luck67 Privacy Policy

luck67 (referred to as "we", "us", "our", or "the Platform") is a licensed online casino and sports betting platform operating at luck67.net. luck67 is built primarily for Pakistani players and offers cricket betting, live casino games, slots, card games (including Nine and Jacks or Better), and instant games — all transacted in Pakistani Rupees (PKR).

As the operator of this platform, luck67 acts as the data controller for all personal information collected through luck67.net, including through account registration, the cashier, customer support, and any promotional activities. This Privacy Policy applies to all users who access or use the luck67 platform in any capacity, regardless of the device or method of access used.

luck67 collects personal data from you directly when you register, make a deposit or withdrawal, contact support, or interact with promotional features on the platform. We also collect certain data automatically as part of normal platform operation. The categories of personal data we collect are outlined below.

luck67 uses the personal data it collects strictly for the purposes described in this Privacy Policy. We do not sell your personal data to third parties. The primary purposes for which your data is used are as follows:

• To create, manage, and maintain your luck67 player account and verify your identity in line with our KYC obligations.
• To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment methods.
• To verify your age (21+ requirement) and ensure compliance with responsible gaming policies before any real-money gaming commences.
• To detect, prevent, and investigate fraud, money laundering, collusion, bonus abuse, and any other prohibited conduct as defined in our Terms & Conditions.
• To provide customer support and resolve disputes, complaints, or account-related queries submitted to our support team.
• To send transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.
• To send promotional communications about bonuses, cricket betting offers (including PSL promotions), and new game launches — only where you have opted in to receive such communications.
• To monitor and improve platform performance, fix technical issues, and develop new features that serve our Pakistani player base better.
• To comply with applicable legal obligations including anti-money laundering (AML) regulations and international licensing requirements.
• To personalise your gaming experience based on your preferences and activity on luck67.

luck67 processes your personal data on the following legal grounds, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to fulfil the contract between you and luck67 — including account creation, payment processing, and game operation — is carried out on the basis that it is necessary to perform that contract.
• Legal Obligation: Processing required for compliance with applicable laws — including KYC identity verification, AML transaction monitoring, and age verification — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and platform analytics is conducted on the basis of luck67's legitimate business interests, provided those interests do not override your fundamental privacy rights.
• Consent: Processing for marketing and promotional communications is carried out on the basis of your explicit opt-in consent. You may withdraw this consent at any time without affecting other processing activities.

luck67 does not sell, rent, or trade your personal data with third parties for commercial purposes. However, to operate the platform and meet our legal obligations, we may share your data with the following categories of trusted parties under appropriate data protection safeguards:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and USDT TRC20 processors receive the minimum financial data necessary to process your transactions securely.
• KYC & Identity Verification Providers: Third-party identity verification services receive your KYC documents and identity data to perform age and fraud verification on luck67's behalf.
• Game Software Providers: Licensed game providers such as Pragmatic Play and Evolution Gaming may receive anonymised session data to facilitate game delivery. They do not receive your full identity or financial details.
• Regulatory & Law Enforcement Authorities: luck67 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by law, court order, or applicable licensing authority directive.
• AML & Compliance Partners: Transaction monitoring services and AML compliance tools may receive financial transaction data to assist in detecting suspicious activity.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers may have incidental access to data in the performance of their contracted services, under strict data processing agreements.

luck67 uses cookies and similar tracking technologies to operate the platform effectively, enhance your user experience, and carry out analytics on platform usage. A cookie is a small text file placed on your device when you visit luck67.net. The types of cookies we use are described below.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling non-essential cookies will not affect your ability to use the core features of luck67, but may limit personalisation functionality. luck67 does not use third-party advertising cookies or behavioural tracking cookies that profile you for advertising purposes outside of the platform.

luck67 retains your personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply:

