How lucky866 Protects Your Data

This Privacy Policy is issued by Lucky866 Entertainment Ltd ("lucky866", "we", "us", "our"), the operator of the online betting and casino platform accessible at lucky866.bet. It sets out how we collect, process, store, and protect the personal data of players who register and use the lucky866 platform, including users based in Pakistan and other eligible jurisdictions.

lucky866 is committed to handling your personal information responsibly and transparently. We comply with applicable data protection legislation and the requirements imposed by our international gaming licence. By registering an account or continuing to use the lucky866 platform, you acknowledge that you have read and understood this Privacy Policy.

This policy should be read alongside our Terms and Conditions and our Responsible Gaming policy, both of which form part of your agreement with lucky866. Where this policy uses the term "personal data", we mean any information that identifies you or could reasonably be used to identify you as an individual.

lucky866 collects only the personal data that is necessary to provide a safe, compliant, and high-quality betting and casino experience. The categories of personal data we collect include:

lucky866 collects personal data through several channels, all of which are disclosed clearly here:

• Direct Registration: When you create an account on lucky866, you voluntarily provide your name, date of birth, email address, mobile number, and residential details.
• KYC Submission: When you submit identity documents — such as your CNIC or passport scan — as part of the mandatory Know Your Customer process, we collect and verify this data.
• Payment Transactions: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, our payment processors transmit relevant transaction data to us.
• Platform Activity: As you use lucky866 — placing cricket bets, playing slots, using Golden Bank, or accessing the live casino — we automatically record your transactional and usage data.
• Cookies & Tracking Technologies: Our platform uses cookies and similar technologies to collect technical and usage data. See Section 7 for full details.
• Customer Support Interactions: When you contact our support team via live chat or email, your communications are recorded for quality assurance and compliance purposes.
• Third-Party Verification Services: We may receive identity and fraud-risk data from licensed third-party KYC and AML verification providers as part of our regulatory compliance programme.

lucky866 uses your personal data only for the purposes described in this policy. We do not sell your personal data to third parties. The primary purposes for which we process your data are:

• Account Management: Creating and maintaining your lucky866 account, processing your login credentials, and enabling access to all platform features.
• Age & Identity Verification: Confirming that you meet the mandatory 21+ age requirement and verifying your identity in accordance with KYC obligations under our gaming licence.
• Payment Processing: Facilitating PKR deposits and withdrawals through your chosen payment method — JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank — and maintaining accurate financial records.
• AML & Fraud Prevention: Monitoring transactions and account activity to detect, investigate, and prevent money laundering, fraud, and other prohibited conduct as required by our licensing conditions.
• Responsible Gaming: Monitoring betting patterns and account behaviour to identify indicators of problem gambling and to administer any self-exclusion, deposit limit, or cool-off tools you activate on your account.
• Customer Support: Responding to your queries, resolving disputes, and managing formal complaints in accordance with our published complaints procedure.
• Platform Improvement: Analysing aggregated usage data to improve platform performance, user experience, and the range of products available to Pakistani players.
• Marketing Communications: Sending you promotional offers, PSL cricket betting updates, bonus notifications, and platform news — only where you have consented to receive such communications or where we have a legitimate interest to do so.
• Legal & Regulatory Compliance: Meeting our obligations under applicable laws, our gaming licence conditions, and responding to lawful requests from regulatory or law enforcement authorities.

lucky866 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms and Conditions — for example, account management, payment processing, and bet settlement.
• Legal Obligation: Processing required to comply with applicable laws and our gaming licence conditions — for example, KYC verification, AML monitoring, and age verification.
• Legitimate Interests: Processing carried out for lucky866's legitimate business interests — for example, fraud prevention, platform security, and improving our services — where such interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — for example, marketing communications and optional personalisation features. You may withdraw consent at any time without affecting prior processing.

lucky866 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other licensed payment service providers we use to process your PKR deposits and withdrawals.
• KYC & AML Providers: Licensed third-party identity verification and anti-money laundering screening services engaged to help us meet our regulatory obligations.
• Gaming Regulators & Licensing Authorities: Where required by our gaming licence or applicable law, we may disclose account and transaction data to the relevant regulatory authority.
• Law Enforcement Agencies: Where we receive a lawful request — such as a court order, warrant, or formal regulatory inquiry — we will disclose the relevant data to the appropriate authority.
• Technology & Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Customer Support Platforms: Third-party live chat and helpdesk software providers used to manage player support interactions.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of Lucky866 Entertainment Ltd, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

lucky866 uses cookies and similar tracking technologies to ensure the platform functions correctly, to improve your experience, and to support our security and analytics operations. A cookie is a small text file placed on your device when you visit lucky866.bet.

