Who We Are — The Data Controller
777Lucky is the trading name of the online casino platform accessible at 777lucky.io. For the purposes of this Privacy Policy, "777Lucky", "we", "us" and "our" refer to the operator of that platform, which acts as the data controller for all personal information collected from Pakistani players and other users of the website and mobile service.
As the data controller, 777Lucky determines the purposes for which your personal data is collected and the means by which it is processed. This means we are responsible for ensuring that your data is handled lawfully, fairly and transparently at all times. If you have any questions about this Privacy Policy or about how your data is used, you can contact the 777Lucky privacy team at any time using the contact details published at the end of this document.
777Lucky is committed to handling the personal data of all players — including every Pakistani player who deposits in PKR and plays games including Teen Patti, Andar Bahar, roulette, baccarat, jackpot slots and live dealer games — in strict accordance with its obligations as a licensed gaming operator and data controller.
Data Controller
777Lucky is the data controller responsible for all personal data collected through the platform and associated services.
Pakistan Focus
This policy specifically addresses the personal data of Pakistani players transacting in PKR through EasyPaisa, JazzCash, IBFT and other local methods.
Contact Us
For any privacy-related queries, contact the 777Lucky privacy team at support@777lucky.io — we respond within 48 hours.
What Personal Data 777Lucky Collects
The personal data 777Lucky collects depends on how you interact with the platform. Below is a full account of the categories of data we may hold about you as a registered Pakistani player.
| Data Category | Examples | Mandatory? |
|---|---|---|
| Identity data | Full name, date of birth, CNIC number, nationality | Yes — for KYC verification |
| Contact data | Pakistani mobile number, email address | Yes — for account and communications |
| Financial data | EasyPaisa/JazzCash account number, IBFT details, card last 4 digits, transaction history in PKR | Yes — for payments and AML |
| Address data | Residential address in Pakistan, city, province | Yes — for KYC verification |
| Technical data | IP address, device type, browser, operating system, session timestamps | Automatic — collected on use |
| Usage data | Games played, bets placed, session duration, pages visited, bonus activations | Automatic — collected on use |
| Communications data | Live chat transcripts, email correspondence, WhatsApp messages with support | When you contact us |
| Responsible gaming data | Deposit limits set, self-exclusion requests, cool-off period activations | When you use RG tools |
777Lucky does not knowingly collect sensitive personal data — such as health information, religious beliefs or ethnic origin — unless it is directly relevant to a responsible gaming assessment or is voluntarily provided by a player in the context of a support interaction. Any such data is handled with heightened care.
How 777Lucky Collects Your Personal Data
777Lucky collects personal data through several distinct channels, all of which are described transparently below. There is no concealed data collection on the 777Lucky platform.
- Direct registration: When you create a 777Lucky account, you provide your name, date of birth, Pakistani mobile number and email address directly through the registration form.
- KYC verification submissions: When you submit identity documents — such as a CNIC copy, utility bill or bank statement — to verify your account before processing withdrawals, those documents and the data they contain are collected and stored securely.
- Deposit and withdrawal transactions: Every PKR transaction through EasyPaisa, JazzCash, NayaPay, SadaPay, IBFT or card generates a transaction record that includes the amount, timestamp, payment method reference and your account identifier.
- Gameplay activity: 777Lucky's platform automatically logs your game sessions — which games you play, bets placed, outcomes, session duration and any bonus activations — as part of normal casino operations required for auditing, responsible gaming monitoring and dispute resolution.
- Technical tracking: When you visit 777lucky.io, standard technical information including your IP address, device type, browser and referring URL is automatically recorded in server logs. Cookies and similar tracking technologies operate as described in Section 8.
- Support communications: When you contact 777Lucky via live chat, email or WhatsApp, the content of that communication is retained for quality assurance, training, compliance and to ensure continuity of your case if you follow up.
- Third-party sources: In certain cases, 777Lucky may receive data about you from identity verification services, fraud prevention agencies or payment processors as part of our AML and KYC obligations. This data is used only for those compliance purposes.
Why 777Lucky Uses Your Personal Data
777Lucky uses personal data only for the specific, legitimate purposes described below. We do not use your data for any purpose that has not been disclosed in this policy, and we do not sell your personal data to third-party advertisers or data brokers under any circumstances.
