77lucky Privacy Policy —
Your Data, Your Rights, Our Commitment

77lucky (referred to in this policy as "77lucky", "we", "us", or "our") operates the online gaming platform accessible at https://77lucky.games. For the purposes of this Privacy Policy, 77lucky acts as the data controller in respect of personal data collected from Pakistan players and platform visitors.

As data controller, 77lucky is responsible for determining the purposes and means by which personal data is processed. If you have any questions about how your data is handled, or wish to exercise any of your data rights, you may contact us through the channels listed in Section 13 of this policy. Our support team is available in English, 24 hours a day, 7 days a week.

77lucky collects personal data through a number of channels — directly from you during registration and use of the platform, automatically through your device and browser, and occasionally from third-party verification services. The categories of data collected are described below.

77lucky does not collect or process special categories of sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — unless required for identity verification purposes where legally mandated.

77lucky uses the personal data collected from Pakistan players for the following purposes:

• Account registration and management: Creating, maintaining, and securing your 77lucky account; processing login authentication; managing account preferences and VIP tier status.
• Identity verification (KYC/AML): Verifying your identity and age (18+) in compliance with anti-money laundering obligations; verifying the source of PKR funds deposited on the platform.
• Payment processing: Processing PKR deposits and withdrawals via Easypaisa, JazzCash, HBL, SadaPay, Raast, UBL, and other supported Pakistan payment methods; maintaining transaction records.
• Game provision and platform operation: Enabling access to the full 77lucky game catalogue; recording game outcomes and PKR wagering history; resolving game disputes.
• Bonus and promotion administration: Verifying eligibility for promotions; tracking wagering requirements; crediting and debiting PKR bonus balances.
• Fraud prevention and security: Detecting and investigating suspicious activity; enforcing the one-account policy; preventing money laundering and other prohibited activities.
• Responsible gaming: Monitoring gaming patterns for responsible gaming indicators; applying player-requested limits; processing self-exclusion requests; enforcing cooling-off periods.
• Customer support: Responding to Pakistan player queries via Live Chat, WhatsApp, Telegram, and email; maintaining support interaction records for quality assurance.
• Legal compliance: Meeting regulatory, tax, and anti-money laundering reporting obligations applicable to the platform's operations.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the 77lucky platform experience for Pakistan players; resolving technical issues.

77lucky processes personal data only where a valid legal basis exists. The primary legal bases applicable to 77lucky's processing activities are:

• Contractual necessity: Processing required to perform the contract between you and 77lucky — including account registration, PKR payment processing, game provision, and bonus administration.
• Legal obligation: Processing required to comply with applicable legal obligations, including KYC identity verification, AML record-keeping, and regulatory reporting.
• Legitimate interests: Processing for 77lucky's legitimate business interests — including fraud prevention, platform security, and responsible gaming monitoring — where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed consent — primarily in the context of optional marketing communications. You may withdraw consent at any time by contacting support.

77lucky does not sell, rent, or trade personal data belonging to Pakistan players. Data is shared with third parties only in the circumstances described below, and in each case only to the minimum extent necessary:

• Payment service providers: Easypaisa, JazzCash, HBL, SadaPay, Raast, UBL, and any other Pakistan payment processor integrated into the 77lucky Cashier — for the sole purpose of processing PKR transactions.
• Identity verification services: Third-party KYC and AML service providers used to verify Pakistan player identities and comply with anti-money laundering regulations.
• Game providers: Certified game studios and providers whose games are integrated into the 77lucky platform — who receive the minimum account data necessary to deliver and record game outcomes.
• Fraud prevention services: Third-party services that assist 77lucky in detecting and preventing fraudulent activity, multi-accounting, and money laundering.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory demand, 77lucky may disclose personal data to government authorities, law enforcement agencies, or financial regulators.
• Professional advisers: Lawyers, auditors, and consultants acting as data processors where required for 77lucky's legitimate business operations and subject to confidentiality obligations.

77lucky uses cookies and similar tracking technologies on the platform to deliver core functionality, improve performance, and understand how Pakistan players interact with the platform. The categories of cookies used are:

• Strictly necessary cookies: Essential to the operation of the 77lucky platform, including session management, login authentication, and security. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences — such as language settings, display preferences, and game history — to personalise your 77lucky experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how Pakistan players navigate and use the platform, used to identify technical issues and improve the product. Individual players are not identifiable from this data.
• Security cookies: Support fraud detection and the protection of your account and PKR balance by identifying unusual session behaviour.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use core 77lucky platform features, including logging in and processing PKR transactions.

