lucy97 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how lucy97 ("the Platform", "we", "us", "our") collects, uses, stores, and protects the personal information of individuals ("you", "Player", "User") who access or use the lucy97 website and associated gaming and sports betting services. This Policy applies to all registered players, prospective users, and visitors to the lucy97 platform, including players located across Pakistan — from Karachi and Lahore to Islamabad, Faisalabad, and beyond.

By registering an account on lucy97, making a deposit, or continuing to use any service we provide, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and use of your personal data as described herein. This Policy should be read together with the lucy97 Terms & Conditions, which are incorporated by reference.

2. Personal Data We Collect

lucy97 collects the following categories of personal data from players and users of the platform:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, CNIC number, passport number, profile photograph	Account registration, KYC verification, age verification (21+)
Contact Data	Email address, Pakistani mobile number, residential address	Account communications, transaction alerts, support
Financial Data	JazzCash / EasyPaisa account references, bank account details, USDT wallet address, deposit and withdrawal history	Payment processing, fraud prevention, AML compliance
Transaction Data	Deposit amounts (PKR), withdrawal amounts, bonus redemptions, bet history, game play records	Account management, dispute resolution, regulatory reporting
Technical Data	IP address, device type, browser type and version, operating system, session data, login timestamps	Security monitoring, fraud detection, platform optimisation
Usage Data	Pages visited, games played, features accessed, click paths, session duration	Platform improvement, personalisation, responsible gaming monitoring
Communications Data	Support chat transcripts, emails sent to and from [email protected], complaint records	Customer support, training, dispute resolution

You are not required to provide all categories of data to use the platform, but failure to provide certain mandatory information — particularly identity and contact data — will prevent account registration or limit access to specific features such as withdrawals.

3. How We Collect Your Data

lucy97 collects personal data through the following channels:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your profile settings, you directly provide us with personal data.
• Automated technical collection: When you visit or use the lucy97 platform, we automatically collect technical and usage data through server logs, cookies, and similar technologies embedded in the platform.
• Payment processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, 1LINK, or USDT TRC20, the relevant payment service provider shares transaction confirmation data with us to facilitate the crediting or debiting of your lucy97 account balance.
• Identity verification partners: For KYC compliance purposes, lucy97 may use third-party identity verification services that confirm the authenticity of the documents you submit. These partners process your data on our behalf under strict data processing agreements.
• Third-party game providers: Casino game providers integrated into the lucy97 platform may share game session data, including game outcomes and bet values, for the purpose of settling your account balance and maintaining game logs.

4. How We Use Your Personal Data

lucy97 uses the personal data we collect for the following purposes:

• To create, manage, verify, and maintain your lucy97 player account.
• To process deposits and withdrawals in PKR and USDT and to settle winning bets and game payouts accurately.
• To comply with our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under applicable gaming regulations.
• To verify that you are at least 21 years of age, in line with our mandatory age restriction policy.
• To detect and prevent fraud, collusion, money laundering, and other prohibited activities.
• To provide customer support via live chat and email, and to respond to your complaints and queries.
• To send you transactional communications relating to your account — including deposit confirmations, withdrawal notifications, and security alerts.
• To send you promotional offers and bonus notifications where you have opted in to receive such communications, or where we have a legitimate interest to do so based on your existing player relationship with us.
• To monitor your play patterns for responsible gaming purposes and to apply any limits, cooling-off periods, or self-exclusions you request.
• To improve the lucy97 platform, game offering, and user experience based on aggregated and anonymised usage analytics.
• To comply with applicable laws, respond to legal process, and cooperate with regulatory and law enforcement authorities where required.

5. Legal Basis for Processing

lucy97 processes your personal data on the following legal grounds:

• Contractual necessity: Processing that is required to perform our contract with you — including account management, payment processing, and game settlement — is carried out on the basis that it is necessary to fulfil our contractual obligations to you as a registered player.
• Legal obligation: Processing required to comply with our KYC, AML, regulatory reporting, and age verification obligations is carried out on the basis of legal compliance.
• Legitimate interests: Processing for fraud detection, security monitoring, platform improvement, and responsible gaming monitoring is carried out on the basis of our legitimate interest in operating a safe, compliant, and sustainable gaming platform.
• Consent: Processing for direct marketing communications (promotional emails, SMS offers) is carried out on the basis of your freely given consent, which you may withdraw at any time.

6. Sharing Your Personal Data

lucy97 does not sell or rent your personal data to any third party. We may share your personal data with the following categories of recipients where necessary:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, 1LINK, and USDT TRC20 network processors — solely for the purpose of processing your financial transactions.
• Identity verification and KYC providers: Third-party verification services engaged to confirm the authenticity of identity documents submitted during account registration or withdrawal requests.
• Casino game providers: Game developers and live casino operators whose games are integrated into the lucy97 platform receive necessary session data to facilitate fair game play and accurate payout settlement.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction, lucy97 may disclose personal data to relevant authorities. We will notify you of any such disclosure where we are legally permitted to do so.
• Fraud prevention agencies: Where lucy97 suspects fraudulent activity, we may share relevant data with third-party fraud prevention and detection services.
• Professional advisers: Lawyers, auditors, and insurers retained by lucy97 may access personal data on a need-to-know basis and are bound by professional confidentiality obligations.

