luck77 – Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected by luck77 ("the Platform", "we", "us", "our") through the luck77 website at luck77.lat and any related services. By registering an account on luck77 or continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood how your personal data is handled as described herein.

This Policy should be read alongside the luck77 Terms & Conditions. The definitions used in the Terms & Conditions apply equally in this Policy where relevant. Where there is any conflict between this Policy and the Terms & Conditions on a data-related matter, this Policy takes precedence.

luck77 acts as the data controller in respect of all personal data collected directly through the luck77 platform. Where data processing is carried out by third-party service providers on behalf of luck77, those providers act as data processors under our instruction and are bound by appropriate contractual data protection obligations.

luck77 collects personal data across several categories depending on the nature of your interaction with the platform. The following table summarises the main categories of data collected and the circumstances in which collection occurs.

luck77 does not collect sensitive data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming self-exclusion or problem gambling support request.

luck77 uses collected personal data for the following purposes:

1. Account management – creating and maintaining your luck77 account, processing account changes, communicating service-related notifications;
2. Identity verification – conducting KYC checks to confirm your identity and age eligibility in accordance with our obligations;
3. Payment processing – processing PKR deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah and other supported methods;
4. Service delivery – making betting markets, casino games and other luck77 products available to your account and recording the outcomes of your gameplay;
5. Fraud prevention and security – detecting and preventing fraudulent activity, money laundering, unauthorised account access and other misuse of the luck77 platform;
6. Responsible gaming – monitoring gameplay patterns to identify potential problem gambling behaviour and administering responsible gaming tools including deposit limits, cooling-off periods and self-exclusion arrangements;
7. Legal compliance – complying with applicable laws, regulations, court orders and lawful requests from competent authorities;
8. Platform improvement – analysing aggregated, anonymised usage data to improve the luck77 platform's performance, game selection and user experience;
9. Customer support – responding to queries, complaints and feedback submitted to the luck77 support team.

luck77 does not use your personal data for automated decision-making that produces significant legal or similarly significant effects without human oversight, except where required for mandatory identity screening processes.

luck77 processes personal data on the following legal bases:

1. Performance of a contract – processing necessary to deliver the services you have registered for, including account operation, payment processing and game access;
2. Legal obligation – processing required to comply with applicable law, including KYC and anti-money-laundering obligations;
3. Legitimate interests – processing necessary for fraud prevention, platform security, responsible gaming monitoring and service improvement, where these interests are not overridden by your privacy rights;
4. Consent – where you have given explicit consent for a specific processing activity, such as receiving promotional communications. Consent can be withdrawn at any time by contacting luck77 support.

KYC verification is a mandatory process for all luck77 account holders who wish to make withdrawals or who have reached applicable deposit thresholds. During KYC, luck77 collects copies of government-issued identity documents – most commonly the Pakistani CNIC – along with a selfie photograph and, where required, proof of address documentation.

KYC data is processed exclusively for the following purposes:

1. Confirming that the account holder is a real individual with the identity they have represented;
2. Confirming that the account holder is at least 18 years of age;
3. Confirming ownership of the payment method(s) linked to the luck77 account;
4. Complying with applicable anti-money-laundering and identity verification obligations.

When you make a deposit or withdrawal on luck77 using JazzCash, Easypaisa, or any supported bank, luck77 collects the payment identifier associated with that transaction (such as a mobile wallet account number or bank account reference) and a record of the transaction amount, date and status.

Full payment card numbers, bank PINs and mobile wallet PINs are not collected or stored by luck77. Payment processing is conducted via integration with the relevant payment provider's secure API. luck77 does not store raw card or PIN data on its own systems at any point during the transaction process.

Payment transaction records are retained for the periods required by applicable financial record-keeping obligations and are used to resolve disputes, process refunds and respond to regulatory enquiries.

luck77 uses cookies and similar tracking technologies on the luck77 website. Cookies are small text files stored on your device by your browser. The categories of cookies used by luck77 are:

1. Strictly necessary cookies – required for core platform functionality including session management, login authentication and security features. These cannot be disabled without preventing use of the platform;
2. Functional cookies – used to remember your preferences such as language settings and game display options;
3. Analytics cookies – used to collect aggregated, anonymised data about how users navigate the luck77 platform. This data is used solely to improve platform performance and does not identify individual users.

luck77 does not use third-party advertising or behavioural tracking cookies. No data collected via luck77 cookies is shared with advertising networks or data brokers.

