Lucky 866 Privacy Policy – How We Protect Your Personal Data in Pakistan

1. Who We Are

Lucky 866 is an online betting and casino platform operated at https://lucky866.click. We provide cricket betting, PSL betting, slots, poker, the Aviator game and associated services to players in Pakistan. When this Privacy Policy refers to "Lucky 866", "we", "our" or "us", it means the operator of the Lucky 866 platform.

Lucky 866 is the data controller in respect of the personal information you provide when registering, depositing, betting or using any other feature on the platform. This means Lucky 866 is responsible for deciding how and why your data is processed, and for ensuring that processing is carried out in a lawful and responsible manner.

The Lucky 866 platform is specifically built for players in Pakistan. All currency operations use Pakistani rupees. All payment integrations are with Pakistani services — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfers and Pakistani-issued Visa and Mastercard. This Pakistani focus also shapes how we handle data: the practices described in this policy are designed with Pakistani players' expectations and context in mind.

2. What Personal Data We Collect

Lucky 866 collects personal data across several categories. We describe each category below along with when that data is collected.

3. Why We Collect Your Data — Legal Bases

Lucky 866 processes your personal data under the following legal bases. Each category of data described in Section 2 is processed under one or more of these bases:

• Contract performance: To operate your Lucky 866 account, process deposits and withdrawals, settle bets and provide the services you have signed up for. Without this data, Lucky 866 cannot deliver its core platform functions.
• Legal obligations: Identity verification (KYC) and anti-money laundering checks are legal requirements that Lucky 866 must comply with as an operator. We are required to verify player identities and maintain records of financial transactions.
• Legitimate interests: Lucky 866 uses technical data such as IP addresses and device information to detect fraud, prevent account abuse, secure the platform and improve performance for all Pakistani players. This is done in a way that minimises privacy impact.
• Consent: Marketing communications — promotional emails, SMS offers, bonus notifications — are only sent to players who have explicitly opted in to receive them. You can withdraw consent at any time.

4. How We Store and Protect Your Data

Lucky 866 takes the security of your personal data seriously. The following measures are in place at all times:

• Encryption in transit: All data passing between your device and Lucky 866 servers is encrypted using TLS 1.3 with 256-bit AES encryption. This applies to every page of the platform, including registration, deposits and bet placement.
• Encryption at rest: Personal data stored on Lucky 866 servers is encrypted at rest. Database fields containing sensitive account information use field-level encryption as an additional layer of protection.
• Access controls: Access to personal data within the Lucky 866 team is restricted to staff members who require it to perform their specific function. Access is logged and audited regularly.
• No plain-text payment credentials: Lucky 866 does not store full mobile banking PIN codes, card numbers or banking passwords. Payments are processed through tokenised references maintained by certified payment service providers.
• Server location: Lucky 866 player data is stored on servers in data centres with physical security controls, 24/7 monitoring and redundant backup systems. Data is not stored on portable devices without encryption.
• Incident response: In the event of a data breach that affects your personal information, Lucky 866 will notify affected players within 72 hours of becoming aware of the incident, along with details of the nature of the breach and recommended steps to protect your account.

5. Who We Share Your Data With

Lucky 866 does not sell your personal data to any third party under any circumstances. Sharing of personal data is limited to the following specific categories of recipients, and only to the extent necessary for each purpose:

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay, participating banks and card processors receive the payment reference and amount information necessary to process your deposit or withdrawal. They do not receive your betting history or other account activity data.
• Identity verification services: When Lucky 866 is required to verify your identity, we may share identity document data with a certified KYC verification provider. This provider is bound by strict data processing agreements.
• Game content providers: Some casino games on Lucky 866 are provided by third-party game studios. These providers may receive a session token and anonymised player identifier to serve game content. They do not receive your full name, CNIC or payment details.
• Legal and regulatory authorities: Lucky 866 will disclose personal data to competent authorities when required to do so by applicable law, court order or regulatory requirement. We will notify you of any such disclosure where we are legally permitted to do so.
• Fraud prevention services: Anonymised or pseudonymised data may be shared with industry fraud prevention networks to identify and block fraudulent activity. This protects all Lucky 866 players.

6. Cookies and Tracking Technologies

Lucky 866 uses cookies and similar tracking technologies to deliver a functional, personalised and secure experience. Here is a straightforward breakdown of what we use and why:

Lucky 866 does not use third-party advertising cookies to serve advertisements from other brands on our platform. The platform is advertisement-free in that sense — the only promotional content you see on Lucky 866 is Lucky 866's own offers.

You can manage cookie preferences through your browser settings. Clearing cookies will log you out of your current Lucky 866 session and may reset certain personalised settings.

7. Your Data Rights

As a Lucky 866 player, you have the following rights in respect of your personal data. All requests should be submitted to support@lucky866.click and will be responded to within 30 days.

8. Marketing Communications

Lucky 866 sends promotional offers, bonus notifications and cricket betting updates via email and SMS only to players who have explicitly opted in to receive marketing communications during registration or subsequently from their account settings.

• You can unsubscribe from Lucky 866 marketing emails at any time by clicking the unsubscribe link in any marketing email, or by updating your communication preferences from your account settings.
• You can opt out of Lucky 866 marketing SMS by replying STOP to any promotional SMS, or from your account settings.
• Opt-out requests are processed immediately. You will not receive any further marketing communications from Lucky 866 after opting out, including during active promotional periods such as the PSL season or Eid promotions.
• Opting out of marketing communications does not affect transactional communications. You will still receive deposit confirmations, withdrawal notifications and security alerts regardless of marketing preferences.

9. Data Retention

Lucky 866 does not retain personal data for longer than is necessary for the purposes for which it was collected. The following retention periods apply:

• Active account data: Retained for as long as your Lucky 866 account remains open and active.
• Closed account data: After account closure, personal data is retained for a minimum of five years to meet anti-money laundering, financial record-keeping and dispute resolution obligations.
• Betting and transaction records: Retained for a minimum of five years from the date of the transaction, in line with financial compliance requirements.
• Support communications: Retained for two years from the date of the last communication, in case of subsequent disputes or escalations.
• Marketing opt-out records: Retained indefinitely to ensure that opted-out players are not inadvertently recontacted following a system update.

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual player.

10. Changes to This Privacy Policy

Lucky 866 may update this Privacy Policy from time to time to reflect changes in the platform's data practices, applicable regulations or technology. When material changes are made, we will:

• Email all registered Lucky 866 players notifying them of the change at least seven days before the updated policy takes effect.
• Display a prominent notice on the Lucky 866 platform homepage for a minimum of seven days before and after the change.
• Update the "Last Updated" date shown at the top of this page.

Continued use of Lucky 866 after the effective date of an updated Privacy Policy constitutes your acceptance of the updated terms. If you disagree with a change, you should close your account before the effective date and contact support@lucky866.click to initiate a data deletion request.

11. How to Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or want to report a suspected data breach or privacy concern, please contact the Lucky 866 data team via the following channel:

Where your concern is about the conduct of our data practices and you are not satisfied with our response, you have the right to escalate your complaint to the relevant supervisory authority. Lucky 866 will cooperate fully with any regulatory inquiry into our data handling practices.