1. Introduction
This Privacy Policy describes how Lucky77 — operated at lucky77-vip.com — collects, processes, stores, and protects the personal information of registered players and visitors. Lucky77 is committed to handling your data responsibly, transparently, and in accordance with applicable data protection principles.
By registering a Lucky77 account, depositing funds, placing bets, or simply visiting lucky77-vip.com, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, please do not use Lucky77 and contact us to close your account.
In plain terms: Lucky77 collects your data to run your account and keep it safe. We never sell your information to marketers or data brokers. We collect only what we need, protect it with strong encryption, and delete it when we no longer have a legitimate reason to keep it.
This Privacy Policy should be read alongside Lucky77's Terms and Conditions, which govern the overall use of the Lucky77 platform. Both documents form part of the agreement between you and Lucky77.
2. Who We Are
Lucky77 is an online gaming and sports betting platform designed specifically for Pakistani players. Lucky77 operates lucky77-vip.com and is the data controller responsible for all personal information collected through the platform. For privacy-related enquiries, Lucky77 can be contacted at support@lucky77-vip.com.
Lucky77 is the sole controller of the personal data described in this policy. This means Lucky77 determines the purposes for which your data is collected and the manner in which it is processed. Lucky77 does not operate as a joint controller with any third party with respect to your core account data.
3. Data We Collect
Lucky77 collects personal information across several categories. The table below summarises the main types of data collected and the context in which Lucky77 receives them:
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number | Registration & KYC |
| Contact Data | Mobile number, email address | Registration |
| Financial Data | Wallet number, IBAN, transaction history | Deposits & Withdrawals |
| Technical Data | IP address, device ID, browser type, OS | Each site visit |
| Behavioural Data | Game history, betting patterns, session length | Ongoing platform use |
| KYC Documents | CNIC scan, selfie, proof of address | KYC verification |
| Communication Data | Support chat logs, emails | When you contact Lucky77 |
| Cookie Data | Session cookies, analytics identifiers | Each site visit |
Lucky77 does not collect sensitive personal data such as biometric information, health records, religious beliefs, or political views. CNIC documents are collected solely for identity verification purposes in compliance with KYC obligations.
3.1 Data You Provide Directly
Most of the data Lucky77 holds about you is information you provide directly — when you register, when you complete KYC, when you make a deposit or withdrawal, when you contact Lucky77 support, or when you participate in promotions.
3.2 Data Collected Automatically
Lucky77 automatically collects technical data when you visit lucky77-vip.com. This includes your device's IP address, browser type and version, operating system, screen resolution, referring URL, and pages visited. This data is collected through cookies and similar tracking technologies and is used for platform security and performance optimisation.
4. How Lucky77 Uses Your Data
Lucky77 uses your personal data for the following purposes:
- Account management: Creating and maintaining your Lucky77 account, processing deposits and withdrawals, and managing bonuses and promotions.
- Identity verification: Completing KYC checks to verify your age and identity as required before processing withdrawal requests.
- Fraud prevention and security: Detecting and preventing fraud, money laundering, account takeover, and other suspicious activity on Lucky77.
- Customer support: Responding to your queries, resolving disputes, and providing assistance with account or payment issues.
- Responsible gaming: Monitoring betting patterns and account behaviour to identify potential problem gambling and reach out proactively where Lucky77 has concerns about a player's welfare.
- Platform improvement: Analysing aggregated, anonymised usage data to improve Lucky77's games, user interface, and overall platform performance.
- Marketing communications: Sending you promotional offers, bonus notifications, and Lucky77 news — but only where you have given your consent or where Lucky77 has a legitimate interest. You can opt out at any time.
- Legal compliance: Meeting Lucky77's obligations under applicable law, including financial reporting, anti-money laundering (AML) obligations, and responding to lawful requests from Pakistani regulatory or law enforcement authorities.
Lucky77 does not use your data for automated profiling that produces significant legal effects on you. Responsible gaming alerts are generated to help you — not to deny you service arbitrarily.
5. Legal Basis for Processing
Lucky77 processes your personal data on one or more of the following legal bases depending on the specific purpose:
- Contractual necessity: Processing required to provide you with Lucky77 services — account creation, payment processing, and game access. Without this processing, Lucky77 cannot deliver its services to you.
- Legal obligation: Processing required to comply with AML regulations, KYC requirements, tax reporting obligations, and lawful requests from authorities. Lucky77 has no discretion in this category — the law mandates it.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics. Lucky77 has assessed these interests against your privacy rights and concluded that they are proportionate.
- Consent: Processing for marketing communications, non-essential cookies, and any other processing where Lucky77 has specifically asked for and received your permission. You may withdraw consent at any time without affecting prior processing.
