Privacy Policy – How lucy97 Handles Your Personal Data

1. Introduction

This Privacy Policy describes how lucy97 ("we", "us", "the platform") collects, uses, stores, and protects the personal data of users who access lucy97.win. It applies to all registered players and to visitors who browse the platform without an account.

When you register on lucy97, place bets, make deposits or withdrawals, contact support, or simply browse the website, certain data is collected. This policy explains precisely what that data is, why it is collected, who it might be shared with, and how long it is kept.

Using the lucy97 platform means you have read this policy and agree to the data practices described here. If you do not agree, you should not use the platform. This policy works alongside the Terms and Conditions — both documents apply to your use of lucy97.

2. Data We Collect

The data lucy97 collects falls into a few clear categories. Here is a breakdown of what we collect and when:

We do not collect sensitive categories of data such as health information, biometric data beyond identity verification photos, or political or religious affiliation. We do not scrape social media profiles or purchase data lists.

3. How We Use Your Data

Every piece of data lucy97 collects has a specific, legitimate purpose. Here is how we use your information:

• Account operation: Your registration data is used to create and manage your account, authenticate your logins, and allow you to use all platform features.
• Transaction processing: Financial data is used to process PKR deposits through JazzCash, Easypaisa, Raast, bank transfer, and other supported methods, and to process withdrawal requests back to those same methods.
• Identity verification: We use verification data to confirm that you are who you say you are, that you meet the 18+ age requirement, and that your payment methods belong to you. This is a standard requirement across online gaming platforms.
• Security and fraud prevention: Device and session data is used to detect suspicious activity, unauthorised access attempts, and patterns consistent with fraud or abuse. This protects both the platform and all users.
• Responsible gaming: Gaming activity data helps us identify patterns that may indicate problematic usage, enabling us to provide appropriate responsible gaming reminders and intervention tools where relevant.
• Customer support: Communication data is used to respond to your queries, investigate complaints, and improve support quality.
• Platform improvement: Aggregated, anonymised usage data helps us understand how the platform is being used and where improvements can be made.
• Legal compliance: We retain certain data to comply with applicable legal obligations, including financial record-keeping requirements.

4. Legal Basis for Processing

Lucy97 processes your personal data on the following grounds:

• Contract performance: Processing your registration data, transaction data, and gaming activity is necessary to fulfil the contract between you and lucy97 — that is, to provide the platform services you have signed up for.
• Legal obligation: Certain data processing — particularly identity verification and transaction record-keeping — is required to comply with applicable legal obligations.
• Legitimate interests: We process device and session data to detect fraud and protect the security of the platform and all its users. This is a legitimate interest that does not override your rights.
• Consent: Where we send you optional communications such as promotional updates, we rely on your consent. You can withdraw consent for marketing communications at any time through your account settings.

5. Data Sharing

Lucy97 does not sell your personal data. We share data only in the specific circumstances described below, and only to the minimum extent necessary:

• Payment processors: To process deposits and withdrawals, we share necessary transaction data with payment providers including JazzCash, Easypaisa, Raast, and banking partners. These providers have their own privacy policies and security standards.
• Identity verification services: When KYC verification is required, we may share identity document data with established third-party verification service providers who specialise in this function.
• Game providers: Your account identifier (not full personal details) is shared with game providers such as Evolution Gaming, Pragmatic Play, and others to facilitate gameplay and settle results. These providers do not receive your full identity or payment details.
• Legal requirements: We will disclose personal data when legally required to do so — for example, in response to a valid legal order, court process, or regulatory requirement.
• Business transfers: If lucy97 undergoes a merger, acquisition, or restructuring, user data may be transferred as part of that process. We will notify users if this occurs and explain how their data will be handled under the new structure.

All third parties who receive personal data from lucy97 are required to handle it in accordance with applicable data protection standards. We do not share your data with third-party marketers.

6. Data Retention

Lucy97 does not keep your personal data longer than necessary. Different types of data have different retention periods based on their purpose and any applicable legal obligations:

• Account and registration data is retained for as long as your account is active. If you close your account, we will delete or anonymise this data within a reasonable period, subject to the exceptions below.
• Transaction records (deposits, withdrawals, bet history) are retained for a minimum period required under applicable financial record-keeping rules. These records cannot be deleted on request where a legal retention obligation applies.
• Identity verification data is retained in line with anti-money laundering requirements for a defined period after account closure.
• Support communications are retained for a reasonable period to maintain an accurate service record and handle any follow-up queries.
• Device and session logs used for security purposes are retained for a shorter rolling period after which they are deleted or anonymised.

