luck77 Privacy Policy — How We Protect Your Personal Data

1. Who We Are

luck77 ("Platform", "we", "us", "our") is a licensed online casino and sports betting platform operating at https://luck77.ws. luck77 has been serving Pakistani players since 2018, offering cricket betting, live dealer games, premium slots, and instant PKR withdrawals via JazzCash and EasyPaisa. luck77 operates under international gaming licence oversight and is committed to maintaining the highest standards of data protection for all registered players.

This Privacy Policy applies to all personal data collected and processed by luck77 in connection with your use of the luck77 platform, including the website at https://luck77.ws, any associated mobile applications, and all interactions with luck77 support channels. By registering a luck77 account or by continuing to use the Platform after the effective date of this Policy, you confirm that you have read and understood its contents.

For the purposes of applicable data protection law, luck77 is the data controller in respect of your personal data. Our designated data protection contact can be reached at the email address provided in Section 14 of this Policy.

2. Data We Collect

luck77 collects personal data across several categories, depending on your level of interaction with the Platform. The following table summarises the categories of personal data we collect and the primary context in which each category arises:

3. How We Collect Your Data

luck77 collects personal data through the following channels and mechanisms:

• Direct Submission: When you register a luck77 account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings, you directly provide us with personal data.
• Automated Technical Collection: When you access the luck77 platform, our servers automatically collect technical data including your IP address, browser type, device information, and session activity. This collection occurs regardless of whether you are logged in to an account.
• Cookies and Tracking Technologies: luck77 uses cookies and similar tracking technologies to maintain session state, remember user preferences, and collect aggregated analytics. Full details are provided in Section 7 of this Policy.
• Third-Party Identity Verification: Where luck77 uses a third-party KYC verification provider to confirm your identity documents, that provider may share verification results and associated data with luck77 as part of the verification process.
• Payment Processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, the relevant payment processor provides luck77 with transaction confirmation data necessary to credit or debit your luck77 PKR wallet.
• Fraud Detection Systems: luck77's fraud and security systems may collect additional behavioural data — such as mouse movement patterns and typing cadence — for the purpose of detecting automated activity and identity fraud. This data is processed solely for security purposes and is not used for profiling.

4. How We Use Your Data

luck77 uses the personal data we hold about you for the following specific purposes. Each purpose is associated with a legal basis for processing, as detailed in Section 5 of this Policy:

• Account Registration and Management: To create and maintain your luck77 account, including processing your registration, authenticating your identity at login, and enabling you to access games and betting markets.
• KYC and Age Verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with applicable anti-money laundering (AML) and know-your-customer (KYC) regulatory obligations. luck77 is a 21+ platform and will not permit any individual under the age of 21 to hold an active account.
• Payment Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain an accurate record of all financial transactions on your account.
• Regulatory Compliance: To meet our obligations under applicable AML, counter-terrorism financing (CTF), and gaming regulatory requirements, including the retention of transaction records and the reporting of suspicious activity where legally required.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling behaviour and to administer responsible gaming tools including deposit limits, session limits, cooling-off periods, and self-exclusion requests.
• Customer Support: To respond to your support queries, resolve account disputes, and maintain a record of communications for quality assurance and dispute resolution purposes.
• Fraud and Security: To detect, investigate, and prevent fraud, money laundering, identity theft, account takeover, and other prohibited activities on the Platform.
• Platform Improvement: To analyse aggregated usage patterns and technical performance data for the purpose of improving the luck77 platform, user experience, and game offering.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform news where you have given valid consent or where a legitimate interest applies. You may opt out of marketing communications at any time as described in Section 12.

5. Legal Basis for Processing

luck77 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and luck77 — including account management, payment processing, and game access — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable law — including AML/KYC obligations, age verification, and transaction record retention — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics is carried out on the basis of luck77's legitimate interests, subject to a balancing assessment confirming that those interests do not override your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies is carried out on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Data

luck77 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following specific circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy and data security frameworks.
• KYC Verification Providers: Third-party identity verification service providers receive your CNIC and personal details for the purpose of completing mandatory KYC checks. These providers are contractually bound to process your data only for this purpose.
• Game Content Providers: Third-party game studios and live casino providers who supply game content to luck77 may receive limited session and gameplay data necessary to operate their games and ensure fairness certification. They do not receive your full identity or financial data.
• Regulatory and Law Enforcement Authorities: luck77 may disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required by applicable law or a valid legal order. luck77 will notify affected players of such disclosures where legally permitted to do so.
• Professional Advisors: luck77's legal, audit, and compliance advisors may access personal data on a strictly confidential basis where necessary for the provision of professional services.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of luck77's assets, personal data held by luck77 may be transferred to the acquiring entity. Affected players will be notified in advance of any such transfer and of any changes to this Privacy Policy that result from it.

