1. Who We Are
This Privacy Policy applies to Lucky 866, an online gaming and sports betting platform available at lucky866.ws and all associated mobile interfaces. When this Policy refers to "Lucky 866", "we", "us", or "our", it means the Lucky 866 platform and the entity responsible for operating it.
Lucky 866 acts as the data controller for all personal information collected through the platform. This means we are responsible for deciding how and why your data is collected and used. We take this responsibility seriously and have put practical measures in place to ensure your data is handled with care, used only for legitimate purposes, and protected against unauthorised access.
This Privacy Policy applies to all players who have registered a Lucky 866 account, all visitors to the Lucky 866 website, and any person who contacts Lucky 866 support or communicates with us through any channel. By creating a Lucky 866 account or using the platform, you agree to the collection and use of your personal data as described here.
2. Data We Collect
Lucky 866 collects personal data in the following categories. We only collect what is genuinely necessary to provide the platform and comply with our legal obligations.
| Category | Data Points | When Collected |
|---|---|---|
| Identity | Full legal name, date of birth, CNIC / passport number, selfie / document scan | At registration and KYC verification |
| Contact | Mobile number, email address | At registration |
| Financial | Easypaisa / JazzCash / NayaPay / SadaPay wallet numbers, IBFT account details, card last 4 digits, transaction history | When you deposit or withdraw |
| Betting & Gaming | Bet history, game session logs, win/loss records, bonus usage, wagering records | During platform use |
| Technical | IP address, device type and OS, browser type, session timestamps, cookies | Automatically on every visit |
| Communications | Support chat transcripts, email content, survey responses | When you contact us |
| Marketing Preferences | Promotional opt-in/opt-out status, preferred communication channel | At registration or updated in account settings |
Lucky 866 does not collect sensitive categories of data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification.
3. How We Use Your Data
Lucky 866 uses the personal data it collects for the following specific purposes:
- Account management: Creating, maintaining, and securing your Lucky 866 player account. This includes verifying your identity at registration, enabling you to log in, and recovering access if you forget your credentials.
- Transaction processing: Receiving your deposits, processing your bets, settling your winnings, and executing withdrawal requests to your Easypaisa, JazzCash, NayaPay, SadaPay, bank account, or card. Every PKR transaction on Lucky 866 requires your financial data to be on file.
- KYC and AML compliance: Verifying that your identity matches the payment accounts you use, and monitoring transaction patterns to detect and prevent money laundering. Lucky 866 is required by applicable regulations to maintain these controls.
- Responsible gaming: Monitoring your gaming behaviour to identify patterns that may indicate problem gambling. Lucky 866 may use your play data to offer responsible gaming tools or to proactively reach out if your account data suggests you may need support.
- Platform improvement: Analysing aggregated, anonymised usage data to understand how players use Lucky 866, which features are most popular, and where the experience can be improved. Individual player data used for this purpose is anonymised before analysis.
- Customer support: Responding to your support queries, investigating complaints, and resolving disputes. Support communications are retained as records of the interaction and are not used for any other purpose.
- Fraud detection: Using device data, IP information, and transaction patterns to identify and prevent fraudulent activity, multiple account abuse, bonus abuse, and related policy violations.
- Marketing (where you have consented): Sending you information about Lucky 866 promotions, new games, PSL betting offers, and platform updates. You can opt out at any time from your account settings or by emailing support@lucky866.ws.
4. Legal Basis for Processing
Lucky 866 processes your personal data only where a valid legal basis exists. The legal bases we rely on are:
5. Data Sharing
Lucky 866 shares personal data with third parties only in the following circumstances and only to the extent necessary:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners, and Visa/Mastercard network processors receive the financial data necessary to execute your transactions on Lucky 866. Each processor operates under their own privacy policy and data protection obligations.
- Identity verification partners: Where Lucky 866 uses a third-party KYC service to assist with identity document verification, your identity documents and selfie data are shared with that partner for the sole purpose of completing verification. Documents are not retained by the verification partner beyond the verification period.
- Game software providers: Live casino game providers such as Evolution Gaming and Pragmatic Play receive your game session data to operate their games and to fulfil their own regulatory compliance obligations. These providers act as independent data controllers for the game data they hold.
- Regulatory and law enforcement authorities: Lucky 866 is required by law to share data with relevant authorities upon valid legal request. We cannot disclose the existence of such requests in most cases.
- Professional advisors: Our legal, audit, and compliance advisors may have access to data strictly necessary for the services they provide to Lucky 866. All advisors are bound by confidentiality obligations.
Lucky 866 does not share your personal data with other gaming platforms, data brokers, advertising networks, or any entity whose purpose is to use your data for their own commercial interests. We do not sell data.
6. Data Retention
Lucky 866 retains personal data only for as long as it is necessary for the purpose it was collected, or for as long as applicable law requires us to keep it — whichever is longer.
- Active accounts: Your account data and transaction history are retained for as long as your Lucky 866 account remains open.
- Closed accounts: Following account closure, Lucky 866 retains identity, financial, and transaction records for a minimum of 5 years to comply with AML and regulatory record-keeping obligations. Support communications are retained for 3 years.
- Marketing data: Where you have consented to marketing communications, your marketing preferences are retained until you withdraw consent. Once withdrawn, marketing data is deleted or anonymised within 30 days.
- Technical logs: IP address logs, device data, and session logs are retained for up to 12 months and then deleted or aggregated anonymously for analytical purposes.
When data is no longer required and the relevant retention period has expired, Lucky 866 securely deletes or anonymises it so that it can no longer be linked to any individual player.
