Lucky97 Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy applies to Lucky97 ("we", "us", "our") and covers all personal data collected through the lucky97.biz website and any related services, applications, or communications. Lucky97 operates as an online entertainment platform offering sports betting, live casino, crash games, Ludo, Teen Patti, esports betting, and more — all denominated in Pakistani Rupees (PKR) and served to players based in Pakistan.

We act as the data controller for all personal information you provide when you register and use a Lucky97 account. This means we are responsible for deciding how and why your data is processed, and we are accountable for keeping it safe.

By registering a Lucky97 account, you confirm that you have read and understood this Privacy Policy. If you do not agree with how Lucky97 handles personal data, please do not register or use the platform. You can contact us at any time with questions — our details are in Section 13.

Lucky97 collects personal data in three ways: information you provide directly, information generated automatically by your use of the platform, and information received from third-party payment processors when you transact in PKR.

2.1 Information You Provide to Lucky97

2.2 Data Collected Automatically

When you access Lucky97, our systems automatically collect certain technical information to keep the platform running properly and to detect fraud:

• Device information: device type, operating system, browser version
• IP address: used for fraud detection and geolocation verification
• Session data: login timestamps, session duration, pages visited within Lucky97
• Game and betting activity: bets placed, games played, stakes, outcomes — all in PKR
• Technical error logs: crash reports and system errors to improve platform stability

2.3 Data from Third-Party Payment Processors

When you deposit or withdraw PKR via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or Visa/Mastercard, the relevant payment provider shares a transaction confirmation with Lucky97 — including the transaction amount, timestamp, and masked account reference. Lucky97 does not receive or store your full bank account number, Easypaisa PIN, JazzCash PIN, or card CVV at any time.

Lucky97 uses your personal data only for purposes that are directly related to providing you with a safe, fair, and enjoyable betting and gaming experience. Below is a complete list of how we use the data we hold:

• Account creation and management: Setting up and maintaining your Lucky97 player account, including login authentication and password recovery.
• PKR transaction processing: Receiving your Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card deposits and processing your withdrawal requests to the same methods.
• Age and identity verification: Confirming you meet the 18+ age requirement and, where required by our responsible gaming or anti-fraud obligations, verifying your identity before processing large PKR withdrawals.
• Fraud and collusion detection: Analysing betting patterns, IP addresses, device fingerprints, and session data to identify and prevent fraudulent accounts, bonus abuse, multi-accounting, and match-fixing activity on Lucky97.
• Responsible gaming monitoring: Tracking deposit frequency, session length, and loss patterns to identify potentially at-risk players and trigger responsible gaming interventions — including proactive outreach by our support team.
• Customer support: Using your account history and correspondence records to resolve disputes, answer questions, and process complaint submissions about Lucky97.
• Platform communications: Sending you account-relevant notifications such as deposit confirmations, withdrawal receipts, bonus activations, and security alerts to your registered mobile number.
• Product improvement: Using anonymised, aggregated session and gameplay data to improve Lucky97's games, interface design, and betting market offerings.
• Legal compliance: Retaining transaction records and account data as required by applicable anti-money-laundering and financial record-keeping obligations.

Lucky97 processes your personal data on one or more of the following legal bases, depending on the specific data and purpose involved:

• Contractual necessity: Processing your account data, game activity, and PKR payment information is necessary to fulfil our agreement with you as a Lucky97 player — as set out in our Terms and Conditions.
• Legitimate interests: Fraud detection, security monitoring, platform improvement, and responsible gaming interventions are carried out under Lucky97's legitimate interest in operating a safe, fair, and sustainable platform for all Pakistani players.
• Legal obligation: Retaining financial transaction records and cooperating with lawful authority requests is required by applicable law.
• Consent: Where Lucky97 processes data for purposes beyond the above — for example, sending promotional communications about new games or bonuses — we will ask for your explicit consent, which you can withdraw at any time.

Lucky97 never sells your personal data to any third party. Full stop. We share your data only in the following limited, controlled circumstances:

5.1 Payment Processors

To process your PKR deposits and withdrawals, Lucky97 shares the minimum necessary data with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT), or your card network (Visa/Mastercard). These providers are regulated financial institutions and handle your payment data under their own strict security frameworks.

5.2 Game Providers

Lucky97's live casino games are powered by third-party providers including Evolution Gaming and Pragmatic Play Live. These providers receive your session token and game stake data to deliver the game to your device. They do not receive your name, CNIC, mobile number, or payment details.

5.3 Anti-Fraud and Security Services

Lucky97 uses specialist fraud detection services that analyse device fingerprints and session patterns to identify suspicious activity. These services receive technical data only — not your name or payment information — and are contractually prohibited from using Lucky97 data for any other purpose.

5.4 Legal Authorities

Lucky97 will disclose player data to law enforcement, regulatory bodies, or courts where we are legally compelled to do so by a valid order. We will notify the affected player where we are legally permitted to do so before making any such disclosure.

