luky777 Privacy Policy — Your Data, Our Responsibility, and Full Transparency

1 Introduction

This Privacy Policy ("Policy") describes how luky777 ("luky777", "the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of users ("Player", "User", "you") who access or use the luky777 website at https://luky777.games, the luky777 mobile application, and all associated services.

By creating a luky777 account, making a deposit, or using any service on the Platform, you confirm that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not register for or use luky777.

This Policy should be read alongside the luky777 Terms & Conditions, which govern the overall use of the Platform, and the Responsible Gaming page, which describes tools for managing your gaming activity. Both documents are incorporated by reference.

2 Data We Collect

luky777 collects personal data in the following categories:

2.1 Account Registration Data

• Full name (as per your Pakistani CNIC or passport)
• Date of birth (to verify you are 18 years of age or older)
• Pakistan mobile number (primary account identifier and 2FA channel)
• Email address (optional, for secondary communication)
• Username and hashed password (password is never stored in plain text)
• Country and city of residence (e.g., Karachi, Lahore, Islamabad, Peshawar)

2.2 Identity Verification (KYC) Data

• Copy of Pakistani Computerised National Identity Card (CNIC) or passport
• Utility bill or bank statement for address verification (where required)
• Selfie photograph or video for liveness verification (where required for high-value accounts)

2.3 Financial & Transaction Data

• Easypaisa or JazzCash account number used for deposits and withdrawals
• Bank account details (HBL, UBL, MCB Bank, or other Pakistani banks) where used
• SadaPay or Raast identifier where used
• Card details (card number truncated, expiry, billing address) for Visa/Mastercard payments
• USDT TRC20 wallet address where applicable
• Full PKR transaction history: deposits, withdrawals, bonuses credited, bets placed, winnings received

2.4 Gaming Activity Data

• Games accessed and played (Test Cricket, Aviator, Cockfighting, Jackpot Slots, live casino)
• Bet amounts, game outcomes, session durations, and net win/loss per session
• Responsible gaming settings you have configured (deposit limits, session limits, self-exclusion status)

2.5 Technical & Device Data

• IP address and approximate geographic location at time of login
• Device type, operating system, and browser version
• Session timestamps, login history, and logout events
• App version (where the luky777 Android or iOS app is used)

2.6 Communications Data

• Support chat and email transcripts where you contact the luky777 team
• SMS messages sent to your Pakistan mobile number (2FA codes, withdrawal confirmations, account alerts)
• Survey or feedback responses submitted voluntarily

Data Category	Examples	Required?
Registration	Name, mobile number, date of birth	Mandatory
KYC / Identity	CNIC copy, address proof	Required for withdrawals
Financial	Easypaisa/JazzCash number, transaction history	Mandatory to transact
Gaming Activity	Bet history, game sessions, RG settings	Automatic on play
Technical	IP address, device type, login timestamps	Automatic on login
Communications	Support transcripts, SMS logs	Where contact occurs

3 How We Collect Your Data

luky777 collects personal data through the following methods:

• Directly from you — during account registration, KYC verification, deposit and withdrawal requests, support interactions, and voluntary surveys.
• Automatically — through cookies, server logs, and analytics tools that record technical and session data when you use the Platform.
• From payment providers — Easypaisa, JazzCash, SadaPay, Raast, and banking partners may share transaction confirmation data with luky777 to verify deposits and facilitate withdrawals.
• From identity verification partners — where third-party KYC verification services are used to authenticate your identity documents, their results are shared with luky777 for account verification purposes only.
• From fraud prevention systems — where luky777 uses third-party fraud detection tools that analyse device fingerprints and behavioural signals to protect accounts from unauthorised access.

4 Why We Use Your Data

luky777 uses your personal data for the following purposes:

• Account Management: To create, maintain, and secure your luky777 account, including processing your luky777 login, enabling two-factor authentication, and managing account settings.
• Payment Processing: To process PKR deposits and withdrawals via Easypaisa, JazzCash, SadaPay, Raast, bank transfers, and other accepted methods, and to maintain accurate transaction records.
• Identity Verification: To confirm that you are who you say you are, that you are at least 18 years of age, and that you are the legitimate owner of the payment methods used on your account.
• Fraud Prevention & Security: To detect, prevent, and investigate fraudulent activity, unauthorised account access, money laundering, and other illegal conduct on the Platform.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling and to enforce deposit limits, session limits, and self-exclusion settings you have configured.
• Legal Compliance: To comply with applicable anti-money laundering (AML), know-your-customer (KYC), and other legal obligations under the laws of the operating jurisdiction.
• Customer Support: To respond to your enquiries, resolve disputes, and improve support quality through analysis of support interactions.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the luky777 Platform, fix technical issues, and develop new features relevant to Pakistani players.
• Communications: To send you account-related notifications — including login alerts, withdrawal confirmations, responsible gaming reminders, and policy updates — via SMS to your Pakistan mobile number.
• Marketing (with consent): To send promotional communications about luky777 bonuses, new games, and special offers, where you have expressly opted in to receive such communications.

5 Legal Basis for Processing

luky777 processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to operate your luky777 account and provide the gaming services you have registered for, including payment processing and game delivery.
• Legal Obligation: Processing required to comply with AML, KYC, responsible gaming, and other mandatory legal requirements applicable to the Platform.
• Legitimate Interests: Processing for fraud prevention, account security, platform analytics, and improving customer support — where these interests are balanced against your rights and do not override them.
• Consent: Processing for marketing communications, where you have explicitly opted in. You may withdraw consent at any time by contacting support or adjusting your account communication settings.