7. How We Protect Your Data
Lucky 866 implements a multi-layer approach to data security. While no online platform can guarantee absolute security, we take the following measures to protect your personal data from unauthorised access, disclosure, alteration, or loss:
- TLS encryption: All data transmitted between your device and Lucky 866 servers is encrypted using Transport Layer Security (TLS 1.2 or higher). You can verify this by the padlock symbol in your browser address bar when on the Lucky 866 website.
- Encrypted data storage: Sensitive data — including identity documents and financial account details — is encrypted at rest using AES-256 encryption on Lucky 866 servers.
- Access controls: Internal access to personal data on the Lucky 866 platform is restricted on a need-to-know basis. Employees who do not need access to your data to perform their job function do not have it.
- Two-factor authentication: Lucky 866 offers two-factor authentication (2FA) for all player accounts. We strongly recommend enabling 2FA from your account security settings.
- Regular security testing: Lucky 866 conducts periodic penetration testing and security audits to identify and address vulnerabilities before they can be exploited.
- Incident response: In the event of a data breach that could affect your rights, Lucky 866 will notify affected players without undue delay and will take immediate steps to contain and remediate the incident.
8. Cookies and Tracking Technologies
Lucky 866 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help us provide a better experience. Here is a clear breakdown of the types of cookies we use:
| Cookie Type | Purpose | Can You Opt Out? |
|---|---|---|
| Session management, login authentication, security tokens. Required for the platform to function. | No — essential cookies cannot be disabled without breaking the platform. | |
| Aggregated, anonymised data on page visits, feature usage, and navigation paths. Used to improve Lucky 866. | Yes — opt out via cookie preferences or browser settings. | |
| Tracking promotional campaign effectiveness and displaying relevant Lucky 866 offers on partner platforms. | Yes — opt out via cookie preferences or by contacting support. |
You can control cookie preferences through your browser settings. Most browsers allow you to block third-party cookies, delete existing cookies, and set preferences for new cookies. Note that disabling essential cookies will prevent you from logging in to your Lucky 866 account.
Lucky 866 does not use cookies to track your browsing activity outside of the Lucky 866 platform beyond what is disclosed above.
9. Your Data Rights
As a Lucky 866 player, you have the following rights over your personal data. To exercise any of these rights, contact us at support@lucky866.ws with the subject line "Data Rights Request":
Right to Access
Request a copy of all personal data Lucky 866 holds about you. We will provide this within 30 days.
Right to Rectification
Ask us to correct inaccurate or incomplete personal data. Most contact details can be updated directly in your account settings.
Right to Erasure
Request deletion of your personal data where we no longer have a lawful basis to retain it. Note that legal retention obligations may limit this right.
Right to Restrict Processing
Ask Lucky 866 to restrict how your data is used while a complaint or accuracy question is being investigated.
Right to Portability
Receive your personal data in a structured, machine-readable format so you can transfer it to another service if you choose.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes. Marketing opt-outs take effect within 24 hours.
Lucky 866 will respond to all data rights requests within 30 days of receipt. If your request is complex or you have submitted multiple requests, we may extend this period by a further 30 days — we will notify you if this is the case.
10. Children and Minors
Lucky 866 is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18 years of age. If a person under 18 has created a Lucky 866 account by misrepresenting their age, the account will be immediately closed upon detection and any balance will be forfeited.
If you are a parent or guardian and believe your child has registered on Lucky 866, please contact us immediately at support@lucky866.ws. We will investigate and, where confirmed, delete all data associated with the minor's account promptly.
Lucky 866 uses age verification checks at registration and during KYC to minimise the risk of underage access. We take our obligation to protect minors seriously and will take all reasonable steps to enforce our 18+ requirement.
11. Third-Party Links
Lucky 866 does not include links to external websites in its platform interface. However, if you access Lucky 866 through a link from another website, or if Lucky 866 is referenced on third-party sites, those external sites operate under their own privacy policies which Lucky 866 has no control over.
Lucky 866 accepts no responsibility for the privacy practices of any third-party website. If you follow any link outside of the Lucky 866 platform, we recommend reading the privacy policy of the destination site before submitting any personal information.
12. Changes to This Privacy Policy
Lucky 866 reviews this Privacy Policy regularly and may update it to reflect changes in our data processing practices, changes in applicable law, or improvements to how we communicate privacy information. When material changes are made:
- The "Last Updated" date at the top of this page is revised.
- A notice is displayed in your Lucky 866 account for at least 14 days after the change takes effect.
- For significant changes — particularly those affecting how we use your data or your rights — an email notification is sent to the address registered to your account.
We encourage you to review this Privacy Policy periodically. The version in force on the date of any activity or interaction is the version that governs that activity. Continued use of Lucky 866 after an updated Privacy Policy takes effect constitutes your acceptance of the changes.
13. Contact Us About Privacy
If you have any questions, concerns, or requests related to this Privacy Policy or to the personal data Lucky 866 holds about you, please get in touch:
- Email: support@lucky866.ws
- Subject line for data requests: "Data Rights Request" or "Privacy Query"
- Response time: We respond to privacy queries within 5 business days and data rights requests within 30 days.
- Support hours: 24 hours a day, 7 days a week
If you are not satisfied with Lucky 866's handling of your privacy concern after contacting us, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. Lucky 866 will cooperate fully with any such investigation.
We are committed to resolving privacy concerns fairly and promptly. The large majority of privacy queries we receive are resolved within 48 hours of the initial contact — we do not use automated responses for data rights requests and every query is reviewed by a member of our compliance team.