• Active Account Data: Retained for the duration of your active account relationship with luck67, plus a minimum of five (5) years following account closure to meet AML and regulatory record-keeping requirements.
• KYC Documents: Identity verification documents (CNIC copies, address proofs, payment method screenshots) are retained for a minimum of five (5) years post-account closure in compliance with international licensing obligations.
• Financial Transaction Records: All deposit and withdrawal transaction logs are retained for a minimum of five (5) years in line with AML compliance requirements.
• Gaming History: Bet records, game session logs, and win/loss data are retained for five (5) years to support dispute resolution and responsible gaming monitoring.
• Support Communications: Customer support emails and chat transcripts are retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Records of your marketing opt-in or opt-out are retained for the lifetime of your account plus three (3) years for compliance audit purposes.

As a luck67 player, you hold the following rights with respect to your personal data held by luck67. To exercise any of these rights, please contact our support team in writing at [email protected] with your account username and a description of your request. luck67 will respond to all verified data rights requests within 30 days.

• Right of Access: You have the right to request a copy of all personal data luck67 holds about you. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your luck67 account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal obligation to retain certain records under AML and licensing requirements.
• Right to Restriction: You may request that luck67 temporarily restrict processing of your data while a rectification or objection request is being reviewed.
• Right to Data Portability: You may request that luck67 provide your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to processing of your data carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

luck67 takes the security of your personal and financial data seriously. We implement industry-standard technical and organisational security measures to protect your data from unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• SSL/TLS encryption on all data transmitted between your device and luck67.net — indicated by the padlock icon in your browser address bar.
• AES-256 encryption at rest for all sensitive personal data and KYC documents stored on luck67's servers.
• Two-factor authentication (2FA) available for all player accounts — strongly recommended for all luck67 users.
• Role-based access controls ensuring that only authorised luck67 staff can access personal data, limited strictly to what is necessary for their job function.
• Regular security audits and penetration testing conducted by independent cybersecurity specialists.
• Dedicated fraud detection systems that monitor transactions and login patterns in real time for anomalous activity.
• All third-party data processors are contractually bound to maintain equivalent security standards under Data Processing Agreements (DPAs).

While luck67 employs all reasonable security measures, no digital platform can guarantee absolute security. In the event of a data breach that poses a material risk to your rights, luck67 will notify affected users and relevant authorities as required by applicable law and without undue delay.

luck67 is strictly an adults-only platform. We do not knowingly collect, store, or process personal data from any individual under the age of 21. Our registration process includes age declaration requirements and our KYC verification process confirms the identity and age of all players before real-money gaming access is granted.

If luck67 becomes aware that personal data has been collected from a person under 21 years of age — whether through registration, a parental complaint, or internal review — the relevant account will be immediately suspended, all funds will be returned to the verified payment source, and all personal data associated with that account will be permanently deleted from our systems within 30 days, except where retention is required by law for fraud investigation purposes.

luck67 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or our platform's functionality. When material changes are made to this Policy, we will notify registered players via email or a prominent notice within the luck67 platform dashboard at least 14 days before the changes take effect.

Minor clarifications or non-material updates may be made without prior notice, and the "Last Updated" date at the top of this page will be revised accordingly. We encourage all luck67 players to review this Privacy Policy on a regular basis. Continued use of the luck67 platform following notification of any material change constitutes your acknowledgement of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way luck67 handles your personal data, please contact our Data Protection team using the details below. All privacy-related correspondence must be submitted in writing. luck67 will acknowledge receipt of all formal privacy enquiries within 3 business days and aim to provide a full response within 30 calendar days.

• Email (plain text — not clickable): [email protected]
• Subject Line: Please include "Privacy Policy Query" or "Data Rights Request" in your email subject line to ensure prompt routing to the correct team.
• Account Verification: To protect your data, all data rights requests will require identity verification before any personal data is disclosed or actioned.

For responsible gaming support, including self-exclusion requests, deposit limit adjustments, or cooling-off period activation, please visit the Responsible Gaming section of your luck67 account dashboard or contact support directly. luck67 processes all responsible gaming requests as a priority, regardless of other support queue times.