6 Data Sharing & Third Parties

luky777 does not sell your personal data. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment Processors: Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, MCB Bank, Visa/Mastercard processors, and USDT infrastructure providers receive only the data necessary to process your specific transaction.
• KYC & Identity Verification Providers: Where third-party identity verification is used to authenticate your CNIC or other documents, your identity data is shared only for that purpose and is not retained by the provider beyond its contractual necessity.
• Game Providers: Third-party game developers and studios whose games appear on luky777 may receive anonymised session identifiers to process game outcomes. They do not receive your name, mobile number, or payment details.
• Fraud Prevention & Security Vendors: Specialist fraud detection services may process technical data (IP address, device fingerprint, behavioural data) to protect the Platform and your account from unauthorised access.
• Legal Authorities: luky777 will disclose personal data to law enforcement, regulatory bodies, or courts where required by valid legal process, court order, or applicable law. We will notify you of such disclosures where legally permitted to do so.
• Business Transfers: If luky777 is involved in a merger, acquisition, or asset sale, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified via your registered mobile number before any such transfer affects your data.

7 Data Retention

luky777 retains your personal data for as long as your account is active, and for a defined period after account closure, in line with our legal obligations:

• Account and KYC data: Retained for a minimum of 5 years after account closure to satisfy AML and KYC record-keeping requirements.
• Transaction records: PKR deposit and withdrawal history is retained for a minimum of 5 years to support financial auditing and regulatory compliance.
• Gaming activity data: Retained for 2 years after the last gaming session, then anonymised for aggregate analytics purposes.
• Support communications: Retained for 2 years after the resolution of the relevant support case.
• Technical logs: IP address and session logs are retained for 12 months, then deleted.
• Marketing consent records: Retained until consent is withdrawn, plus 1 year thereafter as a record of the consent being held.

When retention periods expire, data is securely deleted or anonymised in a manner that makes re-identification impossible.

8 Data Security

luky777 implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption on all data transmitted between your device and luky777 servers.
• Data encryption at rest for sensitive fields including CNIC numbers, payment account identifiers, and KYC document images.
• Password hashing using industry-standard algorithms — your luky777 password is never stored in readable form.
• Access controls — luky777 staff access to player data is role-restricted and audited. Only personnel with a documented business need may access personal data.
• Two-factor authentication for all luky777 administrative systems.
• Regular penetration testing and security audits by independent security professionals.
• Intrusion detection systems that monitor for unusual data access patterns and trigger alerts for review.

9 Cookies & Tracking Technologies

luky777 uses cookies and similar tracking technologies to operate the Platform. The following types of cookies are used:

• Essential cookies: Required for the Platform to function — including session management (keeping you logged in during your session), security tokens, and preference storage. These cannot be disabled without breaking Platform functionality.
• Functional cookies: Used to remember your language preference, game lobby layout settings, and other personalisation choices you have made.
• Analytics cookies: Aggregated, anonymised data about how pages are used — which game categories are most visited, where players spend the most session time — used to improve the Platform. This data is not linked to individual player identities.
• Fraud prevention cookies: Device fingerprinting tokens used to detect suspicious login patterns and protect your account from unauthorised access.

You can manage non-essential cookies through your browser settings. Note that disabling essential cookies will prevent you from logging in to or using the luky777 Platform. luky777 does not use third-party advertising cookies or allow external ad networks to place tracking cookies on the Platform.

10 Your Data Rights

As a luky777 player, you hold the following rights over your personal data. To exercise any of these rights, contact the luky777 support team with your registered mobile number and a description of your request. We will respond within 30 calendar days.

11 Children's Privacy — 18+ Only

luky777 is strictly an adult platform for players aged 18 and above. We do not knowingly collect personal data from any person under the age of 18. If luky777 becomes aware that an account has been created or operated by a person under 18, that account will be immediately closed, all data related to the underage user will be securely deleted, and any deposited Real Money balance will be returned to the original payment source.

If you are a parent or guardian and believe that a minor in your household has accessed or registered on luky777, please contact our support team immediately at [email protected]. We will investigate and act within 24 hours.

12 Marketing Communications

12.1 luky777 may send promotional SMS messages to your registered Pakistan mobile number about bonuses, new games, and special offers — but only where you have expressly opted in to receive such communications. Opt-in is not a condition of registration and is not required to use the Platform.

12.2 You may opt out of marketing communications at any time by replying "STOP" to any marketing SMS, by adjusting your communication preferences in your Account settings panel, or by contacting the luky777 support team. Opt-out requests are processed within 5 business days.

12.3 Account-related communications — including login security alerts, withdrawal confirmations, responsible gaming reminders, and account policy updates — are sent regardless of your marketing preferences, as they are necessary for the operation and security of your account.

13 Updates to This Policy

luky777 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, we will notify you via SMS to your registered Pakistan mobile number at least 14 days before the changes take effect.

The current version of the Privacy Policy is always available at https://luky777.games/privacy-policy, dated with the effective date at the top of the document. We recommend checking this page periodically. Your continued use of luky777 following notification of an update constitutes your acceptance of the revised Policy.

14 Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a privacy concern about how luky777 handles your personal data, please contact us through the following channel:

• Email (plain text — not a clickable link): [email protected]
• Subject line: "Privacy Request — [your registered mobile number]"
• Support Hours: 24 hours a day, 7 days a week
• Response Commitment: Acknowledgement within 5 business days; substantive response within 30 calendar days
• Language: English

The luky777 privacy support team is knowledgeable about Pakistani data context and handles all requests in English during Pakistan Standard Time (PKT, UTC+5) business hours, with 24/7 coverage for urgent security-related requests.