We know that handing over personal information to any online platform takes trust. This policy explains exactly what 91 Lucky collects, why we collect it, how we protect it and what rights you have over your own data. Plain language, no runaround.
The full policy follows below. These six points summarise the most important commitments 91 Lucky makes to every player regarding their personal information.
91 Lucky does not sell, rent or trade your personal information to third-party marketers — ever. Your details stay within the platform and its operating partners only.
All data in transit is protected by TLS 1.3. Stored data — including payment details and identity documents — is encrypted with AES-256. No card numbers are stored on our servers.
You can request a copy of all data we hold about you, correct inaccuracies and ask for deletion — subject to legal retention requirements — at any time via support.
We retain account data for a minimum of 5 years after closure as required by anti-money laundering regulations, then delete it. Marketing preferences can be changed any time.
We share data only with trusted partners necessary to operate the platform — payment processors, identity verification providers and game suppliers. Nothing more.
We use cookies to keep you logged in, remember your preferences and understand how the platform is being used. You can manage cookie preferences at any time in your settings.
This Privacy Policy explains how 91 Lucky ("we," "us," "our") collects, uses, stores and protects personal data belonging to players and visitors on the 91lucky.app platform. It applies to all services offered by 91 Lucky, including sports betting, cricket betting, casino games, jackpot slots, poker, virtual sports, promotions and any mobile or browser-based access to the platform. By registering an account or continuing to use the platform, you confirm that you have read and understood this Privacy Policy. If you disagree with any part of it, please discontinue use and contact us to close your account.
91 Lucky is an online betting and gaming platform operated under a valid gaming licence. The platform is accessible at 91lucky.app and is designed primarily to serve players in Pakistan. For the purposes of this Privacy Policy, 91 Lucky is the data controller responsible for your personal information — meaning we determine how and why it is processed.
If you have any questions about how we handle your data or want to exercise any of your rights, the best first point of contact is our support team at support@91lucky.app. We aim to respond to all data-related enquiries within 5 business days.
We collect only the data we genuinely need to operate the platform, comply with our legal obligations and provide a safe, personalised experience. Below is a summary of the categories of data we hold.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC/Passport number | Registration & KYC verification |
| Contact Data | Mobile number, email address | Registration |
| Financial Data | Easypaisa/JazzCash wallet number, IBFT account details, last 4 digits of card | First deposit or withdrawal |
| Transaction Data | Deposit amounts, withdrawal history, bet records, game sessions | Ongoing platform use |
| Technical Data | IP address, device type, browser version, operating system | Each visit/session |
| Usage Data | Pages visited, games played, session duration, betting patterns | Ongoing platform use |
| Communications Data | Support chat transcripts, email correspondence | When you contact us |
| Verification Documents | CNIC scan, proof of payment method | KYC process |
91 Lucky does not store full card numbers. Payment card data is tokenised by our PCI-DSS compliant payment processor and only a reference token is held on our systems.
We collect personal data through three main channels.
When you register an account on 91 Lucky, you provide your name, date of birth, mobile number and email address. When you make a deposit or request a withdrawal, you provide payment method details. When you contact our support team via live chat, WhatsApp or email, the content of those communications is recorded. When you complete KYC verification, you upload identity documents.
When you visit or use 91 Lucky, our platform automatically collects technical and usage data through server logs, cookies and similar technologies. This includes your IP address, the device and browser you are using, the pages you visit, how long you stay on each page, which games you open and your general geographic region (city-level, not exact location). This data is collected through standard web technologies and helps us keep the platform secure and improve performance for Pakistani users.
In some cases we receive data about you from third parties. Our payment partners (such as Easypaisa and JazzCash) confirm transaction status to us. Our identity verification provider returns a pass/fail result along with the verified name and document number when you complete KYC. Our game content suppliers provide us with game session records. We do not receive broader personal data from data brokers or social media platforms.
We use your data only for specific, legitimate purposes. We do not use it for anything we haven't told you about. Here's a breakdown of what we do with the data we collect.
We process your personal data on one of the following legal grounds, depending on the purpose.
91 Lucky does not sell your personal data. We share it only in the following carefully controlled circumstances.
To process deposits and withdrawals, we share your name, contact details and transaction amount with Easypaisa, JazzCash, NayaPay, SadaPay, our IBFT banking partner and our card payment processor. These providers are contractually bound to process your data only for the purpose of completing your transaction and are not permitted to use it for any other purpose.
When you complete KYC verification, your identity document images and personal details are shared with our verification partner. This partner returns a confirmation result and verified name/document number. Document images are not stored by 91 Lucky beyond the verification review period, after which they are held encrypted in long-term secure storage as required by AML regulations.
Third-party casino and slot game providers receive a player session token and game activity data necessary to operate the game. They do not receive your name, contact details or financial information.
