed during the registration process to prevent minors from opening accounts.
If luck213 discovers that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account will be closed. If you believe a minor has registered on luck213 or is using an adult's account to access the platform, please contact support@luck213.app immediately. luck213 takes underage access extremely seriously and investigates all such reports promptly.
Parents and guardians are encouraged to use device-level parental controls to prevent minors from accessing online gaming platforms, including luck213.
12 Changes to This Privacy Policy
luck213 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable regulations. When material changes are made, we will notify registered players via in-app notification sent to the registered mobile number at least 7 days before the updated policy takes effect.
The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this policy periodically. For minor, non-material clarifications, the policy may be updated without advance notice.
If you disagree with a material change to this Privacy Policy and do not wish to accept the updated terms, you should stop using luck213 and request account closure before the effective date of the change. Continued use of luck213 after the effective date constitutes acceptance of the updated Privacy Policy.
13 Contact Us About Privacy
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how luck213 handles your data, please get in touch using the channels below. All privacy inquiries are handled by the luck213 data team with appropriate confidentiality.
Subject: Privacy Request
Response under 2 minutes
Resolution: 48 hours
Play at luck213 with Confidence
Your CNIC data, payment details, and gaming history are protected by 256-bit encryption, CNIC-verified withdrawals, and strict internal access controls. Join 500,000+ Pakistani players who trust luck213 with their data and their PKR.