1. Who We Are
This Privacy Policy is issued by Lucky 48 ("Lucky 48", "we", "us", "our"), the operator of the online gaming platform accessible at https://lucky48.bet. Lucky 48 operates under an international gaming licence and serves registered players primarily in Pakistan.
For all privacy-related enquiries, Lucky 48 acts as the data controller — meaning we are responsible for determining how and why your personal data is processed. Our designated data enquiries contact is: support@lucky48.bet.
This Privacy Policy applies to all personal data collected through the Lucky 48 website, mobile-optimised platform, account registration, game activity, payment transactions, customer support interactions, and any other means by which you interact with Lucky 48. It should be read alongside our Terms and Conditions.
Plain English Summary: Lucky 48 is responsible for your data. This policy explains everything we do with it. If you ever have a question about your privacy, email us directly and we will respond within 5 business days.
2. Data We Collect
Lucky 48 collects personal data in two ways: information you provide directly, and information collected automatically through your use of the platform.
2.1 Data You Provide to Lucky 48
- Registration data: Full legal name, date of birth, mobile number, email address, and chosen password.
- Identity verification (KYC): CNIC number, copies of identity documents, proof of address, and selfie verification where required for large withdrawals.
- Payment details: Mobile wallet identifiers (JazzCash number, Easypaisa number), bank account details for IBFT, or tokenised card reference numbers. Lucky 48 does not store raw card data.
- Support communications: Chat transcripts, email correspondence, and any documents you voluntarily share with our support team.
- Responsible gaming declarations: Self-exclusion requests, limit preferences, and any self-reported information related to your gaming behaviour.
2.2 Data Collected Automatically
- Device and browser data: IP address, device type, operating system, browser type and version, and screen resolution.
- Session data: Login timestamps, session duration, pages visited, games played, bet amounts, and in-game actions.
- Transaction data: Deposit and withdrawal records, bonus activation history, wagering records, and balance history.
- Cookies and similar technologies: Session cookies, preference cookies, and analytics cookies. See Section 7 for full cookie details.
- Geolocation data: Approximate location derived from IP address, used to verify eligibility and apply regional game restrictions where applicable.
Note: Lucky 48 does not collect sensitive personal data such as biometric data, health information, or political affiliations unless specifically required by our licensing authority for compliance purposes, in which case we will notify you explicitly.
3. How We Use Your Data
Every piece of data Lucky 48 holds about you serves a specific, legitimate purpose. Below is a clear breakdown of how your data is used and why.
Lucky 48 does not use your personal data for any purpose not listed above without first obtaining your explicit consent or being required to do so by applicable law.
4. Legal Basis for Processing
Lucky 48 processes your personal data under the following legal bases, depending on the activity involved:
- Contract performance: Most data processing at Lucky 48 is necessary to fulfil the contract between you and Lucky 48 — running your account, processing transactions, and providing access to games.
- Legal obligation: Certain data processing — particularly KYC verification and transaction record-keeping — is required by the regulatory and licensing obligations Lucky 48 operates under.
- Legitimate interests: Lucky 48 processes data for fraud prevention, security monitoring, and platform improvement where these interests do not override your privacy rights.
- Consent: Marketing communications are only sent where you have given explicit opt-in consent. You may withdraw this consent at any time from your account settings.
Plain English Summary: We have a legal reason for every piece of data processing we do. We do not process data arbitrarily. If you want to know the specific legal basis for any processing, contact us at support@lucky48.bet and we will explain it clearly.
5. Payment Data & KYC
5.1 Payment Processing
Lucky 48 accepts JazzCash, Easypaisa, NayaPay, SadaPay, IBFT bank transfers, and Visa/Mastercard. All payment processing is conducted through certified third-party payment processors that maintain their own Payment Card Industry Data Security Standard (PCI-DSS) compliance. Lucky 48 receives tokenised payment references rather than raw financial account credentials. We do not store full card numbers, CVV codes, or complete mobile wallet PINs on our own servers.
5.2 Know Your Customer (KYC)
Lucky 48 is required by its licensing obligations to verify the identity of players, particularly before processing withdrawal requests above certain thresholds. KYC may require:
- A copy of your Computerised National Identity Card (CNIC) or passport;
- A recent utility bill or bank statement as proof of address;
- A selfie holding your identity document in some cases;
- Proof of the payment method used (e.g., a screenshot of your JazzCash account showing your registered number).
