1. Introduction
This Privacy Policy applies to all personal data collected and processed by Lucky10 in connection with the operation of the Lucky10 website at lucky10.ws, including all games, payment processing, customer support, and promotional activities offered through the platform.
Lucky10 is the data controller for the purposes of this policy — meaning we determine what data is collected and how it is used. When we engage third-party service providers (such as payment processors or game providers), those providers act as data processors on our instructions and are contractually bound to handle your data only in the ways we authorise.
By registering a Lucky10 account or using the Lucky10 platform, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside our Terms and Conditions and our Responsible Gaming page, both of which reference data handling obligations.
If you have any questions about how Lucky10 handles your personal data at any time, you can contact our support team directly at support@lucky10.ws. We are happy to explain anything in plain terms.
2. What Data Lucky10 Collects
Lucky10 collects two broad categories of personal data: information you provide directly, and information we collect automatically when you use the platform.
Information You Provide
- Registration data: Your full name, date of birth, Pakistani mobile number, and any other information entered during the Lucky10 account creation process.
- Identity verification documents: Where required, copies of your CNIC (Computerised National Identity Card) or other government-issued identification, provided for KYC (Know Your Customer) verification.
- Payment information: Your mobile wallet number (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT transfers, or card details for Visa/Mastercard transactions. Note that full card numbers are handled by our payment processors — Lucky10 does not store raw card data directly.
- Communications: Any messages you send to Lucky10 through our support channels, including email, live chat, or in-platform messaging. These may be retained for quality assurance and dispute resolution purposes.
- Responsible gaming preferences: Deposit limits, session reminders, and self-exclusion settings you configure within your Lucky10 account.
Information Collected Automatically
- Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network carrier.
- Usage data: Pages visited on Lucky10, games played, bet amounts and outcomes, time spent on each section of the platform, and click behaviour.
- Transaction history: A complete log of all deposits, withdrawals, bonuses claimed, and adjustments made to your Lucky10 account balance.
- Cookie and tracking data: See Section 9 for full details of how Lucky10 uses cookies and similar tracking technologies.
| Data Category | Examples | Collected When |
|---|---|---|
| Identity Data | Name, DOB, CNIC copy | Registration & KYC verification |
| Contact Data | Mobile number, email address | Registration & account updates |
| Financial Data | Wallet ID, bank IBAN, transaction records | Deposits & withdrawals |
| Technical Data | IP address, device ID, browser | Every platform visit |
| Usage Data | Games played, bets placed, session duration | Active gameplay sessions |
| Communications | Support tickets, chat transcripts | When contacting Lucky10 support |
3. How We Collect Your Data
Lucky10 collects personal data through the following means:
- Direct interactions: When you fill in forms on Lucky10 — registration, deposit requests, withdrawal requests, support contacts, or bonus opt-ins — you directly provide us with personal data.
- Automated technologies: As you use the Lucky10 platform, we automatically collect technical and usage data through cookies, server logs, and similar technologies embedded in the website and games. This happens in the background and does not require any action from you.
- Third-party sources: Payment providers confirm successful transactions to Lucky10, providing us with reference numbers and status updates. Identity verification services may confirm whether documents you submit are valid. Game providers record gameplay outcomes that are fed back to the Lucky10 platform.
- Publicly available sources: In limited circumstances related to fraud prevention, Lucky10 may cross-reference information against publicly available records.
4. Why Lucky10 Uses Your Data
We only use your personal data for purposes that are necessary, proportionate, and consistent with the reason it was collected. The specific purposes are:
Providing the Lucky10 Service
The most fundamental purpose is operating your account. This includes processing your deposits and withdrawals, running your game sessions, applying bonuses and promotions, and maintaining your account history. Without the relevant data, Lucky10 simply cannot provide the service.
Verifying Your Identity and Age
Lucky10 is legally and ethically required to confirm that all players are at least 18 years old and are the genuine owner of the payment methods they use. Identity data and KYC documents are used exclusively for this purpose. We do not use your CNIC for anything beyond confirming you are who you say you are.
Preventing Fraud and Protecting Security
Lucky10 uses technical data, transaction patterns, and account activity to detect and prevent fraud, money laundering, account takeover attempts, and other illegal activities. This protects both the platform and every legitimate player using it.
Responsible Gaming Monitoring
Lucky10 uses gameplay data to monitor for signs of problematic gambling behaviour. This may trigger automated alerts or prompts within the platform, or flag accounts for review by our responsible gaming team. This is done in the genuine interest of player welfare — not for commercial purposes.
