Lucky97 Privacy Policy – How We Protect Your Data in Pakistan

Lucky97 is an online gaming and sports betting platform operated for Pakistani members. When this policy refers to "Lucky97", "we", "us" or "our", it means the company operating the Lucky97 platform at lucky97.online. Lucky97 is the data controller for all personal information collected through registration, gameplay, transactions and any other interaction with the platform.

This Privacy Policy applies to all Lucky97 members based in Pakistan and covers the Lucky97 website, mobile browser experience and any related communications including email, SMS and in-platform notifications. It does not apply to third-party websites that may be referenced on our platform — those sites operate their own independent privacy policies.

Lucky97 collects personal information through several different touchpoints. The table below summarises the main categories of data we collect and the typical source for each.

Lucky97 does not collect sensitive personal data such as biometric data, health information or political opinions. We collect only what is genuinely necessary to operate your account, process your transactions and comply with our obligations.

Every piece of personal data Lucky97 holds serves a specific purpose. We do not collect information speculatively or hold data for longer than needed. The main purposes for which Lucky97 processes your personal data are:

• Account management: To create and maintain your Lucky97 account, authenticate your identity when you log in and ensure only you can access your account.
• Transaction processing: To handle deposits in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and Visa/Mastercard, and to process withdrawals to your registered payment method.
• Age and identity verification: To confirm you meet the 18-year minimum age requirement and, where required, to verify your identity before processing withdrawals or approving higher-limit activity.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, account takeovers and other forms of abuse on the Lucky97 platform.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to apply deposit limits, cool-off periods or self-exclusion restrictions where a member has requested them or where Lucky97 has a duty of care obligation.
• Customer support: To respond to your queries, resolve disputes and maintain a record of communications relevant to your account.
• Platform improvement: To analyse usage patterns, understand which features are most valuable to our Pakistani members and improve the Lucky97 platform over time.
• Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, bet settlements) and, where you have opted in, to send you promotional information about Lucky97 offers.

Lucky97 processes your personal data on the following grounds:

• Contractual necessity: Processing required to fulfil the agreement between you and Lucky97 — operating your account, processing transactions and providing the platform service.
• Legitimate interests: Processing that serves Lucky97's legitimate business interests, including fraud prevention, platform security and analysis to improve the service, provided those interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable regulations including anti-money-laundering requirements and identity verification obligations.
• Consent: Processing based on your explicit opt-in, primarily for marketing communications. You can withdraw consent for marketing at any time by contacting Lucky97 support or updating your communication preferences in your account settings.

Lucky97 does not sell your personal data to any third party for marketing purposes. Full stop. We share your data only in the following specific circumstances and only to the extent necessary for each purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and Visa/Mastercard processors receive the minimum information needed to process your specific transaction. They do not receive your full Lucky97 account history or any data beyond what is required for payment processing.
• Identity verification providers: When Lucky97 requires document verification, we may use a third-party verification service. That provider processes your submitted documents for the sole purpose of confirming your identity and is contractually prohibited from using your data for any other purpose.
• Game and platform providers: Live casino table providers and game studios receive the minimum data needed to operate the game session (typically a session token, not personally identifiable information). They are bound by data protection agreements with Lucky97.
• Fraud and security services: Lucky97 may share technical and transaction data with fraud detection services to identify and block suspicious activity. These services operate under strict data processing agreements.
• Legal and regulatory requirements: Lucky97 may disclose personal data where required by law, regulation or a valid legal order. In such cases, we disclose only what is legally required and will notify the affected member where it is legally permissible to do so.

Because all Lucky97 transactions are processed in Pakistani Rupees (PKR), the platform works directly with Pakistani payment infrastructure. This means your payment data — Easypaisa mobile wallet number, JazzCash account, NayaPay or SadaPay wallet reference, or bank account details for IBFT — is processed locally through the relevant Pakistani payment network.

Lucky97 does not store full card numbers for Visa or Mastercard transactions. Card payments are tokenised, meaning we retain only a secure token that references your card without storing the actual card number, expiry or CVV. All tokenisation is handled by the payment processor, not by Lucky97's own servers.

Every transaction on your Lucky97 account — deposits, withdrawals, bets placed and winnings received — is logged and accessible in your personal transaction history within your account. This log is maintained for the lifetime of your account plus a reasonable period thereafter for compliance purposes.

• Lucky97 will never ask you to share your full Easypaisa PIN, JazzCash MPIN or bank internet banking password with our support team.
• Withdrawal payment details can only be updated through the account settings process, which requires authentication. Lucky97 support cannot change your withdrawal method on your behalf without this process being followed.
• If you believe an unauthorised transaction has occurred on your Lucky97 account, contact our support team immediately. We investigate all reports within 24 hours.

