Privacy Policy – Luck777 Pakistan Data Protection Commitment

This Privacy Policy describes how Luck777 collects, stores, uses and protects the personal information of everyone who registers an account or uses the platform, whether for sports betting, cricket betting, online casino, crash games, Teen Patti or any other product we offer. By creating a luck777 account, you acknowledge that you have read this policy and consent to the collection and use of your information as described here.

We wrote this policy to be readable by real people – not just lawyers. If something is unclear, you are welcome to contact us at support@luck777.im and we will explain any section in plain Urdu or English. Protecting your data is not a compliance checkbox for luck777. It is a core part of how we operate.

Luck777 collects personal data in three main ways: information you provide directly when registering or using the platform, information generated automatically as you use our services, and information received from payment partners as part of processing your PKR transactions. Here is a clear breakdown.

Information You Provide Directly

• Registration data: Your full name, date of birth, email address, mobile number and chosen username are collected when you register your luck777 account. This information is required to create and operate your account.
• Identity verification (KYC): When you request your first withdrawal or when your account reaches certain transaction thresholds, luck777 may request a copy of your CNIC, passport, or other government-issued ID, as well as proof of address. This is a regulatory requirement and is used solely for verification purposes.
• Payment information: When you make deposits or request withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, limited transaction reference data is collected. Luck777 does not store full card numbers, CVV codes or full banking credentials. Payment processors retain this information according to their own privacy policies.
• Communications: If you contact luck777 support via live chat, email or any other channel, the content of those communications is stored to provide support, resolve disputes and improve service quality.
• Responsible gaming preferences: If you set deposit limits, loss limits, session timers or request self-exclusion, those preferences are stored and applied to your account for the duration you specify.

Information Collected Automatically

• Device and browser data: IP address, browser type, operating system, device model, screen resolution and general geographic location are collected when you access luck777. This information is used to deliver a properly formatted experience across different devices and to detect fraudulent access patterns.
• Usage data: Pages visited, time spent on each page, bet history, game session data, search terms used within the platform and feature interactions are logged. This data is used to improve luck777's product, personalise your experience and identify technical issues.
• Cookies and tracking data: Luck777 uses cookies, session tokens and similar technologies to maintain your login session, remember your preferences and understand how players navigate the platform. See Section 6 for full details.

Every piece of data collected by luck777 has a specific, documented purpose. We do not use your data for anything outside the categories described below. The primary legal basis for data processing at luck777 is the performance of the contract between you and the platform – in other words, running your account and providing the services you signed up for.

Luck777 does not share your personal data with third parties for commercial or advertising purposes. The limited circumstances under which data may be shared are set out below. In every case, data sharing is limited to the minimum necessary for the specific purpose.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners processing IBFT transfers and card networks (Visa/Mastercard) receive the transaction reference data required to process your PKR deposits and withdrawals. These partners are subject to their own privacy policies and are contractually bound to handle data securely.
• Identity verification providers: Where luck777 uses a third-party service to verify CNIC or passport documents during KYC, the verification provider receives the document images for processing. Such providers are contractually prohibited from using your documents for any purpose other than the specific verification requested.
• Regulatory and law enforcement authorities: Luck777 may be required by law to disclose certain account or transaction data to financial regulators, anti-money laundering authorities or law enforcement agencies. All such disclosures are made only where legally required and are logged by luck777 for accountability purposes.
• Fraud prevention services: Aggregated or pseudonymised data may be shared with fraud prevention databases to identify patterns of fraudulent activity. Individual identifying information is not shared in this context without a specific legal requirement.
• Technical service providers: Luck777 uses third-party providers for cloud hosting infrastructure, platform analytics and customer support tooling. All such providers are subject to contractual data processing agreements that restrict their use of luck777 player data to the specific service they provide.
• Business transfers: In the event of a merger, acquisition or sale of luck777's business, player data may be transferred to the acquiring entity. Players will be notified of any such change that materially affects how their data is handled, with a minimum of 30 days' notice before the change takes effect.

Because luck777 operates a full PKR wallet and processes real-money transactions, financial data deserves its own dedicated section of this policy. Here is exactly how your payment information is handled.