Because Lucky97 processes real PKR transactions, we want to be completely transparent about how payment data is handled. This section covers what Lucky97 does — and importantly, what Lucky97 does not do — with your financial information.

What Lucky97 stores:

• Transaction amounts (in PKR), timestamps, and direction (deposit or withdrawal)
• Payment method type (e.g., "Easypaisa", "JazzCash", "IBFT")
• Masked account references (e.g., last 4 digits of mobile number or card)
• Transaction status (pending, completed, failed)

What Lucky97 never stores:

• Your Easypaisa or JazzCash mPIN or account password
• Your full bank account number, IBAN, or card number
• Your CVV or card security code
• Any biometric data used by your mobile wallet for authentication

All PKR transaction records are retained for a minimum of five years to comply with applicable financial record-keeping obligations. These records are used only for transaction dispute resolution, anti-money-laundering compliance, and audit purposes — never for commercial profiling.

Lucky97 uses cookies and similar technologies to keep the platform working correctly, to detect fraud, and to understand how Pakistani players use the site so we can improve it. Here is a plain-language breakdown of the cookies Lucky97 uses:

Locked toggles are required for Lucky97 to operate. You can manage optional cookies through your browser settings.

Lucky97 does not use cross-site tracking cookies or share cookie data with advertising networks. Our analytics data is anonymised and aggregated before any analysis takes place — individual player behaviour is never extracted for commercial purposes.

Lucky97 retains your personal data only for as long as it is necessary for the purposes described in this policy, or as required by applicable law. The following retention schedules apply:

When the applicable retention period expires, Lucky97 securely deletes or irreversibly anonymises the data. Players who close their accounts can request immediate deletion of non-legally-required data — see Section 10 for your right to erasure.

Protecting your personal data is something Lucky97 invests in seriously — not just as a legal requirement but as a genuine commitment to every Pakistani player who trusts us with their information. Here is what we do to keep your data safe:

• TLS 1.3 encryption: All data transmitted between your browser or app and Lucky97's servers is encrypted using TLS 1.3 — the current industry standard. This protects your login credentials, game data, and payment information from interception.
• Encrypted data storage: Sensitive fields in our database — including CNIC numbers and payment references — are stored in encrypted form. Even in the unlikely event of an unauthorised database access, these fields cannot be read without the encryption keys.
• Two-factor authentication: Lucky97 offers SMS-based 2FA for all accounts. We strongly recommend enabling it — it means that even if someone gets your password, they cannot access your Lucky97 account without your mobile phone.
• Access controls: Access to player data within Lucky97 is strictly limited to staff members who need it for their specific role. Access logs are maintained and reviewed regularly.
• Penetration testing: Lucky97's systems are independently tested for security vulnerabilities on a regular basis. Issues identified are remediated as a priority before any public disclosure.
• Incident response: In the event of a data breach that affects Pakistani players, Lucky97 will notify affected players via SMS and email within 72 hours of becoming aware of the incident, including what data was affected and what steps we are taking.

As a Lucky97 player and a person whose data we hold, you have meaningful rights over your information. Here is what you can ask us to do — and how to do it.

To exercise any of these rights, email support@lucky97.biz with the subject line "Data Rights Request" and your Lucky97 username. We will respond within 30 days. Identity verification may be required before we action a request.

Lucky97 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes an automatic age check against the date of birth provided, and we require CNIC verification for any account where age cannot be automatically confirmed.

If Lucky97 discovers that an account has been created by a person under 18 — or that an adult created an account using a minor's details — the account will be immediately and permanently suspended. All personal data associated with the account will be deleted as quickly as legally permissible, and any funds in the account will be handled in accordance with our Terms and Conditions and applicable law.

If you believe a minor may have registered a Lucky97 account using false information, please contact us immediately at support@lucky97.biz.

Lucky97 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements in our data practices. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Send an SMS notification to all registered Pakistani players at least 7 days before the changes take effect.
• Display a prominent notice on the Lucky97 platform for the first 14 days after the change goes live.

Your continued use of Lucky97 after a policy change takes effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account before the effective date — any remaining PKR balance will be returned to your registered payment method.

Previous versions of the Lucky97 Privacy Policy are available on request from our support team at support@lucky97.biz.

If you have any questions, concerns, or requests relating to your personal data and how Lucky97 handles it, please get in touch. Our team is based in Pakistan and responds in both English and Urdu.

• Email (privacy enquiries): support@lucky97.biz — subject line "Privacy Query"
• Email (data rights requests): support@lucky97.biz — subject line "Data Rights Request"
• Live Chat: Available within your Lucky97 account dashboard, 24/7
• Response time: We aim to respond to all privacy-related emails within 48 hours during Pakistan Standard Time business hours.

For formal data rights requests (access, erasure, portability), we are required to respond within 30 calendar days. If your request is complex or we receive a high volume simultaneously, we may extend this to 60 days — but we will always notify you of the extension and reason within the original 30-day window.