luke97 Privacy Policy

This Privacy Policy is issued by luke97 ("luke97", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://luke97.vip (the "Platform"). luke97 acts as the data controller in respect of all personal data collected through the Platform, meaning we determine the purposes and means by which your personal data is processed.

This Policy applies to all individuals who interact with the Platform in any capacity, including registered players, visitors who browse without registering, and individuals who contact our support team. It covers all personal data collected through the Platform, our customer support channels, and any communications we send to you.

luke97 collects personal data through a number of channels, including your account registration, KYC verification submissions, payment transactions, gameplay activity, and communications with our support team. The categories of personal data we collect are detailed in the table below.

luke97 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is required for identity verification purposes. Where identity document photographs are submitted for KYC, they are processed solely for verification and are not used for facial recognition or profiling.

luke97 uses the personal data it collects for the following specific purposes:

• Account Registration & Management: To create and administer your luke97 account, verify your identity, and manage your account preferences and communications settings.
• KYC & Age Verification: To verify that you meet the minimum age requirement of 21 years and to satisfy our obligations under applicable anti-money laundering (AML) and counter-terrorism financing (CTF) regulations.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to detect and prevent payment fraud.
• Service Delivery: To provide access to casino games, the luke97 sportsbook, live dealer tables, and all other Platform features.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, to administer self-exclusion and limit-setting tools, and to comply with responsible gaming obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Regulatory Compliance: To fulfil reporting, record-keeping, and cooperation obligations imposed by our gaming licence and applicable law.
• Customer Support: To respond to your enquiries, resolve disputes, and process account-related requests.
• Platform Improvement: To analyse aggregate usage patterns and technical performance data in order to improve the Platform's functionality, stability, and user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent to receive such communications. You may opt out at any time.

For each purpose described in Section 3, luke97 relies on one or more of the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with AML/CTF regulations, gaming licence conditions, tax reporting requirements, and orders from competent regulatory authorities.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and Platform improvement, where our legitimate interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications, where you have given explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

luke97 does not sell, rent, or trade your personal data. We share data with third parties only where necessary and only under one of the following circumstances:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum financial data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy frameworks and applicable Pakistani financial regulations.
• Identity Verification Providers: Third-party KYC service providers may process your identity documents and biographic data solely for the purpose of verifying your identity and age. These providers are contractually bound to process data only as instructed by luke97.
• Fraud Prevention & AML Services: Specialist fraud detection and AML screening providers may receive transactional and identity data for the purpose of detecting suspicious activity and fulfilling our regulatory obligations.
• Game Software Providers: Casino game providers whose titles are hosted on the luke97 Platform may receive anonymised session and gameplay data for auditing and RTP reporting purposes. Personally identifiable data is not shared with game providers unless required for dispute resolution.
• Regulatory Authorities: Gaming regulators, tax authorities, financial intelligence units, and law enforcement agencies may receive data where required by law, court order, or regulatory direction.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to the same protections described in this Policy.

luke97 uses cookies and similar tracking technologies on the Platform to ensure its correct functioning, to analyse usage, and to personalise your experience. The categories of cookies in use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session management cookies, authentication tokens, and security cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your preferences such as language settings, preferred payment method, and game display options. These improve your experience but are not essential to Platform operation.
• Analytical Cookies: Collect anonymised data about how users navigate the Platform — pages visited, session duration, error encounters — to help us improve performance and identify technical issues.
• Responsible Gaming Cookies: Store data related to your responsible gaming settings such as active deposit limits and session time reminders to ensure these controls persist across sessions.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use the Platform. luke97 does not use advertising or behavioural tracking cookies from third-party ad networks.

luke97 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the retention periods required or permitted by applicable law. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following permanent account closure, in accordance with AML and gaming regulatory requirements.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of the transaction to satisfy financial record-keeping and tax reporting obligations.
• Gaming Activity Data: Retained for five (5) years following the last recorded gaming session, subject to any ongoing investigation or dispute that may extend this period.
• Support Communications: Retained for three (3) years from the date of the last correspondence, unless the communications relate to an ongoing dispute or regulatory matter.
• Technical and Log Data: Retained for twelve (12) months from collection, after which it is anonymised or deleted.
• Responsible Gaming Records: Self-exclusion records and responsible gaming correspondence are retained for the duration of any active exclusion period plus five (5) years, to prevent re-registration during an active exclusion.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual.

