luck67 Privacy Policy — How We Handle Your Personal Data

1 Introduction

This Privacy Policy applies to all players and visitors of the luck67 platform, which is operated at https://luck67.bet. By creating an account or using any service at luck67, you confirm that you have read this policy and understand how your personal data is handled.

luck67 is committed to treating your personal information with respect and transparency. We collect only what we genuinely need to operate the platform and serve you as a player. We do not collect data speculatively, we do not sell your data to advertisers, and we do not share your information in ways that are not described in this policy.

This policy should be read alongside our Terms and Conditions and Responsible Gaming policy, both of which form part of the overall agreement between you and luck67. If you have a specific question about your data that is not answered here, contact our support team — we will give you a clear, honest answer.

2 Who We Are

luck67 is an online gaming platform built specifically for Pakistani players, operating at https://luck67.bet. For the purposes of this Privacy Policy, luck67 is the data controller — meaning we determine why and how your personal data is processed. Our platform provides casino games, live dealer games, sports betting and promotional services, all denominated in Pakistani Rupees (PKR).

Our operations are centred on Pakistan, and our data practices are designed around the needs and expectations of Pakistani players. Our support team and compliance team are Pakistan-based and are your first point of contact for any data-related concerns.

3 Data We Collect

luck67 collects personal data across several categories, all of which serve a specific operational purpose. We do not collect data that we cannot justify needing. The categories below cover everything we may hold about you as a registered player at luck67.

3.1 Identity and Contact Data

• Full legal name as it appears on your national ID (CNIC) or passport
• Date of birth (to verify minimum age of 18)
• Pakistani mobile number used to register your luck67 account
• Email address if provided during registration or contact with support
• Residential address in Pakistan (required for KYC verification)
• CNIC number or passport number (collected during KYC, stored securely)

3.2 Financial and Payment Data

• Easypaisa or JazzCash account/mobile number linked to your deposits and withdrawals
• NayaPay or SadaPay wallet identifiers where applicable
• Bank account details for IBFT transactions (account title and IBAN)
• Visa/Mastercard details — card number, expiry, cardholder name (processed by certified payment gateways; full card details are never stored on luck67 servers)
• Transaction history — all deposits and withdrawals including amounts, dates, methods and reference numbers

3.3 Gaming and Betting Activity Data

• All game sessions — game type, start/end time, stake amounts, game outcomes
• Sports betting history — markets selected, odds accepted, stake amounts, settlement results
• Bonus usage history — which promotions were claimed, wagering progress, bonus-linked play
• Responsible gaming tool settings — deposit limits, session timers, self-exclusion records

3.4 Technical and Device Data

• IP address at the time of login and key account actions
• Device type (mobile, desktop, tablet), operating system and browser version
• Mobile network operator (where detectable from connection)
• Session timestamps and duration for security logging purposes
• Cookies and similar tracking technologies (see Section 7)

3.5 Communication Data

• Records of all support conversations via live chat, email or any other channel
• Complaints, queries and feedback submitted through any luck67 contact method
• Responses to surveys or promotions where you voluntarily participate

4 How We Collect Your Data

luck67 collects your data through three main routes: information you provide directly, data generated automatically through your use of the platform, and data we receive from verified third-party sources in connection with payment processing or fraud prevention.

4.1 Data You Provide Directly

When you register at luck67, you provide your name, date of birth and mobile number. When you make a deposit, you provide payment method details. When you complete KYC verification, you provide identity documents. When you contact support, you provide the details relevant to your query. All of this is data you consciously and voluntarily give to luck67 in the course of using the platform.

4.2 Data Generated Automatically

When you browse the luck67 website or play games on the platform, certain data is generated automatically. This includes your IP address, the pages you view, the games you open, session duration, and device information. This data is collected via server logs and cookies (see Section 7 for the full cookies policy). You do not directly input this data — it is a by-product of your interaction with the platform.

