Mega Luck Privacy Policy —
How We Handle Your Data

This Privacy Policy applies to Mega Luck, the online gaming platform accessible at megaluck.app. It governs the collection, use, storage and protection of personal data belonging to all registered players and visitors to the site.

When you create a Mega Luck account, make a deposit via Easypaisa or JazzCash, play a game or contact our support team, you share personal information with us. This policy explains precisely what happens to that information from the moment it is received — who can see it, how long it is kept, and what you can do if you want to change or remove it.

We have written this policy to be readable by a genuine person, not a lawyer. If you read it and still have a question that is not answered, email support@megaluck.app and we will give you a direct, specific answer. Mega Luck believes that vague privacy policies benefit platforms, not players — so we have tried to make this one genuinely useful to you.

Mega Luck collects personal data in three ways: data you provide directly, data generated by your use of the platform, and data received from payment and verification partners. Here is a full breakdown:

We do not collect sensitive personal data beyond what is required for identity verification. We do not collect biometric data. We do not read the contents of private messages on third-party platforms.

Every piece of data collected by Mega Luck is used for a specific, defined purpose. We do not use data for purposes that go beyond what is described in this section:

• Account operation: Identity, contact and payment data is used to create and maintain your Mega Luck account, authenticate your logins and process your transactions in PKR.
• Age and identity verification: CNIC and personal information is used to verify that you meet the minimum age requirement of 18 years and that your account belongs to a genuine individual.
• Payment processing: Payment data is passed to our verified payment processing partners (Easypaisa, JazzCash, NayaPay, SadaPay, bank networks and card processors) solely for the purpose of completing the transaction you have requested.
• Anti-fraud and AML compliance: Gaming activity data, IP addresses and financial transaction data are monitored to detect fraudulent behaviour, money laundering patterns and terms violations as required under anti-money laundering best practice.
• Responsible gaming: Gaming session data and account activity are used to monitor for signs of problem gambling behaviour and to apply the responsible gaming tools you have set for your account.
• Platform improvement: Aggregated, anonymised technical and gaming data is used to improve the Mega Luck platform — identifying bugs, improving load times and optimising game performance. This analysis cannot be linked back to any individual player.
• Customer support: Communication data is used to resolve your queries and maintain a record of the support history for your account.
• Direct communications: Your contact details are used to send transactional emails (deposit confirmations, withdrawal notifications, security alerts). Marketing emails are sent only with your explicit consent, which you may withdraw at any time.

Mega Luck processes all financial transactions in Pakistani Rupees (PKR). Payment data handling at Mega Luck operates as follows:

• No card storage: Mega Luck does not store full card numbers, CVV codes or complete Easypaisa/JazzCash wallet credentials. Payment data is passed directly to the payment processor over an encrypted connection and is not retained on Mega Luck servers beyond what is required for transaction reference logging.
• Transaction references: For audit and dispute resolution purposes, Mega Luck retains transaction reference numbers, amounts, timestamps and the last four digits of card or wallet identifiers used. This is the minimum necessary to investigate payment disputes on your behalf.
• Payment partners: Easypaisa, JazzCash, NayaPay, SadaPay and our card processing partners operate their own privacy policies governing how they handle data transmitted during payment processing. Mega Luck selects only payment partners who meet high security standards.
• PKR only: Because all transactions on Mega Luck are conducted in PKR with local payment methods, there is no international data transfer involved in the payment process for the overwhelming majority of transactions. This keeps your financial data within domestic networks wherever possible.
• Source of funds: For deposits above Rs 1,00,000 in a 30-day period, Mega Luck may request source-of-funds documentation. This is a regulatory requirement and the documentation provided is used only for compliance verification.

Mega Luck uses cookies and similar browser-based technologies to operate the platform effectively. Here is a transparent breakdown of how these are used:

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your language preference and ensure your game state is preserved if you briefly lose connectivity. These cannot be disabled without breaking platform functionality.
• Performance cookies: These collect anonymised data about how pages are used — which features are clicked, how long sessions last, where errors occur. This data is used only to improve the platform and cannot be linked to individual accounts.
• Functional cookies: These remember your preferences — such as your preferred table stake level, favourite game categories and notification settings — so you do not have to reconfigure them each session.
• No advertising tracking: Mega Luck does not use third-party advertising cookies or behavioural tracking pixels. We do not share your browsing behaviour with advertising networks or data brokers.

