Lucky8 takes the privacy of every Pakistani player seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and protected, and what rights you have over your own information. We have written it in plain, straightforward English — no legal maze.
Lucky8 is an online betting and gaming platform operating at lucky8-bangla.net, serving players across Pakistan. This Privacy Policy describes how Lucky8 ("we", "us", "the Platform") collects, uses, stores and protects the personal information of all registered users and visitors ("you", "the Player").
We are required to collect certain personal information to provide our services — you cannot create an account, deposit PKR or place a bet without us having at minimum your mobile number, date of birth and account credentials. Beyond that minimum, every piece of data we hold serves a specific operational, legal or safety purpose that is explained in this policy.
This Privacy Policy applies to all Lucky8 products: sports betting, cricket betting, esports betting, crash games, Ludo, and all cashier functions. It applies whether you access Lucky8 from a mobile browser, desktop browser or any future application. By registering an account on Lucky8, you confirm that you have read this policy and consent to the data practices described within it.
This policy should be read alongside Lucky8's Terms and Conditions and Responsible Gaming Policy.
Lucky8 collects personal data in three ways: information you give us directly, information generated automatically by your use of the platform, and information we receive from third-party service providers we work with.
Every category of data Lucky8 holds serves a specific purpose. The table below maps the main data types to the reasons they are collected and the legal basis for processing them.
| Data Type | Primary Purpose | Legal Basis |
|---|---|---|
| Mobile number, username, password | Account creation and secure login | Contract performance |
| Date of birth | Age verification (18+ requirement) | Legal obligation |
| CNIC number and name | KYC identity verification before withdrawals | Legal obligation / fraud prevention |
| Payment account details | Processing deposits and withdrawals in PKR | Contract performance |
| Betting and game history | Account management, dispute resolution, responsible gaming monitoring | Contract performance / legitimate interest |
| IP address and device data | Fraud detection, security, geo-restriction compliance | Legitimate interest / legal obligation |
| Support communications | Resolving queries and complaints | Contract performance / legitimate interest |
| Cookies and usage analytics | Platform performance monitoring, user experience improvement | Consent / legitimate interest |
Lucky8 does not collect data for advertising profiling or for sale to marketing companies. We do not use your betting history or game activity to build advertising profiles that are shared with third parties.
Payment data on Lucky8 is handled with particular care because it directly connects to your financial accounts. Here is how the different payment methods work from a data perspective:
When you deposit or withdraw via Easypaisa or JazzCash, Lucky8 passes your registered mobile number and the transaction amount to the relevant payment gateway. The gateway handles the authorisation directly with Easypaisa or JazzCash. Lucky8 receives a transaction confirmation reference — it does not store your Easypaisa or JazzCash PIN or any authentication credentials.
Transactions via NayaPay and SadaPay follow the same gateway model. Your wallet credentials are never exposed to or stored by Lucky8's systems. Lucky8 stores only the transaction reference, amount, timestamp and your Lucky8 account identifier.
For IBFT deposits, you submit your transfer from your own banking application to Lucky8's designated bank account. Lucky8 stores the transaction reference, bank name, account number suffix (last four digits only), amount and timestamp to reconcile the deposit against your account.
Card payments on Lucky8 are processed via a PCI-DSS Level 1 certified payment gateway. Your full card number, CVV and expiry date are entered directly into the gateway's secure form — they are never transmitted to or stored on Lucky8's servers. Lucky8 retains only the payment gateway's transaction token, masked card number (last four digits), card type and transaction reference.
Lucky8 requires identity verification (KYC) before processing a player's first withdrawal. This is a standard anti-money laundering and fraud prevention measure that protects both players and the platform.
Standard KYC on Lucky8 requires your full name as it appears on your CNIC, your CNIC number and a selfie photograph taken at the time of verification. In some cases — particularly for larger withdrawal amounts or where the automated check raises a flag — Lucky8 may request a photograph of your CNIC card itself.
Your KYC data is used exclusively to:
KYC documents are stored in an encrypted, access-controlled repository separate from general account data. Access to KYC documents is restricted to Lucky8's compliance and finance teams. KYC data is retained for a minimum of five years from account closure as required by financial regulations, after which it is securely destroyed.
Lucky8 uses cookies — small text files stored in your browser — and similar tracking technologies to make the platform work properly and to understand how players use it. Here is a breakdown of the types of cookies Lucky8 uses:
These cookies are essential for Lucky8 to function. They keep you logged in during your session, maintain your bet slip across page loads and enable the cashier to process transactions securely. You cannot opt out of strictly necessary cookies without breaking the platform's basic functions.
These cookies help Lucky8 understand which pages players visit most, how long they stay and where technical errors occur. This data is used in aggregate — it is not tied to your individual identity — to improve the platform's performance and user experience. Lucky8 uses privacy-respecting analytics tools for this purpose.
Functional cookies remember your preferences — such as your preferred language or last-used payment method — so you do not have to re-enter them every time. These improve your experience but are not essential to the platform operating.
You can manage or delete cookies through your browser settings. Most modern browsers allow you to block or delete cookies selectively. Blocking strictly necessary cookies will affect the platform's functionality. Blocking analytics or functional cookies will reduce Lucky8's ability to personalise your experience but will not prevent you from using the platform.
Lucky8 does not sell your personal data to anyone. We share data only in the specific circumstances listed below, and only to the minimum extent necessary for each purpose.
