Privacy Policy – How Luck 97 Protects Your Data

1 Introduction

luck 97 ("the Platform", "we", "us") takes the privacy of its players seriously. This Privacy Policy sets out what personal data we collect from you when you use luck 97 — including when you register an account, make a PKR deposit, play casino games, place sports bets or contact our support team — and explains clearly how that data is processed, stored and protected.

This policy applies to all users of the luck 97 website and mobile application. It covers data collected directly from you as well as data that is automatically generated through your use of the platform. Please take the time to read this document in full. It is written in plain language because we believe you deserve a straightforward explanation rather than dense legal boilerplate.

This Privacy Policy should be read alongside our Terms and Conditions. Together, these two documents set out the full framework governing your relationship with luck 97. Where any specific game, promotion or feature has additional data handling requirements, those will be explained at the point of use.

2 What Personal Data We Collect

luck 97 collects personal data in two main ways: information you provide directly, and information that is generated automatically when you use the platform. Here is a breakdown of both categories.

Information you provide directly:

• Full name, date of birth and national identity details provided during registration or verification.
• Contact information — email address and mobile number — used to manage your account and communicate with you.
• Payment details, including your JazzCash or Easypaisa mobile wallet number, bank account details used for Raast or bank transfers, and card details used for card-based deposits. These are processed by secure payment processors and are never stored on luck 97 servers in raw form.
• Identity verification documents such as CNIC scans or photographs submitted during the account verification process.
• Support communications — any messages, screenshots or documents you send to our support team.

Information collected automatically:

• Device information: device model, operating system version, unique device identifiers and mobile network information.
• Usage data: pages visited, games played, bets placed, session duration, features used and navigation patterns within the platform.
• Transaction records: every deposit in PKR, withdrawal, bonus credit, game stake and game result associated with your account.
• IP address and approximate geographic location derived from it at the time of login and key account actions.
• Cookie and similar tracking data as described in the Cookies section of this policy.

3 How We Use Your Personal Data

luck 97 uses the personal data collected for specific, clearly defined purposes. We do not use your data for purposes beyond those listed here, and we do not sell your personal information to third parties under any circumstances.

We will only send you promotional messages — including bonus offers, Sports Betting market alerts and new game announcements — if you have opted in to receive them. You can withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team.

4 Payment Data and PKR Transactions

All deposits and withdrawals on luck 97 are denominated in Pakistani Rupees (PKR). The platform supports JazzCash, Easypaisa, Raast, bank transfer and card payments. When you initiate a payment, the transaction is processed by a third-party payment processor that is contractually required to handle your financial data securely and only for the purposes of completing that transaction.

luck 97 does not store your full card number, CVV or mobile banking PIN on its own servers. Payment processors we work with operate under strict data security standards. What luck 97 does retain is a record of each transaction — the amount in PKR, the method used, the date and time, and the outcome — which forms part of your account transaction history and is necessary for account management, dispute resolution and regulatory compliance.

5 When and With Whom We Share Data

luck 97 shares personal data only where it is strictly necessary to operate the platform and serve you as a player. The categories of third parties that may receive your data are listed below, along with the reason for sharing.

• Payment processors — JazzCash, Easypaisa, Raast-connected banks, card networks and other payment service providers need transaction data to process your PKR deposits and withdrawals.
• Identity verification providers — Specialist KYC services may receive your CNIC details and other identity documents to carry out automated or assisted age and identity checks.
• Fraud prevention and security services — IP addresses, device fingerprints and behavioural data may be shared with anti-fraud systems to protect the platform and its players from fraudulent activity.
• Technology and infrastructure providers — Cloud hosting, database management and content delivery services that power the luck 97 platform process data on our behalf under strict data processing agreements.
• Customer support tools — Support ticket and live chat platforms used by our team to handle your queries will process the content of your support communications.

All third-party service providers used by luck 97 are required by contract to process your data securely, to use it only for the purpose for which it was shared, and to delete or return it once that purpose has been fulfilled. We do not permit our service providers to use your data for their own marketing or to share it further.

luck 97 does not share your personal data with advertisers, data brokers or any other commercial third parties for marketing profiling purposes.

6 Cookies and Tracking Technologies

luck 97 uses cookies and similar tracking technologies on its website and app to make the platform work properly, to understand how players use it and to improve the overall experience. A cookie is a small text file placed on your device when you visit a website. It allows the site to remember certain information about your session.

The types of cookies we use are:

• Essential cookies — These are necessary for the platform to function. They keep you logged in during a session, remember your preferences and enable secure PKR transactions. The platform cannot work without them.
• Analytics cookies — These help us understand which pages and features players use most, how long sessions last and where players encounter difficulties. The data is aggregated and used only to improve the platform.
• Functional cookies — These remember your settings and preferences, such as language choice, so you do not need to reconfigure them on each visit.

