GDPR-ALIGNED · 256-BIT SSL · NO DATA SELLING

Luck 97 Privacy Policy – How We Handle Your Personal Data

Your data belongs to you. This policy explains exactly what information Luck 97 collects when you use the platform, why we need it, how it is stored, who can access it, and what rights you have over it. Written plainly, not buried in legal language.

Last updated: January 2025  ·  Applies to all Luck 97 users
luck 97
Data Protected
256-bit SSL
No Data Selling
No Ad Profiling
Your Rights
24/7 Support

Six Things Luck 97 Is Committed to on Data Privacy

Before you read the full policy, here are the commitments that define how Luck 97 handles your personal information.

We Collect Only What We Need

Luck 97 collects personal data that is genuinely required to operate your account, process payments, verify your identity, and comply with applicable regulations. We do not collect data speculatively or build marketing profiles from your gambling activity.

We Never Sell Your Data

Your personal information is not sold, rented, or traded with third parties for commercial purposes. Full stop. Data sharing with third parties only occurs where it is necessary to operate the platform — payment processors, identity verification services, and regulatory authorities where legally required.

Industry-Standard Encryption

All data transmitted between your device and Luck 97 servers is encrypted using 256-bit SSL. Payment data, account credentials, and personal information are handled under strict access controls. Our infrastructure is reviewed regularly for security vulnerabilities.

You Control Your Data

You have the right to access the personal data we hold about you, request corrections, ask us to delete your data, and withdraw consent where processing is based on consent. These rights are exercisable by contacting support directly — no complicated process required.

We Don't Keep Data Longer Than Needed

Luck 97 retains personal data only for as long as it is necessary for the purpose it was collected, or as long as required by applicable regulations. Transaction records are retained for the regulatory period. Closed account data is archived and deleted according to our retention schedule.

Breach Notification

In the unlikely event of a personal data breach that creates a risk to your rights and freedoms, Luck 97 will notify affected users promptly and take immediate steps to contain and remediate the breach. We do not delay breach notification or downplay incidents.

Summary: This Privacy Policy explains how Luck 97 (luck97.im) collects, uses, stores, and protects the personal data of players based in Pakistan and other jurisdictions. By registering an account with Luck 97, you consent to the practices described in this policy. If you have questions at any point, contact us at support@luck97.im.

1. Who We Are

Luck 97 operates the online betting and casino platform accessible at luck97.im (the "Platform"). In the context of this Privacy Policy, "Luck 97", "we", "us", and "our" refer to the operator of the Platform. "You" and "your" refer to any individual who visits, registers on, or uses any part of the Luck 97 platform.

For the purposes of data protection, Luck 97 is the data controller in respect of personal data collected through the Platform. This means we determine the purposes for which personal data is processed and the means by which it is processed. Where we engage third-party processors to handle data on our behalf — such as payment processors or identity verification providers — those parties act as data processors and are bound by data processing agreements that restrict their use of your data.

This policy applies to all Luck 97 platform users, with specific relevance to players based in Pakistan using the platform's sports betting, live casino, virtual sports, and promotional services.

2. What Personal Data We Collect

The personal data Luck 97 collects falls into the following categories:

CategorySpecific Data PointsWhen Collected
Identity Data Full name, date of birth, gender, CNIC number (where required for verification) Registration & KYC verification
Contact Data Mobile number, email address, city/province of residence Registration
Financial Data Payment method identifiers (Easypaisa/JazzCash account reference, masked card number), deposit and withdrawal transaction records First deposit & ongoing transactions
Activity Data Bets placed, games played, stakes wagered, winnings received, session duration, promotion usage Ongoing platform use
Technical Data IP address, device type, operating system, browser type, mobile network, session timestamps All platform visits
Communications Data Support chat transcripts, email correspondence, any feedback or complaints submitted When you contact support
Verification Documents CNIC or passport image, proof of payment method, selfie for liveness check (when KYC is required) Identity verification requests

Luck 97 does not collect sensitive categories of personal data such as ethnicity, religion, health records, or political opinions. The only special category data that may be collected is information relevant to responsible gaming (e.g., self-exclusion status), which is processed to protect the player's interests.

3. How We Collect Your Data

Luck 97 collects personal data through the following methods:

  • Directly from you — when you register an account, make a deposit, place a bet, use a promotion, contact support, or update your account profile.
  • Automatically — through the technical operation of the platform, including IP address logging, session tracking, device fingerprinting for fraud prevention, and browser cookies.
  • From third parties — identity verification providers may share the results of CNIC checks or document verification with us. Payment processors share transaction confirmation data. Fraud prevention services may share risk signals.

