Your Data, Your Rights

luck97 Privacy Policy – How We Protect Your Personal Data

At luck97, we handle your personal information with care and full transparency. This policy explains in plain English exactly what data we collect, why we need it, how it is stored and what rights you have over it as a Pakistani member of our platform.

Effective date: June 2025  ·  Applies to all luck97 members  ·  Supersedes all prior versions
luck97
256 Bit SSL Encryption
0 Third-Party Data Sales
7 Data Rights You Hold
24h Data Request Response

Six Core Privacy Commitments luck97 Makes to Every Member

Before the detailed policy, here are the six things that matter most to Pakistani users when it comes to how luck97 handles their data.

No Data Sales — Ever

luck97 never sells, rents or trades your personal data to third-party advertisers or data brokers. Your information stays on luck97's systems and is used only for the purposes described in this policy.

Military-Grade Encryption

All data transmitted between your device and luck97 is protected by 256-bit SSL encryption. Sensitive data at rest — including payment details and identity documents — is stored with equivalent encryption standards.

Minimal Data Collection

luck97 only collects the personal data it genuinely needs — to verify your identity, process payments, prevent fraud and provide customer support. We do not collect data speculatively or for purposes we cannot justify.

Your Consent, Your Control

Marketing communications from luck97 are opt-in only. You can update your communication preferences at any time from your account settings. We will not send you promotional emails or SMS without your explicit consent.

Transparent Data Use

Every category of data luck97 collects is listed in this policy with a clear explanation of why it is needed. There are no hidden data collection practices operating behind the scenes on our platform.

Regulatory Compliance

luck97 adheres to applicable data protection laws and anti-money-laundering regulations. KYC and AML obligations require us to retain certain records but we do so only to the minimum extent required by law.

This Privacy Policy explains how luck97 collects, uses and protects your personal information. It applies to every person who registers an account, visits the platform or interacts with luck97 in any way. By using luck97 you agree to the practices described here. Questions? Contact us at support@luck97.click any time.

01 About This Policy

This Privacy Policy ("Policy") is issued by luck97 ("we", "us", "the platform") and applies to all personal data processed in connection with the luck97 website at luck97.click, the sportsbook, casino games, jackpot slots, poker, roulette, virtual sports and any associated mobile applications or promotional activities.

When we say "personal data" in this Policy, we mean any information that can identify you as an individual — directly or indirectly. This includes your name, CNIC number, mobile number, email address, payment details and even your IP address in certain contexts.

luck97 takes privacy seriously not just because the law requires it, but because Pakistani users have the right to know exactly how their information is being used by any platform they trust with their financial details. We have written this Policy in plain English deliberately — legalese helps nobody.

This Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy.

02 Data We Collect

luck97 collects personal data through several channels. The table below sets out every category of data collected, where it comes from and why we need it.

Data Category Examples Source Type
Identity Data Full name, date of birth, CNIC number, nationality You (registration / KYC) Required
Contact Data Mobile number, email address, mailing address You (registration) Required
Financial Data Easypaisa / JazzCash number, bank account details, transaction history You (deposits / withdrawals) Required
KYC Documents CNIC scan, proof of address, source of funds documents You (verification) Required
Usage Data Bets placed, games played, session duration, bet history, win/loss records Platform (automatically) Automatic
Technical Data IP address, device type, browser, operating system, login timestamps Platform (automatically) Automatic
Communication Data Live chat transcripts, support emails, complaint records You (support interactions) Interaction
Marketing Preferences Email opt-in status, SMS consent, preferred contact channel You (account settings) Optional

luck97 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs or health information unless directly relevant to a responsible gaming assessment and only with your explicit consent.

03 How We Use Your Data

Every use of your personal data by luck97 is tied to a specific, legitimate purpose. We do not use data for purposes beyond those described here without notifying you and, where required, obtaining fresh consent.

  • Account management — To create, maintain and secure your luck97 account, including processing your registration, verifying your identity and managing your login credentials.
  • Payment processing — To process PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card, and to execute withdrawal requests to your registered payment method.
  • KYC and AML compliance — To verify your identity and age (18+), confirm ownership of payment methods and fulfil our anti-money-laundering obligations under applicable law.
  • Service delivery — To operate the sportsbook, casino, jackpot slots, poker and all other platform features, including settling bets, crediting winnings and applying bonuses.
  • Fraud prevention and security — To detect and prevent fraudulent accounts, bonus abuse, match fixing, multi-accounting and unauthorised access attempts.
  • Customer support — To respond to your queries, resolve complaints and maintain records of support interactions for training and quality purposes.
  • Responsible gaming — To monitor betting patterns that may indicate problem gambling and to apply self-imposed restrictions such as deposit limits and self-exclusion when requested.
  • Platform improvement — To analyse anonymised usage patterns and improve the luck97 product, betting markets, game selection and user experience.
  • Marketing (with consent only) — To send you promotional offers, bonus notifications and PSL match-day communications via email or SMS, but only if you have opted in to receiving these.
luck97

Every luck97 member in Pakistan has full control over how their data is used.

