Luck97 protects the personal data of every Pakistani player — from Gwadar to Gilgit
Plain Language Summary: Luck97 collects only the information needed to run your account, process your PKR payments, and keep the platform secure. We never sell your data to advertisers or third parties for marketing purposes. We protect everything with encryption. You can ask us to delete your data at any time. The full details are below — and they say exactly what the summary says.
1. Who We Are
This Privacy Policy applies to luck97.biz, operated by Luck97 ("we", "us", "the Platform"). Luck97 is an online gaming and sports betting platform built specifically for Pakistani players, offering cricket betting, sports betting, esports betting, card games, and fishing games — all denominated in Pakistani Rupees with local payment methods including Easypaisa and JazzCash.
As the operator of luck97.biz, Luck97 is the data controller for all personal information collected through the platform. This means we determine the purposes and means by which your personal data is processed. If you have any questions about how your data is handled, you can reach us directly at support@luck97.biz — our team responds in both Urdu and English and will always address privacy queries as a priority.
By registering an account or using luck97.biz in any capacity, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside Luck97's Terms and Conditions, which govern your use of the platform more broadly.
2. Information We Collect
Luck97 collects personal information through two routes: information you give us directly during registration and account use, and information collected automatically when you use the platform. Here is a clear breakdown of both.
2.1 Information You Provide Directly
| Data Type | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number | At registration and verification |
| Contact Data | Mobile number, email address | At registration |
| Location Data | City, province, postal address | At registration or verification |
| Payment Data | Easypaisa number, JazzCash number, bank account details (tokenised) | When making deposits or withdrawals |
| Account Credentials | Username, encrypted password | At registration |
| Verification Documents | Copy of CNIC, proof of address, selfie for identity verification | When KYC verification is requested |
| Communications | Support chat messages, emails sent to Luck97 | When you contact Luck97 support |
2.2 Information Collected Automatically
When you access luck97.biz, certain technical information is recorded automatically by our servers and analytics systems. This includes:
- Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator.
- Usage Data: Pages visited on luck97.biz, time spent on each page, features used, bets placed, games played, deposit and withdrawal activity, and click patterns.
- Session Data: Login times, session durations, logout events, and any disconnection events during gameplay.
- Cookie Data: Information stored via cookies and similar tracking technologies — see Section 6 for full details on our cookie use.
Luck97 does not collect sensitive personal data such as religious beliefs, political opinions, or biometric data beyond what is necessary for identity verification. We do not collect information about your race or ethnicity for any purpose.
3. How Luck97 Uses Your Information
Every piece of data Luck97 collects has a specific, defined purpose. We do not collect information speculatively and we do not use your data for purposes you would not reasonably expect given the nature of an online betting and gaming platform. Here is a full account of how we use your information:
- Account Creation and Management: Your name, contact details, and credentials are used to create and manage your Luck97 account, authenticate your login sessions, and communicate important account updates to you.
- Payment Processing: Your payment details (Easypaisa number, JazzCash number, bank account details) are used exclusively to process deposits to your Luck97 wallet and withdrawals back to your account. Payment data is tokenised — we store a reference token, not your actual account numbers, in plaintext.
- Identity Verification (KYC): Where required, your CNIC and other identity documents are used to verify that you are who you say you are, that you meet the 18+ age requirement, and to comply with anti-money laundering obligations. These documents are treated with the highest level of security.
- Fraud Detection and Platform Security: Technical and behavioural data is analysed to detect and prevent fraud, bonus abuse, multi-accounting, and other prohibited conduct as described in Luck97's Terms and Conditions. This is a legitimate and necessary use of data that protects all players on the platform.
- Platform Improvement: Aggregated, anonymised usage data helps Luck97 understand how Pakistani players use the platform and where improvements can be made to betting markets, game offerings, payment flows, and the mobile experience.
