Overview Your Privacy Matters at Luki8
At Luki8, we collect only the data that is genuinely necessary for running a secure, functional gaming platform for Pakistani players. We don't sell your personal information to third parties, we don't share it with advertisers, and we don't use it for anything beyond what is described in this policy.
This document covers how information is collected when you register, deposit using JazzCash or Easypaisa, place bets on Cricket or Live Casino games, contact support, or simply browse the platform. If something in this policy is unclear, reach out to our support team — the details are at the bottom of this page.
01 Who We Are
Luki8 (referred to throughout this policy as "we", "us", or "our") operates the online gaming platform accessible at luki8.fun. The platform provides Live Casino, Slots, sports betting including Cricket and PSL markets, Esports, and related gaming services to players in Pakistan.
For all privacy-related matters, Luki8 acts as the data controller — meaning we are responsible for deciding how and why your personal data is processed. Our contact details for privacy queries are listed in Section 12.
02 What Data We Collect
We collect personal data in several ways — directly from you when you register or contact us, automatically when you use the platform, and occasionally through third-party service providers. Here is a breakdown:
| Category | Examples | How Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number | Registration & verification forms |
| Contact Data | Phone number, email address | Account registration |
| Payment Data | JazzCash / Easypaisa account reference, bank account name, transaction IDs | Deposit & withdrawal requests |
| Technical Data | IP address, device type, browser, operating system | Automatic — platform access logs |
| Usage Data | Games played, bets placed, session duration, pages visited | Automatic — platform activity |
| Communications Data | Support chat transcripts, email correspondence | When you contact Luki8 support |
| Verification Documents | CNIC copy, proof of address (when requested) | Identity verification process |
We do not collect sensitive categories of personal data such as health information, political opinions, or religious beliefs, and we have no reason to. The data listed above is the extent of what is gathered in the normal course of platform operations.
03 How We Use Your Data
Every piece of data we collect has a specific, legitimate purpose. Below is a clear explanation of what each type of data is used for:
- Account creation and management: Your name, contact details, and date of birth are needed to set up and maintain your Luki8 account.
- Identity verification: CNIC details and supporting documents are required to confirm your identity, verify your age (18+), and prevent fraud or account duplication.
- Processing PKR transactions: Payment references from JazzCash, Easypaisa, Raast, or bank transfers are used to process your deposits and withdrawals accurately and securely.
- Platform security and fraud prevention: IP addresses, device data, and login activity are monitored to detect unusual behaviour and protect your account.
- Customer support: Communication data is used to respond to your queries, resolve disputes, and improve support quality.
- Responsible gaming tools: Usage data such as session duration and betting frequency helps us apply deposit limits, self-exclusion requests, and responsible gaming prompts correctly.
- Platform improvements: Aggregated, anonymised usage data helps us understand which features are working well and where the platform can be improved.
- Legal and compliance obligations: We may be required to retain certain data for anti-money laundering (AML) and know-your-customer (KYC) compliance purposes.
04 Payment Data & PKR Transactions
All financial transactions on Luki8 are conducted in PKR. When you make a deposit via JazzCash, Easypaisa, Raast, or Bank Transfer, a reference or transaction identifier is logged against your account. We do not store full bank account numbers, card numbers, or wallet PINs — only the minimum reference data needed to match your payment to your account and resolve any discrepancies.
Payment data is shared with the relevant payment processor solely for the purpose of completing your transaction. For example, if you deposit via Easypaisa, the relevant transaction data is shared with Easypaisa's processing infrastructure. These third parties are bound by their own privacy policies and applicable data protection obligations.
- Withdrawals are only processed to payment methods registered in your own name — this is a security and anti-fraud requirement.
- Transaction records are retained for a period consistent with our compliance and financial record-keeping obligations.
- In the event of a payment dispute, relevant transaction data may be reviewed by our finance and support teams.
05 Cookies & Tracking Technologies
Luki8 uses cookies and similar technologies on its website and mobile app. Cookies are small text files placed on your device that help the platform function correctly, remember your preferences, and understand how you use the site.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential | Keep you logged in, maintain session security, enable core platform functions | No — required for the platform to work |
| Functional | Remember your language and display preferences | Yes — via browser settings |
| Analytics | Understand how players use the platform so we can improve it (anonymised data only) | Yes — via browser settings |
| Security | Detect suspicious login activity and protect your account from unauthorised access | No — required for account protection |
You can manage or delete cookies at any time through your browser settings. Please be aware that disabling non-essential cookies will not affect your ability to use the main Luki8 platform, but some preference settings may be reset between sessions.
We do not use third-party advertising cookies, pixel trackers, or cross-site tracking technologies. Luki8 does not participate in programmatic advertising networks.
06 Sharing Your Data
Luki8 does not sell, rent, or trade your personal data. We share it only where strictly necessary and only with parties who have a legitimate need to process it in connection with the services you use.
- Payment processors: JazzCash, Easypaisa, Raast, and bank partners receive only the transaction data needed to complete your deposit or withdrawal in PKR.
- Game providers: Third-party game studios that supply our Slots and Live Casino titles may receive anonymised session data to support game functionality and fairness auditing.
