lk97 Privacy Policy

lk97 (referred to in this Policy as "lk97", "we" ", "us", or "our") is the data controller responsible for the personal information collected through the lk97 Platform at lk97.org. As data controller, lk97 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection enquiries, subject access requests, and privacy-related complaints directed to lk97 should be addressed to the lk97 privacy team at the contact details provided in Section 14 of this Policy.

lk97 collects the following categories of personal data from Players and Platform visitors. Only data that is necessary for the specified purposes described in this Policy is collected.

lk97 collects personal data through the following channels and mechanisms:

• Direct interactions: Data you provide when registering an lk97 Account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in a promotion.
• Automated technologies: When you visit lk97.org, our servers automatically log technical data including your IP address, device identifiers, browser type, and the pages you interact with. This is collected via server logs, session cookies, and local storage mechanisms.
• Payment processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, or USDT TRC20, our payment processing partners share transaction confirmation data with lk97 to credit your Account and maintain financial records.
• KYC verification partners: lk97 uses third-party identity verification services to authenticate the identity documents you submit during the KYC process. These partners return a verification outcome to lk97 and may retain a record of the verification event in accordance with their own data retention policies.
• Game providers: Third-party game suppliers integrated into the lk97 Platform may share game session outcomes and technical event logs with lk97 for the purpose of settling bets, resolving disputes, and maintaining game integrity records.

lk97 processes personal data for the following clearly defined purposes. We do not use your data for any purpose incompatible with those described below.

• Account management: To create and maintain your lk97 Player Account, authenticate your identity at login, manage your Account settings and preferences, and process Account closure requests.
• Financial transactions: To process deposits and withdrawals in PKR, maintain accurate financial records, match payments to Player Accounts, and facilitate refunds where applicable.
• KYC & age verification: To verify that you are at least 21 years of age and that your identity matches the payment method used, as required for responsible gaming compliance and fraud prevention.
• AML & fraud prevention: To monitor transactions and gaming activity for indicators of money laundering, terrorist financing, account takeover fraud, bonus abuse, and other financial crime, and to take appropriate action where such activity is detected.
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling, apply the deposit limits, loss limits, and self-exclusion elections you set, and proactively contact you if our responsible gaming monitoring identifies a concern.
• Customer support: To respond to your enquiries, resolve complaints, investigate disputes, and maintain a record of our interactions for quality assurance purposes.
• Legal & regulatory compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from competent authorities, and to maintain records as required by applicable gaming and financial regulations.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the lk97 Platform, fix technical issues, optimise game loading performance, and develop new features that better serve Pakistani players.
• Marketing communications: Where you have opted in, to send you promotional offers, bonus notifications, and lk97 news via email or SMS. You may opt out at any time.

lk97 processes personal data on the following legal bases. Where more than one basis applies to a specific processing activity, the most applicable basis is listed below:

lk97 does not sell your personal data. We share personal data with third parties only where necessary and only in the following circumstances:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, and our USDT TRC20 processing partner receive the minimum transaction data necessary to process deposits and withdrawals to and from your lk97 Account.
• KYC & identity verification providers: lk97 shares your identity document images and personal details with regulated third-party KYC verification providers for the sole purpose of verifying your identity and age. These providers are contractually obligated to process your data only for this purpose.
• Game content providers: Third-party game suppliers — including but not limited to Pragmatic Play and PG Soft — receive your Player session identifier and bet data to facilitate game round resolution and jackpot calculations. They do not receive your full identity data.
• Cloud infrastructure providers: lk97 uses reputable cloud hosting and infrastructure services to operate the Platform. These providers process data on our behalf and are bound by strict data processing agreements.
• Legal and regulatory authorities: lk97 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid legal order, or to protect the rights, property, or safety of lk97, our Players, or the public.
• Professional advisors: lk97 may share data with legal advisors, auditors, and compliance consultants where strictly necessary for the performance of their professional services, under obligations of confidentiality.

lk97 uses cookies and similar tracking technologies on the lk97 Platform to ensure its correct technical operation, maintain your logged-in session, and understand how Players navigate and use the Platform. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the lk97 Platform to function. They maintain your login session, store your Account preferences, and prevent cross-site request forgery attacks. These cookies cannot be disabled without affecting Platform functionality.
• Functional cookies: These cookies remember your language preferences, last-visited game category, and responsible gaming settings so that your experience on lk97 is consistent across sessions.
• Analytics cookies: lk97 uses first-party analytics to understand which games and Platform features are most popular, how long sessions last on average, and where technical errors occur. This data is aggregated and anonymised before analysis.
• Security cookies: lk97 uses session tokens and device fingerprinting to detect suspicious login activity, flag potential account takeovers, and enforce self-exclusion and geographic restrictions.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in and use the lk97 Platform.