7. Cookies & Tracking Technologies

luck77 uses cookies and similar technologies — including local storage and session tokens — to operate the Platform effectively and to improve your experience. Cookies are small text files placed on your device by your browser when you visit luck77. They do not contain executable code and cannot access other data on your device.

luck77 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the luck77 platform to function. They maintain your login session, remember your account language preference, and ensure secure navigation between pages. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your display preferences, responsible gaming settings, and game lobby filters so that you do not need to reconfigure them on each visit. They do not track you across third-party websites.
• Analytics Cookies: luck77 uses aggregated, anonymised analytics data to understand how players navigate the platform, which features are most used, and where technical errors occur. This data is used solely for platform improvement and does not identify individual players.
• Security Cookies: These cookies support our fraud detection systems by helping to distinguish legitimate user sessions from automated or suspicious activity. They are processed on the basis of luck77's legitimate security interests.

You may control non-essential cookies through the cookie preference centre accessible from the footer of the luck77 website. You may also configure your browser to block or delete cookies, though doing so may affect the functionality of the Platform. luck77 does not use third-party advertising or retargeting cookies.

8. Data Retention

luck77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from luck77's systems or irreversibly anonymised so that it can no longer be attributed to any individual player. Anonymised data may be retained indefinitely for aggregate statistical analysis.

9. Data Security

luck77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• End-to-end TLS/SSL encryption for all data transmitted between your device and luck77's servers.
• AES-256 encryption for personal data stored in luck77's databases, including KYC documents and financial records.
• Role-based access controls ensuring that personal data is accessible only to luck77 personnel with a documented need to access it for their job function.
• Multi-factor authentication required for all internal administrative access to systems holding personal data.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security professionals.
• A documented data breach response procedure, including notification protocols aligned with applicable regulatory requirements.

10. Your Rights

As a luck77 player, you hold the following rights in respect of your personal data. These rights may be subject to certain limitations where overriding legal obligations apply, but luck77 will always act in good faith to honour them to the maximum extent possible:

• Right of Access: You may request a copy of all personal data that luck77 holds about you. We will respond to access requests within 30 days and will provide the data in a commonly used electronic format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For certain data categories (such as name and CNIC), correction may require submission of updated supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing carried out on the basis of legitimate interests. This right is subject to our obligation to retain certain data under applicable AML and regulatory requirements.
• Right to Restriction: You may request that luck77 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: You may request that personal data you have directly provided to luck77 be returned to you in a structured, commonly used, machine-readable format, or transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling. luck77 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (such as marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact luck77 at the email address provided in Section 14. There is no charge for submitting a rights request. luck77 will respond within 30 calendar days. If a request is particularly complex or we have received a high volume of requests, we may extend this period by a further 60 days, with prior written notice to you.

11. Children & Minors

luck77 implements mandatory age verification as part of the KYC process for all registered accounts. Players are required to submit a valid CNIC confirming their date of birth before any withdrawal is processed. Where there is reasonable suspicion that an account holder may be under 21, luck77 will suspend the account and initiate enhanced age verification procedures pending the outcome.

If you are a parent or guardian and have reason to believe that a minor in your care has registered an account on luck77 or has provided personal data to luck77, please contact us immediately at the address in Section 14. We will investigate the matter promptly and, where confirmed, will delete all personal data associated with the minor's account without retention.

12. Marketing Communications

luck77 may send you promotional emails, bonus notifications, and platform news where you have given valid consent at registration or through your account preferences. Marketing communications from luck77 will always:

• Be sent only to the email address registered on your luck77 account.
• Clearly identify luck77 as the sender in both the display name and the sending domain.
• Include a clearly visible unsubscribe link that removes you from all marketing communications immediately upon clicking.
• Never request your password, payment details, or CNIC information.

You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, or by updating your notification preferences within your luck77 account settings. Opting out of marketing communications does not affect transactional communications such as withdrawal confirmations, security alerts, or account notices — these will continue to be sent as they are necessary for account management.

luck77 does not share your contact details with third-party marketers. All marketing communications you receive from luck77 originate from luck77 directly.

13. Changes to This Privacy Policy

luck77 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new third-party sharing arrangement — luck77 will notify registered players by email and will display a prominent notice on the Platform for a minimum of 14 days prior to the changes taking effect.

For minor changes — such as corrections of typographical errors, clarifications of existing practices, or updates to contact information — luck77 will update the Policy on the website and revise the "Last Reviewed" date at the top of this page. Your continued use of the luck77 platform following any update to this Policy constitutes your acknowledgement of the revised terms.

We recommend that you review this Privacy Policy periodically to stay informed of how luck77 protects your personal data. The current version of this Policy is always accessible at https://luck77.ws/privacy-policy.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the luck77 data protection team through any of the following channels:

• Live Chat: Available within your luck77 account dashboard, 24 hours a day, 7 days a week.
• Email: [email protected] — please use the subject line "Privacy Request" for data rights matters to ensure prompt routing to our data protection team.
• Response Time: luck77 aims to acknowledge all privacy-related queries within 2 business days and to provide a substantive response within 30 calendar days.