Luck67 Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy applies to all individuals who interact with the Luck67 platform at luck67.ws. This includes players who have registered a full account, visitors who browse the platform without registering, individuals who contact Luck67 support, and anyone who participates in Luck67 promotions, surveys, or referral programmes.

Whether you are a registered player from Karachi, a sports betting fan from Lahore, a live casino player from Islamabad, or simply someone visiting the platform to explore what Luck67 offers — this policy governs how your data is handled. By using any part of the Luck67 platform, you acknowledge that you have read and understood this Privacy Policy.

Luck67 is the data controller responsible for the personal information collected through the luck67.ws platform. As data controller, Luck67 determines the purposes for which personal data is processed and the means by which that processing takes place. If you have any questions about how Luck67 handles your data, you can contact the data team directly at support@luck67.ws.

Luck67 is committed to processing all personal data in accordance with applicable data protection principles — including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. These are not just policy commitments; they reflect how the Luck67 data infrastructure is actually built and operated.

Luck67 collects different categories of personal data depending on how you interact with the platform. The following table summarises the main data categories and examples of what they include:

Luck67 does not collect sensitive personal data such as biometric information, health or medical records, religious beliefs, or political opinions. The platform does not require or request this type of data at any stage of the account lifecycle.

Luck67 collects personal data through three main channels:

• Directly from you: When you register an account, submit personal information during the registration flow, make a deposit or withdrawal request, contact Luck67 support, participate in a promotion, or complete a KYC verification form.
• Automatically: When you visit luck67.ws, our servers and analytics tools automatically record technical data including your IP address, device identifiers, browser type, and session behaviour. This happens through cookies, server logs, and tracking pixels as described in Section 8.
• From third parties: Luck67 may receive data about you from payment providers such as Easypaisa or JazzCash to confirm transaction status; from identity verification providers during KYC checks; and from fraud prevention services that help Luck67 identify suspicious activity patterns.

All data collected by Luck67 is gathered for specific, legitimate purposes and is not accumulated beyond what is required to provide and improve the platform's services to Pakistani players.

Luck67 uses the personal data it collects for the following purposes, all of which are necessary to provide a safe, functional, and personalised experience on the platform:

• Account creation and management: Creating, maintaining, and securing your Luck67 account, including processing login authentication and password resets.
• Transaction processing: Processing deposits and withdrawals in PKR, verifying payment source, and maintaining accurate transaction records for your account.
• Identity verification: Conducting KYC checks to confirm your age, identity, and the source of funds where required by compliance obligations. This protects both you and the platform from fraud and financial crime.
• Betting and gaming services: Recording bet placements, settling outcomes, managing bonus allocations, and maintaining your game history for dispute resolution.
• Customer support: Responding to your queries, resolving complaints, and maintaining records of your communications with the Luck67 support team.
• Responsible gaming: Monitoring account activity to identify patterns that may suggest problem gambling behaviour and to apply the responsible gaming tools you have requested.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and other harmful behaviour on the platform.
• Platform improvement: Analysing aggregated usage data to improve the platform's features, fix technical issues, and develop new services that better serve Pakistani players.
• Marketing communications: Sending you information about Luck67 promotions, offers, and platform updates — only where you have not opted out. See Section 14 for details on managing your preferences.

Luck67 processes your personal data under the following legal grounds, depending on the nature of the processing activity:

• Contract performance: Processing necessary to fulfil the Terms and Conditions you agreed to when registering — including account management, bet settlement, and payment processing.
• Legal obligation: Processing required to comply with anti-money laundering obligations, KYC requirements, fraud reporting duties, and any other applicable legal requirements.
• Legitimate interests: Processing that serves Luck67's legitimate business interests — such as fraud detection, platform security, and service improvement — where those interests are not overridden by your rights and interests.
• Consent: Processing carried out with your explicit consent — primarily for marketing communications. You may withdraw consent for marketing at any time as described in Section 14.

Luck67 does not sell, rent, or trade your personal data with third parties for their own commercial purposes. Your data is shared only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment providers: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and Visa/Mastercard processors receive the payment information required to complete your deposit or withdrawal transaction. These providers are bound by their own data protection obligations.
• Identity verification services: KYC and age verification providers may receive your identity documents and personal details to confirm eligibility. These providers operate under strict data processing agreements with Luck67.
• Fraud prevention and security: Luck67 works with specialist fraud prevention tools and services that may process account behaviour data to identify risk patterns. No more data than necessary is shared for this purpose.
• Live casino providers: When you play live casino games on Luck67, the studio provider — such as Evolution Gaming, Pragmatic Play, or Ezugi — receives the game session data required to run the game. Player identity is transmitted only as an anonymised session ID unless specifically required by the provider's compliance obligations.
• Legal and regulatory disclosure: Luck67 will disclose personal data to law enforcement authorities, regulators, or courts where required by applicable law or in response to a valid legal process. Luck67 will notify you of such disclosure where permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the Luck67 business, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms of the successor entity.