We will disclose personal data to law enforcement agencies, regulatory bodies or courts when we are legally required to do so — for example, in response to a court order, AML investigation request or gambling regulation compliance audit. We do not make such disclosures voluntarily beyond our strict legal obligations.
We do not share data with social media companies, data brokers or advertising networks. We do not use your data for targeted advertising on external platforms.
Some of our third-party service providers — particularly game content suppliers and certain payment processors — operate outside Pakistan. Where your data is transferred internationally, 91 Lucky ensures that appropriate safeguards are in place. These include contractual clauses requiring the recipient to apply the same standard of protection as we do, and where applicable, compliance with recognised international data transfer frameworks. We do not transfer data to jurisdictions that lack adequate legal protections for personal data without contractual safeguards in place.
We retain personal data only for as long as necessary for the purposes described in this policy, and in compliance with applicable legal obligations.
When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.
91 Lucky takes data security seriously. We have implemented technical and organisational measures proportionate to the sensitivity of the data we hold. These include:
All data exchanged between your browser and 91 Lucky's servers is encrypted using TLS 1.3 — the current industry standard for secure web traffic.
Stored personal data — including identity documents and financial records — is encrypted at rest using AES-256 on secured, access-controlled servers.
Internal access to personal data is restricted to staff who need it to do their jobs. All access is logged and reviewed. No single employee has unrestricted access to the full data set.
Automated monitoring scans for unusual login patterns, brute-force attempts and other suspicious activity. Triggered alerts are investigated by our security team within 30 minutes.
Despite our best efforts, no online platform can guarantee absolute security. If you believe your account has been compromised, contact support immediately. In the unlikely event of a data breach that affects your rights and interests, we will notify you and relevant authorities within the timeframe required by applicable law.
91 Lucky uses cookies and similar technologies to operate certain platform functions, remember your preferences and understand how the platform is being used. Here's what each category of cookie does.
You can manage cookie preferences at any time in your account settings or through your browser settings. Disabling essential cookies will affect platform functionality. Disabling analytics or preference cookies will not prevent you from placing bets or accessing your account.
You have meaningful rights over the personal data 91 Lucky holds about you. Here is what you can request and how to do it.
Request a copy of all personal data we hold about you. We'll provide it in a readable format within 15 business days.
If any of your data is incorrect or out of date, you can ask us to correct it. Minor updates (address, phone) can be made in account settings directly.
Request deletion of your data after account closure. Note that AML regulations require us to retain certain transaction records for 5 years regardless.
Object to processing based on legitimate interests, including direct marketing. We will stop unless we can demonstrate compelling grounds to continue.
Request your data in a structured, machine-readable format (JSON/CSV) for transfer to another service where technically feasible.
Ask us to restrict processing of your data while a dispute or accuracy challenge is being resolved, rather than deleting it outright.
To exercise any of these rights, email support@91lucky.app with the subject line "Data Rights Request." We will acknowledge your request within 2 business days and fulfil it within 15 business days. We may ask for identity verification before actioning a request, to protect your data from unauthorised access.
The 91 Lucky platform is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has registered on 91 Lucky, please contact us immediately at support@91lucky.app. We will investigate and, if confirmed, delete the account and all associated data without delay. Age verification checks are performed on all accounts as part of our KYC process, and accounts that fail to demonstrate eligibility are suspended pending review.
With your consent, 91 Lucky may send you promotional emails and SMS messages about bonuses, new games, odds boosts on Pakistan cricket and other offers. You can opt in during registration or through your account notification settings. You can opt out of marketing communications at any time by:
Opting out of marketing does not affect transactional communications — we will still send you account security alerts, withdrawal confirmations and important notices about changes to the platform or these policies.
We do not share your contact details with third-party marketing companies. All 91 Lucky communications come directly from our own infrastructure at 91lucky.app.
We review this Privacy Policy regularly and update it when our practices change, when we add new services or when legal requirements evolve. The "Last Updated" date at the top of this page reflects the most recent revision. For material changes that affect your rights or how we use your data, we will notify registered players via email at least 14 days before the changes take effect. Minor clarifications or formatting updates take effect immediately.
We encourage you to check this page periodically. Continued use of the 91 Lucky platform after any update constitutes acceptance of the revised Privacy Policy. If you disagree with any material change, you may close your account before the effective date without penalty.
If you have questions about this Privacy Policy, want to exercise a data right or have a concern about how your information is being handled, please contact us:
We take privacy complaints seriously and aim to resolve them promptly. If after contacting us you feel your concern has not been adequately addressed, you have the right to escalate the matter to the relevant data protection or gaming regulatory authority in your jurisdiction. We will provide you with the appropriate contact details on request.
These answers are summaries — the full detail is in the policy sections above.
PKR deposits, competitive odds, instant payouts and a platform that takes your data security as seriously as your winnings. Join over 500,000 Pakistani players.
18+ only · Play responsibly · Responsible Gaming · Terms & Conditions