KYC documents are stored securely and used only for identity verification purposes. They are not shared with third parties except where required by our licensing authority. KYC documents are retained for the period required by applicable law, after which they are securely deleted.
5.3 Anti-Money Laundering
Lucky 48 operates an Anti-Money Laundering (AML) programme as required by its gaming licence. Unusual transaction patterns may be flagged for review. Lucky 48 is legally obligated to report suspicious transaction activity to the relevant regulatory authority where required, without notifying the player in advance. This is a legal requirement, not a discretionary action.
6. Who We Share Your Data With
Lucky 48 does not sell your personal data. The categories of third parties who may receive limited access to your data are listed below, along with the specific reason for that access:
6.1 Payment Processors
JazzCash, Easypaisa, NayaPay, SadaPay, bank IBFT processors, and Visa/Mastercard networks receive the transaction data necessary to complete your deposits and withdrawals. These providers process data under their own privacy policies and security standards.
6.2 Game Software Providers
The certified software studios whose games are available on Lucky 48 receive anonymised session data necessary to deliver the game to your device. Game providers do not receive your personal identity information, contact details, or payment data.
6.3 Identity Verification Services
Lucky 48 may use third-party KYC service providers to assist with identity document verification. These providers are contractually bound to process your documents solely for the purpose of identity verification on Lucky 48's behalf and to delete them once verification is complete.
6.4 Regulatory & Legal Authorities
Lucky 48 may be required to disclose player data to its licensing authority, financial intelligence units, or law enforcement agencies where legally compelled to do so. Lucky 48 does not voluntarily provide player data to law enforcement beyond what is legally required.
6.5 Analytics Providers
Lucky 48 uses anonymised, aggregated analytics data to understand platform usage patterns. No personally identifiable information is shared with analytics providers — only aggregated metrics that cannot be traced back to any individual player.
Lucky 48 will never share your personal data with advertisers, data brokers, or any commercial third party for the purpose of marketing their products or services to you. This is a firm commitment, not subject to change without your explicit consent.
7. Cookies & Tracking Technologies
Lucky 48 uses cookies and similar technologies to make the platform function correctly and to understand how players use it. Here is a clear breakdown of what we use and why:
7.1 Essential Cookies
These are required for the Lucky 48 platform to function. They maintain your login session, remember your preferences within a session, and ensure secure communication between your browser and our servers. You cannot opt out of essential cookies without losing access to the platform.
7.2 Functional Cookies
These remember your preferences between visits — such as your preferred language setting and your last chosen bet size in demo games. They make the Lucky 48 experience more convenient but are not strictly essential. You can disable functional cookies from your browser settings.
7.3 Analytics Cookies
Lucky 48 uses anonymised analytics cookies to understand which parts of the platform are most used, where players encounter difficulties, and how we can improve performance. No personally identifiable data is included in analytics cookie data. You can opt out of analytics cookies from your Lucky 48 account settings.
7.4 Marketing Cookies
Lucky 48 does not use third-party advertising or retargeting cookies. We do not allow ad networks to place tracking cookies on the Lucky 48 platform. Any Lucky 48 marketing communication you receive is based solely on your account data within our own systems, not on cross-site tracking.
Managing Cookies: You can manage cookie preferences through your browser settings at any time. Disabling essential cookies will affect platform functionality. Disabling analytics or functional cookies will not affect your ability to play, deposit, or withdraw at Lucky 48.
8. Data Retention
Lucky 48 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. The general retention schedule is as follows:
When data reaches the end of its retention period, Lucky 48 securely deletes or anonymises it. We do not retain data "just in case" — retention periods are specific and enforced. Players who request account closure should be aware that certain data may be retained beyond closure as required by the retention periods above.
9. Your Rights
As a Lucky 48 player, you have the following rights over your personal data. Lucky 48 honours all of these rights and aims to respond to all requests within 5 business days:
9.1 Right of Access
You can request a copy of all personal data Lucky 48 holds about you. We will provide this in a readable format, free of charge, within 30 days of a verified request. For security purposes, identity verification is required before access is granted.
9.2 Right to Rectification
If any personal data Lucky 48 holds about you is inaccurate or incomplete, you have the right to request correction. For most account data (name, contact details), this can be done directly from your Lucky 48 account settings. For identity document data, contact support@lucky48.bet.