You can control cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the lucky866 platform, including your ability to log in and place bets.

lucky866 retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal and regulatory obligations. The following retention periods generally apply:

• Active Account Data: Retained for the full duration of your account relationship with lucky866, plus a minimum of five (5) years following account closure, as required by AML regulations and our gaming licence conditions.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, in accordance with applicable financial regulation.
• Transaction Records: Retained for a minimum of five (5) years to meet AML, tax, and gaming licence requirements.
• Customer Support Records: Retained for three (3) years from the date of the interaction, or longer if related to an unresolved dispute or regulatory inquiry.
• Self-Exclusion Records: Retained indefinitely to prevent re-registration by self-excluded players, as required by responsible gaming best practice.
• Marketing Consent Records: Retained for the duration of your consent, plus a reasonable period thereafter to demonstrate compliance.

When data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.

lucky866 employs robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and misuse. Our security infrastructure includes:

• SSL/TLS Encryption: All data transmitted between your device and the lucky866 platform is encrypted using 256-bit SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data — including KYC documents and financial records — is stored using strong encryption at rest.
• Access Controls: Access to personal data is restricted to lucky866 employees and authorised service providers who have a legitimate need to access it. Role-based access controls are enforced throughout our systems.
• Two-Factor Authentication: Account access is protected by optional two-factor authentication. We strongly encourage all lucky866 players — including those in Karachi, Lahore, Islamabad, and Faisalabad — to enable 2FA.
• Security Monitoring: Our platform is continuously monitored for suspicious activity, intrusion attempts, and anomalous account behaviour.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights, lucky866 will notify affected players and, where required, the relevant regulatory authority within the timeframes mandated by applicable law.

As a lucky866 account holder, you have a number of rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact our data protection team at [email protected] with the subject line "Privacy Rights Request".

• Right of Access: You have the right to request a copy of the personal data lucky866 holds about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. Please note that this right may be limited where we are required to retain data for legal, regulatory, or responsible gaming purposes.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of data we hold.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

lucky866 will respond to all verified privacy rights requests within thirty (30) days. In complex cases, this period may be extended by a further two months, in which case we will inform you of the extension and the reason for the delay.

lucky866 operates a strict 21+ policy. Our platform is not directed at, and we do not knowingly collect personal data from, any person under the age of 21. Age verification via CNIC or valid passport is mandatory for all account holders before any account is fully activated.

If lucky866 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the associated personal data (except where retention is required by law), and return any deposited funds to the originating payment method, subject to verification.

Lucky866 Entertainment Ltd is an internationally licensed gaming operator. As a result, your personal data may be transferred to, and processed in, countries outside Pakistan. This can occur when we use cloud infrastructure providers, KYC verification services, or payment processing partners whose servers are located in other jurisdictions.

Whenever lucky866 transfers personal data internationally, we take steps to ensure that appropriate safeguards are in place to protect your information to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include:

• Contractual clauses that obligate the recipient to protect your data to an equivalent standard.
• Transfers only to jurisdictions that provide adequate levels of data protection as recognised by applicable law.
• Binding corporate rules and data processing agreements with all third-party recipients of your personal data.

By using the lucky866 platform, you acknowledge that your personal data may be transferred internationally in the circumstances described above, subject always to the safeguards outlined in this policy.

lucky866 reserves the right to update this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, our gaming licence conditions, or how we operate the platform. All revisions will be published on this page with an updated "Last Updated" date.

Where changes are material — meaning they significantly affect your rights or how we handle your personal data — we will notify you by email to the address registered on your lucky866 account. We will also display a prominent notice on the platform for a reasonable period following any material update.

Your continued use of the lucky866 platform after the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any update to this policy, you should stop using the platform and contact us at [email protected] to discuss your options, including account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way lucky866 handles your personal data, please contact our data protection team using the details below. We are committed to addressing all privacy inquiries promptly and transparently.

• Email: [email protected]
• Response Time: Within 30 days for formal privacy rights requests; within 48 hours for general privacy queries.
• Data Controller: Lucky866 Entertainment Ltd, a company registered and licensed under an international gaming jurisdiction.

When contacting us about a privacy rights request, please include your full name, registered email address, and a clear description of your request. This will help us verify your identity and respond as efficiently as possible.