- Identity verification services: When you submit documents for KYC verification, they are processed by a trusted verification service provider under strict confidentiality obligations.
- Legal and regulatory bodies: We may disclose personal data to authorities where we are legally required to do so — for instance, in response to a valid court order or AML investigation. We do not make such disclosures voluntarily beyond what the law requires.
- IT and security providers: Our hosting and cybersecurity partners may have limited, controlled access to platform data strictly for the purpose of maintaining uptime and security.
All third parties with whom we share data are contractually required to keep it confidential, use it only for the specified purpose, and maintain appropriate security standards.
07 Data Retention
We keep your personal data for as long as your account is active and for a reasonable period afterwards — primarily to meet compliance obligations and to handle any post-closure queries or disputes. The specific retention periods depend on the type of data:
- Account and identity data: Retained for the duration of your account and for a minimum period after closure to satisfy KYC and AML record-keeping standards.
- Transaction records: Financial records related to PKR deposits and withdrawals are retained in line with standard financial record-keeping requirements.
- Support communications: Chat and email records are kept for a reasonable period to help resolve any follow-up queries relating to past interactions.
- Technical and usage logs: Automatically collected data such as IP addresses and session logs are retained for a shorter period — primarily for security monitoring and fraud detection purposes.
When data is no longer needed and retention obligations have been met, it is securely deleted or anonymised so it can no longer be linked back to you.
08 Your Rights Over Your Data
As a Luki8 user, you have rights in relation to your personal data. These rights can be exercised by contacting our support team. We aim to respond to all data-related requests promptly.
Right to Access
You can request a copy of the personal data Luki8 holds about you at any time.
Right to Correction
If any of your data is inaccurate or out of date, you can request it be corrected.
Right to Deletion
In certain circumstances you may request that your data be deleted, subject to our legal retention obligations.
Right to Restrict Processing
You can ask us to limit how we use your data while a dispute or correction request is being resolved.
Right to Portability
You may request your data in a structured, commonly used format so it can be transferred elsewhere.
Right to Object
You can object to certain types of data processing, including where it is based on legitimate interests rather than consent.
To exercise any of these rights, contact our support team via the live chat on the platform or by email (see Section 12). We will verify your identity before actioning any request to prevent unauthorised access to your data.
09 Data Security
Luki8 uses a combination of technical and organisational measures to keep your data secure. These include encryption of data in transit and at rest, access controls that limit who within our team can view personal data, regular security reviews, and monitoring for unauthorised access attempts.
Your account is protected by a password of your choosing. We strongly recommend using a strong, unique password for your Luki8 account and not sharing it with anyone. Luki8 staff will never ask for your password through any channel.
- All data transmitted between your device and Luki8 is encrypted using industry-standard TLS protocols.
- Payment transaction data is handled through secure channels provided by our PKR payment partners.
- Access to personal data within the Luki8 organisation is restricted on a need-to-know basis.
- In the event of a data breach that poses a risk to your rights, we will notify affected users as quickly as practicable.
10 Children's Privacy
Luki8 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires users to confirm their age, and we conduct verification checks as part of the account setup and KYC process.
If we become aware that an account has been created by or on behalf of a person under 18, we will immediately close the account, delete the associated data, and take any other necessary steps in line with our Responsible Gaming policy.
11 Updates to This Policy
This Privacy Policy may be updated periodically to reflect changes in how we operate, changes to data protection standards, or improvements to how we explain our practices. When we make material changes, we will notify registered users via on-site notice or email.
The "Last updated" date at the top of this page will always show when the most recent version came into effect. We encourage you to review this policy occasionally, especially if you have been away from the platform for a while. Continued use of Luki8 after an update is posted means you accept the revised policy.
12 Contact Us
If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, our support team is available 24/7 through the live chat feature on the platform. You can also reach us by email — the address is shown in the footer of this page.
For data-related requests — such as accessing your personal data or requesting deletion — please include your registered username and a clear description of what you are requesting. We will verify your identity before processing the request and aim to respond within a reasonable timeframe.
Privacy Commitments
How Luki8 Keeps Your Information Safe
End-to-End Encryption
All data between your device and Luki8 is encrypted with TLS. Your login, payment details, and account activity are protected in transit at all times.
KYC Without Overreach
We collect only the identity documents we genuinely need — CNIC and proof of payment method. Nothing more is requested unless a specific situation requires it.
Secure PKR Payments
JazzCash, Easypaisa, Raast, and bank transfers are processed through secure channels. We store only transaction references — never full account numbers or PINs.
No Data Selling
Your personal information is never sold, rented, or traded to advertisers or data brokers. Luki8 has no commercial interest in monetising your data externally.
Your Rights, Your Control
Access, correct, or delete your data at any time by contacting support. We process all data rights requests promptly and verify identity before taking any action.
Responsible Gaming Data Use
Session and betting data is used to power responsible gaming tools — deposit limits, cool-off periods, and self-exclusion — keeping your play within healthy boundaries.
Play with Confidence at Luki8
Your data is protected, your PKR payments are secure, and your account is yours alone. Join thousands of Pakistani players who trust Luki8 for Casino, Slots, and Cricket betting.
18+ only. Please game responsibly and within your means.