lucky 66 Privacy Policy —
Your Data, Protected by Design

1 Who We Are

This Privacy Policy is issued by lucky 66, operator of the online gaming platform accessible at lucky66.games (the "Platform"). lucky 66 acts as the data controller in respect of personal data collected from players and visitors who access the Platform from Pakistan.

By registering a lucky 66 account, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any part of this policy, you should discontinue use of the Platform.

2 Personal Data We Collect

lucky 66 collects the following categories of personal data from players registered on the Platform:

lucky 66 does not intentionally collect sensitive personal data such as biometric data, health information, or political opinions. Where identity documents containing such information are submitted for verification purposes, the information is used solely for age and identity verification and is not retained beyond the period necessary for that purpose.

3 How We Collect Your Data

lucky 66 collects personal data through the following channels:

• Direct Registration: When you create a lucky 66 account, you provide your name, mobile number, date of birth, and contact email directly to the Platform.
• Identity Verification: When you submit documents to verify your age or identity (e.g., a scanned copy of your CNIC or passport), lucky 66 receives and processes that document data.
• Payment Transactions: When you make a deposit or withdrawal via Easypaisa, JazzCash, SadaPay, Raast, HBL, or Bank QR, transaction metadata is received and logged in your lucky 66 account wallet.
• Platform Usage: Automatically collected as you browse and play on the lucky 66 Platform, including IP address, device information, and session activity logs.
• Customer Support: When you contact our 24/7 English support team via live chat or email, the content of those communications is recorded and stored for quality and compliance purposes.
• Cookies and Similar Technologies: As described in Section 7 of this Policy.

4 Why We Use Your Data

lucky 66 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your lucky 66 account, including processing your PKR wallet balance and transaction history.
• Service Delivery: To provide access to sports betting markets, live casino games, jackpot slots, and all other features of the lucky 66 Platform.
• Age Verification: To verify that all registered players are 18 years of age or older, in compliance with our strict 18+ policy.
• Payment Processing: To process PKR deposits and withdrawals via Easypaisa, JazzCash, SadaPay, Raast, HBL, and other supported payment methods.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other breaches of our Terms & Conditions.
• Responsible Gaming: To monitor gaming activity patterns that may indicate problem gambling behaviour and to enforce deposit limits, session reminders, and self-exclusion requests.
• Legal Compliance: To comply with applicable laws and regulatory obligations, including anti-money laundering (AML) requirements.
• Marketing Communications: With your consent, to send you information about lucky 66 promotions, HBL PSL betting offers, and other relevant gaming services. You may opt out at any time.
• Platform Improvement: To analyse usage patterns and improve the design, performance, and features of the lucky 66 Platform for Pakistani players.
• Customer Support: To respond to your queries, complaints, and feedback through our 24/7 English support channel.

5 Legal Bases for Processing

lucky 66 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to provide the gaming services you have contracted for when registering a lucky 66 account, including payment processing and account management.
• Legal Obligation: Processing required to comply with applicable laws, including age verification, anti-money laundering obligations, and cooperation with law enforcement authorities in Pakistan.
• Legitimate Interests: Processing carried out for lucky 66's legitimate business interests, including fraud prevention, Platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent for specific processing activities, such as sending you marketing communications, you have the right to withdraw that consent at any time by contacting our support team.

6 Data Sharing & Third Parties

lucky 66 does not sell your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment Processors: To process your PKR deposits and withdrawals, lucky 66 shares necessary transaction data with Easypaisa, JazzCash, SadaPay, Raast, HBL, and other payment providers. Each provider processes this data under their own privacy policies and applicable financial regulations.
• Identity Verification Providers: Third-party verification services may be used to validate your CNIC, passport, or other identity documents in connection with our 18+ age verification obligations.
• Game Content Providers: Lucky 66's casino game library is powered by licensed third-party game studios. These providers may receive limited session and wagering data necessary to operate the game software and calculate winnings.
• Technology and Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity providers who process data on lucky 66's behalf under strict data processing agreements.
• Legal and Regulatory Authorities: Where required by law, court order, or regulatory authority in Pakistan, lucky 66 will disclose personal data as legally obligated. This includes cooperation with financial intelligence units in connection with anti-money laundering obligations.
• Business Successors: In the event of a merger, acquisition, or sale of lucky 66's business, player data may be transferred to the successor entity subject to equivalent privacy protections.

All third-party data processors engaged by lucky 66 are contractually required to handle personal data securely, use it only for the specified purpose, and comply with applicable data protection standards.

