The fun88luck Privacy Policy —
Your Data, Protected

This Privacy Policy ("Policy") describes how fun88luck ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player") who register for or use any service available through fun88luck.com. This Policy applies to all Pakistan players and to any person who accesses or browses the fun88luck website, whether or not they have a registered account.

fun88luck is committed to handling your personal data responsibly, transparently, and in accordance with the principles of data minimisation, purpose limitation, and storage limitation. We understand that as a Pakistan player you are entrusting us with sensitive financial and identity information, and we take that responsibility seriously at every level of our organisation.

This Policy should be read alongside the fun88luck Terms and Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. By registering for a fun88luck account or using the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

fun88luck is the data controller in respect of all personal data collected through the fun88luck platform and website. As data controller, fun88luck determines the purposes for which personal data is processed and the means by which that processing is carried out. fun88luck is responsible for ensuring that all personal data processing activities comply with applicable data protection principles.

For all data protection enquiries, requests to exercise your rights, or concerns about how fun88luck handles your personal data, please contact our Privacy support team via the contact details set out in Section 14 of this Policy. We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve substantive requests within 30 days of receipt.

fun88luck collects personal data in three ways: data you provide directly, data generated through your use of the platform, and data collected automatically through technical means. The following table sets out the categories of personal data we collect and the context in which each category is collected.

fun88luck does not collect special category personal data (such as health data, biometric data beyond fingerprint-based device authentication, or political opinions) except where you voluntarily provide health-related context in a responsible gaming support request, in which case such data is processed solely to provide the requested support and is not used for any other purpose.

fun88luck uses your personal data only for clearly defined purposes. The following are the specific purposes for which we process player data:

• Account operation: Creating, maintaining, and managing your fun88luck player account, including your PKR wallet balance, game access, bonus credit, and account history.
• Identity verification (KYC): Verifying your identity and age (18+) using your CNIC and other submitted documentation, as required before withdrawals are authorised.
• Payment processing: Processing PKR deposits via Raast, Easypaisa, JazzCash, and bank transfers, and processing PKR withdrawal requests to your registered payment method.
• Fraud prevention and security: Detecting, investigating, and preventing fraud, money laundering, unauthorised account access, and other illegal or prohibited activity on the platform.
• Responsible gaming: Monitoring account activity for indicators of problem gambling and administering the responsible gaming tools (deposit limits, self-exclusion, session timers) that you configure on your account.
• Customer support: Responding to your support queries, resolving account disputes, and processing feedback submitted via Live Chat, WhatsApp, or email.
• Platform improvement: Analysing aggregate, anonymised usage data to understand how Pakistan players use fun88luck and to improve game selection, platform performance, and user experience.
• Legal and regulatory compliance: Complying with applicable legal obligations, responding to regulatory enquiries, and fulfilling obligations under applicable anti-money laundering and counter-terrorist financing requirements.
• Marketing communications (opt-in only): Sending promotional offers, bonus notifications, and platform updates to players who have explicitly opted in to marketing communications. You may withdraw consent to marketing communications at any time through your Account Settings.

fun88luck processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing necessary to fulfil fun88luck's obligations under the player account agreement — operating your account, processing deposits and withdrawals, delivering games, and providing customer support.
• Legal obligation: Processing required by applicable law, including KYC identity verification, anti-money laundering compliance, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out on the basis of fun88luck's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement through anonymised analytics. fun88luck has assessed these legitimate interests and determined that they do not override your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — specifically, the sending of optional marketing communications. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.

fun88luck does not sell, rent, or trade your personal data to any third party. We share personal data with third parties only in the following specific circumstances and only to the extent necessary for the stated purpose:

• Payment processors: Your financial data (mobile wallet numbers, bank account details, PKR transaction amounts) is shared with Raast, Easypaisa, JazzCash, and our banking partners (HBL, MCB, UBL, SadaPay) solely to process your deposit and withdrawal transactions. These providers are bound by strict data processing agreements.
• KYC and identity verification providers: Your identity data (name, date of birth, CNIC details) is shared with certified KYC verification services to fulfil our age verification and identity confirmation obligations. These providers are certified data processors and may not use your data for any purpose other than verification.
• Game providers: Limited technical data (session identifier, PKR stake and win amounts, RNG seed data) may be shared with certified game studios such as Evolution Gaming and Pragmatic Play to deliver game content and resolve technical disputes. Game providers are not provided with your identity data, mobile number, or payment details.
• Fraud and security providers: Technical data (IP address, device identifier, login timestamps) may be shared with certified cybersecurity and fraud detection partners to identify and prevent unauthorised account access, money laundering, and bonus abuse.
• Regulatory and legal authorities: fun88luck may share personal data with competent regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required by applicable law or a valid legal order. fun88luck will notify you of any such disclosure where legally permitted to do so.
• Business succession: In the event of a merger, acquisition, or sale of all or part of fun88luck's business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection obligations being assumed by the acquirer.