6. KYC and Identity Verification
Lucky77 operates a Know Your Customer (KYC) process that requires all players to verify their identity before their first withdrawal. KYC is a legal requirement for financial platforms operating in Pakistan, not an optional extra that Lucky77 has chosen to impose.
6.1 What KYC Documents Lucky77 Collects
The standard KYC documents Lucky77 requires are a clear scan or photograph of both sides of your valid Pakistani CNIC, and a recent selfie photograph taken with your CNIC held next to your face. For high-value accounts or where additional verification is necessary, Lucky77 may request proof of address (such as a recent utility bill or bank statement) or evidence of source of funds.
6.2 How Lucky77 Handles KYC Documents
KYC documents submitted to Lucky77 are encrypted in transit using 256-bit TLS and stored at rest using AES-256 encryption. Access to KYC documents is strictly limited to authorised Lucky77 verification staff. KYC documents are never shared with third parties except where required by law or as described in Section 8 of this policy.
6.3 KYC Retention
Lucky77 retains KYC documents for the period of your account plus five years following account closure. This retention period is mandated by AML regulations applicable to financial services businesses. After the retention period ends, Lucky77 permanently and securely deletes KYC documents from its systems.
Never share your CNIC or identity documents with anyone who contacts you claiming to represent Lucky77. Our team will only request KYC documents through the secure in-platform verification system — not via WhatsApp, email, or phone calls.
7. Payment Data and Financial Information
Lucky77 processes all transactions in Pakistani Rupees (PKR) via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, and Visa/Mastercard. How Lucky77 handles the financial data associated with these transactions depends on the payment method:
7.1 Mobile Wallet Transactions
When you deposit or withdraw via Easypaisa or JazzCash on Lucky77, the transaction is processed through a direct API integration between Lucky77 and the relevant mobile wallet provider. Lucky77 receives a transaction reference number, the amount, and a timestamp. Lucky77 does not store your full mobile wallet PIN or any credential that would allow access to your wallet account.
7.2 Card Transactions
Card payments on Lucky77 are processed through a PCI-DSS Level 1 compliant payment gateway. Lucky77 never sees or stores your full card number, CVV, or card expiry date. Your card details are entered directly into the secure payment gateway's interface. Lucky77 receives only a tokenised reference that allows it to process refunds back to your original card.
7.3 Transaction History
Lucky77 maintains a complete record of all transactions on your account — deposits, withdrawals, bonus credits, and game stakes — for the full duration of your account plus five years following closure. This history is available to you within your Lucky77 account dashboard at any time. It is also retained for AML compliance and dispute resolution purposes.
8. Who Lucky77 Shares Your Data With
Lucky77 does not sell your personal data to third parties. Full stop. Data sharing occurs only in the specific, limited circumstances described below:
- Payment processors: Lucky77 shares the minimum necessary transaction data with Easypaisa, JazzCash, NayaPay, SadaPay, our IBFT banking partner, and our card payment gateway to process your transactions. These parties act as data processors under contract with Lucky77 and may not use your data for their own marketing or resale purposes.
- KYC verification providers: Lucky77 may use a third-party identity verification service to assist with KYC document checking. Such providers are bound by strict data processing agreements and process your KYC data solely on Lucky77's instructions.
- Fraud and AML screening: Lucky77 may cross-reference your identity data against sanctions lists and known fraud databases as required by our AML obligations. This is a regulatory requirement, not a discretionary choice.
- Legal and regulatory authorities: Lucky77 will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by a lawful order or where Lucky77 is otherwise legally compelled. Lucky77 cannot legally withhold data from such authorities when a valid legal demand is made.
- Professional advisors: Lucky77's legal counsel, auditors, and insurers may access your data to the minimum extent necessary in the course of providing their professional services to Lucky77, under strict confidentiality obligations.
No advertising networks. No data brokers. No third-party marketers. Lucky77 does not share your personal information with any entity for the purpose of advertising, remarketing, or profiling by parties other than Lucky77 itself.
9. Cookies and Tracking Technologies
Lucky77 uses cookies and similar technologies on lucky77-vip.com to make the platform work correctly, to remember your preferences, and to understand how players use the site so we can improve it. Cookies are small text files stored on your device. They do not contain viruses and cannot access other files on your phone or computer.
9.1 Types of Cookies Lucky77 Uses
You can manage your cookie preferences through your browser settings. Blocking essential cookies will prevent Lucky77 from functioning correctly. For optional cookies, you may withdraw consent at any time through the Lucky77 cookie settings panel available in your account settings.