77lucky implements a comprehensive set of technical and organisational security measures to protect the personal data of Pakistan players from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 77lucky platform
• AES-256 encryption for personal data and PKR financial records stored at rest
• One-way cryptographic hashing of all account passwords — not even 77lucky staff can read your password in plain text
• Role-based access controls limiting data access to authorised personnel on a need-to-know basis
• Two-factor authentication (2FA) available to all Pakistan account holders
• Continuous automated monitoring for suspicious login patterns and unusual account activity
• Regular security audits and penetration testing of platform infrastructure

No data transmission over the internet can be guaranteed to be 100% secure. While 77lucky takes all reasonable steps to protect your data, you also have a responsibility to keep your account credentials confidential and to notify 77lucky immediately if you suspect any unauthorised access.

77lucky retains personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data (active accounts): Retained for the lifetime of the active 77lucky account plus a minimum of 5 years following account closure for AML compliance purposes.
• PKR transaction records: Retained for a minimum of 5 years from the date of each transaction in compliance with anti-money laundering regulatory requirements.
• Identity verification documents: Retained for a minimum of 5 years following account closure or the last KYC verification event.
• Customer support correspondence: Retained for 3 years from the date of each interaction for quality assurance and dispute resolution purposes.
• Technical and usage data: Retained in anonymised, aggregated form for platform analytics purposes. Individually identifiable technical data is typically deleted or anonymised within 24 months.

Where 77lucky is legally required to retain data beyond these standard periods — for example, in connection with an ongoing legal proceeding or regulatory investigation — data will be retained until that obligation concludes.

As a Pakistan player whose personal data is processed by 77lucky, you hold the following rights in respect of that data. To exercise any of these rights, contact the 77lucky support team — all requests are handled in English and responded to within 30 days:

• Right of access: Request a copy of the personal data 77lucky holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to rectification: Request that inaccurate or incomplete personal data held by 77lucky be corrected. For routine account details — such as your registered Pakistan mobile number or email address — corrections can be made directly in your account settings.
• Right to erasure: Request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent on which processing was based. This right is subject to legal retention obligations — for example, AML regulations require 77lucky to retain PKR transaction records for a minimum of 5 years regardless of erasure requests.
• Right to restrict processing: Request that 77lucky limit processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: Receive your personal data in a structured, commonly used, machine-readable format where technically feasible, and where processing is based on consent or contractual necessity.
• Right to object: Object to processing of your personal data where 77lucky relies on legitimate interests as the legal basis, including processing for direct marketing purposes. You may opt out of marketing communications at any time.

The 77lucky platform is strictly intended for adults aged 18 and above. 77lucky does not knowingly collect personal data from individuals under the age of 18. The platform's registration process includes an age confirmation step, and KYC verification procedures are designed to detect and reject underage applicants.

If 77lucky becomes aware that personal data has been collected from a person under 18, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a person under your care has registered an account at 77lucky, please contact our support team immediately via Live Chat, WhatsApp, or Telegram. We will investigate and act within 24 hours.

To deliver the 77lucky platform to Pakistan players, some personal data may be transferred to and processed in countries outside Pakistan — for example, where our game providers, cloud infrastructure providers, or KYC verification services operate international data centres. Any such international transfer is conducted only where appropriate safeguards are in place.

77lucky ensures that international data transfers are protected by contractual mechanisms — including standard data protection clauses — that provide a level of protection equivalent to the protections applicable in Pakistan. We do not transfer personal data to countries or organisations that cannot provide adequate data protection guarantees.

77lucky may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. Where changes are material, 77lucky will provide notice to Pakistan account holders via the registered email address or through an in-platform notification prior to the changes taking effect.

The effective date displayed in the hero section at the top of this page reflects the date of the most recent revision. We recommend reviewing this policy periodically to stay informed about how 77lucky protects your personal data. Continued use of the platform after the effective date of any revised policy constitutes acceptance of the updated terms.

For any questions about this Privacy Policy, or to exercise any of your data rights as a Pakistan player, please contact the 77lucky team through any of the following channels. All privacy-related correspondence is handled in English:

• Email: [email protected] — please include "Privacy Request" in the subject line
• Live Chat: Available on the platform 24/7 — average response under 5 minutes
• WhatsApp: Available 24/7 — details visible after logging in
• Telegram: Available 24/7 via the official 77lucky Telegram channel

Data rights requests are acknowledged within 2 business days and resolved within 30 calendar days. In complex cases requiring additional investigation, 77lucky may extend this period by up to a further 30 days, in which case we will notify you of the extension and the reason for it.

For responsible gaming-related data concerns — such as self-exclusion records or deposit limit history — please visit the Responsible Gaming page or contact support directly. Responsible gaming requests are always treated as a priority.