Customer Support
When you contact Lucky10's support team, we use your account and communication data to understand your query, access the relevant history, and respond effectively. Support communications may be reviewed for quality assurance.
Personalisation and Promotions
Lucky10 may use your gameplay and preference data to tailor promotions and offers to what is actually relevant to how you use the platform. We do not send unsolicited commercial messages — you can manage your communication preferences from your account settings at any time.
Legal and Regulatory Compliance
Certain data is retained and processed because we are legally required to do so — for example, transaction records required for financial compliance, or data requests from law enforcement or regulatory authorities with appropriate legal authority to request it.
5. Legal Basis for Processing
Lucky10 processes your personal data on one or more of the following legal grounds:
- Performance of a contract: Processing necessary to provide you with the Lucky10 service you have signed up for — account management, deposits, withdrawals, and gameplay.
- Legal obligation: Processing required by applicable law — including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where our interests do not override your fundamental privacy rights.
- Consent: Where Lucky10 uses your data for purposes beyond the above — such as sending you promotional communications — we obtain your explicit consent, which you can withdraw at any time.
6. Who We Share Your Data With
Lucky10 does not sell, rent, or trade your personal data with any third party for their own commercial purposes. We share data only in the following circumstances, and only to the extent necessary:
Payment Processors
When you deposit or withdraw using Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card networks, the relevant payment provider receives transaction reference data to process and confirm the transfer. These providers have their own privacy policies and are bound by financial services regulations.
Game Providers
Lucky10 sources games from licensed third-party providers. When you play a game, your bet data and session information is shared with the game provider for the purposes of running the game and recording the outcome. Game providers do not receive your full personal profile or payment details.
Identity Verification Services
When KYC verification is required, Lucky10 may use a third-party identity verification service to confirm the authenticity of documents you submit. These providers process the data you provide specifically for verification and are bound by confidentiality and data protection obligations.
Legal and Regulatory Authorities
Lucky10 will disclose personal data to law enforcement, regulatory bodies, or courts when we are required to do so by applicable law or legal process. We will not disclose data beyond what is specifically requested and legally required.
Business Transfers
If Lucky10 is ever involved in a merger, acquisition, or asset transfer, your personal data may be transferred to the acquiring entity as part of that transaction. We would notify you in advance of any such transfer and ensure that your data continues to be protected to at least the same standard described in this policy.
7. How Long We Keep Your Data
Lucky10 does not keep your personal data for longer than necessary. The specific retention period depends on the type of data and the reason it was collected:
- Account data: Retained for the duration of your Lucky10 account, plus a minimum of five years after account closure to meet financial compliance and anti-money laundering record-keeping requirements.
- Transaction records: Retained for a minimum of five years from the date of each transaction, in line with standard financial services requirements.
- KYC documents: Retained for five years following account closure or the completion of a verified transaction, whichever is later.
- Support communications: Retained for two years from the date of the interaction, or longer if the communication relates to an ongoing dispute or investigation.
- Technical and usage data: Generally retained for up to 12 months from collection, unless required for a specific investigation or legal matter.
When data is no longer needed and no legal obligation requires its retention, Lucky10 will securely delete or anonymise it so it can no longer be associated with you as an individual.
8. How We Protect Your Data
Lucky10 takes the security of your personal data seriously. We implement technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure. These include:
- Encryption in transit: All data transmitted between your device and Lucky10's servers is encrypted using TLS (Transport Layer Security). This means your login credentials, payment data, and personal information cannot be intercepted in transit.
- Encryption at rest: Sensitive data stored on Lucky10's servers is encrypted so that even internal access requires authorisation.
- Access controls: Only Lucky10 staff and contractors with a specific operational need can access personal data, and all access is logged and audited.
- Fraud monitoring: Lucky10 operates automated systems that monitor for suspicious account activity, unusual login patterns, and potential account takeover attempts. Suspicious activity triggers immediate review.
- Secure payment handling: Full card numbers and sensitive payment credentials are handled directly by PCI-DSS compliant payment processors, not stored on Lucky10's servers.
No data transmission over the internet can be guaranteed 100% secure. If you believe your Lucky10 account has been accessed without your authorisation, please contact us immediately at support@lucky10.ws.
9. Cookies and Tracking Technologies
Lucky10 uses cookies and similar technologies to make the platform work, remember your preferences, and understand how players use the site so we can improve it. Here is a straightforward breakdown of what we use:
Essential Cookies
These are required for Lucky10 to function. They include session cookies that keep you logged in as you navigate between pages, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure stable performance. You cannot opt out of essential cookies without losing access to the platform.