- Customer Support: When you contact Luck97 support, your account data and support history are accessed by our team to resolve your query effectively. Support interactions are logged for quality assurance.
- Responsible Gaming: Luck97 uses betting and gaming activity data to identify patterns that may indicate problem gambling behaviour and to enable our responsible gaming tools — including deposit limits, session reminders, and cooling-off periods — to function correctly.
- Marketing Communications: If you have opted in to marketing communications during registration or in your account settings, Luck97 may send you information about new games, promotions, and offers via your registered mobile number or email address. You can opt out at any time.
Luck97 secures all payment data for Pakistani players making PKR transactions
4. Legal Basis for Processing Your Data
Luck97 processes your personal information on the following legal bases, depending on the specific purpose of the processing:
- Contract Performance: The majority of Luck97's data processing — account management, payment processing, bet and game settlement — is necessary to perform the contract between Luck97 and you as a registered player. Without this processing, Luck97 cannot provide you with the service.
- Legitimate Interests: Fraud detection, security monitoring, and aggregated platform analytics serve Luck97's legitimate business interests and also protect the interests of all players on the platform. These processing activities are balanced and do not override your fundamental rights.
- Legal Obligation: Identity verification (KYC), anti-money laundering checks, and certain record-keeping requirements are conducted because they are legally required, not just because they are useful. Luck97 complies with applicable anti-money laundering regulations and cooperates with lawful requests from relevant authorities.
- Consent: Marketing communications are sent only on the basis of your explicit, freely given consent at registration or through your account settings. You can withdraw this consent at any time by updating your preferences in your Luck97 account or by contacting support.
5. Payment and Financial Data
Luck97 takes the security of financial data with particular seriousness because it directly affects you in a tangible, material way. Here is exactly how your payment data is handled on luck97.biz.
5.1 Tokenisation
When you save a payment method — your Easypaisa number, JazzCash wallet, NayaPay account, or bank details — for future use on Luck97, we do not store the actual account number in our database in plaintext. Instead, a tokenised reference is stored, which has no value to any attacker who might gain access to our data. The actual account credentials sit with our certified payment processing partners.
5.2 Transaction Records
Luck97 maintains records of all transactions — deposits, withdrawals, bets, winnings — as required for accounting, fraud detection, and regulatory compliance. These records include the amount, timestamp, payment method type (e.g., "Easypaisa"), and transaction status. They do not include the full account number beyond what is necessary for the specific transaction type.
5.3 Anti-Money Laundering
Luck97 is obligated to conduct anti-money laundering monitoring on financial activity through the platform. This means we analyse transaction patterns for indicators of suspicious activity. Where unusual activity is identified, we are legally required to investigate and, in certain circumstances, to report to relevant authorities. This is a non-negotiable legal requirement and is not something players can opt out of. All such monitoring is conducted with discretion and without any presumption of guilt.
No Third-Party Marketing Use: Luck97 never shares your financial data with advertisers, data brokers, or any third party for commercial purposes. Your Easypaisa or JazzCash details are used solely to process transactions on the Luck97 platform.
6. Cookies and Tracking Technologies
Luck97 uses cookies and similar technologies on luck97.biz. Cookies are small files stored on your device that help the website function, remember your preferences, and understand how you interact with the platform. Here is a clear breakdown of the cookies we use and why.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential Cookies | Maintain your login session, prevent CSRF attacks, process secure transactions | No — required for the platform to function |
| Functional Cookies | Remember your preferences (language, odds format, display settings) | Yes — disabling reduces personalisation |
| Analytics Cookies | Aggregate usage data to understand platform performance (anonymised) | Yes — opt out via account settings or browser |
| Security Cookies | Detect suspicious login activity, rate-limit requests, prevent fraud | No — required for platform security |
Luck97 does not use third-party advertising cookies. We do not place cookies on your device that track you across other websites for advertising targeting purposes. The cookies we use are strictly for the functional operation, security, and internal analytics of luck97.biz itself.