Account Management
Creating and maintaining your 777Lucky account, processing login authentication, managing your balance and keeping your account preferences as set by you.
Payment Processing
Processing PKR deposits and withdrawals via EasyPaisa, JazzCash, NayaPay, SadaPay, IBFT and card. Verifying that payment methods belong to you.
KYC & AML Compliance
Verifying your identity and age, detecting and preventing money laundering and fraud as required by 777Lucky's regulatory obligations as a licensed operator.
Responsible Gaming
Monitoring gameplay patterns to identify signs of problem gambling, administering self-exclusion requests and enforcing deposit limits you have set on your 777Lucky account.
Communications & Promotions
Sending account notifications, security alerts, bonus offers and promotional updates that are relevant to your 777Lucky account. You can opt out of marketing at any time.
Platform Improvement
Analysing aggregated, anonymised usage data to improve the 777Lucky platform — game performance, page speed, feature design and the mobile experience for Pakistani players.
Legal Basis for Processing Your Data
Every instance of data processing at 777Lucky is based on one or more of the following lawful grounds. We do not process personal data without a valid legal basis in place.
Processing your account registration data, payment details and gameplay information is necessary to fulfil the contract you entered into when you accepted the 777Lucky Terms and Conditions. Without this processing, we cannot operate your account or process your transactions.
KYC identity verification, age checks, AML transaction monitoring and data retention for regulatory audit purposes are all required by the legal and regulatory framework under which 777Lucky operates as a licensed casino. We cannot waive these obligations.
Technical platform data, fraud detection signals, security logging and aggregated performance analytics are processed on the basis of 777Lucky's legitimate interests in operating a secure, reliable and continuously improving casino platform. These interests do not override your rights.
Marketing communications, non-essential cookies and any data processing that is not strictly necessary for account operation or regulatory compliance is based on your explicit consent, which you may withdraw at any time without affecting the validity of your 777Lucky account.
Who 777Lucky Shares Your Data With
777Lucky does not sell your personal data. We share your data only with specific third parties where it is necessary to operate the platform, comply with legal obligations or provide services you have requested. All third-party processors that handle data on 777Lucky's behalf are bound by contractual obligations to process that data only for the specified purpose and to maintain appropriate security standards.
- Payment processors: EasyPaisa, JazzCash, NayaPay, SadaPay, banks processing IBFT transfers, and card networks — receive only the transaction data necessary to process your deposit or withdrawal in PKR.
- Identity verification services: Third-party KYC providers may receive copies of your identity documents and personal details for the sole purpose of verifying your identity and age on behalf of 777Lucky.
- Game software providers: Game studios providing the software behind 777Lucky's casino titles may receive anonymised session data for technical and auditing purposes. They do not receive your personal or financial data.
- Fraud prevention agencies: In cases of suspected fraud or money laundering, 777Lucky may share information with fraud prevention bodies and law enforcement agencies as required by its regulatory obligations.
- Responsible gaming bodies: Where you request self-exclusion, 777Lucky may share the necessary information with cross-platform exclusion registers to give effect to your exclusion request across participating operators.
- Regulatory and licensing authorities: 777Lucky's gaming licence requires disclosure of certain player and transaction data to licensing authorities for audit purposes. This sharing is mandatory and cannot be withheld.
No third-party advertising data sharing: 777Lucky does not share your personal data with advertising networks, data brokers or any third party for commercial profiling or retargeting purposes. Any marketing you receive from 777Lucky is based on your own account activity and the consent you gave at registration, not on purchased or shared data profiles.
How We Keep Your Data Secure
777Lucky implements a layered security architecture to protect your personal data against unauthorised access, loss, alteration or disclosure. The specific measures in place include the following, though for obvious reasons we do not publish complete technical details of our security infrastructure.
TLS Encryption
All data transmitted between your device and 777Lucky's servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms this connection is active.
Encrypted Storage
Personal data and financial records stored on 777Lucky's servers are encrypted at rest. Sensitive fields such as payment method identifiers are additionally hashed or tokenised.
Access Controls
Access to personal data within the 777Lucky team is restricted on a strict need-to-know basis. All staff access is logged and audited. Passwords are never stored in plain text.
Intrusion Monitoring
777Lucky's infrastructure is continuously monitored for unusual access patterns, attempted intrusions and anomalous data transfers. Incidents are responded to immediately.
