luke97 Privacy
Policy & Data Protection

luke97 is the trading name of the online gaming and sports betting platform accessible at luke97.one. luke97 operates under an international gaming licence and is the data controller responsible for the personal information of all Pakistani players and other users who interact with the platform.

As the data controller, luke97 determines the purposes and means by which your personal data is processed. This means that when you register an account, make a deposit via JazzCash or EasyPaisa, place a bet on a PSL match, or contact our support team, it is luke97 that is responsible for how that information is handled and protected.

Questions, complaints, or requests relating to this Privacy Policy or the personal data luke97 holds about you should be directed to our support team using the contact details provided in Section 14 of this document.

luke97 collects personal data from Pakistani players through several channels: directly from you during account registration and KYC verification, automatically as you use the platform, and in limited cases from third-party verification and payment service providers. The categories of personal data we collect are as follows:

luke97 does not knowingly collect sensitive personal data beyond what is strictly required for KYC compliance and fraud prevention. We do not collect information relating to race or ethnicity, religious beliefs, political opinions, health data, or biometric data beyond the CNIC photograph required for identity verification purposes.

luke97 uses the personal data collected from Pakistani players for the following purposes. In each case, the legal basis for processing is identified in Section 4.

• Account Registration and Management: To create and maintain your luke97 account, verify your identity and age, and provide you with access to the platform's gaming services.
• KYC and Regulatory Compliance: To fulfil our obligations under our international gaming licence, including conducting identity verification, age verification (21+), and source-of-funds checks where required by applicable anti-money laundering regulations.
• Payment Processing: To process PKR deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records of all transactions on your account.
• Platform Personalisation: To personalise your luke97 experience, including displaying relevant PSL betting markets, suggesting games aligned with your play history, and tailoring promotional offers to your activity level and preferences.
• Customer Support: To respond to queries, resolve account issues, process formal complaints, and provide Urdu-speaking support assistance to Pakistani players around the clock.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and any other conduct that violates the luke97 Terms and Conditions or applicable law.
• Responsible Gaming: To monitor gaming patterns and identify players who may be exhibiting signs of problem gambling, and to communicate with them about the responsible gaming tools available on the luke97 platform.
• Marketing Communications (Opt-In Only): To send promotional emails, bonus notifications, and PSL season offers to Pakistani players who have explicitly consented to receive them. These communications can be opted out of at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data to identify technical issues, improve the user experience, and develop new platform features relevant to Pakistani players.
• Legal Obligations: To comply with court orders, regulatory directions, law enforcement requests, and any other legal obligations binding on luke97 as a licensed gaming operator.

luke97 processes personal data only where a valid legal basis exists for doing so. The legal bases on which luke97 relies to process the personal data of Pakistani players are as follows:

• Contractual Necessity: Much of the personal data luke97 processes is necessary to perform the contract between you and luke97 — that is, to provide you with a functioning gaming account and the services described in the luke97 Terms and Conditions. Without this data, luke97 cannot operate your account.
• Legal Obligation: Certain processing activities — particularly KYC identity verification, age verification, anti-money laundering checks, and the retention of financial records — are required by the laws and regulations applicable to luke97 as a licensed gaming operator.
• Legitimate Interests: luke97 processes certain data on the basis of its legitimate business interests, including fraud detection, platform security monitoring, responsible gaming oversight, and anonymised analytics for platform improvement. In each case, these interests have been assessed as not overriding your fundamental rights and freedoms.
• Consent: Where luke97 relies on your consent as the legal basis for processing — most notably in relation to optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Consent withdrawal requests can be submitted via your account settings or by contacting our support team.

luke97 uses cookies and similar tracking technologies on the luke97.one platform. A cookie is a small text file placed on your device when you visit our website. Cookies allow us to recognise your device on return visits, maintain your login session, remember your preferences, and gather analytical data to improve the platform.

