Luck7 Privacy Policy — How We Handle Your Data in Pakistan

Luck7 ("we", "us", "the platform") operates the gaming website at luck7.cx and the associated Android application. When you use any part of our platform — browsing, registering an account, making a deposit, playing a game, claiming a bonus or contacting support — certain information about you is necessarily collected and processed.

This Privacy Policy tells you what that information is, why it is collected, how long it is kept, who else may see it and what you can do about it. We have written this document in plain English rather than dense legal language because we think Pakistani players deserve a privacy notice they can actually understand rather than one that exists only to satisfy a compliance checkbox.

By registering a Luck7 account or using the platform in any way, you confirm that you have read and understood this policy. If you are not comfortable with how we handle data, please do not register. You can contact us at any time with privacy questions through the support channel.

We only collect information that is genuinely necessary for operating the platform, processing payments and keeping accounts secure. We do not collect data speculatively or for reasons we cannot clearly justify.

Registration data — When you create a Luck7 account, you provide your full name, date of birth, email address and a contact number. This information is required to open and identify your account. You may also be asked to confirm your residential address, particularly during payment verification.

Identity verification documents — Where required for withdrawal processing or fraud prevention, we may ask for a copy of a government-issued identity document. This is used solely to confirm the details already on your account and is handled with additional care.

Payment and transaction data — Every deposit and withdrawal is logged: the amount in PKR, the payment method used (JazzCash, Easypaisa, Raast, bank transfer, card or other supported wallet), the transaction reference and the timestamp. We do not store full card numbers or wallet PINs — those are handled by the payment processor.

Gameplay data — We record which games you play, stake amounts, game outcomes and session durations. This is used for account management, bonus wagering verification, responsible gaming monitoring and resolving disputes.

Device and session data — When you access Luck7, we collect your IP address, browser type, operating system, device identifiers and session timestamps. This helps us detect suspicious login activity, prevent fraud and maintain platform security.

Communications — If you contact support by live chat or email, the content of that exchange is stored against your account record for reference in future interactions and dispute handling.

Every use of your personal data by Luck7 has a specific purpose. We do not process your data in ways that are not listed here.

• Account management: Creating and maintaining your player account, authenticating logins and sending account-related notifications such as deposit confirmations or password reset requests.
• Payment processing: Executing PKR deposit and withdrawal transactions, verifying payment method ownership and investigating failed or disputed transactions.
• Fraud and security: Detecting unusual activity patterns, identifying duplicate accounts, investigating suspected bonus abuse and protecting against unauthorised access.
• Responsible gaming: Monitoring gameplay patterns against any self-imposed limits, sending session reminders where activated and enforcing self-exclusion periods.
• Bonus and promotion management: Verifying wagering requirement completion, confirming single-account eligibility for promotions and applying bonus funds or winnings to your balance.
• Dispute resolution: Reviewing game logs, transaction records and support correspondence to investigate and resolve player complaints fairly.
• Platform improvement: Analysing aggregated, anonymised usage data to identify which game categories are most used, which deposit flows have drop-off, and where the interface can be improved for the Pakistani device mix.
• Legal compliance: Retaining records as required under applicable anti-money laundering and financial crime prevention obligations.

All financial transactions on Luck7 are conducted in PKR through third-party payment processors — JazzCash, Easypaisa, Raast, bank networks and card payment gateways. Each of these processors operates under their own data handling framework and security standards.

When you initiate a deposit or withdrawal, the actual financial transaction is processed by the relevant payment provider. Luck7 receives a confirmation of the transaction outcome (success, failure, amount, reference number) but does not receive, store or have access to your full mobile wallet PIN, card number or banking login credentials. These remain entirely within the payment processor's environment.

What Luck7 does retain is a transaction log showing:

• The transaction amount in PKR
• The payment channel used (e.g. JazzCash, Easypaisa)
• The transaction reference or confirmation number
• The date, time and outcome of the transaction
• The Luck7 account it was associated with

This log is retained for the purposes of dispute resolution, withdrawal verification and anti-money laundering record-keeping requirements.

Luck7 uses cookies and similar session tracking technologies on luck7.cx. A cookie is a small text file stored in your browser that allows the platform to recognise your device across page loads and sessions.

The types of cookies used on Luck7 and their purposes are:

• Essential session cookies: Required for you to stay logged into your account as you navigate between pages. Without these, the platform cannot function. These cannot be disabled without breaking core platform features.
• Security cookies: Used to detect and prevent cross-site request forgery and other security risks. These are strictly functional and carry no personal data beyond a session token.
• Analytics cookies: We use aggregated, anonymised analytics to understand which parts of the platform see the most use and where players encounter friction. This data is not linked to individual accounts.
• Preference cookies: Remember settings such as your chosen display language or game category filter so you do not need to re-select them on each visit.

You can manage cookie preferences through your browser settings. Blocking essential cookies will affect platform functionality — specifically login persistence. Blocking analytics cookies will not affect your ability to use Luck7.

