This Privacy Policy explains how luck38 collects, uses, stores, shares and protects your personal data when you access or use the Platform. Please read it carefully alongside our Terms & Conditions.
This Privacy Policy ("Policy") is issued by luck38 ("the Platform", "we", "us", "our") and describes the manner in which we collect, use, disclose, store and protect personal data provided by users ("you", "your") of the luck38 website located at https://luck38.cam and all associated services (collectively, the "Platform").
luck38 is committed to handling personal data with care, transparency and in compliance with applicable data protection legislation under the operator's international licensing framework. We do not sell personal data to third parties for marketing purposes, and we do not share personal data with any entity except as described in this Policy.
By registering an account on the Platform, depositing funds, placing bets, or otherwise using the Platform's services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not accept the terms of this Policy, you must discontinue use of the Platform.
Note for Pakistani Users: Pakistan's Personal Data Protection Bill and related legislation are subject to ongoing development. luck38 endeavours to meet internationally recognised data protection standards. Users are advised to review this Policy periodically. Nothing herein constitutes legal advice regarding applicable Pakistani data protection law.
For the purposes of this Policy, the following terms have the meanings set out below:
luck38 collects Personal Data in the categories set out below. We collect only the data necessary for the purposes described in Section 5 (Data Processing) and do not collect data beyond what is proportionate to those purposes.
luck38 collects Personal Data through the following channels and mechanisms:
KYC Security Reminder: KYC documents must be submitted exclusively through the Platform's secure HTTPS-verified portal. luck38 will never request identity documents through third-party chat applications, social media or unsecured email channels. If you receive such a request, treat it as fraudulent and report it to the support team immediately.
luck38 processes Personal Data for the following purposes. Each purpose is associated with a lawful basis as described in Section 6 (Legal Basis).
luck38 processes Personal Data under one or more of the following lawful bases in accordance with applicable data protection law:
luck38 does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. We may share Personal Data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:
All third-party data processors are required to handle Personal Data only in accordance with luck38's instructions and to implement appropriate technical and organisational security measures.
luck38 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required or permitted by applicable law, regulation or licensing obligations.
In general, account data and KYC documentation are retained for a minimum period following account closure, as required by anti-money laundering legislation and licensing terms — typically five years or such longer period as mandated by the applicable regulatory framework. Transaction records are retained for a similar minimum period for financial and compliance purposes.
Usage data collected for platform improvement purposes is typically anonymised or aggregated within twelve months. Marketing communications data is retained until you withdraw consent or request deletion, subject to overriding legal retention obligations.
Once data is no longer required and no legal retention obligation applies, it will be securely deleted or permanently anonymised.
luck38 uses cookies and similar technologies (such as local storage and session tokens) to operate the Platform, maintain your login session, remember your preferences and support analytics. The categories of cookies used are set out below.
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate.
luck38 implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include, but are not limited to:
Notwithstanding these measures, no internet transmission or electronic storage system is completely secure. Users are responsible for maintaining the security of their own login credentials and for notifying luck38 promptly in the event of any suspected unauthorised account access.
Important: luck38 will never ask you to disclose your full password via email, chat or telephone. If you receive any communication requesting your full password, treat it as fraudulent and contact support immediately.
Subject to applicable law and any overriding legitimate interests or legal obligations, users whose Personal Data is processed by luck38 may exercise the following rights by contacting the support team as described in Section 15:
You may request a copy of the Personal Data that luck38 holds about you, together with information about how it is being used and the basis for processing.
You may request correction of inaccurate or incomplete Personal Data held about you. Certain corrections may require re-verification through the KYC process.
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations under AML and licensing requirements that may require us to retain certain data after account closure.
You may request that we limit the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested.
Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your Personal Data in a structured, machine-readable format.
Where processing is based on consent (such as direct marketing communications), you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
You may object to processing carried out on the basis of legitimate interests, including profiling. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
To exercise any of the above rights, please contact the support team via Live Chat or email as described in Section 15. We will respond to verified requests within a reasonable timeframe and in any case within the period required by applicable law. We may request additional verification to confirm your identity before processing a rights request.
As an online platform operating under an international licence, luck38 may process and store Personal Data on servers located outside the country of the user's residence. This includes transfers to jurisdictions outside Pakistan.
Where Personal Data is transferred to countries that may not have data protection laws equivalent to those in the jurisdiction governing the operator's licence, luck38 takes steps to ensure that appropriate safeguards are in place — such as contractual clauses with Data Processors requiring them to maintain data protection standards equivalent to those required under the operator's licensing framework.
By using the Platform, you acknowledge and consent to the transfer of your Personal Data to servers and Data Processors in jurisdictions outside Pakistan as necessary for the delivery of the Platform's services.
The Platform is strictly intended for adult users aged 18 or older — or the higher minimum age required by the operator's licence jurisdiction or applicable local law. luck38 does not knowingly collect, process or retain Personal Data from individuals below the applicable minimum age.
The KYC verification process is designed to confirm age compliance before account activation. If we become aware that Personal Data has been collected from a person below the minimum eligible age, we will take immediate steps to delete that data and close the associated account. Any funds in such an account will be handled in accordance with applicable licensing obligations.
18+ Only: If you become aware of an individual below the minimum age using the Platform, please notify the support team immediately. Adults are responsible for ensuring that underage persons in their household do not access the Platform.
luck38 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law or Platform services. When changes are material, we will endeavour to notify registered users by email or by a prominent notice on the Platform before the changes take effect.
The "Effective Date" at the top of this Policy indicates when it was last reviewed and updated. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept any update to this Policy, you must cease using the Platform and may request account closure.
We recommend reviewing this Policy periodically. Earlier versions of the Policy are available on request from the support team.
If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the luck38 Data Support team through the following channels. All privacy-related communications are handled in English, with Urdu assistance available through selected channels on request.
When submitting a rights request, please include sufficient information to verify your identity (such as your registered email address and account username) and describe your request clearly. luck38 will not action rights requests from unverified sources.
luck38 serves players across Pakistan including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. All data handling described in this Policy applies equally regardless of the user's city or region within Pakistan. Nothing communicated by support agents constitutes legal advice.
These cards summarise the key privacy commitments described in this Policy. They do not replace reading the full document above.
SSL encryption on all data transfers, encrypted storage for KYC documents and financial records, and 2FA available for all accounts. Security is a structural commitment, not an afterthought.
luck38 does not sell, rent or trade your Personal Data to third parties for marketing. Your data is used to operate the Platform and meet compliance obligations — nothing more.
Access, correct, download, restrict or request deletion of your Personal Data. Exercise rights through Live Chat or email — we respond within applicable timeframes.
Identity documents are submitted only through the secure HTTPS verification portal. luck38 never requests KYC documents through unsecured chat, email or social media.
Cookie types are clearly categorised — strictly necessary, functional, analytics and marketing. Non-essential cookies are only set with your consent and can be managed through browser settings.
Data is kept only as long as necessary for its purpose or as required by law. Marketing data is deleted when consent is withdrawn. Unnecessary data is securely deleted or anonymised.
Head back to the Platform to explore cricket betting, live casino, slots and more — with the confidence of knowing how your data is handled. Adults 18+ only. Please verify local laws before participating.