Luck 67 Privacy Policy — Pakistan Data Protection Rules

This Privacy Policy applies to luck67.biz, operated by Luck 67 (referred to throughout as "Luck 67", "we", "us" or "the platform"). Luck 67 is an online sports betting and live casino platform serving players in Pakistan.

For the purposes of data protection, Luck 67 is the data controller — meaning we determine how and why your personal data is collected and processed. If you have any questions about this Privacy Policy or about how Luck 67 handles your information, you can contact us at [email protected] at any time.

By creating an account at Luck 67 or continuing to use luck67.biz after this policy has been updated, you acknowledge that you have read and understood how we handle your personal data as described here.

Luck 67 collects personal data in three ways: information you provide directly, information generated automatically when you use the platform, and information received from third-party service providers (such as payment processors) when you make a transaction.

Information You Provide Directly

• Registration data: Your full name, date of birth, email address, phone number and a chosen username when you create a Luck 67 account.
• Identity verification: A copy of your CNIC, passport or other government-issued ID when you complete account verification. Also a utility bill or equivalent proof of address if requested.
• Payment information: Mobile wallet number (Easypaisa/JazzCash/NayaPay/SadaPay), bank account details for IBFT transfers, or the last four digits and expiry of a Visa/Mastercard used for deposits. We do not store full card numbers.
• Support communications: Any information you share with Luck 67's support team via email or live chat, including the content of your messages and any attachments you send.
• Preference settings: Responsible gaming limits, marketing preferences and notification settings that you configure within your account.

Information Generated Automatically

• Device and technical data: Your IP address, device type (mobile/desktop), operating system, browser type and version, screen resolution and connection type.
• Usage data: Pages visited on luck67.biz, time spent on each page, games opened, bets placed (amount, market, outcome), login timestamps and session duration.
• Cookie and tracking data: Data from cookies and similar technologies as described in Section 7 of this policy.

Information from Third Parties

• Payment providers: Transaction confirmation data from Easypaisa, JazzCash and banking systems — including transaction reference numbers, timestamps and amounts — to reconcile your deposits and withdrawals.
• Fraud prevention services: Risk signals from fraud detection partners used to protect your account and the platform from unauthorised activity.
• Game providers: Bet and result data from game software suppliers (JILI, Ezugi, Evolution and others) to maintain your complete betting history.

Every piece of data that Luck 67 collects has a specific purpose. We do not collect data simply because we can — each category of data serves a defined function. Below is a clear explanation of what your data is actually used for at Luck 67:

• To create and manage your account: Your name, email, phone number and date of birth are used to set up and maintain your Luck 67 account, process your bets and communicate account-related updates to you.
• To verify your identity: ID documents are used to confirm your age (18+) and identity, as required by regulatory obligations and to prevent fraud. Verification also enables higher withdrawal limits and VIP access.
• To process deposits and withdrawals: Payment data is used to move funds between your Luck 67 wallet and your Easypaisa, JazzCash, bank or card account accurately and securely.
• To comply with legal obligations: Financial transaction records and identity verification documents are retained to meet regulatory requirements, including anti-money laundering (AML) obligations.
• To prevent fraud and protect your account: Technical and behavioural data is used to detect suspicious login attempts, identify multi-accounting and protect against fraudulent transactions. This is in your interest as well as Luck 67's.
• To provide customer support: Communication records are used by Luck 67's support team to resolve your queries effectively, maintain context across multiple interactions and improve our support processes.
• To improve the platform: Aggregated usage data — which cannot identify you individually — is used to understand how Pakistani players use Luck 67, identify technical issues and guide product development decisions.
• To send you relevant communications: With your consent, Luck 67 uses your contact details to send promotional offers, bonus announcements and platform news. You can withdraw this consent at any time.
• To support responsible gaming: Your betting history and account activity data is monitored by Luck 67 to identify patterns that may suggest problem gambling, enabling us to reach out proactively if appropriate.

Every time Luck 67 processes your personal data, there is a defined legal basis for doing so. The table below summarises the main processing activities, their purpose and the legal basis that applies.

Luck 67 does not sell your personal data. We do share data with a limited set of third parties, but only where necessary and only under strict conditions. The categories of third parties who may receive your data are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners receive the minimum transaction data required to process your deposits and withdrawals. They operate under their own privacy policies and regulatory obligations.
• Game software providers: Companies like JILI Gaming, Ezugi and Evolution receive your bet data in real time to operate the games you play. This is limited to session and bet data — they do not receive your identity documents or payment details.
• Identity verification services: Third-party KYC providers may receive copies of your identity documents to assist with age and identity verification. These providers are bound by confidentiality agreements with Luck 67.
• Fraud prevention and security services: Technical data including IP addresses and device fingerprints may be shared with fraud detection platforms to protect your account.
• Regulatory and law enforcement authorities: Luck 67 will disclose personal data to government authorities, regulators or law enforcement when legally required to do so — for example, in response to a court order or AML investigation. We will not notify you of such disclosures where legally prohibited from doing so.

