luck68 Privacy Policy

1 Introduction

luck68 is an online casino and sports betting platform serving players across Pakistan, including Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, and beyond. As a platform that handles financial transactions in Pakistani Rupees (PKR) via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and 1LINK, luck68 necessarily processes personal and financial data as part of its core operations.

luck68 takes its data protection obligations seriously. This policy describes in plain, accessible English exactly what data we collect from you, why we collect it, how we use it, who we may share it with, how long we retain it, and what rights you have in relation to your personal information. We have designed this policy to be transparent and straightforward — no legal jargon without explanation, no vague commitments.

This Privacy Policy should be read alongside the luck68 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into this document.

---

2 Data We Collect

luck68 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from third-party verification and payment providers. The categories of data we collect include:

Category	Examples	Collection Point
Identity Data	Full legal name, date of birth, CNIC / passport number, photograph	Registration & KYC verification
Contact Data	Pakistani mobile number, email address, city of residence	Registration form
Financial Data	JazzCash / EasyPaisa account reference, bank account identifiers, deposit and withdrawal history, PKR balances	Deposit & withdrawal processing
Transaction Data	Bet history, game session records, win/loss data, bonus usage	Platform activity
Technical Data	IP address, device type, browser version, operating system, session tokens	Automatic collection
Usage Data	Pages visited, features used, time on platform, click patterns	Analytics & cookies
Communications Data	Live chat transcripts, support emails, feedback submissions	Customer support interactions
Responsible Gaming Data	Self-exclusion requests, deposit limits set, reality check preferences	Account settings & support

luck68 does not collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, health records, or biometric data, except where a player voluntarily provides health-related context in connection with a responsible gaming request, in which case such data is processed solely for the purpose of fulfilling that request.

---

3 How We Use Your Data

luck68 uses your personal data only for the purposes stated in this policy. We do not use your data for unrelated purposes without your prior consent. The primary purposes for which we process your data are as follows:

• Account creation and management: To register your luck68 account, verify your identity and age (21+), and maintain your player profile;
• Service delivery: To process deposits and withdrawals in PKR, settle bets, deliver casino game outcomes, and provide access to all luck68 features;
• Regulatory compliance: To meet anti-money laundering (AML), know-your-customer (KYC), and age verification obligations under applicable gaming regulations;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and platform manipulation;
• Responsible gaming: To monitor for signs of problem gambling, administer self-exclusion requests, enforce deposit limits, and fulfil responsible gaming obligations;
• Customer support: To respond to your queries, resolve disputes, and process complaints submitted via live chat or email;
• Platform improvement: To analyse usage patterns, optimise platform performance, and develop new features based on player behaviour data;
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have given explicit consent or where a legitimate interest applies. You may opt out of marketing communications at any time via your account settings.

---

4 Legal Basis for Processing

luck68 processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you under the luck68 Terms & Conditions, including account management, payments, and game delivery;
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/KYC requirements, age verification mandates, and regulatory reporting duties;
• Legitimate interests: Processing carried out in pursuit of luck68's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your privacy rights;
• Consent: Processing of data for marketing communications and non-essential cookies, where your prior consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

---

5 Data Sharing & Disclosure

luck68 does not sell your personal data to any third party. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK receive only the data required to process your deposit or withdrawal transaction;
• Identity verification providers: Third-party KYC and age verification services that process your CNIC or passport data to confirm your identity and eligibility;
• Fraud prevention and AML services: Automated screening systems that check transaction patterns and player data against risk databases;
• IT infrastructure providers: Hosting, cloud storage, and platform infrastructure partners who process data on luck68's behalf under binding data processing agreements;
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction, luck68 may disclose player data to competent authorities without prior notice to the player;
• Responsible gaming organisations: Where a player has self-excluded or requested referral to a problem gambling support service, limited data may be shared to facilitate that referral.

All third parties with whom luck68 shares personal data are contractually required to process that data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection law.

---

6 Payment Data & PKR Transactions

luck68 processes all player deposits and withdrawals in Pakistani Rupees (PKR). When you initiate a transaction via JazzCash, EasyPaisa, Raast, or any supported banking channel, luck68 receives a transaction reference and confirmation from your payment provider. luck68 does not store full payment account credentials on its own servers. Payment data is handled by PCI-DSS compliant payment processing partners.

All financial transaction records associated with your luck68 account are retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable AML and record-keeping obligations. These records are accessible to you via your account transaction history and may be provided in a structured format upon request.

