Privacy at a Glance
A plain-English summary of the most important points in our Privacy Policy. These highlights do not replace the full policy — please read the complete document below.
What We Collect
We collect registration details, identity documents for KYC, transaction records, device and browsing data, and support communications — only what is necessary for platform operation, verification and legal compliance.
Why We Use It
Your data is used to manage your Account, verify your identity, process transactions, fulfil legal and AML obligations, improve platform performance and communicate account-related information with you.
Who We Share It With
We do not sell your personal data. Limited sharing occurs only with KYC/AML service providers, payment processors, technical infrastructure partners and regulatory or law-enforcement bodies where required by law.
Your Rights
Subject to applicable law, you have rights of access, rectification, erasure, restriction, portability and objection regarding your personal data. Submit requests to [email protected] (plain text — not a link).
Security Measures
All data in transit is protected by SSL/TLS encryption. Access to personal data within the organisation is restricted to authorised personnel on a need-to-know basis. We conduct regular security reviews.
Retention Periods
We retain personal data only for as long as necessary for the purposes for which it was collected, and to meet our legal and regulatory obligations — typically no longer than five years post-account closure unless law requires otherwise.
1. Introduction
This Privacy Policy ("Policy") describes how Luck19 ("Luck19", "we", "us", "our") collects, processes, stores and protects personal data relating to individuals ("User", "you", "your") who access or use the Luck19 platform located at https://luck19.cam and all associated services (collectively, the "Platform").
Luck19 is an English-language online betting information and gaming platform serving adult users, including those based in Pakistan. We take data protection seriously and are committed to handling personal information with care, transparency and in accordance with applicable data-protection principles.
By accessing the Platform or creating an Account, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.
Note for Pakistani users: Pakistan's data-protection framework is evolving. Where applicable, we apply internationally recognised data-protection principles consistent with responsible platform operation. This Policy does not constitute legal advice. If you have concerns about data protection in your specific location, please seek independent legal guidance.
2. Definitions
The following terms carry the meanings ascribed to them wherever they appear in this Policy:
- "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, identification documents, IP address and transaction history.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure and deletion.
- "Data Controller" means Luck19, which determines the purposes and means of processing your Personal Data.
- "Data Processor" means any third party that processes Personal Data on behalf of Luck19 under a contractual arrangement.
- "KYC" means Know Your Customer — the identity and age-verification process required before certain account functions are enabled.
- "AML" means Anti-Money Laundering — legal obligations requiring monitoring of transactions to prevent financial crime.
- "Cookies" means small text files placed on your device by the Platform to store session and preference data.
3. Personal Data We Collect
Luck19 collects only the personal data that is necessary for the purposes described in this Policy. The categories of data we may collect include:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC or passport number, nationality | Account creation, KYC verification, AML compliance |
| Contact Data | Email address, phone number (if provided) | Account communications, support, security notifications |
| Verification Documents | CNIC copy, passport copy, proof of address, selfie/liveness image | Age and identity verification, AML and fraud prevention |
| Financial Data | Deposit and withdrawal records, payment method references, transaction history | Transaction processing, AML monitoring, dispute resolution |
| Technical Data | IP address, device type, browser, operating system, session data | Platform security, fraud detection, performance optimisation |
| Usage Data | Pages visited, betting activity, game history, time on platform | Responsible gambling monitoring, platform improvement, personalisation |
| Communications Data | Support chat logs, email correspondence | Issue resolution, quality assurance, compliance records |
4. How We Collect Personal Data
We collect personal data through the following means:
4.1 Directly from You
- When you register for an Account (name, email, date of birth);
- When you complete KYC verification (identity documents, proof of address);
- When you make deposits or withdrawals (financial transaction data);
- When you contact our support team (communications and correspondence);
- When you update your account profile or preferences.
4.2 Automatically
- Through cookies, session identifiers and similar tracking technologies when you use the Platform;
- Through server logs recording IP addresses, browser types, access times and page interactions;
- Through platform analytics tools monitoring usage patterns for performance and security purposes.