Luck67 uses cookies and similar tracking technologies to deliver, maintain, and improve the platform experience. A cookie is a small text file stored on your device when you visit a website. Luck67 uses the following categories of cookies:

• Essential cookies: Required for the platform to function correctly. These include session cookies that keep you logged in, security tokens, and cookies that remember your preferences within a session. You cannot opt out of essential cookies without losing core platform functionality.
• Analytics cookies: Help Luck67 understand how players use the platform — which pages are visited most, where players encounter difficulties, and how long sessions typically last. This data is used in aggregated, anonymised form to improve the platform. You may opt out of analytics cookies.
• Preference cookies: Store settings you have chosen — such as language preference and display settings — so that you do not need to reconfigure them on each visit.
• Marketing cookies: Used to deliver relevant promotional content to you based on your interests and platform activity. These are only active where you have consented to marketing communications.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific sites. Blocking essential cookies may prevent you from logging in or using the platform properly. Detailed guidance on managing cookies is available in your browser's help section.

Luck67 takes the security of your personal data seriously. The following technical and organisational measures are in place to protect your information against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption on all connections between your device and the Luck67 platform
• Data at rest encrypted using AES-256 on Luck67's server infrastructure
• Access to personal data restricted to Luck67 staff who require it for their specific role, under least-privilege access controls
• All staff with data access trained on data protection obligations and internal security policies
• Regular security audits and penetration testing of the platform's infrastructure
• Two-factor authentication available and encouraged for all player accounts
• Automated fraud detection systems monitoring for unusual access patterns and suspicious activity

No digital platform can guarantee absolute security, but Luck67 commits to maintaining industry-standard protections and to responding promptly and responsibly in the event of a security incident. If a data breach occurs that poses a risk to your rights and interests, Luck67 will notify affected players as soon as practicable and will take immediate steps to contain and remediate the incident.

Luck67 retains your personal data only for as long as it is necessary for the purposes described in this policy, or as required by applicable law. The general retention approach is as follows:

• Active accounts: Personal data is retained for the full duration of your account's active status, plus any legally required period following account closure.
• Financial records: Transaction records including deposit and withdrawal history are retained for a minimum of five years from the date of the transaction, in accordance with standard financial record-keeping requirements.
• KYC documentation: Identity verification documents are retained for a minimum of five years following account closure or the completion of the transaction for which they were collected.
• Support communications: Customer support correspondence is retained for three years from the date of the communication to support dispute resolution and service improvement.
• Marketing data: Where you have opted in to marketing, your contact data for that purpose is retained until you unsubscribe or withdraw consent.
• Technical logs: Server and access logs are typically retained for 12 months for security monitoring purposes.

When data is no longer required and its retention period has expired, Luck67 permanently deletes or anonymises it in a secure manner that prevents reconstruction or recovery.

As a Luck67 player, you have meaningful rights over your personal data. You can exercise any of the following rights by contacting support@luck67.ws:

Luck67 will not charge a fee for exercising any of your data rights and will respond to all requests within 30 days. Where a request is complex or we receive a high volume of requests simultaneously, we may extend this to 60 days and will notify you accordingly.

Luck67 is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 18. Age verification is a mandatory part of the Luck67 registration process and the KYC verification procedure.

If Luck67 discovers or is notified that a person under 18 has created an account, the account will be immediately closed, all activity will be voided, and any deposited funds will be returned to the source payment method. If you believe an underage individual has created a Luck67 account, please notify us immediately at support@luck67.ws.

Luck67 operates a platform that serves Pakistani players from infrastructure and service providers that may be located in various countries. When your personal data is transferred outside Pakistan — for example to a live casino studio provider or a fraud detection service — Luck67 takes steps to ensure that appropriate data protection safeguards are in place.

These safeguards include requiring third-party processors to maintain security standards equivalent to or exceeding those applied by Luck67 within Pakistan, and applying contractual data processing agreements that bind the recipient to use your data only for the stated purposes and to maintain appropriate technical security measures.

Luck67 may send you marketing communications about promotions, new features, bonuses, and other Luck67 news via email and SMS where you have consented to receive them or where Luck67 has a legitimate interest in keeping you informed of developments relevant to your account.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any Luck67 marketing email
• Replying STOP to any marketing SMS from Luck67
• Contacting support@luck67.ws with the subject line "Unsubscribe from Marketing"
• Updating your communication preferences directly in your Luck67 account settings

Opting out of marketing communications does not affect transactional communications — Luck67 will still send you essential account notifications such as deposit confirmations, withdrawal processing updates, and security alerts regardless of your marketing preferences, as these are necessary for the operation of your account.

Luck67 reviews and updates this Privacy Policy periodically to reflect changes in the platform's services, applicable laws, or industry best practices. When material changes are made, Luck67 will notify registered players via email and display a prominent notice on the platform prior to the updated policy taking effect.

The "Last Updated" date at the top of this page always reflects the most recent revision. We encourage you to review this policy occasionally to stay informed about how Luck67 protects your data. Continued use of the Luck67 platform after a revised policy takes effect constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Luck67 handles your personal data, please get in touch through any of the following channels:

• Email (general privacy queries): support@luck67.ws
• Email (data subject requests): support@luck67.ws — subject line "Data Rights Request"
• Email (privacy complaints): support@luck67.ws — subject line "Privacy Complaint"
• Live Chat: Available 24/7 via luck67.ws — for general privacy questions

Luck67 will acknowledge all privacy-related emails within 24 hours and provide a substantive response within 30 days. If you are not satisfied with Luck67's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body in the jurisdiction applicable to your complaint.

We genuinely want every Pakistani player on Luck67 to feel confident that their data is in safe hands. If something about this policy is unclear or if you feel your data rights have not been respected, please tell us — we take every privacy concern seriously and will work to resolve it as quickly as possible.