Lucky97 uses cookies and similar tracking technologies to operate the platform, keep you logged in between sessions, remember your preferences and understand how members use the site. Cookies are small text files stored on your device by your browser at the request of the Lucky97 website.

The types of cookies Lucky97 uses are:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. You cannot opt out of these while using Lucky97.
• Functional cookies: Remember your platform preferences such as language settings, preferred game lobby view and notification preferences. Disabling these will mean preferences reset with each visit.
• Analytics cookies: Used to understand which pages and features members use most, how long they spend on each section and where errors occur. This data is aggregated and anonymised — it is not linked to your identity. Lucky97 uses this data to improve the platform.
• Marketing cookies: Used only where you have opted in to receive promotional communications. These help Lucky97 understand which promotions are relevant to you based on your platform activity.

Most browsers allow you to control cookie settings including blocking specific cookie types or clearing existing cookies. Adjusting your browser's cookie settings may affect certain Lucky97 platform features. Instructions for managing cookies are available in your browser's help documentation.

Lucky97 retains your personal data for as long as your account is active and for a reasonable period thereafter, depending on the type of data and the reason for retaining it. The general retention principles we apply are:

• Account and identity data: Retained for the duration of your Lucky97 account and for a period of five years after account closure, in line with standard anti-money-laundering compliance requirements.
• Transaction records: All PKR deposits, withdrawals and betting records are retained for a minimum of five years after each transaction date.
• Support communications: Chat transcripts and email correspondence are retained for up to three years after the last interaction, allowing us to reference prior communications in the event of a dispute.
• Technical and usage data: Anonymised analytics data may be retained indefinitely as it cannot be linked back to any individual. Identifiable technical data such as IP logs is retained for up to 12 months.
• Marketing preferences: Your opt-in or opt-out record for marketing communications is retained as long as your account exists, ensuring your preferences are respected consistently.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised. Lucky97 conducts periodic data audits to ensure that retained data does not exceed what is necessary.

As a Lucky97 member, you have a number of rights in relation to the personal data we hold about you. Lucky97 is committed to making it straightforward for you to exercise any of these rights. To submit a request, contact our support team through the live chat on the platform or by email.

Lucky97 applies technical and organisational security measures to protect your personal data from unauthorised access, loss, disclosure or destruction. These measures include encryption of data in transit using TLS, encryption of sensitive stored data, access controls that limit who within the Lucky97 organisation can view specific categories of member data and regular security reviews of our platform infrastructure.

Your account security also depends on the steps you take on your side. Lucky97 recommends that every member:

• Uses a unique, strong password for their Lucky97 account that is not shared with any other service.
• Never shares their Lucky97 login credentials with anyone, including people claiming to be Lucky97 staff. Our team will never ask for your password.
• Logs out of Lucky97 when using a shared or public device.
• Contacts Lucky97 support immediately if they suspect their account has been accessed by someone else.

In the event of a data security incident that affects your personal data, Lucky97 will notify affected members promptly and take immediate steps to contain the breach and prevent further unauthorised access.

Lucky97 is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a Lucky97 account has been opened by someone under 18, we will suspend the account immediately, delete the associated personal data to the extent permitted by our compliance obligations, and return any funds deposited using the original payment method.

If you believe a minor may have opened a Lucky97 account, please contact our support team immediately. We take this matter seriously and will act on all such reports without delay. Parents and guardians who are concerned about their children accessing online gaming platforms are encouraged to use device-level parental control tools, which most Pakistani mobile operating systems and network providers support.

Lucky97 reviews this Privacy Policy periodically and will update it when there are changes to the way we collect, use or protect personal data, or when legal requirements change. The effective date at the top of this page reflects when the current version was last updated.

Where changes to this policy are material — meaning they significantly affect how we handle your personal data — Lucky97 will notify active members through in-platform announcements and, where appropriate, by email to the registered address. For minor clarifications or formatting updates that do not change the substance of the policy, the updated version will simply be published on this page without a separate notification.

We recommend checking this page periodically if you want to stay up to date. Continuing to use the Lucky97 platform after an updated policy is posted constitutes acceptance of the revised terms. If you disagree with any changes to this policy, you may close your Lucky97 account by contacting our support team.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or need to report a privacy concern, please contact the Lucky97 team through any of the following channels:

• Live chat: Available 24/7 on the Lucky97 platform. This is the fastest way to reach us for any data-related request.
• Email: support@lucky97.online — we aim to respond to all email enquiries within one business day.

When submitting a data rights request, please include your registered mobile number or email address so we can locate your account and verify your identity before processing the request. We will not process data rights requests where we cannot confirm the requester's identity, as this is itself a data protection measure — processing a data request for the wrong person would be a privacy breach.