Data Protection & Privacy

Your Privacy Matters to Us

At luck67, we treat your personal data with the same care you put into every bet. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and the rights you hold as a player on our platform.

// Last Updated: January 2026 — v3.2

Six Principles That Guide How We Handle Your Data

luck67 is built on trust. Here is a plain-language summary of how we protect every Pakistani player's personal information.

Data Security First

All data transmitted between your device and luck67 is encrypted using TLS 1.3. Sensitive information like passwords and CNIC details is stored using industry-standard hashing and encryption at rest.

KYC With Purpose

We collect identity documents solely for age verification, fraud prevention, and regulatory compliance. Your CNIC or passport details are never used for marketing or shared with advertisers.

No Data Selling

luck67 does not sell, rent, or trade your personal information to any third party for commercial gain. Full stop. Your data is used to operate your account, nothing else.

You Control Your Data

You can request access to your personal data, ask us to correct inaccuracies, or request deletion of your account data at any time by contacting our support team at [email protected].

Regulatory Compliance

As an internationally licensed operator, luck67 adheres to data protection obligations set by our licensing authority. We cooperate with regulatory bodies and law enforcement when legally required.

Marketing Opt-Out

You can unsubscribe from promotional emails and push notifications at any time through your account settings. Opting out does not affect your access to any luck67 service or game.

This Privacy Policy applies to all personal data collected and processed by luck67 through the website luck67.app and any related services, mobile interfaces, or communication channels. By using luck67, you acknowledge you have read and understood this policy.

01 Data Controller

luck67 ("the Company", "we", "us", or "our") is the data controller responsible for your personal information collected through this platform. luck67 operates under an international gaming licence and is committed to ensuring that all personal data is handled lawfully, fairly, and transparently.

For all data-related enquiries, requests, or complaints, you may contact our dedicated Data Protection team directly at [email protected] with the subject line "Data Privacy Request".

// Policy Scope This policy covers: luck67.app website · Player account data · Payment transaction records · KYC documentation · Support communications · Marketing preferences

02 Information We Collect

luck67 collects personal information in several ways depending on how you interact with our platform. The categories of data we collect include:

Information You Provide Directly

  • Full name, date of birth, and gender at registration
  • Contact details: email address and mobile number
  • Residential address (city, province, postal code)
  • Identity documents: CNIC (Computerised National Identity Card) or valid passport for KYC verification
  • Payment method details: JazzCash account number, EasyPaisa account, HBL/UBL/Meezan Bank account identifiers
  • Communications you send us through support chat, email, or feedback forms

Information Collected Automatically

  • IP address and approximate geolocation (city-level)
  • Device type, operating system, and browser version
  • Session duration, pages visited, and in-platform navigation patterns
  • Betting and gaming activity logs including wager amounts, game types, and outcomes
  • Login timestamps and frequency of access

Information From Third Parties

  • Identity verification results from our KYC service providers
  • Fraud signals and risk scores from payment processing partners
  • Publicly available information where relevant to verifying a player's identity or protecting against fraud
Data Category Examples Collected At
Identity Data Name, CNIC, date of birth Registration & KYC
Contact Data Email, mobile number, address Registration
Financial Data Payment method IDs, transaction amounts Deposits & withdrawals
Technical Data IP address, device ID, browser Every session
Behavioural Data Betting history, game preferences Ongoing platform use
Communications Data Support tickets, chat logs When you contact us

03 How We Use Your Data

luck67 uses the personal data we collect for specific, legitimate purposes only. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. Our primary uses are as follows:

  • Account Management: Creating, maintaining, and securing your player account on luck67.
  • Identity Verification: Confirming you meet the 21+ age requirement and that the account belongs to a real, unique individual.
  • Payment Processing: Facilitating deposits and withdrawals through your selected payment method (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank).
  • Fraud Prevention & Security: Detecting suspicious activity, preventing money laundering, and protecting all players on the platform.
  • Regulatory Compliance: Meeting obligations under our international gaming licence, including record-keeping and reporting requirements.
  • Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and proactively reaching out to players who may need support.
  • Customer Support: Responding to your queries, complaints, and account-related requests in an efficient manner.
  • Service Improvement: Analysing aggregated, anonymised platform usage data to improve our products and player experience.
  • Marketing Communications: Sending promotional offers, bonuses, and platform updates — only where you have given consent or where we have a legitimate interest to do so, and always with an easy opt-out option.

luck67 processes your personal data only where a valid legal basis exists. The applicable bases for our processing activities are:

  1. Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including operating your account and processing payments.
  2. Legal Obligation: Processing necessary to comply with anti-money laundering regulations, licensing requirements, and cooperation with law enforcement or regulatory bodies.
  3. Legitimate Interests: Processing carried out to prevent fraud, maintain platform security, and improve our services — where such interests are not overridden by your rights and freedoms.
  4. Consent: Processing for direct marketing communications and optional analytics features, where you have given explicit, freely withdrawable consent.

05 Data Sharing & Disclosure

luck67 does not sell your personal data. We share data only in the following limited and controlled circumstances:

Trusted Service Providers

We engage vetted third-party service providers who process data strictly on our behalf and under binding confidentiality agreements. These include KYC verification providers, payment processors (for JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank integrations), cloud hosting providers, and fraud detection services. These parties may only use your data for the specific purpose for which it was shared.