Given that Luck 67 handles real PKR transactions, financial data is handled with particular care. Here is exactly how your payment information is treated at Luck 67:

• Luck 67 does not store full credit or debit card numbers at any point. When a card is used, only the last four digits and expiry date are retained for your reference — the full number passes directly through to the payment processor and is never stored on Luck 67 servers.
• Easypaisa and JazzCash mobile wallet numbers are stored encrypted and are only used to process your transactions. They are never shared with marketing partners.
• Bank account details provided for IBFT withdrawals are stored encrypted and purged after the transaction is confirmed, except where a standing withdrawal arrangement is in place at your request.
• All financial transaction records — deposits, withdrawals, bonuses — are retained for a minimum of five years from the date of the transaction to meet regulatory and AML record-keeping requirements. These records cannot be deleted on request during the retention period.

Luck 67 uses cookies and similar tracking technologies on luck67.biz. A cookie is a small text file stored on your device when you visit a website. Luck 67 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in, security tokens that protect your account and cookies that remember your preferences during a session. You cannot opt out of strictly necessary cookies while using Luck 67.
• Functional cookies: Remember settings you've chosen — such as your preferred language, display preferences and notification settings — so you don't have to re-enter them every visit.
• Analytics cookies: Collect aggregated, anonymised data about how players use luck67.biz. This helps Luck 67 identify pages that perform poorly, features that confuse users and technical errors that need fixing. Individual users cannot be identified from analytics data.
• Session security cookies: Used by our fraud prevention systems to detect bot activity and protect your account from automated attacks.

Luck 67 does not use third-party advertising cookies or behavioural tracking cookies that follow you to other websites. You can manage cookie preferences in your browser settings. Blocking certain cookies may affect the functionality of the platform — in particular, blocking strictly necessary cookies will prevent you from staying logged in.

Luck 67 retains different categories of data for different periods, based on the purpose of collection and applicable legal requirements.

• Account data (name, email, phone): Retained for the duration of your active account plus two years after account closure, unless a longer period is required by law.
• Identity verification documents: Retained for five years from the date of submission, in accordance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction.
• Betting history: Retained for two years from the date of each bet for dispute resolution purposes, and in aggregated anonymised form indefinitely for platform analytics.
• Support communications: Retained for two years from the date of the last communication in a case.
• Marketing preferences: Retained until you withdraw consent and for a short period thereafter to ensure your opt-out is honoured correctly.
• Technical and device data: Retained in log form for 12 months.

When data reaches the end of its retention period, it is securely deleted or anonymised. Anonymised data — which cannot be used to identify any individual — may be retained indefinitely for statistical and analytical purposes.

As a Luck 67 member, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected]. We will respond within 30 days of receiving your request.

Data security at Luck 67 is not an afterthought. The following technical and organisational measures are in place to protect your personal information:

• SSL/TLS encryption: All data in transit between your device and luck67.biz is encrypted. You can verify this by checking for the padlock symbol in your browser's address bar.
• Encrypted data storage: Sensitive data fields — including identity documents, payment details and passwords — are stored in encrypted form. Passwords are hashed using a one-way algorithm and cannot be read by Luck 67 staff.
• Access controls: Only authorised Luck 67 staff whose job requires it can access personal member data. Access is logged and reviewed regularly. Support staff see only the minimum data needed to handle your query.
• Regular security testing: Luck 67 conducts regular vulnerability assessments and penetration testing to identify and address security weaknesses before they can be exploited.
• Incident response: Luck 67 has a documented data breach response procedure. If a breach occurs that is likely to affect your personal data, we will notify you via email as quickly as possible and take immediate steps to contain and investigate the incident.

Luck 67 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. If we discover that an account has been created by or on behalf of a minor, we will immediately close the account, delete or anonymise the associated personal data to the extent permitted by law, and return any deposited funds to the original payment method.

If you are a parent or guardian and believe your child has created a Luck 67 account, please contact [email protected] immediately. We take underage access very seriously and will act on reports promptly.

Luck 67 may update this Privacy Policy from time to time to reflect changes in our data practices, new services we offer, changes in applicable laws or feedback from members. When material changes are made, we will notify active account holders by email at least seven days before the updated policy takes effect.

The "Last Updated" date at the top of this page is always current. We recommend bookmarking this page and checking it periodically, especially if you receive a change notification email. Your continued use of Luck 67 after any policy update constitutes acceptance of the revised terms.

If you disagree with any update to this Privacy Policy, you should stop using Luck 67 and contact [email protected] to close your account and request a withdrawal of your remaining balance.

If you have any questions, concerns or complaints about how Luck 67 handles your personal data, please contact us through the following channels:

• Email: [email protected] — please include "Privacy Enquiry" in your subject line for faster routing to the right team member. We aim to respond within 24 hours.
• Live Chat: Available 24/7 when you are logged into your Luck 67 account. For privacy-related matters, email is preferred as it creates a written record.

For formal privacy rights requests — access, erasure, portability and similar — email [email protected] with "Privacy Rights Request" in the subject line and your registered email address in the body. We will verify your identity and respond within 30 days.