The categories of cookies used by luke97 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the operation of the luke97 platform. They include session cookies that keep you logged in during your gaming session and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without significantly impairing the platform's functionality.
• Functional Cookies: These cookies remember your preferences such as your preferred language, display settings, and last-visited sports category. They improve your experience but are not strictly essential.
• Analytical Cookies: These cookies collect anonymised data about how Pakistani players use the luke97 platform — which pages are most visited, how long sessions last, and which game categories are most popular. This data is used solely to improve the platform and is not shared for advertising purposes.
• Marketing Cookies (Optional): Where you have consented to marketing communications, certain cookies may be used to identify which promotional offers you have interacted with and to prevent you from seeing the same offer repeatedly.

You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will affect the functionality of the luke97 platform. Luke97 does not use cookies to serve third-party advertising on the platform.

luke97 does not sell, rent, or commercially trade your personal data to any third party. However, in order to operate the platform and meet its regulatory obligations, luke97 shares specific personal data with the following categories of third party, strictly on a need-to-know basis and subject to binding data processing agreements:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the personal and financial data necessary to process your deposits and withdrawals. These providers have their own privacy policies governing the use of data shared with them in their capacity as independent data controllers.
• Identity Verification Services: Third-party KYC service providers may receive your CNIC images and personal details for the purpose of automated identity and age verification. These providers are contractually prohibited from using your data for any purpose other than identity verification on behalf of luke97.
• Game Content Providers: Software studios and game providers (such as Pragmatic Play and Evolution) may receive session data in connection with game play to ensure accurate game logging, result verification, and bonus tracking. No personally identifiable information beyond what is technically necessary is shared for this purpose.
• Fraud Prevention and Security Services: Specialist fraud detection platforms and cybersecurity services may receive technical data including IP addresses, device identifiers, and login history for the purpose of detecting and preventing fraud, account takeovers, and prohibited multi-accounting.
• Regulatory Authorities and Law Enforcement: luke97 may be required by law, court order, or regulatory direction to disclose personal data to government bodies, law enforcement agencies, financial intelligence units, or gaming regulators. In such cases, data is disclosed only to the extent required by the applicable legal obligation.
• Professional Advisers: luke97's legal counsel, auditors, and compliance consultants may access personal data on a confidential basis where necessary for the provision of their professional services.

As an internationally licensed online gaming platform, luke97 may process and store personal data on servers and through service providers located outside Pakistan. Where personal data is transferred internationally, luke97 ensures that adequate safeguards are in place to protect the security and confidentiality of that data, including contractual protections equivalent to those required under applicable international data protection standards.

In particular, any transfer of personal data belonging to Pakistani players to a third-party processor in another jurisdiction is governed by a data processing agreement that includes provisions equivalent to standard contractual clauses recognised under international data protection frameworks. luke97 will not transfer personal data to jurisdictions that do not offer an adequate level of protection for personal information without first implementing appropriate additional safeguards.

luke97 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations that extend beyond the closure of your account. The following general retention periods apply:

• Account and Identity Data (KYC): Retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulatory requirements applicable to licensed gaming operators.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, again in compliance with applicable financial record-keeping obligations.
• Gaming Activity Logs: Retained for three (3) years from the date of each session, primarily for fraud investigation and responsible gaming monitoring purposes.
• Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the last interaction, to support quality assurance and complaint review processes.
• Marketing Data: Where you have opted in to marketing communications, your marketing preference data and associated email address are retained until you withdraw consent, after which they are removed from active marketing lists within 30 days.
• Technical / Log Data: Server access logs and technical session data are retained for twelve (12) months for security investigation purposes, after which they are securely deleted.

At the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where data cannot be immediately deleted due to technical constraints (such as presence in backup systems), it is isolated from active processing until deletion is carried out at the next scheduled backup purge cycle.

Pakistani players who have registered accounts on the luke97 platform hold the following rights in relation to the personal data we hold about them. Requests to exercise any of these rights should be submitted to our support team as detailed in Section 14 and will be responded to within 30 calendar days.

The luke97 platform is strictly intended for adults aged 21 years and over. luke97 does not knowingly collect personal data from individuals under the age of 21. All registration processes include an age declaration, and KYC verification via Pakistani CNIC is used to confirm that account holders meet the minimum age requirement before withdrawal access is granted.