• Luck777 does not store full card numbers, card verification values (CVV), full IBAN numbers or complete Easypaisa/JazzCash account credentials. Payment credentials are handled exclusively by the relevant payment provider and are never transmitted to or stored on luck777's servers.
• All transaction data held by luck777 – including deposit amounts, withdrawal requests, dates and status – is stored in encrypted form. Luck777 employees can see transaction records for the purpose of processing your requests and resolving disputes, but access is restricted and logged.
• PKR transaction history is retained for a minimum of five years from the date of each transaction. This is a legal requirement under applicable financial regulations and cannot be shortened upon request. During this period, the data is held securely and is not used for marketing or any commercial purpose.
• If a withdrawal is returned to luck777 by your payment provider (for example, due to an incorrect account number), luck777 will hold the funds securely in your wallet and notify you within 24 hours to resolve the issue. Returned funds are never redirected to a different payment method without your explicit written request.
• Luck777 is obligated under applicable Anti-Money Laundering (AML) regulations to monitor and report unusual transaction patterns. This monitoring is automated and does not involve manual review of individual transactions unless a specific flag is raised. AML compliance activities are carried out in strict confidence and in accordance with legal requirements.

Luck777 implements industry-standard and best-practice security measures across all areas of the platform. Security is reviewed and tested on a regular basis by our internal team and by independent third-party security specialists.

• Encryption in transit: All data moving between your device and luck777's servers is protected by TLS 1.3 (256-bit SSL). This includes your login credentials, bet placements, casino game data and all payment transactions.
• Encryption at rest: Sensitive personal data including identity documents, payment references and account credentials are stored in encrypted form on luck777's servers. Database encryption uses AES-256 standard.
• Access controls: Access to player data within luck777 is role-based and strictly limited to personnel who require it for their specific job function. All internal data access is logged and audited. Employees cannot access player payment credentials under any circumstances.
• Security audits: Luck777 undergoes regular penetration testing and security audits conducted by independent third-party firms. Vulnerabilities identified during audits are addressed on a priority basis before any issue can be exploited.
• Fraud detection systems: Automated fraud detection systems monitor account activity in real time. Unusual login attempts, atypical transaction patterns and suspicious betting behaviour trigger automated alerts and, where necessary, temporary account restrictions until the activity can be reviewed.
• Data breach protocol: In the unlikely event of a data breach affecting player information, luck777 will notify affected players by email within 72 hours of the breach being confirmed. The notification will describe what data was affected and what steps are being taken. Luck777 maintains a documented incident response plan for exactly this scenario.

Luck777 uses cookies and similar browser-based technologies to keep the platform working properly, remember your preferences and understand how players use the site. Here is a clear breakdown of the cookie types used on luck777 and what each one does.

Luck777 does not use advertising or cross-site tracking cookies. No cookies placed by luck777 track your activity on other websites. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your luck777 account.

As a luck777 player, you have meaningful rights over the personal data the platform holds about you. These rights can be exercised at any time by contacting support@luck777.im. Luck777 will respond to all formal data rights requests within 30 days.

Luck777 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes a date of birth requirement and luck777 reserves the right to request identity documents to verify age at any point.

• If luck777 discovers that personal data has been collected from a person under 18, the relevant account will be closed immediately, all data will be deleted (except where retention is required by law), and any deposited funds will be returned to the originating payment method after verification of the return destination.
• Parents or guardians who believe a minor has registered a luck777 account should contact support@luck777.im immediately with the account username or registered email address. Luck777 will investigate and take action within 24 hours of receiving such a report.
• Luck777 uses automated and manual age verification checks, including cross-referencing CNIC data where provided, to identify accounts that may belong to individuals under 18. We take this obligation seriously and review our age verification procedures regularly.

Luck777 only retains personal data for as long as it is needed for the purpose it was collected, or for as long as legal or regulatory requirements demand. Here is a summary of our standard retention periods.

When the applicable retention period expires, luck777 securely destroys the data using industry-standard deletion methods. Aggregated, fully anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and research purposes.

Luck777 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, new regulatory requirements or improvements to how we explain things. Here is how we handle policy updates.

• The effective date and version number at the top of this page are updated with every revision. If you visit this page regularly, you will always be able to see whether the policy has changed since your last visit.
• For material changes – changes that significantly alter how your data is used, shared or retained – luck777 will provide at least 14 days' advance notice via the email address registered to your account. The notification email will summarise the key changes and link to the updated policy.
• Continued use of any luck777 service after a policy update takes effect constitutes your acceptance of the updated terms. If you do not accept an update, you should stop using luck777 and request account closure before the effective date of the change.
• Minor updates – such as correcting a typo, clarifying an existing practice without substantive change, or adding a new payment method to the list of processors – do not require advance notice but will still be reflected in the updated version number and date.

If you have any questions about this Privacy Policy, want to exercise your data rights, have a concern about how your data has been handled, or simply need clarification on anything in this document, please get in touch. Luck777's support team handles privacy queries in both Urdu and English.