luky77 Privacy Policy

1 Who We Are & Scope of This Policy

luky77 operates the online casino and sports betting platform available at luky77.club (the "Platform"). For the purposes of this Privacy Policy, luky77 acts as the data controller in respect of personal information collected from players and visitors to the Platform.

This Privacy Policy applies to all personal data collected through your use of luky77.club, including account registration, identity verification, deposits, withdrawals, gameplay activity, customer support interactions, and any marketing communications you have opted into. It applies to players located in Pakistan and any other territory from which the Platform is lawfully accessed.

By creating a luky77 account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

2 Data We Collect

luky77 collects personal data in the following categories:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (to verify the 21+ age requirement)
• CNIC number, passport number, or driving licence number
• Residential address (street, city, province — e.g. Karachi, Lahore, Islamabad, Faisalabad)
• Email address registered to your luky77 account
• Mobile phone number

2.2 Financial Data

• JazzCash or EasyPaisa mobile wallet number used for deposits and withdrawals
• Bank account details for HBL, UBL, or Meezan Bank transfers (account title and IBAN)
• Transaction history including deposit amounts, withdrawal requests, and payment method identifiers
• All amounts are held and recorded in Pakistani Rupees (PKR)

2.3 Account & Activity Data

• luky77 username and hashed account password
• Game history, bet records, wagering amounts, and win/loss outcomes
• Bonus claims, promotional credits, and wagering progress
• Session timestamps, login and logout times
• Customer support chat transcripts and email correspondence

2.4 Technical Data

• IP address at the time of registration and each login
• Device type, operating system, and browser version
• Geolocation data (country and city level, derived from IP)
• Cookie identifiers and session tokens

3 How We Collect Your Data

luky77 collects personal data through the following means:

3.1 Directly From You

The majority of data luky77 holds about you is provided directly by you during account registration, KYC document submission, deposit and withdrawal requests, communication with our support team, and participation in promotions or surveys.

3.2 Automatically During Platform Use

When you visit luky77.club, our servers automatically record technical data including your IP address, device identifiers, browser type, and pages visited. This data is collected through server logs, cookies, and similar tracking technologies described in Section 6 of this policy.

3.3 From Third-Party Identity Verification Providers

To fulfil its Know Your Customer (KYC) obligations under its international gaming license, luky77 may engage third-party identity verification services. These services may return confirmation of your identity, age, and address status based on the documents you submit. luky77 does not receive raw document data from these providers beyond what is necessary to confirm verification status.

3.4 From Payment Service Providers

When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, the relevant payment provider shares transaction confirmation data with luky77 for the purpose of crediting or debiting your account balance.

4 Why We Use Your Data (Legal Bases)

luky77 processes personal data only where a valid legal basis exists. The following table summarises our processing purposes and the corresponding legal bases:

5 How We Share Your Data

luky77 does not sell or rent your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Payment Processors

To facilitate deposits and withdrawals, luky77 shares necessary transaction data with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These providers act as independent data processors and are bound by their own privacy and security obligations.

5.2 Identity Verification Providers

KYC document submissions are processed by third-party verification providers engaged by luky77. These providers receive only the data required to complete the verification check and are contractually prohibited from using your data for any other purpose.

5.3 Regulatory and Law Enforcement Authorities

luky77 may disclose personal data to regulatory bodies, law enforcement agencies, or gaming license authorities where it is legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

5.4 Fraud Prevention and Security Services

luky77 may share technical data (such as IP addresses and device fingerprints) with fraud prevention and cybersecurity partners to protect the integrity of the Platform and its players.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of luky77's business assets, your personal data may be transferred to the acquiring entity. You will be notified via your registered email address before any such transfer takes effect, and you will retain all rights described in Section 8 of this policy.

6 Cookies & Tracking Technologies

luky77.club uses cookies and similar technologies to operate the Platform, maintain your session, detect fraud, and analyse usage patterns. The following categories of cookies are used:

6.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain your login session, preserve your preferences, and protect the Platform from cross-site request forgery attacks. They cannot be disabled without breaking core Platform functionality.

6.2 Analytics Cookies

luky77 uses analytics tools to understand how players navigate the Platform, which game categories are most visited, and where technical errors occur. This data is aggregated and anonymised before analysis and is not linked to your individual identity.