Regulatory & Law Enforcement

We may disclose your personal information to regulators, tax authorities, or law enforcement agencies where we are legally compelled to do so, or where disclosure is necessary to prevent serious harm or criminal activity. We will notify you of such disclosure where permitted by law.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of luck67's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to this Privacy Policy that may result from it.

// We Do Not Share With Advertising networks · Social media trackers · Data brokers · Third-party marketers · Any party offering to purchase player lists or behavioural profiles

06 Data Retention

luck67 retains your personal data only for as long as is necessary for the purposes set out in this policy, or as required by applicable laws and our licensing obligations. The following retention periods apply as a general guide:

Data Type Retention Period Reason
Account & Identity Data 5 years after account closure Licensing & AML obligations
Financial Transaction Records 7 years Financial regulatory requirements
KYC Documents 5 years after account closure Identity verification compliance
Support & Communications 3 years Dispute resolution & audit trail
Marketing Consent Records Until consent is withdrawn + 1 year Proof of consent
Technical & Session Logs 90 days rolling Security monitoring

After the applicable retention period, data is securely deleted or anonymised so that it can no longer be associated with any individual player.

07 Cookies & Tracking Technologies

luck67 uses cookies and similar technologies to deliver a functional, personalised, and secure experience on our platform. Cookies are small text files placed on your device when you visit luck67.app.

Types of Cookies We Use

  • Essential Cookies: Required for the platform to function. These enable login sessions, security tokens, and basic navigation. They cannot be disabled.
  • Functional Cookies: Remember your preferences such as language settings, preferred payment method, and display options.
  • Analytics Cookies: Collect anonymised data about how players navigate the site to help us improve performance and usability. These are only used with your consent.
  • Security Cookies: Help detect and prevent fraudulent activity, bot traffic, and account takeover attempts.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies may impair platform functionality. luck67 does not use third-party advertising or tracking cookies.

08 Security Measures

luck67 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

  • TLS 1.3 encryption for all data in transit between your device and our servers
  • AES-256 encryption for sensitive data stored at rest
  • Multi-factor authentication options for player account access
  • Regular penetration testing and security audits by independent third parties
  • Role-based access controls ensuring staff can only access data relevant to their function
  • 24/7 automated monitoring for anomalous access patterns and potential breaches

In the unlikely event of a data breach that poses a risk to your rights and freedoms, luck67 will notify affected players and relevant regulatory authorities within the timeframes required by our licensing obligations.

09 Your Rights

As a luck67 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request".

  • Right of Access: You may request a copy of all personal data we hold about you. We will respond within 30 days.
  • Right to Rectification: If any data we hold is inaccurate or incomplete, you have the right to request it be corrected.
  • Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
  • Right to Restrict Processing: You may ask us to pause processing of your data while a dispute or correction request is being resolved.
  • Right to Data Portability: You may request your personal data in a structured, machine-readable format to transfer to another service provider.
  • Right to Object: You may object to processing based on legitimate interests, including direct marketing. Marketing opt-outs take effect immediately.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

10 Minors & Age Restriction

luck67 is strictly for users aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory part of our registration and KYC process.

If we become aware that an account has been created by or on behalf of a minor, that account will be immediately suspended and any funds held will be returned to the originating payment method after a review. The personal data of the minor will be deleted from our systems in accordance with applicable data protection obligations.

If you believe a minor has registered on luck67, please report it immediately to [email protected] so we can investigate and take appropriate action without delay.

11 International Data Transfers

As an internationally licensed operator, luck67 may process and store your personal data in jurisdictions outside Pakistan. Where data is transferred internationally, we ensure that adequate safeguards are in place to protect your information to the same standard as described in this policy.

Such safeguards include contractual data processing agreements with our service providers that impose equivalent data protection standards, and where applicable, standard contractual clauses approved by relevant data protection authorities.

12 Changes to This Privacy Policy

luck67 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, regulatory requirements, or the services we offer. When material changes are made, we will notify registered players via email at least 14 days before those changes come into effect.

The date of the most recent revision is clearly displayed at the top of this page. Continued use of luck67 following notification of changes constitutes your acceptance of the updated policy. If you do not agree with any updates, you may close your account by contacting our support team.

// Version History v3.2 — January 2026 (current) · v3.0 — July 2025 · v2.5 — January 2025 · v2.1 — August 2024

13 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how luck67 has handled your personal information, please reach out to us through any of the following channels:

  • Email: [email protected] — subject line: "Privacy Enquiry"
  • Live Chat: Available 24/7 directly on the luck67 platform for faster response
  • Messenger & Viber: Via our official channels for non-sensitive queries

We aim to respond to all data-related requests within 30 days of receipt. If you are not satisfied with our response, you have the right to escalate your complaint to the data protection supervisory authority in the jurisdiction of our licensing body.

Privacy Protected — Ready to Play?

Now that you know how luck67 protects your information, join thousands of Pakistani players already enjoying cricket betting, live casino, and slots on a platform you can trust.

21+  By registering, you confirm you have read and accepted our Privacy Policy and Terms & Conditions. Gamble responsibly.