luck10 Privacy Policy

luck10 ("we", "us", "our") is committed to protecting the privacy and personal data of every player who accesses our platform. We understand that entrusting us with your personal information is a matter of confidence, and we take that responsibility with full seriousness.

This Privacy Policy describes our practices with respect to the collection, use, disclosure, storage, and protection of personal data relating to users ("you", "your", "Player") of the luck10 platform. It applies to all users regardless of whether they are registered account holders or casual visitors to the luck10 website.

luck10 is operated under an international gaming licence. We comply with applicable data protection legislation and follow internationally recognised best practices for data security and privacy. Our operations serve players primarily across Pakistan, including cities such as Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi.

We may revise this Privacy Policy from time to time. The most current version will always be available at https://luck10.org/privacy-policy. Continued use of the platform after any revision constitutes acceptance of the updated policy.

For the purposes of applicable data protection law, luck10 is the data controller responsible for personal data collected through the luck10 platform. As data controller, luck10 determines the purposes and means by which your personal data is processed.

All data protection enquiries, subject access requests, and privacy-related complaints should be directed to our designated privacy contact at the email address provided in Section 15 of this policy. We will acknowledge all privacy-related communications within 5 business days and provide a substantive response within 30 calendar days.

luck10 collects personal data across several categories depending on your interaction with our platform. The categories of personal data we collect include:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information unless specifically required by our responsible gaming obligations (for example, where a player discloses a gambling problem in the context of a self-exclusion request).

luck10 collects personal data through the following channels and methods:

• Direct Registration: When you create a luck10 account you voluntarily provide identity data, contact data, and payment method preferences. All registration fields marked as required must be completed accurately and truthfully.
• KYC Verification Submissions: When you submit identity documents such as your CNIC, passport, or utility bills for Know Your Customer (KYC) verification, we collect and store copies of those documents along with the verification outcome.
• Transactional Activity: Deposit and withdrawal activity automatically generates financial records that we retain as part of our account management and regulatory compliance obligations.
• Automated Technologies: We use cookies, web beacons, session tracking pixels, and server log files to automatically collect technical data and usage data when you interact with our platform. See Section 10 for full cookie details.
• Customer Support Interactions: Any communication you initiate with luck10 support — whether by email, live chat, or other channel — is recorded and retained for quality assurance, dispute resolution, and training purposes.
• Third-Party Sources: We may receive data about you from third-party identity verification providers, payment processors such as JazzCash and EasyPaisa, fraud prevention databases, and advertising partners where you have given those third parties permission to share your data.

luck10 uses your personal data only for purposes that are lawful, specific, and proportionate. The primary purposes for which we process your data are:

• Account Management: Creating, maintaining, and administering your luck10 player account, including processing your registration, verifying your identity, and managing your account settings.
• Service Delivery: Providing you with access to casino games, live dealer tables, PSL and cricket sports betting markets, slots, and all other luck10 platform features.
• Payment Processing: Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Allied Bank, and USDT TRC20. All financial transactions require accurate data to be processed correctly.
• KYC & Compliance: Verifying your identity and age (21+), conducting anti-money laundering (AML) checks, meeting our obligations under our international gaming licence, and complying with applicable laws.
• Responsible Gaming: Monitoring gaming activity to identify indicators of problem gambling, applying responsible gaming tools such as deposit limits and self-exclusion, and fulfilling our duty of care obligations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, account compromise, money laundering, bonus abuse, and other prohibited conduct as described in our Terms & Conditions.
• Customer Support: Responding to your queries, resolving disputes, handling complaints, and improving our service quality based on support interactions.
• Marketing & Promotions: Sending you promotional offers, bonus notifications, and relevant platform updates — but only where you have provided consent or where we have a legitimate interest in keeping you informed. You may opt out at any time.
• Platform Improvement: Analysing aggregated usage data to improve our website, games offering, betting markets, and overall user experience on the luck10 platform.
• Legal Obligations: Maintaining records as required by applicable law, regulatory orders, or our licensing authority.

We do not use your personal data for automated decision-making that produces significant legal effects without human review, except where required by our fraud prevention or AML systems, in which case you have the right to request human review of any automated decision.

luck10 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and luck10 — i.e., operating your player account, delivering gaming services, and processing your financial transactions.
• Legal Obligation: Processing required for compliance with applicable laws and our licensing obligations — including KYC verification, AML compliance, age verification, and record-keeping requirements.
• Legitimate Interests: Processing necessary for our legitimate business interests where those interests are not overridden by your privacy rights — including fraud detection, platform security, service improvement, and responsible gaming monitoring.
• Consent: Where we process your data on the basis of consent — such as for marketing communications or optional data collection — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Consent withdrawal can be submitted via [email protected].

