Privacy Policy

Welcome to luc97 (hereinafter referred to as "luc97", "the Platform", "we", "us" or "our"). luc97 operates as an online casino and sports betting information platform primarily serving users across Pakistan — including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.

We recognise that your privacy matters. This Privacy Policy ("Policy") explains in clear terms how luc97 collects, uses, stores, shares and safeguards personal information about you ("User", "you" or "your") in connection with your use of the Platform and any associated services.

By accessing the Platform, creating an account, or using any feature of luc97's services, you acknowledge that you have read and understood this Policy and that you consent to the data practices described herein. If you do not agree with this Policy, you must not use the Platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information that relates to an identified or identifiable natural person, including but not limited to your name, email address, date of birth, postal address, financial information and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For users of luc97, this is the luc97 operator entity.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller, subject to a data processing agreement.
• "Cookies" — small text files placed on your device by a website to store information about your preferences, session or browsing behaviour.
• "KYC" — Know Your Customer; the identity verification process required for account compliance purposes.
• "CNIC" — Computerised National Identity Card; a government-issued identity document used in Pakistan.

The Data Controller responsible for personal data collected through the luc97 Platform is the luc97 operator entity. The Platform operates under applicable international licensing where relevant and does not claim registration, authorisation or oversight by Pakistani domestic authorities including the Government of Pakistan, the Pakistan Telecommunication Authority (PTA) or the State Bank of Pakistan.

For all data-related queries, requests or complaints, users may contact luc97 via the support channel specified in Section 16 (Contact Us) of this Policy.

luc97 collects personal data through several channels. The categories of data we may collect include:

4.1 Registration & Account Data

When you create an account on luc97, we collect the information you provide during registration, including:

• Full legal name
• Date of birth (for age verification purposes)
• Email address
• Username and password (stored in encrypted form)
• Country and city of residence (for example, Karachi, Lahore or Islamabad)
• Phone number, where provided

4.2 KYC & Identity Verification Data

To comply with identity verification requirements, luc97 may collect:

• Government-issued photo identification (such as a Pakistani CNIC or passport)
• Proof of address documentation
• Selfie or live identity verification images, where required by the verification process

4.3 Financial & Transaction Data

In connection with deposits and withdrawals, we collect transaction-related information including:

• Deposit and withdrawal amounts in PKR or other currencies
• Payment method type and associated reference identifiers
• Transaction timestamps and processing records

References to familiar Pakistani payment ecosystem options — such as digital wallets or banking institutions — are used for transactional context only. luc97 does not store full payment credentials beyond what is technically necessary for transaction processing.

4.4 Gaming & Activity Data

• Game session history, wagering amounts, outcomes and timestamps
• Bonus usage and wagering requirement progress
• Responsible gambling limit settings and self-exclusion records
• Sports betting selections and market activity

4.5 Technical & Device Data

• IP address and approximate geolocation data
• Device type, operating system, browser type and version
• Session identifiers and authentication tokens
• Log data including pages viewed, timestamps and referring URLs

4.6 Communications Data

• Support correspondence via live chat or email
• Feedback, complaints and any information you voluntarily provide to our support team
• Preferences regarding marketing communications, where applicable

luc97 processes personal data only where a valid legal basis exists. The primary legal bases on which we rely are set out in the table below:

luc97 uses the personal data collected for the following specific purposes:

• Account Creation & Management: To create, maintain and administer your luc97 account, including authentication, password recovery and profile management.
• Service Delivery: To provide you with access to gaming content, sports betting markets, live casino tables and all associated Platform features.
• Financial Transactions: To process deposits and withdrawals, maintain accurate transaction records, and comply with financial reporting obligations.
• Identity & Age Verification: To verify your identity and confirm that you meet the minimum age requirement (18+ or the higher minimum required by the operator/license jurisdiction) before processing withdrawals or as otherwise required.
• Fraud Prevention & Security: To detect, investigate and prevent fraudulent activity, money laundering, collusion, bonus abuse and other forms of prohibited conduct.
• Responsible Gambling: To maintain records of responsible gambling limit settings, self-exclusion requests, and related account restrictions to protect your wellbeing.
• Customer Support: To respond to your queries, complaints and requests in a timely and effective manner.
• Regulatory Compliance: To meet applicable legal, regulatory and licensing obligations.
• Platform Improvement: To analyse usage patterns, identify technical issues and improve the overall performance and usability of the Platform.
• Marketing Communications: Where you have provided consent, to send you promotional information about luc97 offers and services. You may withdraw consent at any time by contacting support.

luc97 does not sell your personal data to third parties. We may, however, share your data in the following limited circumstances:

7.1 Service Providers & Data Processors

luc97 engages trusted third-party service providers to assist with Platform operations, including payment processing, identity verification, fraud detection, data hosting, customer support systems and analytics. These providers process data only on luc97's behalf and under contractual data processing agreements that restrict use to the specified purpose.

