Your Privacy Matters — The luck866
Privacy Policy, Explained Clearly

luck866 ("we", "us", "our") operates the online gaming platform accessible at luck866.app (the "Platform"). We understand that players across Pakistan — from Karachi and Lahore to Islamabad and beyond — entrust us with sensitive personal information when they register an account and engage with our services. We take that responsibility seriously.

This Privacy Policy explains in plain, clear English how luck866 collects, uses, stores, shares and protects the personal data of all registered players and Platform visitors. It also sets out the rights you hold in relation to your data and how to exercise those rights.

This Privacy Policy should be read alongside the luck866 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

luck866 collects personal data through several channels: directly from you during account registration and verification, automatically as you use the Platform, and in limited cases from trusted third-party sources such as payment processors and identity verification providers.

Data you provide directly:

Data collected automatically:

• IP address and approximate geographic location (city-level, not precise GPS).
• Device type, operating system, browser version and screen resolution.
• Session activity logs including login timestamps, game history and betting records.
• Cookie identifiers and similar tracking technologies (see Section 5).
• Transaction data including PKR deposit amounts, withdrawal requests and payment method identifiers.

Data from third parties:

• Identity verification outcomes from KYC service providers confirming document authenticity.
• Transaction confirmation data from payment processors such as Easypaisa, JazzCash, HBL and other approved methods.
• Fraud detection signals from our security monitoring partners.

luck866 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first informing you and, where required, obtaining your consent.

• Account management: To create, maintain and administer your luck866 account, including verifying your identity and eligibility to use the Platform.
• Service delivery: To process your PKR deposits and withdrawals, credit bonuses, record game outcomes and provide you with access to all Platform products including live casino, Jackpot Slots, Fishing War, Cockfighting and sports betting.
• KYC and regulatory compliance: To verify your identity documents (CNIC, passport), confirm your age (18+) and comply with anti-money laundering (AML) obligations imposed by our licensing authority.
• Fraud prevention and security: To detect, investigate and prevent fraudulent transactions, unauthorised account access, money laundering and other prohibited conduct.
• Customer support: To respond to your enquiries, resolve complaints and provide responsible gaming assistance in English via email, WhatsApp and Telegram.
• Platform improvement: To analyse aggregated usage patterns and improve the performance, content and user experience of the luck866 Platform.
• Responsible gaming: To monitor account activity for indicators of problematic gambling behaviour and to deliver responsible gaming tools and interventions where appropriate.
• Marketing communications: To send you promotional offers, HBL PSL season bonuses and other relevant luck866 updates, but only where you have opted in to receiving such communications. You may opt out at any time.
• Legal obligations: To comply with applicable laws, regulatory requirements and valid court orders or official requests received by luck866.

luck866 processes your personal data on the following legal grounds, applied according to the specific purpose:

• Contractual necessity: Processing required to perform our obligations under the luck866 Terms & Conditions — for example, processing your PKR deposit so that you can place a wager.
• Legal obligation: Processing required to comply with applicable laws and our licensing authority's AML and KYC requirements.
• Legitimate interests: Processing necessary for luck866's legitimate business interests, including fraud prevention, security monitoring and service analytics, provided those interests are not overridden by your rights.
• Consent: Processing that relies on your freely given, specific and informed consent — most notably direct marketing communications. You may withdraw consent at any time by contacting support.

luck866 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences and analyse usage patterns. The following categories of cookies are in use:

• Strictly necessary cookies: These are essential for the Platform to function. They maintain your logged-in session, handle PKR transaction flows and apply security protections. These cookies cannot be disabled without preventing core Platform functionality.
• Functional cookies: These remember your preferences such as language settings, game lobby layout and notification preferences to provide a personalised experience.
• Analytics cookies: These collect aggregated, anonymised data about how players navigate the luck866 Platform, which pages are most visited and where errors occur. This data is used solely to improve the Platform.
• Security cookies: These are set to detect fraudulent activity, identify bot traffic and protect the integrity of the Platform for all players.

Most web browsers allow you to manage or delete cookies through their settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the luck866 Platform.

luck866 does not sell your personal data. We share data with third parties only in the limited and specific circumstances described below, and only with parties who are bound by appropriate data protection obligations:

• Payment processors: Easypaisa, JazzCash, HBL, UBL, MCB Bank, SadaPay, Raast and other approved PKR payment providers receive only the transaction data necessary to process your specific deposit or withdrawal.
• Identity verification providers: Our KYC partners receive identity document data solely for the purpose of verifying your eligibility to hold a luck866 account.
• Game content providers: Live casino, slot and other game providers may receive your account identifier and wager data to deliver game outcomes and calculate returns. These providers operate under their own data protection frameworks and are contractually required to maintain confidentiality.
• Regulatory authorities: luck866 may be required to disclose player data to our licensing authority, financial intelligence units or law enforcement agencies in response to a valid legal order or as part of AML compliance reporting.
• Fraud prevention networks: Aggregated or pseudonymised risk signals may be shared with industry fraud prevention services to protect all players.
• Business succession: In the event that luck866 is acquired by or merges with another entity, player data may be transferred as part of that transaction, subject to equivalent privacy protections being maintained.

