luck97 Privacy Policy

01 Who We Are

luck97 is an online gaming operator providing cricket betting, live casino games, slot games, sports betting, and the Limbo crash game to players in Pakistan and other permitted territories via the platform at luck97.club. luck97 is the data controller responsible for the personal data of its registered players.

All references to "luck97", "we", "us", or "our" in this Privacy Policy refer to the luck97 platform operator. For any privacy-related queries, you may contact the luck97 Data Protection team using the contact details set out in Section 16 of this Policy.

02 Data We Collect

luck97 collects the following categories of personal data from players:

luck97 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request, in which case such data is used solely to facilitate the requested restriction.

03 How We Collect Your Data

luck97 collects personal data through the following means:

• Direct collection at registration: When you create a luck97 account, you provide identity and contact data directly via the registration form.
• KYC verification submissions: When you submit identity documents in response to a Know Your Customer (KYC) request from luck97.
• Transaction activity: When you make a deposit or withdrawal using JazzCash, EasyPaisa, or a bank transfer, financial data is captured automatically by the luck97 payment processing system.
• Platform usage: Technical and usage data is collected automatically as you navigate and interact with the luck97 platform, including during betting and gaming sessions.
• Customer support interactions: When you contact the luck97 support team via live chat or email, communications data is recorded for quality assurance and dispute resolution purposes.
• Cookies and tracking technologies: As described in Section 8 of this Policy.
• Third-party sources: luck97 may receive data about you from identity verification partners, fraud prevention agencies, and payment processors where this is necessary to verify your identity or prevent financial crime.

04 How We Use Your Data

luck97 uses your personal data for the following purposes:

• To create, verify, and manage your luck97 player account.
• To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, USDT TRC20, and Retail Cash methods.
• To verify your age and identity in compliance with applicable Know Your Customer (KYC) and anti-money laundering (AML) obligations.
• To administer cricket betting markets, live casino games, slot titles, sports betting, and the Limbo crash game, and to settle wagers accurately.
• To detect, investigate, and prevent fraud, money laundering, match manipulation, and other prohibited conduct as defined in the luck97 Terms & Conditions.
• To operate the luck97 responsible gaming program, including administering deposit limits, session limits, cool-off periods, and self-exclusion requests.
• To communicate with you regarding your account status, transaction confirmations, security alerts, and policy updates.
• To send promotional communications where you have opted in to receive them (see Section 14).
• To analyse platform usage data for the purpose of improving luck97's products, features, and user experience.
• To comply with applicable legal obligations, including reporting obligations to financial intelligence authorities where required by law.

05 Legal Basis for Processing

luck97 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the luck97 Terms & Conditions and to provide the services you have requested — including account management, transaction processing, game operation, and customer support.
• Legal obligation: Processing required to comply with applicable KYC, AML, and other regulatory obligations to which luck97 is subject as a licensed gaming operator.
• Legitimate interests: Processing carried out for luck97's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and product improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily in respect of marketing communications. You may withdraw consent at any time as described in Section 14.

06 Sharing Your Data

luck97 does not sell, rent, or trade your personal data to third parties for marketing purposes. Your data may be shared with the following categories of recipients solely to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and USDT TRC20 network infrastructure providers, for the purpose of processing your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and AML service providers engaged by luck97 to verify player identity and screen for financial crime risk.
• Game providers: Third-party casino game and slot providers whose titles are hosted on the luck97 platform. These providers may receive limited technical and session data necessary to deliver their game services.
• Fraud prevention agencies: Organisations that maintain shared databases of known fraudulent activity, accessed by luck97 for the purpose of preventing account fraud and financial crime.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, and regulatory bodies where luck97 is required by law to disclose player data.
• IT and infrastructure providers: Cloud hosting providers, security monitoring services, and technical support partners who process data on luck97's behalf under binding data processing agreements.

07 Payment Data

luck97 treats financial data with a heightened level of care. When you make a deposit or withdrawal using JazzCash, EasyPaisa, or a Pakistani bank account, the relevant payment credentials are transmitted directly to the payment processor via an encrypted connection. luck97 does not store complete bank account numbers or full JazzCash / EasyPaisa wallet credentials on its own servers beyond what is minimally necessary for transaction reconciliation.

All PKR transaction records — including deposit amounts, withdrawal requests, and processing timestamps — are retained as part of your account transaction history for the period specified in Section 10 of this Policy. These records may be required for AML compliance reporting and for the resolution of payment disputes.

USDT TRC20 wallet addresses provided for cryptocurrency withdrawals are retained in your account profile. You are responsible for ensuring the accuracy of any wallet address provided; luck97 cannot reverse cryptocurrency transactions sent to an incorrect address.