To process your deposits and withdrawals, Lucky8 shares the necessary transaction details with the relevant payment gateways (Easypaisa, JazzCash, NayaPay, SadaPay, our IBFT banking partner, and our card processing gateway). These processors receive only what they need to complete the transaction — they do not receive your betting history, game activity or any other account data.
Where Lucky8 uses a third-party KYC service to verify your identity, your name and CNIC data is shared with that provider for the purpose of the verification check. KYC providers are contractually bound to process your data only for verification purposes and to maintain appropriate security standards.
Lucky8 uses third-party fraud detection tools that may process your IP address, device fingerprint and behavioural signals to identify suspicious activity. These tools help protect your account from unauthorised access and protect the platform from being used for money laundering or bonus abuse.
Lucky8 may be required to share account and transaction data with regulatory authorities, law enforcement agencies or courts in response to legally valid requests. Lucky8 will comply with such requests where legally obligated to do so, and will notify affected players where we are legally permitted to do so.
If Lucky8's business or any part of it is transferred to a new owner, player account data may form part of the transferred assets. Any new owner would be bound by this Privacy Policy and would be required to treat your data in accordance with its terms or notify you of any material changes before they take effect.
Lucky8 applies multiple layers of technical and organisational security to protect player data. Key security measures include:
No system is completely immune to security threats. In the unlikely event of a data breach that poses a risk to your personal data, Lucky8 will notify affected players promptly and take immediate steps to contain and remediate the breach.
Lucky8 retains personal data only for as long as it is needed for the purpose it was collected, or as long as required by applicable regulations. General retention guidelines are as follows:
When data is no longer needed and its retention period has elapsed, Lucky8 deletes it securely — using methods that prevent recovery — or anonymises it so that it can no longer be connected to any individual player.
As a Lucky8 player, you have the following rights over your personal data. To exercise any of these rights, contact Lucky8 at support@lucky8-bangla.net with the subject line "Data Rights Request — [your username]".
Lucky8 is strictly an adult platform. Registration is not permitted for anyone under 18 years of age. Lucky8 does not knowingly collect personal data from minors. If Lucky8 discovers that an account was created by a person under 18 — whether through age verification, KYC, a report from a third party or any other means — the account will be immediately suspended, all funds will be held pending investigation and the minor's data will be deleted from Lucky8's systems to the extent legally permissible.
If you believe a minor has created a Lucky8 account, please contact Lucky8 support immediately at support@lucky8-bangla.net. Reports of this nature are treated as a priority.
Parents and guardians are encouraged to use internet filtering tools and parental controls to prevent minors from accessing online gaming platforms. Lucky8 cooperates with organisations that work to protect minors from exposure to online gambling.
Lucky8 reviews and updates this Privacy Policy periodically to reflect changes in the platform, applicable regulations or data processing practices. When material changes are made — changes that affect how your data is collected, used or shared in a significant way — Lucky8 will notify registered players via email or in-platform notification at least seven days before the changes take effect.
The updated policy will be posted on this page with an updated "Last Updated" date at the top. We recommend bookmarking this page and reviewing it periodically, especially after receiving a notification of changes.
Minor updates — corrections of typographical errors or clarifications that do not change the substance of the policy — may be made without specific advance notification, though the date will always be updated to reflect the revision.
Continuing to use Lucky8 after the effective date of updated Terms constitutes acceptance of the revised Privacy Policy. If you do not agree with material changes, you should contact Lucky8 to withdraw your data and close your account before the effective date.
If you have questions about this Privacy Policy, want to exercise any of your data rights, or wish to report a privacy concern, please reach us through the following:
For formal data rights requests (access, correction, erasure), please use email so there is a written record of your request. Lucky8 will acknowledge all privacy-related requests within 48 hours and aim to resolve them fully within 30 days. If a request cannot be fully fulfilled — for example because a regulatory retention requirement prevents full deletion — Lucky8 will explain this clearly in its response.
Six ways Lucky8 protects the personal data of every Pakistani player on the platform.
Lucky8 does not sell, rent or trade player data to advertisers, marketing companies or data brokers. Your betting habits, game preferences and personal details exist on Lucky8's systems for operational purposes only — not to generate revenue from data sales.
Every page of Lucky8 — not just the cashier — is served over HTTPS with 256-bit SSL encryption. Every byte of data your device sends to Lucky8 is encrypted in transit, making it unreadable to anyone who might intercept it between your phone and the server.
Card payments on Lucky8 go through a PCI-DSS Level 1 certified gateway. Your card number and CVV are never stored on Lucky8's servers — they go directly to the secure gateway. Lucky8 holds only a masked reference that is useless to anyone without the gateway credentials.
Lucky8 staff access to your data is restricted strictly by role. Support agents see what they need to assist you. Compliance staff access KYC documents. No single employee has unrestricted access across all data categories. All access is logged and audited.
Lucky8 treats data rights requests — access, correction, deletion, portability — as a genuine obligation. Submit a request to support and Lucky8 will acknowledge it within 48 hours and resolve it fully within 30 days. These are not promises buried in a footnote. They are commitments Lucky8 delivers on.
Lucky8 collects only the data needed to operate your account, process your PKR transactions and meet legal requirements. We do not ask for information we have no use for. Every data field in the registration process and the KYC flow exists for a specific, defined reason.
The privacy questions Pakistani Lucky8 players ask most often.
Register free in under two minutes. Your personal data stays on Lucky8, protected by SSL encryption and strict access controls. First deposit bonus of 100% up to Rs 20,000 awaits.