Lucky 57 Privacy Policy — How We Protect Your Data in Pakistan

Lucky 57 is an online betting and casino platform operated under an internationally recognised gaming licence. We serve players in Pakistan and provide sports betting, casino games, live casino, Aviator crash game, jackpot slots and related promotional services, all denominated in Pakistani Rupees (PKR).

As the operator of Lucky 57, we are the "data controller" for the personal information of our registered players. This means we determine the purposes and means of processing your data and we carry legal responsibility for how that data is handled. You can reach our data protection team at any time via support@lucky57.ws.

Lucky 57 collects only the data that is genuinely necessary to operate a regulated gaming platform, comply with legal obligations and provide you with a good experience. We do not collect data speculatively or "just in case." The table below summarises the main categories.

• Lucky 57 does not collect sensitive data such as health or medical records, political opinions or biometric data.
• We do not require you to upload a selfie or photo for standard KYC — a government-issued identity document and proof of address are sufficient in most cases.
• Financial data is never stored in full on Lucky 57 servers — card numbers, for example, are processed and tokenised by PCI-DSS compliant payment processors. Lucky 57 holds only masked references.

Lucky 57 uses your personal data for a defined set of purposes. We do not use your data for purposes incompatible with those listed here without obtaining your explicit consent beforehand.

• Account Management: Creating, maintaining and securing your Lucky 57 account, processing login requests and managing your session.
• Identity Verification (KYC): Confirming your identity and age as required under Lucky 57's gaming licence and anti-money laundering obligations before processing withdrawals or increasing transaction limits.
• Payment Processing: Facilitating deposits from and withdrawals to your Easypaisa wallet, JazzCash account, bank IBFT, NayaPay, SadaPay or payment card, all in PKR.
• Anti-Money Laundering (AML): Monitoring transaction patterns and gaming activity to detect and report suspicious financial activity as required by law.
• Fraud Prevention & Security: Detecting and preventing unauthorised access, multiple-account abuse, bonus fraud and other security threats to Lucky 57 and its players.
• Responsible Gaming: Identifying patterns that may indicate problem gambling behaviour and providing appropriate interventions, limit tools or support referrals in accordance with our responsible gaming obligations.
• Customer Support: Responding to queries, resolving complaints and maintaining records of support interactions for quality assurance and regulatory audit purposes.
• Marketing Communications (with consent): Sending promotional offers, bonus notifications and platform updates to players who have opted in to marketing communications. You can opt out at any time.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Lucky 57's features, performance and user experience.
• Legal Compliance: Meeting all obligations imposed by Lucky 57's operating licence, applicable gaming regulations and any lawful requests from regulatory or law enforcement authorities.

Lucky 57 processes your personal data under one or more of the following legal bases, depending on the specific purpose:

• Contractual Necessity: Processing that is required to fulfil our agreement with you — your Lucky 57 account — including account creation, payment processing and game delivery.
• Legal Obligation: Processing required by law, including KYC identity verification, AML transaction monitoring and regulatory reporting obligations under our gaming licence.
• Legitimate Interests: Processing that serves Lucky 57's legitimate business interests — fraud prevention, platform security, responsible gaming monitoring — provided those interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes you have specifically agreed to, such as receiving marketing communications. You may withdraw consent at any time by contacting support@lucky57.ws or updating your notification preferences in your account settings.

Lucky 57 never sells your personal data to third-party advertisers or data brokers. Data is shared only with the categories of recipients listed below, and only to the extent necessary for the stated purpose.

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay and card payment processors receive the financial data necessary to complete your transactions. All processors are PCI-DSS certified and bound by data processing agreements.
• Identity Verification Providers: KYC service providers receive identity documents and related data solely to verify your identity and age. They are contractually prohibited from using your data for any other purpose.
• Game Providers: Software providers such as Pragmatic Play, Microgaming and NetEnt receive an anonymous player identifier and session data necessary to deliver their games. They do not receive your name, contact details or payment information.
• Regulatory Authorities: Lucky 57's gaming regulator and, where required by law, financial intelligence units and law enforcement agencies may receive data we are legally obligated to provide.
• IT and Infrastructure Providers: Cloud hosting, content delivery and cybersecurity service providers who process data on Lucky 57's behalf under strict data processing agreements and confidentiality obligations.
• Fraud Prevention Networks: Aggregated, anonymised fraud signals may be shared with gaming industry fraud prevention networks to protect all players across the ecosystem.
• No sharing occurs with social media platforms, advertising networks or any party for the purpose of targeted advertising without your explicit, separately obtained consent.

