LunaBet Privacy Policy — How We Protect Your Data

LunaBet operates an online gaming and sports betting platform accessible at lunabet.st. This Privacy Policy sets out how LunaBet collects, processes, stores and protects the personal information of players who register and use the platform — including all Pakistan-based users.

We understand that handing over personal information requires trust, and we take that responsibility seriously. This policy is written in plain, straightforward language so you know exactly what happens with your data — no legal jargon designed to confuse you.

By creating a LunaBet account or using any part of the platform, you acknowledge that you have read and understood this Privacy Policy. It should be read alongside our Terms and Conditions, which govern your overall use of the platform.

LunaBet collects personal information from you at different stages of your interaction with the platform. The categories of data we collect are described below.

We only collect information that is necessary for the purposes described in this policy. We do not collect sensitive personal information — such as health data, political opinions or religious beliefs — unless you voluntarily provide it in a support message, in which case it is used only to respond to your query.

LunaBet uses the personal information it collects for the following purposes:

• Account creation and management — to set up and maintain your player account, verify your identity and keep your account details up to date.
• Transaction processing — to process PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, bank transfer and card payments accurately and securely.
• Identity verification and KYC compliance — to confirm that you are who you say you are before processing your first withdrawal and periodically thereafter for compliance reviews.
• Fraud detection and platform security — to monitor for unusual activity, detect multi-accounting, identify fraudulent payment patterns and protect the integrity of the platform.
• Customer support — to respond to your queries, complaints and account issues through our support channels.
• Personalisation — to present you with games and promotions that are relevant to your play history, such as cricket betting offers during PSL season.
• Responsible gaming monitoring — to identify potentially problematic gaming patterns and, where appropriate, prompt you to use available responsible gaming tools.
• Platform improvement — to analyse aggregate user behaviour and improve the LunaBet platform, fix bugs and develop new features.
• Legal and regulatory compliance — to maintain records required for financial compliance, anti-money laundering obligations and any applicable legal requirements.
• Communications — to send you important account notifications, security alerts and, where you have opted in, promotional updates about bonuses and events.

LunaBet processes your personal information on the following legal grounds:

• Contractual necessity — processing your registration data, transaction records and gameplay history is necessary to provide you with the platform and fulfil the obligations set out in our Terms and Conditions.
• Legitimate interests — fraud detection, platform security monitoring and aggregate analytics are conducted based on our legitimate interest in operating a safe and reliable platform.
• Consent — optional personalisation, promotional emails and non-essential cookies are processed based on your consent, which you can withdraw at any time.
• Legal obligation — identity verification records, financial transaction logs and anti-money laundering documentation are retained to meet applicable compliance obligations.

LunaBet does not sell your personal information to any third party. We share data only in the limited circumstances described below, and only to the extent necessary for each specific purpose:

• Payment processors — your financial details are shared with our payment partners (including JazzCash, Easypaisa, Raast and bank transfer processors) solely to complete the transaction you have initiated. These partners operate under their own privacy policies and security standards.
• Game providers — when you play a game provided by a third-party supplier, that supplier receives your player ID and gameplay data necessary to run the game. Game suppliers do not receive your financial or identity documents.
• Identity verification services — your CNIC or passport data may be shared with a third-party KYC verification provider to confirm your identity. These providers are bound by strict data processing agreements.
• Analytics and platform tools — anonymised or aggregated platform usage data is shared with analytics providers to help us understand how the platform is used and where improvements are needed. Raw personal data is not passed to analytics tools.
• Legal authorities — LunaBet will disclose personal information to law enforcement, financial investigation authorities or courts when legally compelled to do so, or when disclosure is necessary to prevent or report suspected fraud, money laundering or other criminal activity.
• Business transfers — in the event of a merger, acquisition or sale of all or part of LunaBet's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

LunaBet uses cookies and similar tracking technologies to make the platform work correctly, remember your preferences and understand how players interact with different parts of the site. A cookie is a small text file stored in your browser when you visit a website.

We use the following categories of cookies:

• Essential cookies — required for the platform to function. These keep you logged in during your session, remember your language and display preferences, and ensure games load correctly. These cannot be switched off without breaking the platform.
• Performance cookies — collect anonymised data about how pages are used, which features are most popular and where errors occur. This data is used to improve platform performance and does not identify you personally.
• Functional cookies — remember optional preferences such as your favourite game categories, notification settings and responsible gaming tool configurations.
• Marketing cookies — used with your consent to identify that you arrived at LunaBet via a particular referral source, which helps us understand the effectiveness of our promotions. These do not track you across other websites.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the platform. Disabling performance and marketing cookies will not affect your ability to play, deposit or withdraw.