9.3 Right to Erasure ("Right to Be Forgotten")
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis exists for processing. Note that certain data must be retained for the periods set out in Section 8 even following an erasure request — we will clearly inform you of any such retention and the reason for it.
9.4 Right to Restrict Processing
You may request that Lucky 48 pause processing of your data in certain circumstances — for example, while you dispute the accuracy of data we hold, or where you object to processing but prefer restriction over deletion.
9.5 Right to Data Portability
Where Lucky 48 processes your data by automated means and on the basis of your consent or contract performance, you may request a copy of that data in a structured, machine-readable format suitable for transfer to another service provider.
9.6 Right to Object to Marketing
You may withdraw consent for marketing communications at any time from your Lucky 48 account settings. This takes effect within 48 hours and will not affect your ability to use the platform, play games, or withdraw funds.
9.7 How to Exercise Your Rights
To exercise any of these rights, contact us at support@lucky48.bet with the subject line "Data Rights Request" and a description of your request. We will acknowledge receipt within 24 hours and provide a substantive response within 5 business days. All requests are handled by a real team member — not an automated system.
Lucky 48 will never charge a fee for exercising your data rights unless a request is manifestly unfounded or excessive, in which case we will notify you before applying any charge and give you the option to withdraw the request.
10. Data Security
Lucky 48 implements a multi-layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our security measures include:
- 256-bit SSL/TLS encryption on all data transmissions between your device and Lucky 48 servers;
- Encrypted storage for sensitive data fields including passwords (hashed, not stored in plain text) and payment identifiers;
- Role-based access controls — Lucky 48 staff access only the data necessary for their specific job function. Full account data access is restricted to a small number of verified senior team members;
- Regular security audits conducted by independent third-party specialists to identify and remediate vulnerabilities;
- Two-factor authentication (2FA) available to all Lucky 48 players from account settings — we strongly encourage all Pakistani players to enable this;
- Intrusion detection systems monitoring the Lucky 48 infrastructure for anomalous access patterns in real time.
10.1 Data Breach Notification
In the unlikely event of a data breach that poses a risk to your personal data, Lucky 48 will notify affected players without undue delay, and in any case within 72 hours of becoming aware of the breach. Notifications will be sent to the email address registered on your Lucky 48 account and will include a clear description of what data was affected and what steps we are taking to address the situation.
Your Role in Security: Lucky 48's security measures protect data on our end. You play an equally important role by keeping your login credentials private, enabling 2FA on your account, and using a strong, unique password. Contact support immediately if you suspect your account has been accessed by someone else.
11. Children's Privacy
The Lucky 48 platform is strictly for adults aged 18 and over. Lucky 48 does not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and you have reason to believe that a minor has registered a Lucky 48 account or provided personal data to our platform, please contact us immediately at support@lucky48.bet. We will investigate and delete any data associated with underage accounts without delay.
Lucky 48 employs age verification measures during registration and at KYC stage to prevent minors from accessing the platform. Players with children in their households are encouraged to use parental control software to restrict access to online gaming platforms and to keep their Lucky 48 login credentials private and out of reach of minors.
12. Changes to This Privacy Policy
Lucky 48 may update this Privacy Policy from time to time to reflect changes in our practices, platform functionality, regulatory requirements, or applicable law. When significant changes are made, we will notify registered Lucky 48 players via in-platform notification or by email to the address registered on your account, at least 7 days before the changes take effect.
Minor changes — such as typographical corrections or clarifications that do not affect the substance of our data practices — may be made without advance notice. The "Last Updated" date at the top of this page will always reflect when the most recent version was published.
Continuing to use Lucky 48 after a policy update is published constitutes your acceptance of the revised Privacy Policy. If you do not agree with a material change, you may close your Lucky 48 account before the effective date and request deletion of your data under Section 9.
13. Contact Us
For any question, concern, or request related to this Privacy Policy or your personal data held by Lucky 48, please get in touch:
- Email: support@lucky48.bet — Subject: "Privacy Policy Enquiry" or "Data Rights Request"
- Live Chat: Available 24/7 from your Lucky 48 account dashboard
- Response Time: Acknowledgement within 24 hours; substantive response within 5 business days
Lucky 48 takes all privacy enquiries seriously. Every request is handled by a real team member with the access and authority to assist you. We do not use automated responses for privacy matters.
This Privacy Policy was last reviewed and updated in 2025. Lucky 48 recommends that all players review this policy periodically. The current version always supersedes all previous versions.