You can manage cookie preferences through your browser settings. However, disabling essential or security cookies will impair or prevent your ability to use the Luck97 platform — these cookies are genuinely necessary for core functionality, not marketing.
7. Sharing Your Personal Data
Luck97 does not sell your personal data. Full stop. We share your data with third parties only in the following limited, defined circumstances:
7.1 Payment Processing Partners
To process deposits and withdrawals, Luck97 shares necessary transaction data with our payment processing partners — Easypaisa, JazzCash, NayaPay, SadaPay, bank networks, and Visa/Mastercard processing systems. These partners receive only the data strictly necessary to complete the specific transaction and are bound by their own privacy and security standards as regulated financial service providers in Pakistan.
7.2 Identity Verification Providers
Where Luck97 uses third-party KYC (Know Your Customer) verification services to confirm player identity, relevant identity documents may be shared with those providers solely for the purpose of completing the verification check. These providers operate under strict data processing agreements and are prohibited from using your data for any other purpose.
7.3 Legal and Regulatory Disclosure
Luck97 will disclose personal data to law enforcement, regulatory authorities, or other government bodies when required to do so by applicable law, by a lawful order, or where necessary to protect the rights and safety of Luck97 and its players. We will not disclose more data than is required by the specific legal demand.
7.4 Business Operations
Luck97 may use trusted third-party service providers for ancillary operational functions such as cloud hosting, email delivery infrastructure, and fraud analytics platforms. These providers act as data processors under contracts that require them to handle your data according to our instructions and this Privacy Policy. They have no right to use your data independently.
Luck97 never shares your data with advertisers, data brokers, affiliate marketing networks, or any commercial third party for the purpose of targeting you with advertising or profiling you for commercial purposes.
Luck97 — your data stays protected whether you play from Hunza or anywhere across Pakistan
8. How We Protect Your Data
Data security is not an afterthought at Luck97 — it is built into the architecture of the platform from the ground up. Here is what we actually do to protect your information:
- SSL/TLS Encryption: All data transmitted between your device and luck97.biz is encrypted using TLS (Transport Layer Security). This means anyone intercepting network traffic between you and Luck97 cannot read the content of your communications, transactions, or login sessions.
- Encrypted Data Storage: Sensitive data stored in our databases — including passwords, identity verification data, and payment tokens — is encrypted at rest. Passwords are hashed using modern, one-way cryptographic algorithms and cannot be decrypted even by Luck97 staff.
- Two-Factor Authentication: Luck97 offers two-factor authentication (2FA) for all accounts. When enabled, logging in requires both your password and a one-time code sent to your registered mobile number, providing a strong second layer of protection against unauthorised access.
- Access Controls: Internal access to player data at Luck97 is restricted on a strict need-to-know basis. Support staff see only what is necessary to help with your specific query. Technical staff are subject to background checks and data security training. Access to sensitive systems is logged and audited.
- Regular Security Audits: Luck97 conducts regular security reviews of its platform infrastructure and data handling processes. Known vulnerabilities are patched promptly and security posture is continuously assessed.
- Incident Response: In the event of a security incident that affects your personal data, Luck97 will notify you as quickly as possible via your registered email address and will take immediate steps to contain and remediate the incident.
Your Role in Security: Luck97 can protect the data on our side, but we also need your cooperation. Use a strong, unique password for your Luck97 account. Enable 2FA. Never share your password with anyone — including people claiming to be from Luck97 (we will never ask for your password). If you suspect your account has been compromised, contact us immediately.