4.3 Data from Third Parties

luck67 may receive limited data from third-party payment processors (Easypaisa, JazzCash, banks) to confirm that a transaction was completed successfully. We may also receive fraud-screening signals from payment gateway partners to protect both you and luck67 from fraudulent account activity. We do not purchase or acquire personal data from data brokers or marketing lists.

5 Why We Use Your Data

Every piece of data luck67 holds about you is used for one or more of the following purposes. If we want to use your data for a new purpose not covered below, we will update this Privacy Policy and notify you before doing so.

• Account operation: to create and maintain your luck67 account, verify your identity, and enable you to deposit, play and withdraw
• Age verification: to confirm you meet the minimum age requirement of 18 before allowing account activation
• KYC compliance: to verify your identity in accordance with our anti-money laundering obligations
• Payment processing: to execute deposits and withdrawals accurately and to reconcile transactions with payment providers
• Fraud prevention: to detect and prevent unauthorised account access, duplicate account creation, payment fraud and bonus abuse
• Responsible gaming: to monitor gaming patterns that may indicate problem gambling behaviour, in order to apply responsible gaming tools proactively where necessary
• Customer support: to respond to your queries, complaints and technical issues accurately and efficiently
• Platform improvement: to analyse how players use the luck67 platform in aggregate, in order to improve features, fix issues and develop new products
• Legal obligations: to retain records required by applicable law, to cooperate with lawful investigations, and to defend luck67 in legal proceedings
• Marketing: to send you relevant promotions, offers and platform updates — only where you have consented to receive such communications (see Section 12)

6 Sharing Your Data

luck67 does not sell your personal data to any third party. We do not share your data with advertisers, data brokers or marketing agencies. The only circumstances in which your data is shared with third parties are the following, all of which are necessary to operate the platform or comply with legal requirements.

6.1 Payment Processors

To process your deposits and withdrawals, luck67 shares the minimum necessary transaction data with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, bank partners or card processors. These providers receive only the data required to execute the specific transaction. They are contractually prohibited from using your data for any other purpose.

6.2 Identity Verification Providers

During KYC verification, your identity documents may be processed by a third-party identity verification service operating under a strict data processing agreement with luck67. These services verify document authenticity and confirm that the document details match your account registration information. They do not retain your data beyond the verification process.

6.3 Game Providers

Third-party game providers (Evolution Gaming, Pragmatic Play, Ezugi and others) receive session identifiers and game stake data to enable their games to function within the luck67 platform. These providers do not receive your name, payment details or contact information — only the technical parameters needed to run each game session.

6.4 Legal and Regulatory Disclosure

luck67 will share personal data with law enforcement, regulatory authorities or courts if required to do so by lawful order. We will not share data beyond what is specifically required by such an order. Where legally permitted, we will notify you that such a request has been made.

7 Cookies and Tracking Technologies

luck67 uses cookies and similar technologies on its website and platform. A cookie is a small text file placed on your device when you visit a website. Cookies help the platform remember your preferences, keep your session active and understand how the platform is being used.

7.1 Types of Cookies We Use

• Essential cookies: required for the platform to function — session authentication, security tokens, load balancing. These cannot be disabled without breaking core functionality.
• Functional cookies: remember your preferences such as preferred game lobby view, language settings and last visited game category.
• Analytics cookies: help luck67 understand which parts of the platform are used most, where players encounter issues and how navigation flows work. Data is aggregated and anonymised — individual player sessions are not tracked for advertising purposes.
• Security cookies: detect suspicious login attempts, identify devices associated with previous fraud attempts and support two-factor authentication flows.

7.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Disabling essential cookies will affect your ability to log in and use the luck67 platform. Disabling functional or analytics cookies will not affect your ability to play but may result in a less personalised experience. luck67 does not use third-party advertising cookies or tracking pixels for ad retargeting.

8 Data Security

luck67 applies multiple layers of technical and organisational security to protect your personal data. No system is completely immune to security risks, but the measures described here represent the standard we hold ourselves to in protecting your information.