As an internationally licensed platform serving players from Pakistan and other countries, certain processing operations carried out by luke97 or its service providers may involve the transfer of personal data outside Pakistan. Where such transfers occur, luke97 takes appropriate steps to ensure that your data receives an equivalent level of protection as it would within Pakistan.

These steps may include:

• Entering into standard contractual clauses with the receiving entity that impose data protection obligations equivalent to those in this Policy.
• Transferring data only to service providers in jurisdictions that maintain data protection standards recognised as adequate.
• Applying encryption and pseudonymisation to data in transit to minimise the risk associated with any transfer.

luke97 respects your rights over your personal data. The following rights are available to you and can be exercised at any time by contacting us at [email protected]:

Requests will be acknowledged within five (5) business days and completed within thirty (30) days, subject to identity verification. Where a request cannot be fulfilled due to a legal retention obligation or other legitimate ground, luke97 will explain the reason in writing.

The luke97 Platform is strictly intended for individuals aged 21 years and above. luke97 does not knowingly collect or process personal data belonging to persons under the age of 21. Age verification checks are applied during the registration process and, where required, through documentary KYC verification.

If luke97 discovers or is notified that personal data has been collected from a person under the age of 21, the account will be immediately suspended, all associated data will be reviewed, and the personal data will be deleted as soon as practicable subject to any mandatory retention requirements under applicable law.

luke97 implements a layered approach to information security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Specific measures in place include:

• Encryption in Transit: All data transmitted between your device and luke97 servers is encrypted using TLS 1.3, the current industry standard for secure web communications.
• Encryption at Rest: Sensitive personal data stored on luke97 systems, including identity documents and financial data, is encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to personal data is governed by role-based access controls. Only personnel with a documented operational need to access specific data categories are granted access, and all access is logged and periodically audited.
• Two-Factor Authentication: luke97 strongly encourages all players to enable two-factor authentication (2FA) on their accounts, and applies 2FA to all internal staff accounts with access to player data.
• Penetration Testing: The Platform undergoes regular third-party security assessments, including penetration testing and vulnerability scanning, to identify and address potential weaknesses before they can be exploited.
• Incident Response: luke97 maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, affected players will be notified promptly in accordance with applicable notification requirements.

No security system is entirely impenetrable. While luke97 applies robust measures to protect your data, we cannot guarantee absolute security. You play an important role in keeping your account secure by maintaining a strong, unique password and enabling 2FA.

The luke97 Platform may reference or integrate third-party services for purposes such as game delivery, payment processing, and identity verification. These third parties operate under their own privacy policies and data practices, which are independent of this Privacy Policy.

luke97 does not embed third-party advertising networks, social media tracking pixels, or analytics tools that report your data to external commercial platforms. Any analytics performed on Platform usage data is conducted internally using first-party data only.

Where third-party service providers process data on luke97's behalf, they do so as data processors under contractual obligations that restrict their use of your data to the specific purpose for which it was shared. luke97 remains responsible for ensuring those processors maintain appropriate standards.

luke97 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made — meaning changes that affect your rights or how your data is used in a significant way — we will notify registered players by posting a prominent notice on the Platform and, where practicable, by sending an email to your registered address.

The effective date of the current version of this Policy is displayed at the top of this page. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of those changes. If you do not agree to a revised Policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

We recommend bookmarking this page and reviewing the Policy periodically, particularly following any notification of changes.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how luke97 has handled your personal data, please contact our support team:

If you are not satisfied with how luke97 has addressed your privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction or to the supervisory authority associated with luke97's gaming licence.

This Privacy Policy was last reviewed and updated on 1 January 2026. All prior versions are superseded by this document.