4.3 From Third Parties
- From KYC and identity-verification service providers in connection with document verification;
- From payment processors or financial intermediaries in connection with transaction processing;
- From fraud-prevention and AML screening services.
5. Legal Bases for Processing
Where internationally recognised data-protection principles apply, Luck19 relies on the following legal bases for processing your personal data:
- Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, transaction processing and service delivery.
- Legal Obligation: Processing necessary to comply with applicable laws, including AML requirements, identity verification obligations and responses to lawful regulatory requests.
- Legitimate Interests: Processing necessary for purposes of fraud prevention, platform security, responsible gambling monitoring and business analytics, where those interests are not overridden by your rights.
- Consent: Where you have provided express consent for specific processing activities, such as receiving marketing communications. You may withdraw consent at any time by contacting us.
6. How We Use Your Personal Data
Luck19 uses your personal data for the following purposes:
- To create and manage your Account on the Platform;
- To verify your identity and age in accordance with KYC obligations;
- To process deposits, withdrawals and other financial transactions;
- To fulfil AML monitoring and fraud-prevention obligations;
- To provide customer support and respond to enquiries and complaints;
- To monitor platform usage for responsible gambling purposes, including identifying signs of problem gambling behaviour;
- To enforce our Terms & Conditions and protect the rights and safety of all users;
- To comply with legal and regulatory obligations, including responding to lawful requests from authorities;
- To improve Platform performance, security and user experience through analytics;
- To send account-related communications such as security alerts, verification requests and policy updates.
We do not sell your personal data to third-party advertisers, data brokers or marketing organisations. Your data is not used to build advertising profiles for external commercial purposes.
7. Data Sharing & Disclosure
Luck19 shares personal data only in the limited circumstances described below. In all cases, we require third parties to respect the security and confidentiality of your data and to process it only for the specified purpose and in accordance with our instructions.
7.1 Service Providers
We may share personal data with trusted third-party processors who assist us in operating the Platform, including:
- KYC and identity-verification providers (processing document submissions and liveness checks);
- Payment processing partners and financial intermediaries facilitating transactions;
- Cloud hosting, infrastructure and cybersecurity service providers;
- AML screening and fraud-prevention service providers.
Payment-provider names referenced on the Platform — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited as contextual references only. Their mention does not indicate that such providers receive or process your personal data in connection with Luck19, nor does it imply any endorsement of gambling by those entities.
7.2 Legal and Regulatory Disclosure
We may disclose personal data to law-enforcement agencies, regulatory bodies, courts or other public authorities where we are required or permitted to do so by applicable law, or where necessary to prevent fraud, illegal activity or harm.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring or sale of assets, personal data held by Luck19 may be transferred to a successor entity. You will be notified of any such transfer and any material changes to how your data is handled as a result.
We will never sell, rent or trade your personal data to third parties for their own marketing or commercial purposes.
8. International Data Transfers
The operation of an online platform may involve the transfer of personal data to countries outside your own jurisdiction, including to countries where data-protection laws may differ from those in your location. Where such transfers occur, Luck19 takes reasonable steps to ensure that appropriate safeguards are in place to protect the personal data being transferred, consistent with applicable data-protection standards.
By using the Platform, you acknowledge and accept that your personal data may be transferred and processed in jurisdictions outside Pakistan. If you have concerns about international data transfers, please contact us at the details provided in Section 16.
9. Cookies & Tracking Technologies
The Platform uses cookies and similar technologies to support core functionality, maintain session state, improve security and gather usage analytics. The primary categories of cookies used are:
- Strictly Necessary Cookies: Required for the Platform to function. These cannot be disabled without affecting core features such as account login and session management.
- Functional Cookies: Remember your preferences such as language settings and display options.
- Analytics Cookies: Collect aggregated, anonymised data on how users interact with the Platform to help us improve performance. No individually identifiable data is extracted from these cookies.
- Security Cookies: Support fraud detection and platform integrity checks.