You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent access to your account. Blocking performance and functional cookies will not affect your ability to play but may reduce the personalisation of your experience.

Mega Luck shares personal data with third parties only in the following tightly defined circumstances:

• Payment processors: Transaction data is shared with Easypaisa, JazzCash, NayaPay, SadaPay, bank networks and card processors strictly for the purpose of completing the deposit or withdrawal you have requested. Sharing is limited to the minimum information required.
• Identity verification services: For KYC (Know Your Customer) verification, identity data may be shared with a third-party verification provider to confirm your CNIC details. This provider is contractually bound to use your data only for verification and to delete it after the process is complete.
• Game software providers: Live casino game results are generated by third-party game studio software. These providers receive session data necessary to run the game but do not receive your full account profile, contact details or payment information.
• Legal and regulatory compliance: Where required by a valid legal order or regulatory obligation, Mega Luck may disclose account data to competent authorities. We will notify you of any such disclosure to the extent permitted by law.
• What we never do: Mega Luck never sells your data. We never share your data with marketing agencies, data brokers, advertising networks or social media platforms. We never provide your data to any entity not directly involved in operating your account or processing your payments.

Securing your personal and financial data is one of Mega Luck's highest operational priorities. The technical and organisational measures in place include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and Mega Luck servers is encrypted using industry-standard TLS 1.3 protocols. This applies to every page on the platform without exception — not just the payment and login pages.
• Encrypted data at rest: Personal data stored in Mega Luck's databases is encrypted at rest. This means that even in the unlikely event of unauthorised server access, stored data cannot be read without the encryption keys.
• Access controls: Access to player data within Mega Luck's internal systems is role-based and strictly limited. Only the minimum number of authorised personnel required to perform a specific function can access any given data category. All internal data access is logged.
• Fraud monitoring: Real-time automated monitoring systems watch for unusual account activity, login attempts from unrecognised devices or locations, and suspicious transaction patterns. Alerts trigger immediate review.
• Security incident response: Mega Luck maintains a documented security incident response plan. In the event of a data breach that affects player data, affected players will be notified via their registered email address within 72 hours of the breach being confirmed.

Mega Luck does not hold your data indefinitely. Specific retention periods apply to each data category:

After the retention period for any data category expires, that data is permanently deleted from Mega Luck's systems and cannot be recovered. Deletion requests submitted by players are processed within 30 days, subject to any legal retention obligations that prevent immediate deletion.

As a Mega Luck player, you hold the following rights over your personal data. To exercise any of these rights, contact support@megaluck.app with the subject line "Data Rights Request" and your registered account username. All requests receive a response within 30 days.

Mega Luck is strictly an 18+ platform. We do not knowingly collect personal data from any individual under the age of 18. Age verification is a mandatory step in the registration process, and CNIC verification is required for withdrawal eligibility.

If Mega Luck becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account will be permanently closed. Any deposits made to an underage account will be refunded to the payment method used, minus any bonuses already claimed.

If you are the parent or guardian of a minor who you believe has created a Mega Luck account, please contact support@megaluck.app immediately. We will treat such reports as high-priority and resolve them within 24 hours.

Mega Luck may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law or improvements in our data protection practices. The following process applies to all updates:

• Material changes — those that affect your rights, the scope of data we collect or how we share data — will be communicated to all registered players via their registered email address at least 14 days before taking effect.
• Minor clarifications — wording improvements, additional examples or corrections that do not change the substance of our practices — may be updated without advance notice. The "Effective" date shown at the top of this page will be revised.
• Continued use of the Mega Luck platform after the stated effective date of any update constitutes acceptance of the revised policy.
• Previous versions of this Privacy Policy are available upon request via support@megaluck.app.

For any privacy-related query, data access request or complaint, please contact Mega Luck's data team through the following channels:

• Email: support@megaluck.app — use subject line "Privacy / Data Request" for fastest routing. All privacy-related emails are acknowledged within 24 hours and fully resolved within 30 days.
• Live Chat: Available 24/7 from your account dashboard. Our support team can handle most privacy questions in real time and escalate formal data requests to the relevant team on your behalf.
• Languages: Privacy requests may be submitted in English or Urdu. We will respond in the same language.

If you believe Mega Luck has handled your personal data incorrectly and your complaint has not been resolved to your satisfaction after contacting us, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.