Most browsers allow you to control cookies through their settings. You can block or delete cookies, though doing so may affect the functionality of luck 97. Essential cookies cannot be disabled without impacting your ability to use core platform features including login and deposits.

7 How Long We Keep Your Data

luck 97 retains your personal data for as long as your account is active and for a defined period after account closure. The retention periods for different categories of data are as follows:

• Account and identity data — Retained for the duration of your account and for a minimum period after closure to allow for dispute resolution and compliance obligations.
• Transaction records — PKR deposit and withdrawal records, game stakes and results are retained for an extended period in line with standard financial record-keeping requirements.
• Support communications — Retained for a reasonable period after the matter is resolved in case of follow-up queries or disputes.
• Marketing preferences and consent records — Retained for the period during which you were subscribed and for a period after unsubscription to demonstrate compliance with consent requirements.
• Technical logs (IP, device, session data) — Retained for a shorter period for security monitoring and fraud investigation purposes.

When data is no longer required for the purpose it was collected and the applicable retention period has expired, luck 97 securely deletes or anonymises it so that it can no longer be linked to your identity.

8 How We Protect Your Data

luck 97 applies industry-standard technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, alteration or disclosure. These measures include:

• Encrypted data transmission using TLS (Transport Layer Security) across the website and app, so that data exchanged between your device and luck 97 servers cannot be intercepted in transit.
• Encrypted storage for sensitive data categories including identity documents and payment-related information.
• Access controls that restrict which staff members can view personal data, based on role and necessity.
• Regular security assessments of the platform infrastructure to identify and address vulnerabilities.
• Two-factor authentication options for player accounts to add an extra layer of protection beyond passwords.

While luck 97 does everything reasonably practicable to protect your data, no digital platform can guarantee absolute security. You also play an important role in keeping your account safe by using a strong, unique password, not sharing your login credentials and logging out from shared devices.

9 Your Rights Over Your Personal Data

As a luck 97 player, you have a number of rights in relation to the personal data we hold about you. These rights can be exercised by contacting our support team using the details at the end of this policy.

• Right to access — You can request a copy of the personal data luck 97 holds about you, including your account information, transaction history and any identity documents on file.
• Right to correction — If any of the personal data we hold is inaccurate or out of date, you can ask us to correct it. For basic account details, you can update these yourself in your account settings.
• Right to deletion — You can ask us to delete your personal data. We will honour this request where there is no legal or contractual reason to retain the data. Note that certain financial records must be kept for defined periods regardless of a deletion request.
• Right to restrict processing — In certain circumstances you can ask us to pause the processing of your data while a concern is being investigated.
• Right to withdraw consent — Where processing is based on your consent — for example, marketing communications — you can withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.
• Right to close your account — You may request closure of your luck 97 account at any time. Please ensure you withdraw any available PKR balance before requesting closure. Account closure does not automatically result in immediate deletion of all data due to the retention requirements described in Section 7.

10 Children and Minors

luck 97 is strictly an adults-only platform. We do not knowingly collect or process personal data from anyone under the age of 18. Registration requires players to confirm their date of birth and agree that they are 18 or older. We may request identity documents at any point to verify this.

If we discover or are informed that a person under 18 has created an account on luck 97, we will immediately suspend the account, void any transactions associated with it and delete the personal data collected, in line with our obligations regarding minors. If you are a parent or guardian and believe your child has registered on luck 97, please contact us immediately at the support email listed in this policy.

We encourage parents and guardians to use parental control software and to have open conversations with young people about online gaming platforms and the importance of age restrictions.

11 Changes to This Privacy Policy

luck 97 may update this Privacy Policy from time to time to reflect changes in how the platform operates, the services offered or applicable data protection practices. When changes are made, the updated policy will be published on this page with a revised review date shown at the top of the document.

For significant changes that materially affect how your data is processed, we will make reasonable efforts to notify you directly — for example, by sending a notification to your registered email address or displaying a notice when you next log in. Your continued use of luck 97 following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes.

If you disagree with any updates to this policy, you should stop using the platform and contact our support team to discuss your options, including account closure and the return of any available PKR balance.

12 Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how your personal data has been handled, please get in touch with our support team. We aim to acknowledge all privacy-related enquiries promptly and to resolve them as quickly as possible.

For data access, correction or deletion requests, please also describe clearly what data is involved and what action you are requesting. We may need to verify your identity before actioning certain requests to ensure we are responding to the genuine account holder.

For responsible gaming-related matters, including activating spending limits or self-exclusion, please visit the Responsible Gaming page where all self-management tools are explained in detail.