04 Legal Basis for Processing

luck97 processes personal data only where a valid legal basis exists. The following bases apply to different categories of processing:

  • Contract performance — Processing necessary to fulfil our contractual obligations to you as a member, including running your account, processing bets and executing payments.
  • Legal obligation — Processing required by law, including KYC identity verification, AML record-keeping, age verification and regulatory reporting.
  • Legitimate interests — Processing for fraud detection, security monitoring, responsible gaming oversight and platform improvement where these interests do not override your rights.
  • Consent — Processing for marketing communications and optional profile analytics, where you have given explicit opt-in consent. You may withdraw this consent at any time through your account settings.

Where luck97 relies on legitimate interests as the legal basis for processing, we carry out a balancing test to ensure our interests do not override your fundamental rights and freedoms. The results of these assessments are available on request.

05 Data Sharing

luck97 does not sell, rent or trade your personal data to any third party. Data sharing is limited to the following strictly controlled categories of recipient, each bound by confidentiality obligations and, where relevant, regulatory requirements:

Payment Service Providers

To process your deposits and withdrawals in PKR, luck97 shares the minimum necessary financial data with authorised payment processors including Easypaisa, JazzCash, NayaPay, SadaPay and partner banks. These providers are regulated financial institutions and are subject to their own data protection obligations.

KYC and Identity Verification Providers

luck97 uses regulated third-party identity verification services to fulfil our KYC obligations. Your identity documents and biometric verification data are processed by these providers in accordance with their own data protection policies and applicable regulations.

Regulatory and Law Enforcement Authorities

Where required by law — for example in response to a valid court order, regulatory investigation or anti-money-laundering report — luck97 may be legally obligated to share specific data with relevant authorities. luck97 will always seek to minimise such disclosures to the minimum required.

Technology and Cloud Infrastructure Providers

luck97 uses third-party cloud infrastructure and technology services to operate the platform. These providers act as data processors under our instruction and are contractually prohibited from using your data for any purpose beyond providing their services to luck97.

No Marketing Data Sharing

luck97 will never share your contact details or betting history with third-party marketers or advertisers. You will not receive marketing from third parties as a result of being a luck97 member.

06 Data Retention

luck97 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. The retention periods for different data categories are as follows:

  • Active account data — Retained for the duration of your membership plus 30 days following account closure to facilitate any outstanding transactions.
  • KYC and identity documents — Retained for a minimum of 5 years following account closure to comply with anti-money-laundering regulations. This retention obligation cannot be waived by a data deletion request.
  • Financial transaction records — Retained for 5 years to meet AML and financial regulatory requirements.
  • Support communications — Retained for 2 years following the resolution of the interaction for training and dispute resolution purposes.
  • Marketing preferences and consent records — Retained for 3 years following your last interaction with luck97 marketing or until you withdraw consent, whichever comes first.
  • Technical logs and security data — Retained for 12 months for fraud prevention and security monitoring purposes.

When data is no longer required under the applicable retention period, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

luck97

luck97 is built on trust — every policy decision is made with Pakistani members in mind.

07 Security Measures

Protecting your data from unauthorised access, loss or disclosure is a core operational priority at luck97. We employ multiple layers of security including:

  • 256-bit SSL/TLS encryption on all data transmission between your device and luck97's servers.
  • At-rest encryption for all sensitive stored data including payment details, KYC documents and account credentials.
  • Two-factor authentication (2FA) available for all member accounts and mandatory for staff access to systems holding member data.
  • Access controls ensuring that only authorised luck97 personnel can access personal data, and only to the extent required for their specific job function.
  • Regular security audits and penetration testing carried out by qualified third-party security professionals.
  • Intrusion detection systems monitoring for unusual access patterns, brute force attempts and other threat indicators in real time.
  • Incident response plan — in the event of a data breach affecting member information, luck97 will notify affected members and relevant authorities within the timeframes required by applicable law.