---

7 Cookies & Tracking Technologies

luck68 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyse platform usage. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing your ability to use luck68;
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations;
• Analytics cookies: Collect anonymised data about how players use the platform, which pages are visited most, and where errors occur. This data helps luck68 improve the platform experience;
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of luck68 campaigns. These are only set with your prior consent.

You can manage your cookie preferences at any time via the Cookie Settings panel accessible from the footer of the luck68 platform. Withdrawing consent for non-essential cookies will not affect your ability to use core platform features.

---

8 Data Retention

luck68 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Data Category	Retention Period	Reason
Account & identity data	Duration of account + 5 years post-closure	AML / KYC regulatory obligation
Financial transaction records	Minimum 5 years from transaction date	AML record-keeping requirement
Betting & game history	Duration of account + 3 years post-closure	Dispute resolution & regulatory audit
Customer support records	3 years from last interaction	Complaint handling & service quality
Marketing consent records	Until consent withdrawn + 1 year	Evidence of lawful marketing basis
Self-exclusion records	Permanent	Responsible gaming protection
Technical & usage data	13 months on a rolling basis	Platform analytics & fraud detection

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

---

9 Data Security

luck68 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and luck68 servers;
• AES-256 encryption for sensitive data at rest, including identity documents and financial records;
• Role-based access controls ensuring that luck68 staff can only access player data where required for their specific job function;
• Multi-factor authentication (MFA) for all luck68 administrative systems;
• Regular independent security audits and penetration testing of platform infrastructure;
• Automated real-time monitoring for suspicious access patterns, data exfiltration attempts, and account takeover indicators;
• Incident response procedures that include mandatory player notification in the event of a data breach affecting your personal information.

While luck68 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your luck68 account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

---

10 Your Rights

As a luck68 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or at [email protected]:

• Right of access: You may request a copy of all personal data that luck68 holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request;
• Right to rectification: If any personal data luck68 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay;
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to legal retention obligations — where we are required by law to retain data, erasure requests for that data cannot be fulfilled during the mandatory retention period;
• Right to restrict processing: You may request that luck68 limit the processing of your data in certain circumstances, for example where you contest the accuracy of data we hold;
• Right to data portability: You may request that luck68 provide your personal data in a machine-readable format for transfer to another service provider, where technically feasible;
• Right to object: You may object to the processing of your data where luck68 relies on legitimate interests as its legal basis, and where your individual circumstances warrant such an objection;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

luck68 will respond to all verified data rights requests within 30 days. Where a request is complex or where a high volume of requests has been received, this period may be extended by a further 60 days, with notice provided to you within the initial 30-day window.

---

11 Children & Minors

If you are a parent or guardian and believe that a minor in your care has registered on luck68, please contact us immediately at [email protected]. luck68 will investigate and take appropriate action, including account closure and deletion of all associated data, within 48 hours of a verified report.

luck68 employs mandatory age verification at registration and may require additional documentary proof of age before activating an account or processing a withdrawal. These controls are in place to protect minors from exposure to gambling.

---

12 Third-Party Services

The luck68 platform may contain links to third-party payment gateways or external services as part of the deposit and withdrawal process. Once you leave the luck68 platform and are redirected to a third-party environment (for example, the JazzCash or EasyPaisa payment interface), this Privacy Policy no longer applies. luck68 is not responsible for the privacy practices or data handling policies of any third-party service. We recommend that you review the privacy policy of any third-party provider before submitting personal or financial data to them.

All third-party service providers engaged by luck68 to process player data on our behalf are bound by data processing agreements that require them to process data only on luck68's documented instructions, maintain appropriate security measures, and comply with applicable data protection law.

---

13 Changes to This Policy

luck68 reserves the right to update or amend this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. Where a material change is made to the way in which we process your personal data, luck68 will provide prominent notice on the platform and, where appropriate, notify you directly via your registered email address or Pakistani mobile number before the change takes effect.

Your continued use of the luck68 platform following publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change to this policy, you should cease using the platform and request account closure in accordance with the luck68 Terms & Conditions.

---

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related complaint, please contact the luck68 Data Support team through any of the following channels:

• Live Chat: Available 24/7 directly on the luck68 platform — fastest response for urgent queries
• Support Email: [email protected] — for formal data rights requests and written complaints
• Response Time: Acknowledgement within 24 hours; substantive response within 30 days

If you are not satisfied with luck68's response to a privacy complaint, you may escalate the matter to the relevant data protection authority or gaming regulatory body in the jurisdiction applicable to your account. luck68 will cooperate fully with any regulatory investigation relating to data protection compliance.