luck10 may share your personal data with the following categories of third parties, under strict contractual data protection obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Allied Bank, and cryptocurrency processing partners receive the minimum financial data required to process your transactions securely.
• KYC & Identity Verification Partners: Third-party identity verification providers who assist us in verifying your CNIC, passport, and other identity documents as required by our AML and licensing obligations.
• Technology & Infrastructure Partners: Cloud hosting providers, database operators, and cybersecurity service providers who support the technical operation of the luck10 platform. All such providers are contractually bound to protect your data and may not use it for their own purposes.
• Game Providers: Third-party game studios and live casino operators whose games are hosted on the luck10 platform may receive anonymised session data necessary to deliver game functionality. We do not share full identity data with game providers.
• Fraud & AML Databases: Industry-standard fraud prevention and anti-money laundering databases where we have a legal obligation or legitimate interest in checking your details against known risk indicators.
• Regulatory & Law Enforcement Authorities: Competent authorities, regulators, courts, or law enforcement agencies where we are legally required to disclose data — for example in response to a court order or regulatory investigation.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of luck10's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights will be fully preserved.

All third-party data processors engaged by luck10 are required to maintain appropriate technical and organisational security measures and are prohibited from processing your data for any purpose beyond what is strictly necessary for the services they provide to us.

luck10 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. Our general retention standards are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. Where anonymisation is not technically feasible, data is securely destroyed.

luck10 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the luck10 platform is encrypted using industry-standard 256-bit SSL/TLS protocols, ensuring that your personal and financial data cannot be intercepted in transit.
• Encrypted Data Storage: Personal data stored on our servers is encrypted at rest. Sensitive fields such as payment details and identity document copies are encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All luck10 staff with access to player data are subject to confidentiality obligations and undergo regular data protection training.
• Multi-Factor Authentication: Administrative access to luck10's internal systems requires multi-factor authentication. We also encourage players to enable additional account security features where available.
• Penetration Testing & Audits: luck10's platform undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities proactively.
• Incident Response: luck10 maintains a documented data breach response plan. In the event of a security incident affecting your personal data, we will notify affected players and, where required, relevant authorities within applicable statutory timeframes.

While we take every reasonable precaution, no data transmission over the internet or electronic storage system can be guaranteed as entirely secure. By using the luck10 platform you acknowledge this inherent limitation and agree not to hold luck10 liable for security breaches that result from circumstances outside our reasonable control.

luck10 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure security, and collect analytics data. A cookie is a small text file placed on your device when you visit our website.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your luck10 account and using core platform features.

luck10 also uses web server log files which automatically record technical data including your IP address, browser type, referring URL, and pages accessed. This data is used for security monitoring, fraud detection, and platform performance analysis. Log file data is not used to identify individuals except where required for fraud or security investigations.

luck10 operates as an international gaming platform. Your personal data may be processed and stored on servers located outside Pakistan, including in the jurisdiction where our gaming licence is held and where our technology infrastructure partners operate.

Where personal data is transferred internationally, luck10 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that applied within Pakistan. Safeguards include contractual data protection clauses with all international data processors, binding corporate rules where applicable, and technical security measures that apply uniformly regardless of where data is processed.

By registering and using the luck10 platform, you consent to the transfer of your personal data to international jurisdictions as described in this section, subject always to the protections described in this Privacy Policy.

As a luck10 player you have a number of rights with respect to your personal data. These rights are described below. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and we will respond within 30 calendar days.

luck10 employs active age verification measures as part of our KYC process to confirm that all registered players meet the minimum age requirement of 21 years. Where we discover or have reasonable grounds to believe that a player is under 21, we will immediately suspend the account, conduct a full review, and close the account permanently if the age restriction is confirmed to have been breached.

Any funds deposited to an account by a player subsequently confirmed to be under the age of 21 will be returned to the originating payment method, less any losses incurred, pending the outcome of our investigation. Winnings accrued by underage players are not eligible for withdrawal and will be voided.

If you are a parent or guardian and believe that a minor in your care has registered an account on luck10, please contact us immediately at [email protected]. We will investigate and take all necessary action promptly.

luck10 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The effective date at the top of this policy will be updated each time a revision is published.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify registered players via the email address held on their account or through an on-site notification prior to the changes taking effect. For minor or non-material changes such as typographical corrections, formatting updates, or clarifications that do not alter the substance of our practices, advance notice may not be provided.

Your continued use of the luck10 platform after any revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with any changes to this policy, you should stop using the platform and may request account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how luck10 protects your data. Archived versions of previous Privacy Policy revisions are available on request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way luck10 handles your personal data, please contact our privacy team using the details below. We are committed to handling all privacy enquiries with care and discretion.

Email: [email protected] (Subject line: "Privacy Enquiry" or "Data Rights Request")

Response time: We will acknowledge your enquiry within 5 business days and provide a full response within 30 calendar days. Complex data access or erasure requests may take up to 60 days in exceptional circumstances, in which case we will inform you of the extended timeline.

All privacy correspondence is handled by luck10's dedicated data protection function. Communications are treated as confidential and are not shared with third parties except where required to fulfil your request or comply with a legal obligation.