9. How Long We Keep Your Data
Luck97 retains your personal data for as long as it is necessary for the purposes for which it was collected, subject to any legal obligations that require us to keep certain records for specified minimum periods.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and Identity Data | For duration of account + 5 years after closure | Anti-money laundering legal requirements |
| Transaction Records | 7 years from transaction date | Financial record-keeping obligations |
| Betting and Game History | 5 years from activity date | Dispute resolution, responsible gaming analysis |
| KYC Documents | 5 years from account closure | AML and identity verification compliance |
| Support Communications | 3 years from last interaction | Quality assurance, dispute evidence |
| Marketing Preferences | Until you opt out + 1 year | Consent records |
| Technical/Log Data | 90 days rolling | Security and fraud monitoring |
Once the relevant retention period expires, Luck97 securely deletes or anonymises the data in question. Anonymised data — data that cannot be linked back to any individual — may be retained for longer periods for statistical analysis and platform improvement purposes.
10. Your Privacy Rights
As a Luck97 player, you have meaningful rights over your personal data. These are not token rights — they are genuine entitlements that Luck97 takes seriously and will honour. Here is what you can ask for and how to do it.
Right to Access
Ask for a copy of all personal data Luck97 holds about you. We will provide it within 30 days in a readable format.
Right to Rectification
If any data we hold about you is inaccurate or incomplete, ask us to correct it. We will update it promptly.
Right to Erasure
Ask us to delete your personal data where we no longer have a legal basis to hold it. Some data must be retained by law — we will tell you what and why.
Right to Restriction
Ask us to pause processing of your data while a dispute or accuracy concern is being resolved, without deleting it entirely.
Right to Data Portability
Request your personal data in a structured, machine-readable format so you can transfer it to another service if you wish.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing emails), withdraw that consent at any time via account settings or by contacting support.
To exercise any of these rights, contact Luck97 at support@luck97.biz with the subject line "Privacy Rights Request" and a clear description of what you are requesting. We will acknowledge your request within 48 hours and complete it within 30 days. We may need to verify your identity before processing certain requests.
11. Children's Privacy
Luck97 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18, and we do not permit access to the platform by minors. The registration process includes an age declaration and Luck97 conducts age verification as part of its standard KYC process.
If Luck97 becomes aware that personal data has been collected from a person under 18, that account will be immediately closed, any winnings will be forfeited, deposits will be returned, and the data will be deleted from our systems as quickly as legally possible. If you believe a minor has registered an account on Luck97, please contact us at support@luck97.biz immediately.
Parents and guardians are encouraged to use parental control tools available on mobile devices and to have open conversations with young people about responsible use of online platforms. Luck97 also recommends using the self-exclusion tools available in any account that may have been improperly registered.
Under 18? You are not permitted to use Luck97. Please do not attempt to register. If someone you know under 18 has accessed this platform, contact us immediately at support@luck97.biz.
12. Changes to This Privacy Policy
Luck97 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to how we explain our approach to privacy. When we make material changes — meaning changes that affect your rights or the core nature of how we handle your data — we will notify you in advance via your registered email address and/or via a prominent notice on luck97.biz.
For minor clarificatory changes that do not affect your rights, the updated policy will be published on this page with the revised "Last Updated" date at the top. We encourage you to review this page periodically. Your continued use of luck97.biz after any changes take effect constitutes your acceptance of the updated Privacy Policy.
The version of the Privacy Policy in effect at the time any data was collected governs how that data is handled, unless you have separately consented to the updated policy applying to previously collected data.
13. How to Contact Luck97 About Privacy
Any question, concern, or request related to your privacy or the handling of your personal data by Luck97 should be directed to our support team. We take privacy queries seriously and treat them as a priority.
- Email: support@luck97.biz — use subject line "Privacy Query" or "Privacy Rights Request"
- Live Chat: Available 24/7 on luck97.biz — select "Privacy / Data" from the support topic menu
- Response Time: Privacy queries acknowledged within 48 hours, substantively resolved within 30 days
- Languages: Urdu and English — both available for privacy discussions
For general questions about your account, payments, or betting, the same support channels apply. If you are concerned about how Luck97 has handled your data and are not satisfied with our response after raising the matter with us directly, you have the right to escalate to a relevant data protection authority under applicable law.