All third parties with whom fun88luck shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the specific purposes set out in their data processing agreements with fun88luck.

fun88luck uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to authenticate your login session, and to gather anonymised analytics about how Pakistan players use the site. The following categories of cookies are used on the fun88luck platform:

• Essential cookies: Required for the fun88luck platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your platform preferences, such as language settings and responsible gaming tool configurations, so they persist across sessions without you needing to re-enter them on each visit.
• Analytics cookies: Collect anonymised data about how players navigate the fun88luck website — which pages are visited, how long sessions last, and which games are accessed most frequently. This data is used in aggregate form only and cannot be used to identify you personally. fun88luck uses this data to improve platform performance and game curation.
• Security and fraud prevention cookies: Help fun88luck identify suspicious login patterns, detect bot activity, and prevent unauthorised access to player accounts.

You can manage cookie settings through your browser's privacy controls. Disabling non-essential cookies will not prevent you from using fun88luck, but may affect the performance of certain preference features. Note that essential cookies cannot be disabled without impairing core platform functionality such as account login and session management.

fun88luck retains personal data for the minimum period necessary for the purpose for which it was collected, subject to any longer retention periods required by applicable law. The following retention schedule applies to the principal categories of personal data held by fun88luck:

At the end of any applicable retention period, fun88luck will securely delete or irreversibly anonymise your personal data. Anonymised data (data from which all identifiers have been removed such that you cannot be re-identified) may be retained indefinitely for statistical and platform improvement purposes.

fun88luck implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and fun88luck's servers.
• Encrypted storage of all personal data and financial records at rest using AES-256 encryption.
• Strict access controls limiting internal access to personal data to authorised staff with a demonstrated need, subject to role-based permissions and mandatory audit logging.
• Two-factor authentication requirements for all internal staff accounts with access to player data systems.
• Regular independent security audits and penetration testing conducted by certified third-party cybersecurity firms on a quarterly basis.
• Segregation of player funds from operational accounts, ensuring that your PKR balance is held in dedicated, protected accounts.
• Incident response procedures that require fun88luck to notify affected players of any data breach that poses a material risk to their rights within 72 hours of discovery, to the extent technically feasible.

As a Pakistan player with a fun88luck account, you have the following rights in respect of your personal data. These rights are genuine and operational — fun88luck is committed to honouring them within the timelines stated below:

• Right of Access: You have the right to request a copy of all personal data fun88luck holds about you. fun88luck will provide a complete data export in a readable format within 30 days of a verified request.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data held by fun88luck. Corrections will be made within 14 days of a verified request.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where processing was based on consent), or where there is no other lawful basis for retention. Note that certain data (particularly KYC records and financial transaction records) must be retained for legally mandated periods and cannot be deleted on request during those periods.
• Right to Restriction of Processing: You have the right to request that fun88luck restricts the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold or while an objection to processing is under consideration.
• Right to Data Portability: You have the right to receive personal data you have provided to fun88luck in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible and where processing was carried out by automated means on the basis of consent or contract.
• Right to Object: You have the right to object to the processing of your personal data where processing is carried out on the basis of legitimate interests. fun88luck will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (specifically, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

To exercise any of the above rights, contact fun88luck's Privacy support team via Live Chat or by emailing support at fun88luck.com. We will verify your identity before processing any data rights request to protect against fraudulent requests from third parties attempting to access your account data.

fun88luck employs mandatory CNIC-based age verification to prevent underage registration. All Pakistan players must submit a valid CNIC confirming their date of birth as part of the KYC process before withdrawals are enabled. Responsibility for preventing access to gambling platforms by minors also rests with the adults in a household — fun88luck recommends enabling parental control software on devices accessible to children in your home.

Some of fun88luck's certified service providers — including certain game studios and cybersecurity providers — may be located outside Pakistan. Where personal data is transferred to a third party located in another country, fun88luck ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Pakistan. These safeguards include contractual clauses obligating the recipient to maintain data protection standards consistent with those set out in this Policy.

fun88luck does not transfer personal data to any jurisdiction with inadequate data protection standards without first implementing appropriate technical and contractual safeguards. Core financial data (PKR transaction records, Raast and Easypaisa account details) is stored on servers within secure data centre infrastructure and is not transferred internationally except where necessary for fraud prevention or legal compliance purposes.

fun88luck may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. Where a material change is made to this Policy, fun88luck will notify registered Pakistan players by SMS to their registered mobile number or by prominent notice on the fun88luck website at least 7 days before the change takes effect.

The current version of this Privacy Policy is always available at fun88luck.com/privacy-policy and is identified by the "Last Updated" date shown at the top of this document and in the Table of Contents above. Your continued use of fun88luck following the effective date of any updated Policy constitutes your acceptance of the revised terms.

For all privacy-related enquiries, data rights requests, concerns about how fun88luck handles your personal data, or to report a suspected data security incident, please contact our Privacy support team through any of the following channels:

• Live Chat: Available 24/7 directly on the fun88luck website. Average response time is under 5 minutes. Ask for a Privacy or Data Protection enquiry to be escalated to the appropriate team.
• WhatsApp: Contact details available in your fun88luck account dashboard.
• Email: support at fun88luck.com — please include "Privacy Request" in your subject line for prioritised routing.

fun88luck aims to acknowledge all privacy enquiries within 2 business days and to resolve substantive data rights requests within 30 calendar days of receipt. Where a request is particularly complex or involves large volumes of data, fun88luck will notify you of the extended timeline and provide a revised estimate. All data rights requests are processed at no cost to you.