• Encryption at rest: all personal data stored on luck67 servers is encrypted using AES-256 — the same standard used by major banks and government agencies
• Encryption in transit: all data transmitted between your device and the luck67 platform uses TLS 1.3 — ensuring your data cannot be intercepted in transit
• Access controls: player data is accessible only to luck67 staff who require it to perform their specific role; access is logged and reviewed regularly
• Payment security: full card details are processed by PCI-DSS compliant payment gateways and are never stored directly on luck67 servers
• Intrusion detection: luck67's infrastructure is monitored continuously for unusual access patterns, brute-force attempts and other threat indicators
• Regular security audits: luck67 conducts periodic security reviews of its infrastructure, codebase and data handling practices

8.1 Breach Notification

In the unlikely event of a data breach that poses a risk to your personal data, luck67 will notify affected players as quickly as possible — and in no more than 72 hours of becoming aware of the breach. The notification will explain what data was affected, what we have done to contain the breach, and what steps you can take to protect yourself.

9 Data Retention

luck67 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal obligations, or to resolve disputes and enforce our agreements. The table below gives a straightforward summary of standard retention periods for different data types.

After the relevant retention period expires, luck67 securely deletes or anonymises your personal data. Anonymised data (from which you cannot be identified) may be retained indefinitely for platform analytics and improvement purposes.

10 Your Rights Over Your Data

As a player at luck67, you have specific rights over the personal data we hold about you. These rights are genuine and exercisable — not theoretical provisions buried in a policy. Here is what you can request and how.

To exercise any of these rights, contact luck67 support via live chat or email at support@luck67.bet. We will verify your identity before actioning any data request — this is to protect you from someone else requesting your data fraudulently. All requests are actioned within 30 days and are free of charge for one request per 12-month period.

11 Children's Privacy

luck67 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a person under 18 has created an account or submitted personal data to luck67, we will immediately close the account, delete all associated personal data (except records required for safeguarding purposes), and return any deposits made.

Age verification is part of our standard registration process at luck67. If you believe a person under 18 may have accessed luck67, please contact our support team immediately. We take underage gambling prevention seriously and cooperate fully with parental concern reports.

12 Marketing Communications

luck67 sends promotional communications to players who have consented to receive them. Consent is collected explicitly at registration and can be updated at any time through your account settings or by contacting support. We do not treat an account registration as blanket consent to all marketing — you choose what you receive.

12.1 What Marketing Looks Like at luck67

• SMS messages to your registered Pakistani mobile number with bonus offers and platform news
• In-platform notifications visible when you log in to luck67
• Email communications to your registered email address (where provided)
• Push notifications via browser (only if you have granted browser notification permission)

12.2 Opting Out

Every SMS and email from luck67 includes a clear unsubscribe option. Unsubscription takes effect within 24 hours for email and immediately for SMS where technically possible. You can also manage all marketing preferences in your luck67 account settings under Privacy & Notifications. Opting out of marketing does not affect your ability to use any part of the luck67 platform or receive operational communications about your account.

13 Updates to This Privacy Policy

luck67 reviews this Privacy Policy regularly and updates it as our data practices evolve, as new features are added to the platform, or as legal requirements change. Material updates — changes that meaningfully affect how we use your data or what rights you have — will be communicated to registered players via in-platform notification or SMS to your registered mobile number at least 7 days before they take effect.

Minor updates — such as clarifications of existing practices, correction of typographical errors or improved plain-English explanations of existing policies — may be made without advance notice. The "Last Updated" date at the top of this policy will always reflect when the most recent change was made.

Continued use of the luck67 platform after a policy update is communicated constitutes acceptance of the updated terms. If you do not accept a material change, you should stop using the platform and contact support to close your account before the change takes effect.

14 Contact Us About Privacy

If you have any question about this Privacy Policy, want to exercise any of your data rights, or have a concern about how luck67 has handled your personal data, please contact us through the following channels.

We aim to resolve all privacy-related queries within 5 working days. If you are not satisfied with our response to a privacy concern, you have the right to escalate to a senior compliance team member by requesting a formal review in your initial contact message.