Privacy Policy — How luke97 Handles Your Personal Data

1. Introduction

This Privacy Policy explains how luke97 ("we", "us", "our") collects, uses, stores and protects personal information when you use our platform at luke97.win. It applies to all registered players and to anyone browsing the site without an account.

By registering an account or continuing to use the platform, you acknowledge that you have read this policy and understand how your information is handled. This policy should be read alongside our Terms and Conditions.

2. What We Collect

We collect personal information in two ways: information you provide directly, and information collected automatically through your use of the platform.

Information You Provide

• Registration data: Full name, date of birth, email address, phone number and residential address.
• Identity verification: Government-issued ID documents, proof of address and, where required, proof of payment method ownership. These are collected when we need to verify your identity as part of account security procedures.
• Payment details: Your preferred deposit and withdrawal methods (JazzCash, Easypaisa, Raast, bank account details, card details). See Section 4 for how payment data is handled specifically.
• Support communications: Any messages, queries or complaints submitted to our support team, along with your account details at the time of contact.
• Responsible gaming requests: If you set deposit limits, request a cooling-off period or apply for self-exclusion, this information is stored and acted upon immediately.

Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version.
• Platform activity: Pages visited, games played, bets placed, session duration, login timestamps and navigation patterns.
• Cookies and local storage: See Section 5 for full details on how cookies are used.

3. Why We Collect It

Every category of data we collect serves a specific, legitimate purpose. We do not collect information "just in case" — each piece of data has a defined reason for being processed:

• Account management: Registration data is needed to create and maintain your account, process deposits and withdrawals, and keep your account secure.
• Identity verification: We are required to verify player identities to prevent underage access, fraud and money laundering. This is an operational requirement for any gaming platform.
• Transaction processing: Financial data is required to credit deposits to your account and process withdrawal requests back to your registered payment method in PKR.
• Platform improvement: Anonymised behavioural data helps us understand how the platform is used, identify issues and make improvements to the user experience.
• Customer support: Support interaction data allows our team to assist you effectively and maintain a record of past queries.
• Security and fraud prevention: Technical data including IP addresses and device information is used to detect unusual account activity, prevent unauthorised access and protect against fraud.
• Responsible gaming: Gaming behaviour data is reviewed to identify patterns that may indicate a player needs support. Where concerns are identified, our team may reach out proactively.
• Marketing communications: If you have opted in to receive promotional communications, we use your email or phone number to send relevant offers. You can opt out at any time through your account settings or by contacting support.

4. Payment Data

All payment transactions on luke97 are processed in PKR. The platform supports JazzCash, Easypaisa, Raast, standard IBFT bank transfers and debit/credit cards. Payment processing is handled through secured payment gateways.

What Is Stored

We store transaction records — amounts, dates, methods and outcomes — as part of your account history. This is necessary for processing withdrawals, resolving payment disputes and maintaining accurate account records. Full card numbers and mobile wallet PINs are never stored on our servers.

Third-Party Payment Processors

Payment transactions are processed through third-party payment processors who operate under their own privacy and security standards. By using any payment method on luke97, you also agree to the terms of the relevant payment processor. We share only the minimum information required to complete your transaction.

5. Cookies & Tracking

The luke97 platform uses cookies and similar technologies to provide core functionality, improve the user experience and analyse platform performance. A cookie is a small text file stored on your device when you visit a website.

Types of Cookies We Use

• Essential cookies: Required for the platform to function correctly. These include session management cookies that keep you logged in and remember your account preferences during a session. These cannot be disabled without affecting platform functionality.
• Performance cookies: Collect anonymised data about how the platform is used — which pages are visited most, where players encounter errors, how long sessions last. This data helps us identify and fix issues.
• Preference cookies: Remember your settings and preferences across sessions — for example, your preferred display language or notification settings.
• Security cookies: Support fraud prevention and account security functions, including detecting unusual login patterns.

Most browsers allow you to control cookie settings, including blocking or deleting cookies. Note that disabling essential cookies will affect your ability to log in and use the platform. You can manage cookie preferences through your browser settings at any time.

6. Sharing Your Data

luke97 does not sell your personal information. We share data only in the following circumstances, and only to the extent necessary:

• Payment processors: Sharing of transaction details with payment partners (JazzCash, Easypaisa, Raast, banks, card networks) as required to complete your transactions.
• Identity verification providers: Where we use third-party services to assist with document verification, relevant identity data is shared with those providers under data processing agreements.
• Fraud prevention and security: In cases of suspected fraud, account abuse or criminal activity, relevant data may be shared with fraud prevention services or law enforcement.
• Legal obligations: Where we are required by law, court order or regulatory authority to disclose information, we will comply with such requirements. We will notify you where legally permitted to do so.
• Platform infrastructure: Hosting, analytics and platform operations may involve service providers who process data on our behalf under strict data processing agreements that limit their use of your information.

7. Data Security

We implement industry-standard security measures to protect your personal information against unauthorised access, disclosure, alteration or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers
• Encrypted storage of sensitive account information
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security reviews and monitoring for anomalous activity
• Secure payment processing through established payment gateway partners

While we take all reasonable precautions, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account login credentials. If you believe your account has been accessed without authorisation, contact our support team immediately.

8. How Long We Keep Data

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, and no longer. The following general retention principles apply:

• Active accounts: Account data is retained for as long as your account remains active.
• Closed accounts: Following account closure, core account and transaction records are retained for a defined period to meet legal, operational and security obligations. After this period, data is securely deleted or anonymised.
• Transaction records: Financial transaction records are retained for longer periods in line with standard financial record-keeping requirements.
• Support communications: Support interaction records are retained for a reasonable period to allow follow-up and quality review.
• Marketing data: If you opt out of marketing communications, your details will be removed from marketing lists promptly. A suppression record may be retained to ensure we honour your opt-out preference.

When data is no longer required, it is either permanently deleted from our systems or irreversibly anonymised so that it can no longer be linked to you as an individual.

9. Your Rights

You have meaningful rights over your personal data. The following explains what those rights are and how to exercise them at luke97:

To exercise any of the above rights, contact our support team via live chat on the platform or at [email protected]. Please include your registered email address and a brief description of your request.

10. Minors

The luke97 platform is strictly intended for adults aged 18 and above. We do not knowingly collect personal information from anyone under 18 years of age. If we become aware that an account has been created by a minor, the account will be suspended immediately, any accumulated balance will be forfeited, and the associated data will be handled in accordance with this policy.

If you believe that a minor has registered an account, please contact our support team immediately. Full guidance on our approach to player protection is available on the Responsible Gaming page.

11. Changes to This Policy

luke97 may update this Privacy Policy from time to time to reflect changes in our data practices, platform functionality or applicable requirements. Where updates are material, we will notify registered players via email or a notice on the platform. The date at the top of this page reflects the most recent revision.

Continued use of the platform following any update to this policy constitutes acceptance of the revised version. We recommend reviewing this page periodically so you are always aware of how your information is handled.

12. Contact

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how your information is being handled, please reach out to our support team. We are available 24/7.

For data-related requests, please include your registered email address and a clear description of your request so we can handle it efficiently. We aim to respond to all data enquiries promptly.