6.3 Fraud Detection Cookies

Certain cookies assist luky77's fraud prevention systems in identifying unusual account behaviour, detecting duplicate registrations, and flagging potentially compromised sessions. These cookies are a core component of Platform security.

6.4 Managing Cookies

You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use luky77. Analytics and fraud detection cookies can be disabled via your browser, though this may affect the accuracy of fraud detection for your account.

7 Data Retention

luky77 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and licensing obligations.

• Active account data — retained for the lifetime of your luky77 account plus a minimum of 5 years following closure, as required by our gaming license and anti-money laundering obligations.
• KYC documents — retained for a minimum of 5 years from the date of submission in compliance with financial crime legislation.
• Transaction records — retained for a minimum of 5 years from the date of each transaction.
• Customer support correspondence — retained for 3 years from the date of the last interaction.
• Marketing consent records — retained until consent is withdrawn plus 1 year thereafter as proof of consent status.
• Technical/log data — retained for up to 12 months, after which it is anonymised or deleted.

When the applicable retention period expires, luky77 will securely delete or anonymise your personal data in accordance with our internal data destruction procedures.

8 Your Rights Over Your Data

As a luky77 player, you have the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and your registered account email address.

• Right of Access: You may request a copy of all personal data luky77 holds about you. We will respond within 30 days of receiving a valid request.
• Right to Rectification: If any data luky77 holds about you is inaccurate or incomplete, you have the right to request correction.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where luky77 no longer has a legal basis to retain it. Note that data subject to legal retention obligations (e.g. KYC and transaction records) cannot be deleted before the mandatory retention period expires.
• Right to Restrict Processing: You may request that luky77 restrict the processing of your data while a dispute about its accuracy or lawfulness is resolved.
• Right to Data Portability: You may request that luky77 provide your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. luky77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g. marketing emails), you may withdraw that consent at any time with immediate effect, without affecting the lawfulness of prior processing.

9 Data Security

luky77 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• TLS 1.3 encryption on all data transmitted between your device and luky77.club
• AES-256 encryption for sensitive data stored at rest, including financial identifiers and KYC records
• Hashed and salted passwords — luky77 never stores account passwords in plaintext
• Two-factor authentication (2FA) available on all luky77 accounts
• Access controls ensuring only authorised luky77 personnel with a genuine operational need can access player data
• Regular security audits and penetration testing of the Platform infrastructure
• Fraud monitoring systems operating continuously to detect anomalous account activity

Despite these measures, no system connected to the internet can be guaranteed to be 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, luky77 will notify affected players without undue delay and will take all reasonable steps to contain and mitigate the breach.

10 Third-Party Services

luky77.club may contain links to third-party resources for informational purposes. This Privacy Policy applies solely to data collected and processed by luky77. luky77 is not responsible for the privacy practices of any third-party websites or services you access from links on the Platform.

Third-party service providers engaged by luky77 (such as payment processors and identity verification providers) are bound by data processing agreements that require them to handle your data securely, use it only for the specific purpose for which it was shared, and comply with applicable data protection standards.

11 Children's Privacy

luky77 is strictly an adult platform. Access is prohibited to individuals under the age of 21. luky77 does not knowingly collect personal data from individuals under 21. If luky77 discovers that an account has been registered by a person under 21, the account will be immediately closed, all data associated with it will be deleted (subject to legal retention requirements), and any deposited funds will be returned.

If you believe that a minor may have registered a luky77 account, please contact us immediately at [email protected] with the subject line "Underage Account Report" so that we can investigate and act without delay.

12 Changes to This Policy

luky77 may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable legal requirements. Where changes are material, luky77 will notify registered players via their account email address at least 14 days before the revised policy takes effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of luky77 following the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you should close your luky77 account before the effective date.

13 Contact & Data Requests

For any questions, concerns, or requests relating to this Privacy Policy or the personal data luky77 holds about you, please contact our Data Support team using the details below. All correspondence should be sent in English and include your registered luky77 account email address.

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request – [Your Account Email]"
• Response Target: Within 30 days of receipt
• Availability: 24 hours a day, 7 days a week

If you are not satisfied with luky77's response to a data rights request, you have the right to escalate your complaint to the relevant supervisory authority or data protection regulator in your jurisdiction.