luck77 Privacy Policy — How We Handle Your Data

01 Introduction

luck77 ("we," "us," "our," "the Platform") is the operator of the online casino and sports betting platform available at luck77.today. As a platform serving players across Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and beyond — luck77 processes personal data in the course of providing its gaming services, processing payments via JazzCash, EasyPaisa, and bank transfers, and supporting its player base.

This Privacy Policy ("Policy") describes in plain terms what personal data luck77 collects from you, the purposes for which it is processed, the legal grounds on which processing is conducted, who it may be shared with, how long it is retained, and what rights you hold over your personal information.

This Policy applies to all individuals who access or use the luck77 platform, whether as registered players, visitors to the luck77.today website, or contacts interacting with luck77 customer support. By using the luck77 platform, you acknowledge that you have read and understood this Privacy Policy.

---

02 Personal Data We Collect

2.1 Data You Provide Directly

When you register a luck77 account or use our services, you provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, and copies of government-issued identification documents (where KYC verification is requested).
• Contact Data: Pakistani mobile number and, where provided, an email address.
• Financial Data: Payment method details used for deposits and withdrawals, including JazzCash account numbers, EasyPaisa numbers, and bank account details. luck77 does not store full card numbers directly — payment processing is handled by certified payment processors.
• Account Credentials: Username and encrypted password. Passwords are never stored in plain text.
• Communications Data: The content of messages you send to luck77 support through live chat, email, or any other communication channel.

2.2 Data Collected Automatically

When you access and use the luck77 platform, we automatically collect certain technical and behavioural data:

• Device and Technical Data: IP address, device type, operating system, browser type and version, and screen resolution.
• Usage Data: Pages visited, games played, session duration, bet history, deposit and withdrawal records, bonus redemptions, and navigation patterns within the luck77 platform.
• Location Data: Approximate geographic location derived from your IP address, used for fraud prevention and jurisdictional compliance.
• Log Data: Server logs recording login times, failed login attempts, and significant account actions for security and audit purposes.

Data Category	Source	Required?
Identity	Provided by you at registration or KYC	Yes — mandatory for account
Contact	Provided by you at registration	Yes — mobile number required
Financial	Provided during deposit/withdrawal	Yes — required for transactions
Usage	Collected automatically via platform	Yes — inherent to service delivery
Technical	Collected automatically by servers	Yes — required for security
Communications	Provided by you when contacting support	Only when you contact us

---

03 How We Use Your Personal Data

luck77 processes your personal data for the following specific purposes:

• Account Management: Creating and maintaining your luck77 account, verifying your identity, and managing your account settings and preferences.
• Service Delivery: Enabling access to games, processing bets and outcomes, crediting winnings, and facilitating deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, MCB, and bank transfer.
• KYC and Compliance: Verifying that you meet the age requirement (21+) and satisfying anti-money-laundering (AML) and know-your-customer (KYC) obligations.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, account takeovers, money laundering, and other prohibited conduct.
• Responsible Gaming: Monitoring account activity to identify signs of problem gambling behaviour, enforcing player-elected limits, self-exclusions, and cooling-off periods.
• Customer Support: Responding to your queries, resolving complaints, and improving the quality of our support interactions.
• Platform Improvement: Analysing aggregated usage data to improve platform performance, game selection, payment flows, and overall user experience.
• Legal Obligations: Complying with applicable laws, court orders, regulatory requests, and international gaming standards.
• Communications: Sending account notifications, security alerts, and — where you have consented — promotional communications regarding luck77 offers, PSL betting specials, and new games.

---

04 Legal Basis for Processing

luck77 processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and luck77 — including account management, payment processing, and service delivery — is based on contractual necessity.
• Legal Obligation: Processing required to comply with AML regulations, KYC requirements, and other applicable legal obligations is conducted on the basis of legal compliance.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement is conducted where luck77's legitimate interests are not overridden by your fundamental rights and interests.
• Consent: Processing for marketing communications is conducted only where you have given free, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of processing conducted before withdrawal.

---

05 Data Sharing

luck77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. luck77 may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, MCB, and bank transfer operators receive financial data necessary to process your deposit and withdrawal transactions. These processors operate under their own privacy policies and are bound by applicable financial data protection standards.
• KYC Verification Providers: Identity verification service providers may process copies of your identity documents solely for the purpose of completing KYC checks required by luck77's compliance obligations.
• Game Software Providers: Third-party game developers whose titles are available on the luck77 platform may receive anonymised or pseudonymised gameplay data necessary to maintain game integrity and RNG certification.
• Legal and Regulatory Authorities: luck77 may disclose personal data to competent authorities, law enforcement agencies, or courts where required by applicable law, regulation, or court order.
• Fraud Prevention Networks: luck77 may share data with industry fraud prevention databases to identify and block fraudulent account activity, consistent with applicable data protection standards.