While 777Lucky takes all reasonable and proportionate technical and organisational measures to protect your data, no internet transmission or digital storage system can be guaranteed to be 100% secure. You can help protect your own data by using a strong, unique password for your 777Lucky account, enabling any available two-factor authentication, and contacting support immediately if you suspect your account has been compromised.
Cookies & Similar Tracking Technologies
777Lucky uses cookies and similar technologies — including local storage and session tokens — to make the platform function correctly, to remember your preferences and to analyse how the site is used so that we can improve it. Below is a plain-English explanation of each type of cookie in use on the 777Lucky platform.
You can manage your cookie preferences at any time through your browser settings. Disabling essential cookies will prevent the 777Lucky platform from functioning correctly. Disabling analytics and marketing cookies will not affect your ability to play games, make deposits or withdraw your winnings in PKR.
Your Rights Over Your Personal Data
As a 777Lucky player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the 777Lucky privacy team at support@777lucky.io. We will respond to your request within 30 days in the majority of cases. Some requests may take longer where the matter is complex or where legal obligations require additional steps before data can be released or deleted.
Right of Access
You may request a full copy of all personal data 777Lucky holds about you. This is often called a Subject Access Request (SAR). We will provide the data in a clear, accessible format within 30 days.
Right to Rectification
If any data 777Lucky holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections — such as name changes — may require supporting documentation.
Right to Erasure
You may request deletion of your personal data. Note that 777Lucky is required to retain certain data — including transaction records and identity verification data — for regulatory purposes even after account closure.
Right to Restriction
In certain circumstances — for example while you dispute the accuracy of data we hold — you may request that we restrict processing of your data without deleting it.
Right to Portability
You may request your personal data in a structured, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you wish.
Right to Object
You may object to 777Lucky processing your data on the basis of legitimate interests — for example for direct marketing purposes. You can opt out of marketing emails at any time via your account settings.
How to exercise your rights: Send your request to support@777lucky.io with the subject line "Data Rights Request" and include your 777Lucky username or registered mobile number so we can locate your account. We will acknowledge your request within 48 hours and provide a full response within 30 days. Requests may occasionally take up to 60 days where they are particularly complex.
How Long We Keep Your Data
777Lucky retains personal data for as long as it is necessary for the purpose for which it was collected, subject to minimum retention periods required by regulatory and legal obligations. The following table summarises our standard data retention periods.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account registration data | Account lifetime + 5 years | Regulatory and AML obligations |
| KYC identity documents | Account lifetime + 5 years | Licensing authority requirements |
| Financial transaction records | Account lifetime + 7 years | Financial record-keeping regulations |
| Gameplay session logs | 3 years from session date | Game integrity, dispute resolution |
| Support communications | 3 years from last interaction | Quality assurance, dispute records |
| Marketing consent records | Until consent withdrawn + 1 year | Evidence of lawful marketing basis |
| Technical and access logs | 12 months | Security monitoring and incident response |
After the applicable retention period, personal data is securely deleted or anonymised in a way that makes it impossible to re-identify you. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.
Updates to This Privacy Policy
777Lucky reviews this Privacy Policy regularly to ensure it remains accurate, complete and consistent with any changes to the platform, its services or the regulatory environment. When we make material changes — changes that meaningfully affect how your data is used or the rights you hold — we will notify you by email to your registered address and post a notice on the 777Lucky website at least 14 days before the changes take effect.
Minor amendments — such as typographical corrections, clarifications that do not change the substance of any provision, or updates required to reflect new features that do not introduce new data processing purposes — may take effect immediately upon publication. The "Last updated" date at the top of this page reflects the most recent revision date. The current version of this policy is always available at 777lucky.io/privacy-policy and is the version that governs 777Lucky's handling of your data at any given time.
If you continue to use 777Lucky after an amended version of this policy takes effect, your continued use constitutes acceptance of the revised policy. If you do not agree with the changes, you should stop using the platform and contact support to close your account before the new policy takes effect. Any balance remaining in your account at the time of closure will be processed in accordance with the Terms and Conditions.
Stay updated: We recommend that all 777Lucky players review this Privacy Policy periodically. If you have concerns about how your data is handled at any time, please contact us at support@777lucky.io before escalating to a regulatory authority — most data queries can be resolved quickly through direct communication with the 777Lucky privacy team.