10. Data Retention
Lucky77 retains your personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & contact data | Duration of account + 5 years | Contract & legal obligation |
| KYC documents | Duration of account + 5 years | AML regulation |
| Transaction records | Duration of account + 5 years | AML & tax compliance |
| Betting history | Duration of account + 2 years | Dispute resolution |
| Support communications | 3 years from last contact | Dispute resolution |
| Technical/log data | 12 months | Security & fraud prevention |
| Marketing consent records | 3 years from consent | Compliance record |
| Deleted account data | Up to 5 years post-deletion | Legal claims |
After the applicable retention period ends, Lucky77 permanently and securely deletes or anonymises your data. Anonymised, aggregated data that cannot identify you may be retained indefinitely for statistical and analytical purposes.
11. Data Security at Lucky77
Lucky77 takes data security seriously and implements technical and organisational measures appropriate to the nature of the data it processes. The following security controls are in place across the Lucky77 platform and its data systems:
- 256-bit TLS encryption for all data transmitted between your device and Lucky77's servers. Any data in motion is encrypted and cannot be read by an intercepting third party.
- AES-256 at-rest encryption for all personally identifiable information and financial data stored in Lucky77's databases.
- PCI-DSS Level 1 compliant card payment processing through a certified payment gateway. Lucky77 itself never handles raw card data.
- Access controls limiting employee access to personal data on a strict need-to-know basis, with all access logged and audited.
- Two-factor authentication required for all Lucky77 internal staff accessing systems that contain player data.
- Regular security audits and penetration testing conducted by independent third parties to identify and remediate vulnerabilities before they can be exploited.
- Incident response procedures that require Lucky77 to identify, contain, and notify affected players of any confirmed data breach without undue delay.
No system can guarantee 100% security. If you become aware of any suspicious activity on your Lucky77 account, contact support immediately via live chat. Do not attempt to investigate a suspected breach yourself.
12. Your Privacy Rights
As a Lucky77 player, you have a number of rights regarding your personal data. Lucky77 is committed to facilitating these rights promptly and without unnecessary friction.
To exercise any of these rights, contact Lucky77 via live chat or at support@lucky77-vip.com. Lucky77 will respond within 30 days. In some cases — particularly for erasure requests — Lucky77 may be required to retain certain data for legal compliance purposes and will explain this where applicable.
13. Children and Minors
Lucky77 is strictly an 18+ platform. Lucky77 does not knowingly collect personal data from anyone under 18 years of age. If Lucky77 discovers or is notified that a person under 18 has registered and provided personal data, Lucky77 will immediately suspend the account, delete all associated personal data, return any funds deposited after deducting bonus credits, and report the incident if required by law.
If you are a parent or guardian and believe that your child has created a Lucky77 account, please contact Lucky77 support immediately at support@lucky77-vip.com so we can take prompt action.
14. Third-Party Links and Services
Lucky77's platform does not contain links to third-party websites. All links on lucky77-vip.com point to pages within the Lucky77 domain. However, where third-party services are embedded in or integrated with Lucky77 — such as our payment gateway or KYC verification provider — those third parties operate under their own privacy policies in addition to their data processing agreements with Lucky77.
Lucky77 is not responsible for the privacy practices of third-party services that you access outside of lucky77-vip.com, including your Easypaisa, JazzCash, NayaPay, or SadaPay apps. We encourage you to review the privacy policies of those services directly.
15. Changes to This Privacy Policy
Lucky77 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. The effective date at the top of this page reflects when the current version came into force. Previous versions are available upon request from Lucky77 support.
Where changes are material — meaning they significantly affect your rights or how Lucky77 uses your data — Lucky77 will notify registered players by email and by in-platform notification at least 14 days before the changes take effect. For minor, non-material changes, Lucky77 will update the policy and change the effective date without sending individual notifications.
Continued use of Lucky77 after a policy change takes effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the updated policy, you may close your Lucky77 account before the changes take effect by contacting our support team.
16. Contact Lucky77 About Privacy
For any privacy-related questions, data subject requests, or concerns about how Lucky77 handles your personal information, please get in touch through one of the following channels:
- Live Chat: Available 24/7 from within your Lucky77 account dashboard. For privacy requests, type "Privacy Request" at the start of your message so the team can route it appropriately.
- Email: support@lucky77-vip.com — privacy requests are acknowledged within 2 working hours and resolved within 30 days.
Lucky77 takes privacy complaints seriously. If you are not satisfied with how Lucky77 has handled a privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.
Response commitment: Lucky77 commits to acknowledging all privacy requests within 2 working hours and providing a substantive response or resolution within 30 calendar days. Complex requests — such as full data exports — may take up to 30 days but Lucky77 will keep you updated throughout the process.