luck866 retains your personal data for as long as your account remains active and for a defined period after account closure, in accordance with the following principles:

• Account registration data and identity documents are retained for a minimum of five years following account closure to satisfy AML and licensing record-keeping requirements.
• Financial transaction records including PKR deposit and withdrawal histories are retained for a minimum of five years in accordance with financial record-keeping obligations.
• Customer support correspondence is retained for three years following resolution of the relevant matter.
• Cookie and analytics data is retained in anonymised, aggregated form and does not persist as identifiable player data beyond the active session in most cases.
• Where you have submitted a deletion request and no mandatory retention obligation applies, luck866 will delete or irreversibly anonymise the relevant data within 30 days of the verified request.

luck866 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data in transit between your device and luck866 servers.
• Encryption at rest for sensitive stored data including identity documents and financial records.
• Role-based access controls ensuring that only authorised luck866 personnel with a verified business need can access identifiable player records.
• Multi-factor authentication required for all staff accessing systems containing personal data.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Automated monitoring systems that generate alerts for anomalous data access patterns.

Despite these measures, no internet-connected system can guarantee absolute security. If luck866 becomes aware of a data breach that is likely to result in a risk to your rights, we will notify affected players in accordance with our obligations under applicable law.

As a luck866 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the luck866 support team in English at the address listed in Section 15. We will respond to verified requests within 30 days.

The luck866 Platform is strictly for adults aged 18 years and above. luck866 does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step during account registration, and accounts found to belong to minors are closed immediately with all associated data deleted.

If a parent or guardian believes that a person under 18 has provided personal data to luck866 without appropriate consent, they should contact our support team immediately at the email address in Section 15 so that the data can be located and deleted promptly.

luck866 uses account activity data — including login frequency, session duration, deposit volumes and betting patterns — as part of its responsible gaming monitoring programme. This data is analysed to identify players who may be experiencing difficulties and to offer proactive responsible gaming interventions such as limit recommendations or links to professional support resources.

Where a player activates self-exclusion or sets deposit limits through the Account Settings panel, luck866 retains records of those choices as a protective measure. Even if an account is closed, self-exclusion records are retained to prevent the excluded player from opening a new account during the exclusion period.

The processing of account activity data for responsible gaming purposes is considered a legitimate interest of luck866 that also serves the direct interests of individual players and the broader community. For more information about responsible gaming tools, visit our Responsible Gaming page.

As an internationally operated platform, luck866 may process or store certain data on servers located outside Pakistan. Where personal data is transferred to a jurisdiction that does not offer an equivalent level of data protection to that provided under Pakistani law, luck866 implements appropriate contractual safeguards — such as standard data protection clauses — to ensure that your data remains protected to the same standard regardless of where it is processed.

Data transfers to payment processors such as Easypaisa and JazzCash operate primarily within Pakistan and are subject to applicable local financial data regulations.

The luck866 Platform may contain references to third-party services such as payment providers' own platforms or game provider interfaces. This Privacy Policy applies solely to the luck866 Platform. luck866 does not control the data practices of third-party services and is not responsible for their privacy policies or how they handle your personal data.

We recommend reviewing the privacy policy of any third-party service you engage with in connection with your luck866 account, including your chosen PKR payment method provider.

luck866 reviews this Privacy Policy on a regular basis and updates it as necessary to reflect changes in our data practices, Platform functionality, applicable law or regulatory guidance. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.

For material changes — those that significantly affect how your data is processed — luck866 will provide advance notice to registered players via email or an in-platform notification. Your continued use of the Platform following the effective date of an updated Privacy Policy constitutes acceptance of the revised terms.

If you do not agree with an updated Privacy Policy, you should cease using the Platform and contact support to request account closure. You will receive a copy of the most current Privacy Policy at any time upon request.

For any privacy-related query, data rights request, or to report a concern about how luck866 handles your personal information, please contact our dedicated support team through the following channels:

• Email: support@luck866.app  (plain text — not a clickable link)
• WhatsApp & Telegram: Channel IDs are available within your luck866 Account dashboard after logging in.
• Hours: 24 hours a day, 7 days a week including Pakistan public holidays.
• Language: All privacy correspondence is handled in English.
• Response time: Acknowledgement within 3 business days; full response within 30 calendar days for data rights requests.