LunaBet handles all transactions in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal, the payment details you provide — such as your JazzCash mobile number, Easypaisa account, Raast ID or bank account — are transmitted to our payment processing partners using industry-standard TLS encryption.

LunaBet does not store full card numbers or mobile wallet PINs on our servers. Payment instrument details are tokenised by the respective payment processor and only a reference token is retained on our side for transaction reconciliation purposes.

All PKR deposit and withdrawal transactions are logged and retained for compliance and dispute resolution purposes. If you contact us about a transaction, we will use these records to investigate and resolve your query as quickly as possible.

LunaBet retains personal data for as long as is necessary to fulfil the purposes described in this policy, and to meet our legal and compliance obligations. The general retention periods we apply are:

• Account and registration data — retained for the lifetime of your account plus a minimum of 5 years after account closure, to support dispute resolution and compliance reviews.
• Identity verification documents — retained for a minimum of 5 years from the date of verification, in line with standard anti-money laundering record-keeping practices.
• Financial transaction records — all PKR deposit and withdrawal records are retained for a minimum of 5 years from the transaction date.
• Gameplay history — game logs and betting records are retained for a minimum of 3 years from the date of each session.
• Support communications — chat transcripts and email correspondence are retained for 2 years from the date of the interaction.
• Cookie and analytics data — anonymised analytics data may be retained for up to 2 years. Session cookies are deleted when you close your browser.

When your data reaches the end of its retention period, it is either permanently deleted or anonymised so that it can no longer be associated with you as an individual.

LunaBet applies a layered approach to data security. We combine technical controls, operational procedures and staff training to protect your personal information from unauthorised access, loss, alteration or disclosure.

• Encryption in transit — all data exchanged between your device and LunaBet's servers is encrypted using TLS 1.2 or higher. This applies to logins, deposits, withdrawals and any page where personal data is submitted.
• Encryption at rest — sensitive data fields — including identity verification documents and financial details — are encrypted when stored in our databases.
• Password security — passwords are never stored in plain text. They are processed using a one-way cryptographic hashing function with salting, so that even in the unlikely event of a data breach, raw passwords cannot be recovered.
• Access controls — access to personal data within LunaBet is restricted on a strict need-to-know basis. Staff members can only access the data necessary to perform their specific role.
• Monitoring — our systems are monitored around the clock for unusual access patterns, potential intrusion attempts and anomalous behaviour that could indicate a security incident.

While we apply strong security measures, no online platform can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password, do not share your login credentials with anyone, and contact support immediately if you suspect your account has been accessed without your authorisation.

As a LunaBet player, you have the following rights in relation to the personal information we hold about you. To exercise any of these rights, contact our support team at [email protected] — we will respond promptly.

• Right of access — you can request a copy of the personal data LunaBet holds about you, along with details of how it is used.
• Right to rectification — if any of your personal data is inaccurate or incomplete, you can ask us to correct it. Name, date of birth and contact details can typically be updated via account settings or through support.
• Right to erasure — you can request that LunaBet delete your personal data. Note that some data must be retained for compliance reasons even after an erasure request — we will explain exactly what can and cannot be deleted and why.
• Right to restrict processing — in certain circumstances you can ask us to pause the processing of your data while an issue is being resolved, for example if you have disputed the accuracy of data we hold.
• Right to data portability — you can request your personal data in a structured, machine-readable format so that it can be transferred to another service if you wish.
• Right to withdraw consent — where processing is based on your consent (such as marketing emails or optional cookies), you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

LunaBet is strictly for adults aged 18 and over. The platform does not knowingly collect personal information from anyone under the age of 18. During registration, players are required to confirm that they are of legal adult age, and identity verification via CNIC or passport further confirms date of birth before withdrawal access is granted.

If LunaBet discovers or has reason to believe that an account belongs to a person under the age of 18, that account will be suspended immediately. Any balance in the account will be reviewed and handled in line with our Terms and Conditions, and the personal data associated with the account will be deleted as quickly as compliance obligations permit.

If you are a parent or guardian and believe your child may have accessed LunaBet without permission, please contact our support team immediately so we can act without delay.

LunaBet may update this Privacy Policy from time to time to reflect changes in platform functionality, data practices or applicable standards. When we make changes, the revised policy will be published on this page with an updated effective date at the top of the document.

For significant changes that materially affect how your personal data is handled, we will notify registered players through their account communication preferences — either via a notification in the platform or by email to your registered address.

Your continued use of the LunaBet platform after an updated policy has been posted constitutes your acknowledgement of the revised terms. We encourage you to review this page periodically so you are always aware of how your data is being handled.

If you have any questions about this Privacy Policy or about how LunaBet handles your personal information, contact us at: [email protected]