7.2 Legal & Regulatory Disclosure

We may disclose personal data to competent authorities, regulators or law enforcement agencies where required by applicable law, court order or licensing obligation. luc97 will only disclose what is strictly required in such circumstances.

7.3 Responsible Gambling Databases

Where required by the operator's license jurisdiction, self-exclusion and responsible gambling records may be shared with cross-operator self-exclusion registries or regulatory bodies to prevent circumvention of exclusion orders.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of the Platform's business, personal data may be transferred to the successor entity, subject to the same privacy protections as set out in this Policy. Users will be notified of any material change in data controller identity.

luc97 uses cookies and similar tracking technologies to operate the Platform, enhance user experience, and gather usage analytics. The types of cookies we may use include:

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the Platform's core functionality, including login and session security. Non-essential cookies may be declined without impacting your ability to access Platform content.

luc97 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or licensing obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your account and for a period thereafter as required by applicable obligations.
• KYC & Identity Documents: Retained for a minimum period as required by applicable anti-money laundering (AML) and licensing regulations following account closure — typically five (5) years, or longer where required by law.
• Transaction Records: Financial transaction records are retained for the period required by applicable financial record-keeping obligations.
• Responsible Gambling Records: Self-exclusion, limit-setting and responsible gambling records are retained to prevent circumvention of exclusion orders, even after account closure.
• Support & Communications: Customer support correspondence is retained for a reasonable period to support complaint resolution and service improvement.

Upon expiry of applicable retention periods, personal data will be securely deleted or anonymised in accordance with our internal data management procedures.

luc97 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include:

• Encryption: Data transmitted between your device and the Platform is encrypted using industry-standard SSL/TLS protocols. Passwords are stored in hashed and salted form — not in plain text.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis, with access logs maintained for accountability.
• Security Monitoring: The Platform operates continuous monitoring for suspicious activity, including automated fraud detection and intrusion prevention systems.
• Data Minimisation: luc97 collects only the data necessary for the stated processing purposes and does not retain data beyond applicable retention periods.

No data transmission over the internet can be guaranteed as completely secure. luc97 cannot warrant the absolute security of data transmitted to the Platform, but we apply reasonable and proportionate measures to minimise risk.

Depending on your jurisdiction and applicable data protection law, you may have the following rights in relation to your personal data held by luc97. To exercise any of these rights, please contact us using the details in Section 16.

luc97 will respond to verifiable data rights requests within a reasonable timeframe. We may require identity verification before processing certain requests to protect against unauthorised disclosure. Some rights may be limited where overriding legal obligations apply — for example, AML record-keeping requirements may restrict the right to erasure for certain transaction records.

luc97 strictly prohibits use of the Platform by persons under 18 years of age — or the higher minimum age required by the operator/license jurisdiction. The Platform does not knowingly collect or process personal data from minors.

Age verification is conducted as part of the registration and KYC process. Where luc97 has reasonable grounds to believe that a User may be under the applicable minimum age, account access will be suspended and all transactions frozen pending verification. Any data collected from a User subsequently confirmed to be underage will be securely deleted in accordance with applicable requirements.

Parents and guardians who become aware that a minor has registered on luc97 are asked to contact support immediately so that appropriate action can be taken.

luc97 operates under applicable international licensing where relevant. As a result, your personal data may be processed and stored in jurisdictions outside Pakistan. Where personal data is transferred internationally, luc97 ensures that appropriate safeguards are in place — such as data processing agreements with service providers — to protect your data at a level consistent with this Policy.

By using the Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan for the purposes described in this Policy.

The luc97 Platform may reference third-party services — such as payment ecosystem options familiar to Pakistani users — in an informational context. luc97 is not responsible for the privacy practices of any third-party service providers, payment platforms or websites that may be referenced.

When you interact with a third-party payment channel, you are subject to that provider's own privacy policy and terms of service. luc97 encourages you to review the privacy policies of any third parties you interact with in connection with your use of the Platform.

luc97 reserves the right to update, amend or replace this Privacy Policy at any time. Where material changes are made to how we process personal data, we will endeavour to notify registered users by email or via an on-Platform notice prior to the changes taking effect.

The revised Policy will display an updated "Last Updated" date at the top of this page. Your continued use of the Platform following any amendment constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to remain informed of how luc97 handles your personal information.

If you have any questions, concerns or requests relating to this Privacy Policy or the way luc97 handles your personal data, please contact us using the details below. We take all data-related enquiries seriously and will respond within a reasonable timeframe.

luc97 is also accessible via the on-Platform live chat support channel, which is available as per operator provision. For responsible gambling-related matters — including self-exclusion requests or limit adjustments — please visit our Responsible Gambling page or contact support directly.