You may disable non-essential cookies by adjusting your browser settings. Most browsers allow you to view, manage and delete cookies through the settings or preferences menu. Disabling strictly necessary cookies will impair your ability to log in and use the luck77 platform.

luck77 does not sell, rent or trade your personal data to third parties for commercial purposes. luck77 shares personal data with third parties only in the following circumstances:

1. Payment processors – JazzCash, Easypaisa, HBL, UBL, Meezan Bank and Bank Alfalah receive the transaction data necessary to process your deposits and withdrawals. These providers are subject to their own privacy and security obligations;
2. Game providers – third-party casino and game studios (such as JILI, PG Soft and Pragmatic Play) receive your account identifier and game session data necessary to deliver their titles on the luck77 platform. These providers do not receive your CNIC, full name or payment details;
3. KYC service providers – luck77 may use third-party identity verification services to assist in processing KYC submissions. These providers act as data processors under contract with luck77 and may not use your data for their own purposes;
4. Legal and regulatory obligations – luck77 will disclose personal data to competent authorities, courts or regulators where required to do so by applicable law, court order or regulatory direction.

All third-party data processors engaged by luck77 are bound by contractual obligations that require them to process personal data only on luck77's instructions and to implement appropriate technical and organisational security measures.

luck77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the duration of your account relationship with luck77 and for such periods thereafter as are required by applicable law or regulation.

Indicative retention periods applicable to the main data categories are as follows:

1. Account and registration data – retained for the duration of the active account relationship and for a minimum of 5 years following account closure;
2. KYC documents – retained for a minimum of 5 years from the date of the last transaction on the account, in accordance with applicable anti-money-laundering record-keeping requirements;
3. Transaction records – retained for a minimum of 5 years from the date of each transaction;
4. Activity and gameplay data – retained for a minimum of 3 years from the date of the relevant activity;
5. Support communications – retained for a minimum of 2 years from the date of the communication.

Where data is no longer required and the applicable retention period has expired, luck77 securely deletes or anonymises the data in accordance with its data destruction procedures.

Subject to applicable law and luck77's legitimate interests (including fraud prevention and legal compliance obligations), you have the following rights in relation to your personal data held by luck77:

1. Right of access – you may request a copy of the personal data luck77 holds about you;
2. Right to rectification – you may request correction of inaccurate or incomplete personal data;
3. Right to erasure – you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations;
4. Right to restriction – you may request that luck77 restricts processing of your personal data in certain circumstances, for example while a dispute is under investigation;
5. Right to data portability – you may request a machine-readable copy of the personal data you have provided to luck77 for transfer to another service provider;
6. Right to object – you may object to processing carried out on the basis of legitimate interests, subject to luck77 demonstrating compelling grounds that override your interests.

To exercise any of these rights, contact the luck77 data team at the support email address published in the footer of this site. luck77 will respond to all legitimate data rights requests within 30 days of receipt. Where a request requires additional time to process, luck77 will notify you of the extension and its reason.

luck77 implements industry-standard technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction. Specific security measures include:

1. SSL/TLS encryption for all data transmitted between your device and the luck77 platform;
2. Encrypted storage of KYC documents and sensitive account data at rest;
3. Access controls limiting data access to authorised luck77 personnel on a need-to-know basis;
4. Regular security assessments of the luck77 platform and its third-party integrations;
5. Incident response procedures governing the detection, containment and notification of data security incidents.

Notwithstanding these measures, no internet-based data transmission or storage system can guarantee absolute security. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, luck77 will notify you promptly in accordance with applicable notification obligations.

luck77 is strictly an adults-only platform. We do not knowingly collect personal data from persons under the age of 18. If luck77 becomes aware that personal data has been collected from a person under 18, that data will be deleted and the associated account will be closed immediately.

If you are a parent or guardian and believe that your child has registered an account on luck77, please contact the luck77 support team immediately so that appropriate action can be taken.

luck77 reserves the right to update this Privacy Policy at any time. Where changes are material, luck77 will provide reasonable notice to registered account holders via the email address on file or via a prominent notice on the luck77 platform before the changes take effect.

The "Last updated" date at the top of this page indicates when the current version was published. Continued use of the luck77 platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with any change, you should cease using the platform and close your account before the effective date.

For any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data by luck77, please contact the luck77 data team using the support email address published in the footer of every page on this site: [email protected].

Please state clearly in your message that your query relates to a privacy or data protection matter and include your registered username so that the team can locate your account record efficiently. luck77 does not provide a telephone line for data rights enquiries.