Despite these measures, no online platform can guarantee absolute security. We strongly encourage you to use a strong, unique password for your luck97 account, enable 2FA and keep your registered mobile number up to date for security alerts.

08 Cookies & Tracking Technologies

luck97 uses cookies and similar tracking technologies on its website and platform. Cookies are small text files stored on your device that help the platform function correctly, remember your preferences and, where you have consented, help us understand how you use the site.

You can manage your cookie preferences through the cookie settings banner displayed on your first visit to luck97. Your browser settings also allow you to block or delete cookies, though doing so for essential cookies will affect platform functionality.

09 Your Data Rights

As a luck97 member you hold the following rights over your personal data. These rights are not bureaucratic formalities — they are genuine entitlements that luck97 takes seriously and responds to promptly.

Right of Access

Request a copy of all personal data luck97 holds about you. We will provide this within 30 days of your verified request at no charge.

Right to Rectification

If any personal data luck97 holds about you is inaccurate or incomplete, you can request a correction at any time via support.

Right to Erasure

Request deletion of your personal data where there is no overriding legal obligation to retain it. Note that AML regulations require us to retain certain records for 5 years.

Right to Restriction

Request that processing of your data is paused — for example while the accuracy of data is disputed or a legitimate interest objection is assessed.

Right to Portability

Where processing is based on consent or contract performance, request your data in a structured, machine-readable format for transfer to another service.

Right to Object

Object to processing based on legitimate interests at any time. luck97 will cease processing unless compelling legitimate grounds can be demonstrated that override your interests.

Right to Withdraw Consent

Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email support@luck97.click with the subject line "Data Rights Request" and include your registered email address and CNIC number for identity verification. luck97 will respond within 30 days and will not charge a fee for reasonable requests.

10 Children's Privacy

luck97 is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we discover that an account has been created by or on behalf of a person under 18, we will close the account immediately, retain minimum records required for regulatory compliance and delete all other data associated with that account.

If you are a parent or guardian and you believe your child has created a luck97 account, please contact us at support@luck97.click immediately with your child's registered email address and we will take action within 24 hours.

luck97 operates age verification checks at registration and reserves the right to request documentary proof of age at any point. We take our responsibility to prevent underage gambling seriously and this extends to protecting the personal data of minors.

11 Third-Party Links

The luck97 platform may, from time to time, contain links to third-party websites or services — for example in promotional content or informational articles. luck97 is not responsible for the privacy practices of any third-party website and this Policy does not apply to those sites.

Before providing any personal information to a third-party website, we encourage you to read that site's own privacy policy. luck97 cannot be held responsible for the data handling practices of any third party regardless of how you arrived at their website.

12 Changes to This Policy

luck97 reviews this Privacy Policy regularly and may update it to reflect changes in our data practices, legal obligations or the services we offer. When material changes are made — changes that could meaningfully affect your rights or how your data is used — we will notify active members via the email address or mobile number on their account at least 7 days before the changes take effect.

The current Policy is always available at luck97.click/privacy-policy with the effective date displayed at the top. Minor updates that do not change the substance of the Policy — such as clarifications or corrections — may be made without notice, though the effective date will be updated.

If you disagree with any revised Policy, you should stop using luck97 and request account closure. Continued use of the platform after the effective date of any revision constitutes acceptance of the updated Policy.

13 Contact & Complaints

If you have a question about this Privacy Policy, want to exercise any of your data rights, or wish to make a complaint about how luck97 has handled your personal information, please contact us through one of the following channels:

  • Email — support@luck97.click with the subject line "Privacy Query" or "Data Rights Request" as appropriate.
  • Live Chat — Available on every page of luck97.click, 24 hours a day, 7 days a week. For general privacy questions, live chat is the fastest route.

luck97 aims to respond to all privacy-related queries within 24 hours and to complete substantive data rights requests within 30 days of identity verification. Formal complaints will receive a written response within 5 business days.

If you are not satisfied with how luck97 has handled a privacy complaint, you have the right to escalate to a relevant data protection authority. luck97 will cooperate fully with any regulatory investigation and we will always provide you with information about your right to escalate when responding to a complaint.

Related policies: Terms and Conditions · Responsible Gaming · FAQ. Last reviewed and updated: June 2025.

Ready to Bet Safely with luck97?

Your data is protected, your privacy is respected and your PKR payments are secure. Join luck97 today — registration takes under two minutes.

18+ only · Play Responsibly · PKR Only · Your data is safe with luck97