7 Cookies & Tracking Technologies

The lucky 66 Platform uses cookies and similar tracking technologies to deliver a functional and personalised experience for Pakistani players. The types of cookies used on the Platform include:

• Essential Cookies: Required for the Platform to function correctly. These include session cookies that keep you logged in to your lucky 66 account during your visit. Essential cookies cannot be disabled without significantly impairing Platform functionality.
• Performance Cookies: Used to collect anonymised data about how players use the Platform — which pages are visited most, how long sessions last, and where users experience difficulties. This data helps lucky 66 continuously improve the Platform experience.
• Functionality Cookies: Store your preferences (such as language settings and display preferences) so the Platform remembers your choices on return visits.
• Analytics Cookies: Allow lucky 66 to understand aggregated user behaviour patterns across the Platform. Data is analysed in aggregate and is not used to identify individual players.

You may control cookie settings through your browser's privacy settings. Note that disabling certain cookies may impact your ability to use features of the lucky 66 Platform, including maintaining your login session.

8 Data Retention

lucky 66 retains personal data only for as long as is necessary for the purposes described in this Privacy Policy or as required by applicable law. The following general retention principles apply:

• Active Accounts: Personal data is retained for the full duration of your account with lucky 66, plus any additional period required by law after account closure.
• Financial Records: Transaction data, deposit and withdrawal records in PKR, and associated payment method information are retained for a minimum of five (5) years from the date of the transaction, in accordance with anti-money laundering regulatory requirements applicable in Pakistan.
• Identity Verification Documents: CNIC, passport, and other verification documents are retained for a period of five (5) years from account closure or the date of the last transaction, whichever is later.
• Support Communications: Live chat transcripts and support email records are retained for up to three (3) years from the date of the communication.
• Closed Accounts: Following account closure, lucky 66 retains personal data for the minimum period required by law before securely deleting or anonymising it.

9 Data Security

lucky 66 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Security measures employed on the Platform include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the lucky 66 Platform.
• Encrypted storage of sensitive account data, including identity verification records and payment details.
• Two-factor authentication options for player account logins.
• Automated fraud monitoring systems operating continuously across all deposit, withdrawal, and betting activity on the Platform.
• Strict internal access controls limiting employee access to personal data to those with a demonstrated business need.
• Regular security assessments and penetration testing of Platform infrastructure.

While lucky 66 takes data security seriously and maintains robust technical safeguards, no internet-based platform can guarantee absolute security. You also have a responsibility to maintain the confidentiality of your lucky 66 account login credentials and to notify us immediately if you suspect any unauthorised access to your account.

10 Your Data Rights

As a lucky 66 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our 24/7 English support team via live chat or the support email address listed in the footer of this page:

• Right of Access: You have the right to request a copy of the personal data that lucky 66 holds about you and information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your lucky 66 account.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. Note that this right may be limited where lucky 66 is required to retain data by law (e.g., financial and AML records).
• Right to Restrict Processing: You have the right to request that lucky 66 restricts the processing of your data in certain circumstances, such as while a dispute regarding its accuracy is being resolved.
• Right to Data Portability: You may request that lucky 66 provides your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where it is based on lucky 66's legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where lucky 66 relies on your consent as the legal basis for processing, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

lucky 66 aims to respond to all data rights requests within thirty (30) calendar days of receipt. Complex requests may require up to a further sixty (60) days, in which case we will notify you of the extension and the reason.

11 Minors & Age Policy

The lucky 66 Platform is strictly for adults aged 18 and over. lucky 66 does not knowingly collect personal data from any person under the age of 18. If lucky 66 becomes aware that personal data has been collected from a minor, that account will be immediately suspended and all associated personal data will be deleted without delay.

If you are a parent or guardian and believe that a person under 18 in your care has registered a lucky 66 account, please contact our support team immediately via live chat so the account can be reviewed and closed. lucky 66 takes the protection of minors extremely seriously and will act on all such reports without delay.

12 Changes to This Privacy Policy

lucky 66 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services offered on the Platform. When material changes are made, lucky 66 will notify registered players via the email address or mobile number associated with their account, or through a prominent notice on the Platform, no less than seven (7) days before the changes take effect.

The effective date at the top of this document indicates when the current version was last updated. Your continued use of the lucky 66 Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how lucky 66 handles your personal data. The most current version is always available at /privacy-policy on the Platform.

13 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about the way lucky 66 has handled your personal data, please contact us:

Live Chat: Available 24 hours a day, 7 days a week in English through the lucky 66 Platform. Live chat is the fastest way to raise urgent data or account concerns.

Support Email: The lucky 66 support email address is displayed in the footer of every page on this Platform. Email responses to data-related queries are typically provided within twenty-four (24) hours on business days.

All privacy complaints should be submitted in English and should include your lucky 66 account username, a clear description of your concern, and any relevant reference numbers. lucky 66 is committed to acknowledging privacy complaints within five (5) business days and resolving them within thirty (30) calendar days wherever possible.