If luke97 discovers or is notified that personal data has been collected from an individual under the age of 21 — whether through misrepresentation at registration or any other means — the following steps will be taken immediately:

• The relevant account will be permanently suspended and locked from all further access.
• All gaming activity conducted on the account during the period of underage access will be voided.
• All deposited funds will be returned to the source payment method after deducting any amounts required to reverse bonus credits claimed.
• All personal data collected in relation to the underage account will be securely deleted beyond what is required to be retained for regulatory reporting purposes.
• The matter may be referred to relevant child protection or regulatory authorities where required by applicable law or licence conditions.

luke97 implements a comprehensive set of technical and organisational security measures to protect the personal data of Pakistani players against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• 256-bit SSL (Secure Socket Layer) encryption on all data transmitted between your browser or device and the luke97 platform.
• Encryption of personal data and financial records at rest on luke97's servers using industry-standard encryption protocols.
• Multi-factor authentication options for player accounts, including optional Two-Factor Authentication (2FA) via SMS or authenticator app.
• Role-based access controls restricting access to personal data to authorised luke97 personnel who require it to perform their specific job functions.
• Regular penetration testing and security audits conducted by independent third-party cybersecurity specialists.
• Real-time monitoring systems to detect and respond to suspicious access attempts, unusual transaction patterns, and potential data security incidents.
• Secure backup and disaster recovery procedures to protect against data loss.

While luke97 takes all reasonable and commercially practicable steps to protect your personal data, no method of transmission over the internet or electronic data storage is entirely secure. You are strongly encouraged to use a strong, unique password for your luke97 account and to enable Two-Factor Authentication from within your account settings dashboard. If you suspect that your account has been compromised, contact our support team immediately.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, luke97 will notify the relevant regulatory authority within the timeframe required by applicable law and will communicate with affected players without undue delay where required.

The luke97 platform integrates with third-party game providers, payment processors, and other service partners in order to deliver the full range of services available on the platform. While luke97 selects these partners carefully and requires them to maintain appropriate data protection standards, each third-party provider operates under its own privacy policy with respect to personal data they process in their capacity as independent data controllers.

luke97 is not responsible for the privacy practices of third-party providers, including game studios, payment networks, or technology platform partners, when they act as independent controllers of personal data. Pakistani players are encouraged to review the privacy policies of any third-party service they interact with directly, particularly in relation to payment services such as JazzCash and EasyPaisa, which maintain their own independent data privacy frameworks.

luke97 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or our licensing requirements, improvements to the platform, or new service offerings. The effective date at the top of this document will be updated whenever a material change is made.

Where changes to this Privacy Policy are material — meaning they significantly affect how we use your personal data or the rights available to you — luke97 will notify registered Pakistani players in advance of the changes taking effect. Notification will be provided via email to the address registered on your account and/or via a prominent notice displayed on the luke97.one platform when you log in.

Your continued use of the luke97 platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you disagree with any changes to this Policy, you should cease using the platform and contact our support team to initiate account closure. We will return any real-money balance in your account following satisfactory KYC verification.

If you have any questions or concerns about this Privacy Policy, wish to exercise any of your data rights as described in Section 9, wish to withdraw your marketing consent, or wish to submit a formal privacy complaint, please contact the luke97 data protection team through the following channels:

• Email: support at luke97.one — please mark your subject line as "Privacy Request" or "Data Rights Request" for fastest routing.
• Live Chat: Available 24 hours a day, 7 days a week through the account dashboard. Urdu-speaking agents are available for Pakistani players at all hours.
• Response Time: All privacy-related requests and complaints will receive a written acknowledgement within 5 business days and a substantive response within 30 calendar days.

If you are not satisfied with luke97's response to a privacy complaint, you may have the right to escalate your complaint to the relevant supervisory authority or gaming regulator as directed by luke97's licensing framework. luke97 will cooperate fully with any such review.