The Luck7 Android app uses equivalent local storage mechanisms rather than browser cookies, but the same functional categories apply.

Luck7 does not sell your personal data. We do not share your information with third parties for their own marketing or commercial purposes. Data is shared with external parties only in the following specific circumstances:

• Payment processors: Your payment details are shared with JazzCash, Easypaisa, Raast, card networks and other payment providers to the extent necessary to execute your deposit or withdrawal request.
• Game software providers: Luck7's game library is supplied by third-party studios (Pragmatic Play, Evolution, Playtech and others). These providers receive only the minimum technical data necessary to run their games within our platform — typically a session token — and operate under their own compliance frameworks.
• Fraud prevention services: We may use specialist third-party services to help detect suspicious activity. These services receive only the data needed for that specific analysis and are contractually restricted from using it for other purposes.
• Legal and regulatory obligations: Where required by applicable law, court order or legitimate investigation by relevant authorities, we may disclose data as legally obligated. We will notify affected players wherever legally permitted to do so.
• Business transfers: In the event that Luck7 is involved in a merger, acquisition or asset transfer, player account data may be transferred as part of that transaction. Affected players would be notified in advance where practicable.

Luck7 keeps your personal data for as long as your account is active and for a reasonable period afterwards to meet legal and operational obligations. The specific retention approach varies by data type:

• Account and identity data is retained for the duration of your account and for a period following closure to satisfy anti-money laundering record-keeping requirements and to handle any post-closure disputes.
• Transaction records are retained for a minimum of five years following each transaction, consistent with standard financial record-keeping practice.
• Gameplay logs are retained for a minimum of two years for dispute resolution purposes. Older logs may be retained in aggregated, non-individually-identifiable form for platform analytics.
• Support communications are retained for the duration of the account plus a reasonable period to allow for follow-up on earlier issues.
• Device and session data is retained for up to 12 months for security investigation purposes.
• Identity verification documents are retained for the legally required period following account closure.

When personal data is no longer required for any of the purposes listed above and no legal retention obligation applies, we delete or anonymise it. Anonymised data — which cannot be linked back to any individual — may be retained indefinitely for statistical purposes.

Luck7 takes the security of your personal data seriously and has implemented technical and organisational measures proportionate to the nature of the data we hold. These include:

• Encryption of data in transit using current TLS standards
• Encryption of sensitive data at rest in our database systems
• Access controls limiting which staff can view personal account data and under what circumstances
• Multi-factor authentication requirements for administrative access to account management systems
• Regular security reviews of platform components and third-party integrations
• Monitoring for unusual account activity patterns that may indicate compromise

No platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach affecting player information, we will take immediate steps to contain it, assess its scope and notify affected players as promptly as practicable.

Your own account security also depends on the strength and confidentiality of your password. We strongly recommend using a unique, complex password for your Luck7 account that you do not use on any other service. Never share your password with anyone, including Luck7 support staff — we will never ask for your password.

You have meaningful rights over the personal data Luck7 holds about you. These are not theoretical — they are actionable by contacting our support team.

To exercise any of these rights, contact Luck7 support through the live chat channel or via the support email address shown in the footer. We will respond within a reasonable period and may need to verify your identity before processing the request.

Luck7 does not knowingly collect personal data from individuals under the age of 18. The platform is strictly for adult use. Our registration process requires a date of birth, and accounts where the declared age indicates the player is under 18 are blocked from completion.

Where we discover or have reasonable grounds to suspect that an account belongs to a minor, we will immediately suspend the account, conduct a review and close it if the suspicion is confirmed. Any balance associated with that account will be handled in line with our responsible gaming obligations rather than being paid out.

We also encourage all adult Luck7 account holders to use device-level parental controls if their mobile phones or computers are shared with or accessible to children.

Luck7 may revise this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law or updates to our services. When we make material changes — meaning changes that affect how we use your data in a meaningful way — we will notify active account holders through the registered email address or by displaying a notice at login.

Minor corrections and clarifications that do not change the substance of how we handle your data may be updated on this page without separate notification. The "Last updated" date at the top of the page will always reflect the most recent revision.

Continuing to use Luck7 after a policy update is posted constitutes your acceptance of the revised terms. If you disagree with any change, you can request account closure through support before the change takes effect.

If you have any questions about this Privacy Policy, want to exercise any of your data rights or have a concern about how your personal information is being handled, please get in touch with the Luck7 support team.

The fastest way to reach us is through the live chat channel available on the platform 24 hours a day. For privacy-specific requests — data access, correction, deletion or portability — you can also write to us at the support email address displayed in the footer below.

When contacting us about a privacy matter, please include:

• Your registered account username or email address
• A clear description of your request or concern
• Your preferred method of response

We will acknowledge receipt of privacy-related requests promptly and aim to provide a substantive response within a reasonable period. Identity verification may be required before we can process requests involving access to or deletion of personal data.

For related policy documents, see our Terms and Conditions and Responsible Gaming pages.