Lucky 57 uses cookies and similar technologies to keep you logged in, remember your preferences, detect fraud and understand how Pakistani players use the platform so we can improve it. The table below explains the types of cookies we use.

• You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using Lucky 57, but may affect some display preferences.
• Lucky 57 does not use third-party advertising cookies or tracking pixels that report your Lucky 57 activity back to social media platforms.

Protecting the personal data of Lucky 57's Pakistani players is a technical and organisational priority. The following measures are currently in place and subject to continuous review.

• 256-bit SSL/TLS Encryption: All data transmitted between your device and Lucky 57's servers is encrypted using industry-standard TLS 1.3. The padlock icon in your browser confirms the connection is secure.
• Encrypted Data at Rest: Personal and financial data stored on Lucky 57's infrastructure is encrypted at rest using AES-256 encryption.
• Access Controls: Lucky 57 employee access to player data is restricted on a strict need-to-know basis. Access is logged, reviewed and subject to multi-factor authentication.
• Regular Security Audits: Lucky 57's infrastructure undergoes regular independent penetration testing and vulnerability assessments. Findings are remediated within defined SLA timeframes.
• Fraud Detection Systems: Automated systems monitor account activity, login patterns and transaction behaviour for anomalies that may indicate account compromise or fraud. Suspicious activity triggers immediate review.
• Incident Response Plan: Lucky 57 maintains a documented incident response plan. In the event of a data breach that poses risk to players, affected players will be notified promptly and the relevant regulator will be informed within the legally required timeframe.
• You also play a role in keeping your account secure. Use a strong, unique password for Lucky 57 and enable two-factor authentication in your account settings. Never share your login credentials.

Lucky 57 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, comply with legal obligations and resolve any disputes. The following retention periods apply.

• Active account data: Retained for the full duration of your Lucky 57 account being open, plus a minimum of five years after account closure to meet gaming licence audit requirements.
• KYC and identity documents: Retained for five years from account closure or the date of the last transaction, as required by AML regulations.
• Financial transaction records: Retained for seven years from the date of each transaction in accordance with financial record-keeping requirements.
• Support communication records: Retained for two years from the date of the interaction, unless the communication relates to a dispute that is still unresolved.
• Marketing preference data: Retained until you withdraw consent. Opt-out records are retained indefinitely to prevent accidental re-enrolment.
• When the retention period for a data category expires, Lucky 57 securely deletes or anonymises that data. Anonymised data from which you cannot be identified may be retained for statistical analysis indefinitely.

You have the following rights over your personal data held by Lucky 57. To exercise any of these rights, email support@lucky57.ws with the subject line "Data Rights Request." Lucky 57 will respond within 30 days.

Lucky 57 is an adults-only platform. We do not knowingly collect, process or store personal data from individuals under the age of 18. Our registration process includes age verification checks, and accounts that fail those checks are not activated.

• If Lucky 57 discovers that personal data has been collected from a person under 18 — whether due to a registration error or fraudulent information provided during sign-up — the account will be closed immediately and all data deleted.
• If you are a parent or guardian and believe your child has registered on Lucky 57, please contact us immediately at support@lucky57.ws. We will investigate and close the account within 24 hours.
• We strongly encourage parents and guardians in Pakistan to use parental control software to restrict access to gambling websites on devices used by minors.

Lucky 57 operates infrastructure and works with service providers in multiple jurisdictions. In some cases your personal data — for example, data processed by game providers or cloud infrastructure services — may be transferred to and stored in countries outside Pakistan.

• Any international transfer of personal data by Lucky 57 is subject to appropriate safeguards, including data processing agreements that incorporate standard contractual clauses recognised by data protection authorities.
• Lucky 57 does not transfer your data to jurisdictions without adequate data protection frameworks without implementing appropriate contractual or technical safeguards.
• If you would like more information about the specific safeguards in place for any international transfer affecting your data, please email support@lucky57.ws.

Lucky 57 will update this Privacy Policy from time to time to reflect changes in our practices, new platform features, regulatory requirements or other operational reasons.

• When we make material changes — changes that could significantly affect how your data is used — we will notify you by email and display a prominent notice on the Lucky 57 platform at least seven days before the changes take effect.
• Minor updates — such as clarifications, formatting corrections or non-material wording changes — may take effect immediately without a separate notification.
• The effective date at the top of this page will always reflect the version currently in force. We recommend bookmarking this page and checking it periodically.
• If you do not agree with any material update to this Privacy Policy, you should stop using Lucky 57 and contact support to discuss closing your account and retrieving your balance before the change takes effect.

If you have any questions, concerns or requests relating to this Privacy Policy or Lucky 57's handling of your personal data, please contact us using the details below. We aim to respond to all privacy-related enquiries within five business days.