You may control cookie settings through your browser preferences. Note that disabling certain cookies may impair Platform functionality. For strictly necessary cookies required for Platform operation, there is no opt-out without ceasing use of the Platform.
10. Data Retention
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting or reporting obligations.
As a general principle:
- Account data and KYC documentation are retained for a minimum period following account closure as required by applicable AML and regulatory obligations — typically five years in standard international practice, though the exact period depends on the applicable regulatory framework.
- Transaction records are retained for the period required under financial record-keeping obligations.
- Support communication records are retained for up to three years following the resolution of the relevant matter, or longer if required for ongoing legal or compliance purposes.
- Technical and analytics data (e.g., log files) is retained for a shorter period, typically 12 months, unless specific security or legal needs justify longer retention.
When personal data is no longer required and retention is no longer justified, it is securely deleted or anonymised so that it can no longer be linked to an individual.
11. Data Security
Luck19 implements and maintains appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:
- SSL/TLS encryption for all data transmitted between your browser and our servers;
- Access controls restricting internal access to personal data to authorised personnel with a legitimate operational need;
- Secure HTTPS-only verification portals for submission of KYC documents;
- Regular security assessments and infrastructure reviews;
- Incident-response procedures for identifying and responding to data security events.
Your responsibilities: You are responsible for maintaining the security of your Account credentials. Never share your password or login details. If you suspect your Account has been compromised, contact support immediately at [email protected] (plain text only — not a clickable link).
12. Your Data Rights
Subject to the applicable legal framework in your jurisdiction, you may hold some or all of the following rights regarding your personal data:
Right of Access
Request a copy of the personal data we hold about you and information on how it is processed.
Right of Rectification
Request correction of inaccurate or incomplete personal data held about you.
Right of Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to overriding legal obligations.
Right to Restrict Processing
Request that we limit how we use your data in certain circumstances, for example while a rectification request is being assessed.
Right to Data Portability
Where technically feasible, request a structured, machine-readable copy of personal data you provided to us.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes.
To exercise any of the above rights, submit a written request to [email protected] (plain text — not a clickable link). We will respond within a reasonable timeframe consistent with applicable law. Note that certain rights may be limited where we are required to retain or process data to comply with legal obligations (e.g., AML record-keeping requirements).
13. Minors
The Platform is strictly intended for adults aged 18 or older, or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect personal data from persons under this minimum age. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated Account.
If you are a parent or guardian and believe that a minor has registered on the Platform or provided personal data to us without your knowledge, please contact us immediately at [email protected] (plain text — not a clickable link).
14. Third-Party Links & Services
The Platform may contain references to third-party payment services or other external resources. These references are provided as contextual information only. Luck19 is not responsible for the privacy practices of any third-party service. If you choose to interact with a third-party service referenced on this Platform, their own privacy policy will govern how your data is handled by them.
We do not control third-party websites and accept no liability for their content, privacy practices or data-handling procedures.
15. Amendments to This Policy
Luck19 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered Users by email or by a prominent notice on the Platform prior to the change taking effect. The effective date at the top of this Policy will be updated accordingly.
We encourage you to review this Policy periodically to stay informed about how we handle your personal data. Your continued use of the Platform after any amendment constitutes your acceptance of the revised Policy.
16. Contact & Complaints
If you have questions, concerns or complaints regarding this Privacy Policy or the way in which Luck19 handles your personal data, please contact us using the details below:
Data Enquiries — Luck19 Support Team
Email: [email protected]
This is a plain text address. Copy and paste into your email client — it is not a clickable link. We aim to respond to data-related requests within five business days.
If you are dissatisfied with our response, you may have the right to escalate your complaint to the relevant data-protection supervisory authority in your jurisdiction. We will always endeavour to resolve concerns directly in the first instance.
Questions About Your Data?
If anything in our Privacy Policy is unclear, reach out to our support team. You can also review our full Terms & Conditions or visit the homepage to explore the platform.
18+ only. Local laws may restrict gambling. Please play responsibly.