Functional Cookies
These remember your preferences — such as your preferred language, your last selected game category, and display settings. Disabling functional cookies means the platform will not remember these preferences between visits.
Analytics Cookies
Lucky10 uses analytics tools to understand how players navigate the platform — which pages are visited most, where players spend time, and where they encounter friction. This data is aggregated and anonymised. We use this information solely to improve the Lucky10 experience and do not use it to build profiles of individual users for advertising purposes.
Managing Cookies
You can manage or delete cookies through your browser settings. Most modern browsers allow you to block all cookies, accept only specific types, or delete existing cookies. Blocking all cookies will affect your ability to use Lucky10 normally, as essential cookies are required for the platform to function. For specific instructions, refer to the help section of your browser.
10. Your Rights Over Your Personal Data
As a Lucky10 player, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@lucky10.ws. We will respond within a reasonable timeframe — typically within 30 days.
Right of Access
Request a copy of the personal data Lucky10 holds about you. We will provide this in a clear, structured format.
Right to Rectification
If any of the personal data Lucky10 holds about you is inaccurate or incomplete, you can ask us to correct or update it.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, and where no legal obligation requires us to keep it.
Right to Restriction
Ask Lucky10 to restrict how we process your data — for example, while a dispute about the accuracy of your data is being resolved.
Right to Portability
Where processing is based on your consent or a contract, receive your personal data in a machine-readable format so it can be transferred elsewhere.
Right to Object
Object to Lucky10 processing your personal data for direct marketing or where processing is based on our legitimate interests.
11. Children and Minors
Lucky10 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If we discover or have reason to believe that a registered account belongs to a minor, we will immediately suspend the account, return any deposits made (less any losses incurred), and permanently delete the associated personal data.
If you are a parent or guardian and believe your child has registered on Lucky10 without your knowledge, please contact us immediately at support@lucky10.ws. We will investigate and respond promptly.
Lucky10 uses age verification checks at registration and may request additional documentation at any point to confirm that a player meets the minimum age requirement. These checks form part of our commitment to responsible gaming and the protection of vulnerable individuals.
12. Changes to This Privacy Policy
Lucky10 may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legal requirements. The "Last Updated" date at the top of this page will always reflect when the most recent revision was made.
When we make material changes — meaning changes that significantly affect how we use your data or your rights — we will notify registered Lucky10 members by email to their registered address or via an in-platform notification. For minor, non-material changes (such as clarifications or corrections), we may update the policy without direct notification.
Continuing to use Lucky10 after a policy update constitutes your acceptance of the revised Privacy Policy. If you disagree with a material change, you should stop using the platform and contact us to request account closure.
13. Contact Us About Privacy
If you have any questions, concerns, or requests related to your personal data and how Lucky10 handles it, please reach out to our support team. We take privacy questions seriously and will give you a genuine, considered response — not a copy-paste of this page.
- Email: support@lucky10.ws
- Languages supported: English and Urdu
- Response time: Within 24 hours for most queries; data access requests within 30 days
For account-specific queries, login to your Lucky10 account and use the in-platform support chat for the fastest response. For privacy-specific matters, email is preferred as it creates a clear record of your request.
Privacy Commitments You Can See in Action
Privacy policies are only meaningful when backed by real practice. Here is how Lucky10's privacy commitments translate into the day-to-day experience of every player on the platform.
No Data Selling, Ever
Lucky10 has never sold player data to advertisers, data brokers, or marketing companies, and we never will. Your personal information stays within the Lucky10 ecosystem and the minimal set of service providers needed to run the platform.
Encrypted End to End
From the moment you log in to Lucky10 to the moment a withdrawal clears in your Easypaisa wallet, your data travels through encrypted channels. We use the same encryption standards as major financial institutions operating in Pakistan.
You Control Your Preferences
Marketing communications, session reminders, promotional alerts — all of these are opt-in at Lucky10 and can be turned off from your account settings at any point. We do not make it difficult to opt out of things you do not want.
Minimal Data Collection
Lucky10 collects only what is genuinely needed to operate your account and comply with legal requirements. We do not collect data speculatively or build exhaustive profiles beyond what the platform needs to function correctly.
Quick Response to Data Requests
If you want to know what Lucky10 holds on you, correct something inaccurate, or ask for deletion, contact us and we will handle your request promptly — within 30 days in all cases, and often much faster.
Data Deleted When No Longer Needed
Lucky10 does not hold onto your data indefinitely. Once the minimum legal retention period has passed and there is no ongoing reason to keep your data, we securely delete or anonymise it. We do not accumulate data just because storage is cheap.