All third parties with whom lucy97 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using your data for any purpose other than the specific service they provide to lucy97.

7. Payment Data & PKR Transactions

All financial transactions on lucy97 are denominated in Pakistani Rupees (PKR) or, where applicable, USDT TRC20. lucy97 does not store full payment card numbers or complete bank account details on its own servers. Payment credentials entered during a transaction are processed directly by the relevant payment service provider through a secure, encrypted connection.

lucy97 retains records of all deposit and withdrawal transactions — including amounts, timestamps, payment method references, and transaction statuses — for a minimum of five (5) years from the date of the transaction, in accordance with AML regulatory requirements. These records may be reviewed by regulatory authorities upon lawful request.

8. Cookies & Tracking Technologies

lucy97 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The cookies used by lucy97 fall into the following categories:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in to your lucy97 account and security tokens that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as your preferred language, game category, or notification settings. Disabling these may affect your experience on the platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the lucy97 platform — which pages are visited most frequently, where users navigate from, and how long sessions typically last. This data helps us improve the platform. We do not use these analytics to build individual user profiles for advertising.
• Responsible gaming cookies: Used to track session duration and apply any session time limits or reminders you have configured in your account settings.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using the platform normally. lucy97 does not use third-party advertising cookies or permit third-party ad networks to set cookies on the platform.

9. Data Retention

lucy97 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years following account closure, in accordance with AML and KYC regulatory obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the communication, or longer if the communication relates to an unresolved dispute or regulatory matter.
• Technical and usage data: Retained for up to twelve (12) months, after which it is aggregated and anonymised.
• Self-exclusion records: Retained permanently to prevent re-registration by self-excluded players.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised. Where anonymisation is not practicable, data is securely archived with access controls in place.

10. Data Security

lucy97 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the lucy97 platform.
• Encryption of sensitive data fields at rest within our database infrastructure.
• Role-based access controls ensuring that lucy97 staff can only access personal data relevant to their specific job function.
• Multi-factor authentication requirements for staff accessing administrative systems.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified security professionals.
• Automated fraud detection and anomaly monitoring systems operating 24 hours a day, 7 days a week.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

11. Your Data Rights

As a registered player on lucy97, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us in writing at [email protected]. We will respond to all valid requests within 30 days.

• Right of access: You may request a copy of the personal data lucy97 holds about you, along with information about how it is being used.
• Right to rectification: You may request that inaccurate or incomplete personal data held by lucy97 be corrected or updated.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that this right is subject to our legal obligation to retain certain data for regulatory compliance purposes.
• Right to restriction of processing: In certain circumstances, you may request that we limit the processing of your personal data — for example, where you contest the accuracy of the data while we verify it.
• Right to data portability: You may request that we provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

12. Children & Minors

lucy97 enforces a strict minimum age requirement of 21 years. The platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. If lucy97 discovers or has reason to believe that personal data has been collected from a person under 21 years of age, the relevant account will be closed immediately, all data associated with that account will be deleted (except where retention is required by law), and any balance held will not be returned.

If you are a parent or guardian and you believe your child has registered on the lucy97 platform, please contact us immediately at [email protected]. We will investigate and take appropriate action as a matter of priority.

13. International Data Transfers

lucy97 operates under international gaming regulations and some of its data processing infrastructure, third-party service providers, and game content partners may be located outside of Pakistan. Where personal data is transferred internationally, lucy97 ensures that appropriate safeguards are in place to protect your data to the same standard as applied within Pakistan, including:

• Contractual data processing agreements with all third-party processors that impose equivalent data protection obligations.
• Use of providers located in jurisdictions with recognised adequate data protection standards.
• Limiting the scope of data shared with international processors to the minimum necessary for the specific processing purpose.

14. Third-Party Services & Links

The lucy97 platform integrates services provided by third-party game developers, live casino studios, and payment processors. While these providers are contractually bound to protect personal data they process on our behalf, their own privacy practices are governed by their respective privacy policies. lucy97 is not responsible for the privacy practices of third-party service providers beyond the scope of the data processing agreements in place between us.

The lucy97 website does not contain links to external third-party websites for advertising or affiliate marketing purposes. Any links present on the platform navigate within the lucy97 site only.

15. Changes to This Privacy Policy

lucy97 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform services. Where changes are material — such as a significant change in the categories of data collected or the purposes for which data is used — we will notify registered players by email or through an in-platform notification prior to the changes taking effect.

For minor updates, the revised Policy will be published on this page with the "Last Updated" date amended accordingly. Your continued use of the lucy97 platform following publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change, you may close your account in accordance with the account closure procedure described in the Terms & Conditions.

16. Contact & Privacy Complaints

If you have any questions, concerns, or complaints about how lucy97 handles your personal data, or if you wish to exercise any of your data rights, please contact our support team in writing. We are committed to resolving all privacy-related concerns promptly and fairly.

• Email: [email protected]
• Live Chat: Available 24/7 within the lucy97 platform after login
• Response Time: We will acknowledge all written privacy requests within 48 hours and provide a substantive response within 30 days
• Service Coverage: Karachi, Lahore, Islamabad, Faisalabad, and all cities across Pakistan

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority or dispute resolution body under the applicable gaming regulations.