08 Cookies & Tracking Technologies

luck97 uses cookies and similar tracking technologies on the luck97.club platform to deliver a functional, secure, and personalised user experience. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the operation of the luck97 platform, including maintaining your logged-in session, securing account access, and enabling core platform features. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings, preferred payment methods, and responsible gaming tool configurations, to provide a more personalised experience.
• Analytics cookies: Used by luck97's internal analytics systems to understand how players interact with the platform — which pages are visited, which games are played, and where users encounter issues. This data is used in aggregate to improve the platform.
• Security cookies: Used to detect and prevent fraudulent access attempts, bot activity, and suspicious session behaviour.

luck97 does not use third-party advertising cookies or permit external advertising networks to place tracking cookies on the luck97.club platform. You may manage non-essential cookie preferences through the cookie settings panel accessible from the luck97 platform footer.

09 Data Security

luck97 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS 1.2 / 1.3 SSL encryption for all data transmitted between your device and the luck97 platform.
• AES-256 encryption for sensitive data stored in luck97's databases, including identity verification documents and financial records.
• Role-based access controls ensuring that only authorised luck97 personnel with a specific business need can access player personal data.
• Regular penetration testing and security audits conducted by qualified third-party security specialists.
• Multi-factor authentication requirements for internal administrative access to systems containing player data.
• Comprehensive audit logging of all access to and modifications of player account data.

Despite these measures, no online platform can guarantee absolute security. In the event of a data security incident that is likely to result in significant risk to players, luck97 will notify affected players and, where required by applicable law, the relevant regulatory authority, within the timeframe specified by law.

10 Data Retention

luck97 retains your personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, subject to any longer retention period required by applicable law or regulatory obligation. The following general retention principles apply:

• Active account data: Retained for the duration of your active luck97 account relationship.
• Account closure data: Following account closure, personal data is retained for a minimum of five (5) years for AML compliance, regulatory reporting, and dispute resolution purposes.
• Transaction records: PKR deposit, withdrawal, and wagering records are retained for a minimum of five (5) years from the date of the relevant transaction.
• KYC and identity documents: Retained for the duration of the account relationship and for five (5) years following account closure.
• Customer support communications: Live chat and email records are retained for three (3) years from the date of the relevant interaction.
• Marketing preference data: Retained until you withdraw consent or request deletion, whichever occurs first.

Upon expiry of the applicable retention period, luck97 will securely delete or anonymise your personal data in accordance with its internal data disposal procedures.

11 International Data Transfers

luck97 may process or store your personal data on servers located outside of Pakistan, including within the jurisdiction of luck97's operating entity and the data centres of its cloud infrastructure providers. Where personal data is transferred internationally, luck97 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Policy.

Transfers to third-party service providers operating outside Pakistan — such as KYC verification partners and game providers — are governed by data processing agreements that contractually require the recipient to implement adequate data protection standards.

12 Children's Privacy

The luck97 platform is strictly intended for persons aged 21 years and above. luck97 does not knowingly collect personal data from individuals under the age of 21. If luck97 becomes aware that personal data has been collected from a person under the age of 21, such data will be deleted immediately and the associated account will be permanently closed.

If you believe that a person under the age of 21 has registered a luck97 account or provided personal data to luck97, please contact the luck97 support team immediately so that appropriate action can be taken.

13 Your Privacy Rights

As a luck97 player, you hold the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data luck97 holds about you.
• Right to rectification: You may request that inaccurate or incomplete personal data held by luck97 be corrected or completed.
• Right to erasure: You may request that luck97 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to applicable legal retention obligations that may require luck97 to retain certain data.
• Right to restriction: You may request that luck97 restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its processing.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request that luck97 provide your personal data in a structured, machine-readable format.
• Right to object: You may object to the processing of your personal data where luck97 relies on legitimate interests as the legal basis, unless luck97 can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact the luck97 Data Protection team using the details set out in Section 16. Requests will be acknowledged within 5 business days and completed within 30 days, subject to identity verification and any applicable legal limitations.

14 Marketing Communications

luck97 may send you promotional communications about bonuses, PSL season offers, new game launches, deposit match promotions, and other luck97 news, but only where you have expressly opted in to receive such communications at the time of registration or via your account settings.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in the luck97 account settings panel.
• Clicking the unsubscribe link included in any luck97 promotional email.
• Contacting the luck97 support team and requesting removal from marketing lists.

Please note that opting out of marketing communications does not affect the delivery of transactional communications, such as deposit confirmations, withdrawal notifications, and security alerts, which are sent on the basis of contractual necessity rather than marketing consent.

15 Updates to This Privacy Policy

luck97 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, luck97 will publish the updated Policy at luck97.club/privacy-policy with a revised effective date. Where changes are significant, luck97 may also notify players by email or via an in-platform notification.

Your continued use of the luck97 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not agree with the updated Policy, you should discontinue use of the luck97 platform and may request account closure.

16 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how luck97 has handled your personal data, please contact the luck97 Data Protection team:

Email: [email protected]

luck97's support team is available 24/7 and will direct your enquiry to the appropriate team member. Privacy-related requests are handled with priority and all communications are treated in strict confidence.

If you are not satisfied with luck97's response to your privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. luck97 encourages players to contact us directly in the first instance so that we can work to resolve your concern promptly.