All third-party service providers engaged by luck77 are required under contractual data processing agreements to process personal data only on luck77's instructions and to implement appropriate technical and organisational security measures.

---

06 Data Retention

luck77 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any overriding legal or regulatory retention requirements. The following general retention principles apply:

• Active Account Data: Retained for the duration of your luck77 account relationship plus a period of up to five years following account closure, in accordance with AML record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of five years from the date of the transaction to satisfy anti-money-laundering and financial reporting obligations.
• KYC Documentation: Retained for five years following the completion of the KYC process or account closure, whichever is later.
• Support Communications: Retained for a period of three years from the date of the communication, unless a longer period is required to resolve an ongoing dispute.
• Technical and Usage Logs: Retained for up to 12 months for operational security monitoring purposes, after which they are deleted or anonymised.

When personal data is no longer required, luck77 will securely delete or anonymise it in accordance with its data destruction procedures.

---

07 Data Security

luck77 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the luck77 platform.
• Encrypted storage of passwords using industry-standard hashing algorithms. luck77 does not store plain-text passwords under any circumstances.
• Access controls limiting internal access to personal data to authorised personnel with a legitimate operational need.
• Regular independent security audits and penetration testing of platform infrastructure.
• Firewall protection and intrusion detection systems on all production servers.
• New device login verification via SMS one-time PIN to your registered mobile number.
• Session timeout controls to protect inactive accounts.

While luck77 implements robust security measures, no system can guarantee absolute security. In the event of a confirmed data breach materially affecting your personal information, luck77 will notify you and relevant authorities within the timeframe required by applicable regulations.

---

08 Cookies and Tracking Technologies

8.1 What Cookies luck77 Uses

The luck77 platform uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Essential for the operation of the luck77 platform, including session management, account authentication, and security features. These cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how players navigate and use the luck77 platform, enabling us to identify performance issues and improve the user experience. These do not identify individual users.
• Functional Cookies: Used to remember your preferences, such as language settings and game lobby filters, to provide a more personalised experience across sessions.

8.2 What luck77 Does Not Use

luck77 does not deploy third-party advertising or behavioural tracking cookies. luck77 does not participate in cross-site tracking networks for advertising retargeting purposes. Your luck77 browsing behaviour is not shared with advertising platforms.

8.3 Managing Cookies

You may configure your browser settings to block or delete cookies. Please note that blocking strictly necessary cookies may prevent the luck77 platform from functioning correctly, including preventing successful login and gameplay sessions.

---

09 Your Data Rights

Subject to applicable data protection law and identity verification, you have the following rights regarding the personal data luck77 holds about you:

To exercise any of the above rights, contact the luck77 support team through live chat or at the support email address listed in Section 14. luck77 will respond to verified requests within 30 calendar days. We may need to verify your identity before fulfilling a data request to prevent unauthorised disclosure.

---

10 Children and Minors

The luck77 platform is strictly intended for adults aged 21 years or older. luck77 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register a luck77 account or use any luck77 services.

If luck77 becomes aware that personal data has been collected from a person under the age of 21 without verifiable parental consent (where applicable), we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the luck77 platform, please contact the support team immediately.

---

11 Third-Party Links and Services

The luck77 platform may contain references to third-party services such as payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) and game software providers. When you interact with these third-party services, your data may be subject to the privacy policies of those third parties, over which luck77 has no control.

luck77 encourages you to review the privacy policies of any third-party service you interact with in connection with your use of the luck77 platform. luck77 is not responsible for the privacy practices or content of any third-party website or service.

---

12 International Data Transfers

In the course of providing its services, luck77 may transfer personal data to servers or service providers located outside of Pakistan. Where such transfers occur, luck77 ensures that appropriate safeguards are in place — including contractual data protection clauses — to provide a level of protection for your personal data equivalent to that afforded within Pakistan's applicable data protection framework.

luck77 will not transfer personal data internationally in circumstances that would expose it to a materially lower level of protection than it receives when processed domestically.

---

13 Updates to This Privacy Policy

luck77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, the "Last Updated" date at the top of this page will be revised and, where appropriate, registered players will be notified via the luck77 platform or their registered mobile number.

Continued use of the luck77 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically to stay informed of how luck77 handles your personal data.

---

14 Contact for Privacy Matters

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data luck77 holds about you, please contact our support team through the live chat function available on the luck77 platform 24 hours a day, 7 days a week. Support is available in both Urdu and English.

For written privacy requests (data access, rectification, erasure), you may also contact us at the following address:

Privacy enquiries: [email protected] (plain text — not a clickable link)

luck77 aims to resolve all privacy-related queries and data subject requests within 30 calendar days of receipt. Complex requests may require additional time, in which case we will notify you of the extended timeline.