Where data is collected automatically, it is primarily used for platform security, fraud prevention, and technical operations. Luck 97 does not use automatically collected data to build advertising profiles or sell audience data to advertisers.

luck 97

4. Why We Use Your Personal Data

Luck 97 uses your personal data for the following specific purposes:

  • Account creation and management: Setting up and maintaining your Luck 97 account, verifying your identity, and enabling access to all platform features.
  • Processing payments: Handling PKR deposits, processing withdrawal requests, and maintaining transaction records in line with financial record-keeping requirements.
  • Providing betting and gaming services: Enabling you to place sports bets, play live casino games, participate in virtual sports, and receive winnings.
  • Promotions and bonuses: Crediting welcome bonuses, tracking wagering requirements, and administering promotional campaigns you have opted into.
  • Regulatory compliance: Meeting anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and record-keeping obligations under applicable law.
  • Responsible gaming: Monitoring gameplay patterns where requested by the player or required to comply with responsible gaming obligations, and administering deposit limits, cool-off periods, and self-exclusions.
  • Fraud prevention and platform security: Detecting and preventing fraudulent account activity, unauthorised access, multi-accounting, and other security threats.
  • Customer support: Responding to queries, resolving disputes, and maintaining records of communications for quality and training purposes.
  • Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, identify technical issues, and develop new features.
  • Marketing communications: Sending promotional emails and notifications about new games, bonuses, and events — only where you have opted in to receive these. See Section 12 for opt-out information.

5. Legal Basis for Processing

Luck 97 processes personal data on the following legal bases:

  • Performance of a contract — most processing is necessary to provide you with the services you have signed up for. Without processing your identity, payment, and activity data, Luck 97 cannot operate your account or settle bets.
  • Legal obligation — identity verification, transaction record-keeping, and AML monitoring are required by applicable regulations. Luck 97 must process this data regardless of consent.
  • Legitimate interests — fraud prevention, platform security, and aggregated analytics are processed on the basis of Luck 97's legitimate interest in operating a secure and well-functioning platform. These interests are balanced against your rights and do not override them.
  • Consent — marketing communications and non-essential cookies are processed only where you have given explicit consent. You may withdraw consent at any time.

Note: Where processing is based on consent, you have the right to withdraw that consent at any time by contacting support@luck97.im or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

6. Who We Share Your Data With

Luck 97 does not sell, rent, or commercially share your personal data with third parties. Data is shared with third parties only where it is operationally necessary or legally required. The categories of third parties who may receive your data are:

  • Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, banking partners, and card networks receive the data necessary to process your deposit and withdrawal transactions. These parties are subject to their own privacy policies and applicable financial regulations.
  • Identity verification providers — where KYC verification is required, your identity documents and supporting data are shared with a licensed identity verification service. These providers process data solely for verification purposes under data processing agreements with Luck 97.
  • Fraud prevention services — risk signals and device data may be shared with fraud prevention providers to detect and prevent fraudulent account activity. Data shared for fraud prevention purposes is not used for any other purpose by those providers.
  • Technology infrastructure providers — cloud hosting, content delivery, and platform infrastructure providers may process data in the course of providing technical services to Luck 97. All infrastructure providers operate under contractual data processing obligations.
  • Regulatory and law enforcement authorities — where legally required or compelled by a valid legal order, Luck 97 will share data with regulatory authorities, law enforcement agencies, or courts. We will not share data with authorities beyond what is legally required.
  • Game studios — live casino and slot game providers receive session data necessary to operate their games. Game providers do not receive your identity data or payment information.

Luck 97 never shares your personal data with advertisers, data brokers, social media platforms, or any third party for commercial marketing purposes.

7. Cookies and Tracking Technologies

Luck 97 uses cookies and similar tracking technologies to operate the platform effectively. Cookies are small data files stored on your device that help the platform remember your preferences and session state. The types of cookies used on Luck 97 are:

  • Strictly necessary cookies: Required for the platform to function. These include session management cookies that keep you logged in and security cookies that prevent fraud. These cannot be disabled without breaking platform functionality.
  • Functional cookies: Remember your preferences such as language settings, previously selected payment methods, and game lobby filters. These are not strictly necessary but improve your experience.
  • Analytics cookies: Collect aggregated, anonymised data about how the platform is used — page views, session lengths, feature usage — to help Luck 97 improve the platform. No personally identifiable information is included in analytics data.
  • Marketing cookies: Only used where you have consented to receive marketing communications. These track whether you have interacted with promotional emails or notifications.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the Luck 97 platform from functioning correctly. To opt out of non-essential cookies, contact support@luck97.im or adjust your browser settings accordingly.

luck 97

8. Data Storage and Security

All personal data collected by Luck 97 is stored on secure servers. Data in transit between your device and Luck 97 infrastructure is encrypted using Transport Layer Security (TLS) with 256-bit encryption. Data stored on Luck 97 servers is encrypted at rest.

Access to personal data within the Luck 97 organisation is restricted on a strict need-to-know basis. Employees with access to player data are subject to confidentiality obligations and receive regular training on data protection procedures. Access privileges are reviewed regularly and revoked when no longer required.