When data is no longer needed and has passed its required retention period, lucy97 securely deletes or anonymises it.

7. Security Measures

Lucy97 takes the security of your personal and financial data seriously. The platform implements technical and organisational measures designed to protect your data against unauthorised access, loss, alteration, or disclosure.

• Data transmission between your browser or app and the lucy97 platform is encrypted using standard TLS (Transport Layer Security) protocols.
• Stored personal data is encrypted at rest. Access to personal data within the platform's systems is restricted to staff and systems with a legitimate operational need.
• Payment processing is conducted through PCI-DSS compliant payment infrastructure. Lucy97 does not store raw card numbers or full payment credentials.
• Account access is protected by password authentication. We encourage all players to use a strong, unique password for their lucy97 account.
• Suspicious account activity triggers automated alerts that are reviewed by the security team.

No online system is completely immune to security incidents. If a data breach occurs that is likely to affect your rights, lucy97 will notify affected users in accordance with applicable notification obligations.

8. Cookies and Tracking

Lucy97 uses cookies and similar technologies to operate the platform, maintain your logged-in session, remember your preferences, and collect anonymised usage statistics.

• Essential cookies are necessary for the platform to function. They manage your session, keep you logged in while you navigate the site, and enable the cashier to work. These cannot be disabled without breaking the platform.
• Analytics cookies collect anonymised data about how users navigate the platform — which pages are visited, how long sessions last, and where users encounter difficulties. This data is used in aggregate to improve the platform experience.
• Preference cookies remember settings you have chosen, such as display preferences.

Lucy97 does not use third-party advertising cookies or allow external ad networks to place tracking cookies on the platform. Most browsers allow you to manage cookie settings. Disabling essential cookies will affect your ability to use the platform.

9. Payment Data and Financial Information

When you deposit PKR on lucy97 — whether through JazzCash, Easypaisa, Raast, bank transfer, a card, or another mobile wallet — the financial transaction is processed through the respective payment provider's infrastructure.

Lucy97 stores a record of the transaction (amount, method, date, status) for account management and regulatory compliance purposes. We do not store full card numbers, CVV codes, or mobile banking PINs. Those credentials remain within the payment provider's own secure systems.

If you contact support about a payment issue, you may be asked to provide your transaction reference number. This reference allows us to investigate with the payment provider without requiring sensitive credentials from you.

10. Your Rights Over Your Data

You have a number of rights with respect to your personal data held by lucy97. Here is a summary of each right and how to exercise it:

To exercise any of these rights, contact lucy97 support through the platform. We will verify your identity before acting on any data request. We aim to respond within 30 days of a verified request.

11. Minors and Under-18 Protection

Lucy97 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. Registration requires confirmation that the user is 18 or older, and age verification may be requested at any point during the account lifecycle.

If we become aware that an account has been registered by someone under 18 — whether through a verification failure, a report, or any other means — the account will be closed immediately, any balance will be refunded to the original deposit source, and all associated data will be deleted in accordance with this policy.

If you are a parent or guardian and believe a minor has registered on lucy97 using your information or has accessed the platform inappropriately, please contact support immediately.

12. Changes to This Policy

Lucy97 may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in applicable law, or to clarify existing practices. When material changes are made, registered users will be notified through the platform or by email before the changes take effect.

The "Last Updated" date at the top of this page reflects when the current version was published. Continued use of the platform after the effective date of a revised policy constitutes your acceptance of the updated terms. We recommend reviewing this policy periodically to stay informed about how your data is handled.

13. Contact on Privacy Matters

If you have a question about this Privacy Policy, want to exercise a data right, or have a concern about how your personal information is being handled on lucy97, you can contact the support team through the platform. You can also visit the FAQ page for answers to common questions.

For privacy-specific matters — such as data access requests, correction requests, or deletion requests — please state clearly in your message what you are requesting and include your registered email address or phone number so that we can verify your identity before acting.