Luck97 Privacy Policy – How We Protect Your Personal Data

1. Introduction

This Privacy Policy applies to all users of the Luck97 platform, operated at luck97.best ("the Platform", "Luck97", "we", "us"). It covers the collection, use, storage, sharing, and protection of personal data of all registered players and visitors, with particular regard to players based in Pakistan.

Luck97 takes the privacy of its Pakistani players seriously. We understand that handing over personal details to any online platform requires trust, and we work hard to earn and maintain that trust. This document is written in plain English — not legal jargon — so that every Pakistani player can understand exactly how their information is handled.

If you have any questions about this Privacy Policy that are not answered here, please contact Luck97 directly at support@luck97.best or via the 24/7 live chat on the Platform.

2. Personal Data We Collect

Luck97 collects personal data in three main ways: information you provide directly to us, information collected automatically when you use the Platform, and information we receive from third parties as part of operating the service.

2.1 Information You Provide Directly

• Full legal name and date of birth (required at registration)
• Email address and mobile phone number
• CNIC number or other government-issued identity document details (required for KYC verification)
• Residential address in Pakistan
• Payment method details including Easypaisa or JazzCash mobile wallet numbers, bank account details (IBAN for IBFT), or card details for Visa/Mastercard deposits
• Correspondence and messages sent to Luck97 support via live chat or email
• Responsible gaming preferences such as deposit limits, loss limits and self-exclusion requests

2.2 Information Collected Automatically

• IP address and approximate geographic location
• Device type, operating system version and browser type
• Session data including login times, pages visited and time spent on each section
• Betting and gaming history including stakes placed, games played, outcomes and cashout decisions
• Deposit and withdrawal history including amounts, methods and timestamps
• Cookie and tracking data as described in Section 9

2.3 Information From Third Parties

• Identity verification results from KYC service providers
• Payment confirmation and fraud screening data from Easypaisa, JazzCash, NayaPay, SadaPay, and card processing networks
• Risk and fraud signals from anti-money laundering screening tools

3. Why We Collect Your Data

Luck97 collects personal data for specific, legitimate purposes. We do not collect data beyond what is necessary to operate the Platform safely and in compliance with applicable regulations. The main purposes are:

4. Legal Basis for Processing

Luck97 processes your personal data on the following legal grounds:

• Contractual necessity: Processing your name, contact details, payment information and gaming history is necessary to provide the Luck97 service you have signed up for.
• Legal obligation: Identity verification, anti-money laundering screening and record retention are required by law and by our operating licence conditions.
• Legitimate interests: Fraud prevention, security monitoring, and platform improvement are carried out on the basis of Luck97's legitimate interest in operating a safe and reliable platform.
• Consent: Where we send you marketing communications about Luck97 promotions and offers, we do so only with your explicit consent. You can withdraw this consent at any time by updating your notification preferences in your account settings or contacting support.

5. Who We Share Your Data With

Luck97 does not sell, trade or rent your personal data to third parties for marketing purposes. We share your data only where it is strictly necessary to operate the Platform. The categories of recipients are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and card networks. Shared only to the extent required to process your deposits and withdrawals in PKR.
• Identity verification (KYC) providers: Trusted third-party services used to verify your CNIC and confirm your identity when required before withdrawals.
• Anti-money laundering (AML) screening services: To screen transactions against sanctions lists and detect potential money laundering as required by law.
• Game software providers: Providers of the slots, live casino, Aviator and other games on Luck97 may receive anonymised session data to support game functionality and fairness auditing.
• Regulatory and law enforcement authorities: Where required by applicable law, a court order, or a lawful request from a Pakistani or international authority, Luck97 will disclose the minimum data necessary to comply.
• Technology infrastructure providers: Secure cloud hosting, content delivery networks and DDoS protection services operate as data processors under strict contractual obligations to Luck97.

6. International Data Transfers

Some of Luck97's technology partners and service providers operate servers located outside Pakistan. Where personal data is transferred internationally, Luck97 ensures that appropriate safeguards are in place, including contractual data protection obligations binding on the receiving party.

Luck97 selects international technology partners that operate to high data security standards and are subject to enforceable obligations regarding data protection. All payment data for Pakistani players is processed through Pakistan-registered payment networks wherever possible, limiting the need for cross-border data transfers in relation to your PKR transactions.

7. How Long We Keep Your Data

Luck97 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods:

• Account data (name, contact details, CNIC): retained for the lifetime of your account plus a minimum of 5 years after account closure, as required for legal and regulatory compliance.
• Transaction records (deposits, withdrawals, bet history): retained for a minimum of 5 years after the transaction date in line with standard financial record-keeping requirements.
• KYC documents (CNIC copies, selfies): retained for as long as required by the identity verification obligations applicable to Luck97's operating licence.
• Support communications: retained for 3 years after the last communication in a thread to allow for follow-up and complaint handling.
• Marketing consent records: retained until consent is withdrawn and for 1 year thereafter as evidence of compliance.

After the applicable retention period, Luck97 will securely delete or anonymise your personal data so that it can no longer be attributed to you.

8. How We Protect Your Data

Luck97 invests significantly in the security of your personal data. The following technical and organisational measures are in place:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the Luck97 platform — the same standard used by Pakistani banks for online banking.
• Encrypted storage for sensitive data including payment details and identity documents at rest on Luck97 servers.
• Two-factor authentication available and encouraged for all Luck97 accounts to prevent unauthorised access.
• Access controls ensuring that only authorised Luck97 staff with a genuine operational need can access personal player data.
• Regular security audits and penetration testing by independent cybersecurity specialists.
• DDoS protection and firewall systems to prevent external attacks that could expose player data.
• Data breach response plan: in the unlikely event of a security incident affecting player data, Luck97 has a documented response plan and will notify affected players promptly.

9. Cookies and Tracking Technologies

Luck97 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and understand how Pakistani players use the site so we can improve the experience. Here is a clear breakdown of the types of cookies we use:

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in and using the Luck97 platform.

10. Your Rights Over Your Personal Data

As a Luck97 player, you have meaningful rights over your personal data. Luck97 respects these rights and will respond to all valid requests within a reasonable timeframe — typically within 30 days.

To exercise any of these rights, contact Luck97 support at support@luck97.best or via the 24/7 live chat. We will verify your identity before processing the request to ensure we only share or modify data with the actual account holder.

11. Protection of Minors

Luck97 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under 18 years of age. Our registration process includes age verification steps specifically to prevent under-age access.

If Luck97 becomes aware that personal data has been collected from a person under 18, we will immediately close the relevant account, delete the data, and — where appropriate — report the matter to relevant authorities. Parents or guardians who believe a minor may have registered a Luck97 account should contact us immediately at support@luck97.best.

We also encourage Pakistani parents to use device-level parental controls to prevent under-age access to online gaming platforms, including Luck97.

12. Changes to This Privacy Policy

Luck97 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable privacy law, or improvements to how we describe our data practices. When we make material changes, we will:

• Email registered Luck97 players at least 14 days before the changes take effect.
• Display a prominent notice on the Platform highlighting the key changes.
• Update the "Last Updated" date shown at the top of this page.

Your continued use of the Luck97 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the Platform and contact Luck97 to close your account.

13. Contact and Privacy Queries

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how Luck97 has handled your personal data, please contact us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the Luck97 platform. Average response time is under 3 minutes.
• Email: support@luck97.best — privacy-related queries are typically responded to within 24 hours.

When contacting us about your personal data, please include your registered email address and account username so we can verify your identity efficiently. This Privacy Policy was last reviewed and updated on 1 January 2025. Luck97 is operated at luck97.best.