Luck 97 maintains documented security policies and conducts regular security reviews of its infrastructure. In the event that a security vulnerability is identified, it is assessed and remediated according to its severity. Critical vulnerabilities are addressed on an emergency basis.

While Luck 97 takes all reasonable technical and organisational precautions to protect your data, no internet-based transmission or storage system can be guaranteed 100% secure. If you suspect your account has been compromised, contact support immediately at support@luck97.im.

9. How Long We Keep Your Data

Luck 97 retains personal data for only as long as it is needed for the purpose it was collected, or as long as required by applicable law. The general retention periods are:

  • Active account data: Retained for the duration of your account's active status plus the legally required period after closure.
  • Transaction records: Financial transaction records are retained for a minimum of five years from the date of the transaction, as required by applicable financial regulations.
  • Identity verification documents: Retained for the legally required period following account closure or the completion of the KYC process, whichever is later.
  • Support communications: Chat transcripts and email records are retained for a period of two years to support dispute resolution and quality assurance.
  • Technical logs: IP address logs and session data are retained for a maximum of 90 days unless there is an ongoing investigation or legal requirement to retain them longer.
  • Closed account data: Following account closure, your personal data is archived and then deleted according to the applicable retention schedule. You may request deletion of data not subject to a legal retention requirement at any time.

When retention periods expire, data is deleted securely or anonymised so that it can no longer be associated with you as an individual.

10. Your Data Rights

As a Luck 97 player, you have the following rights in relation to your personal data. These rights can be exercised by contacting support@luck97.im at any time:

Right of Access

Request a copy of the personal data Luck 97 holds about you. We will provide this within 30 days of your request.

Right to Rectification

Ask us to correct inaccurate or incomplete personal data. Some data (such as CNIC-verified identity) requires re-verification to correct.

Right to Erasure

Request deletion of data not subject to a legal retention requirement. Data required for regulatory compliance cannot be deleted before the retention period expires.

Right to Restriction

Ask us to restrict processing of your data in specific circumstances — for example, while accuracy is being verified or a complaint is being investigated.

Right to Portability

Where processing is based on consent or contract and carried out by automated means, request your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests, including direct marketing. On receipt of an objection to direct marketing, we will stop immediately.

11. Children's Privacy

Luck 97 is strictly an adult platform. The minimum age to register and use any Luck 97 service is 18 years. We do not knowingly collect personal data from individuals under 18 years of age.

If Luck 97 becomes aware that an account has been registered by a person under 18, the account will be immediately suspended, all activity voided, and any deposits returned. Any personal data collected from a minor will be deleted promptly.

If you are a parent or guardian and you believe your child has registered on Luck 97, please contact support@luck97.im immediately. We take underage gambling prevention seriously and will act on all reports promptly.

Parental controls: Luck 97 recommends that parents and guardians use freely available parental control tools to prevent minors from accessing online gambling platforms. These tools operate at the device or network level, independent of any specific platform.

12. Marketing Communications

Luck 97 may send promotional communications — including information about new games, deposit bonuses, free spins, seasonal promotions, and upcoming sporting events — to players who have opted in to receive marketing at registration or in their account settings.

Marketing communications are sent via:

  • Email to the address registered on your account.
  • SMS to the mobile number registered on your account.
  • In-platform notifications when you are logged in.

You can opt out of marketing communications at any time by:

  • Clicking the unsubscribe link in any marketing email.
  • Updating your communication preferences in your Luck 97 account settings.
  • Contacting support@luck97.im and requesting removal from the marketing list.

Opting out of marketing communications does not affect transactional communications — account confirmations, deposit receipts, withdrawal notifications, and security alerts will continue to be sent regardless of your marketing preferences. These are necessary for the operation of your account.

13. Changes to This Privacy Policy

Luck 97 may update this Privacy Policy from time to time to reflect changes in our data practices, platform operations, or applicable law. The date of the most recent revision is always shown at the top of this page.

When material changes are made to the policy, registered players will be notified by email at the address associated with their account. For minor clarifications that do not materially change how we process your data, we may update the policy without individual notification.

We encourage you to review this policy periodically. Continued use of the Luck 97 platform following notification of changes to this policy constitutes your acknowledgment of the updated policy. If you have concerns about any change, contact support@luck97.im before continuing to use the platform.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how your personal data has been handled, please contact the Luck 97 support team:

  • Email: support@luck97.im
  • Live Chat: Available 24/7 directly on the Luck 97 platform
  • Response time: Data-related requests are acknowledged within 48 hours and fulfilled within 30 days in most cases.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.

This Privacy Policy was last updated in January 2025 and applies to all users of the Luck 97 platform at luck97.im. For our full user agreement, see the Terms and Conditions.

Your Data Is Safe. Ready to Play?

Luck 97 is Pakistan's trusted platform for cricket betting, live Teen Patti, baccarat, and more — all in PKR, all with your data protected from day one. Register free and claim your welcome bonus today.

18+ · Gamble responsibly · Responsible Gaming