lk97 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with you.

lk97 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• Encryption in transit: All data exchanged between your device and lk97 servers is encrypted using TLS 1.3. Connections via unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at rest: Sensitive personal data including CNIC information, financial data, and password hashes is stored in encrypted form using AES-256 encryption. Passwords are hashed using bcrypt with a high work factor and are never stored in plaintext.
• Access controls: Access to systems containing Player personal data is restricted on a strict need-to-know basis. All internal access is authenticated via multi-factor authentication, and access logs are maintained and reviewed regularly.
• Security testing: lk97 conducts regular vulnerability assessments and penetration testing of the Platform infrastructure to identify and remediate security weaknesses before they can be exploited.
• Incident response: lk97 maintains a documented data breach response procedure. In the event of a data breach affecting your personal data, lk97 will notify affected Players and relevant authorities in accordance with applicable notification obligations.

As a Player on the lk97 Platform, you have the following rights in relation to your personal data. lk97 is committed to facilitating the exercise of these rights promptly and without undue obstacle:

• Right of access: You have the right to request a copy of the personal data lk97 holds about you, together with information about how it is being processed. This is sometimes called a Subject Access Request (SAR). lk97 will respond to SARs within 30 days of receipt.
• Right to rectification: If any personal data lk97 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For contact data such as your email address or mobile number, you may update this directly within your lk97 Account settings.
• Right to erasure: In certain circumstances you have the right to request that lk97 delete your personal data. This right is subject to limitations where lk97 is required to retain data by law — for example, AML regulations require us to retain identity and transaction records for a minimum of five years.
• Right to restrict processing: You have the right to request that lk97 restrict the processing of your personal data in certain circumstances — for example, while a complaint or accuracy dispute is being investigated.
• Right to data portability: Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service.
• Right to object: You have the right to object to the processing of your personal data where lk97 relies on legitimate interests as the legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Rights related to automated decision-making: lk97 does not make decisions about Players that produce legal or similarly significant effects based solely on automated processing without human review.

To exercise any of the above rights, please contact the lk97 privacy team via the details in Section 14. We may need to verify your identity before processing your request. There is no charge for exercising your data rights.

The lk97 Platform is strictly intended for adults aged 21 and above. lk97 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the lk97 KYC process, and Accounts are not permitted to access real-money features until age verification is successfully completed.

lk97 strongly encourages parents and guardians to make use of internet filtering and parental control software to prevent minors from accessing online gambling platforms. If you believe a minor in your household may have accessed lk97, please contact our support team immediately and we will assist you in investigating and resolving the matter.

lk97 sends marketing communications — including promotional offers, bonus announcements, PSL cricket betting previews, and new game alerts — only to Players who have explicitly opted in to receiving such communications during registration or through their Account settings.

• Marketing emails and SMS messages from lk97 will always include a clear and functional unsubscribe option. Opting out of marketing communications will not affect your ability to use the lk97 Platform or receive essential Account and transaction notifications.
• lk97 does not share your contact details with third parties for the purpose of sending you their own marketing communications.
• Essential Account communications — such as deposit confirmations, withdrawal notifications, KYC status updates, password reset emails, and security alerts — are sent regardless of your marketing opt-in status, as they are necessary for Account management.
• You may update your marketing communication preferences at any time through the notifications settings panel in your lk97 Account dashboard, or by contacting the lk97 support team.

lk97 may update this Privacy Policy from time to time to reflect changes in applicable data protection laws, our data processing practices, or the features and services offered on the lk97 Platform. The effective date of the current version is displayed at the top of this page.

Where changes to this Policy are material — meaning they significantly affect how we process your data or the rights available to you — lk97 will notify registered Players via email at least 14 days before the changes take effect. For minor clarifications or non-material updates, the revised Policy will be published on this page without advance notification.

Continued use of the lk97 Platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, you should close your Account and cease use of the Platform before the changes take effect.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a data protection concern, please contact the lk97 privacy team through the following channels:

• Support Email: [email protected] — please include "Privacy Request" in the subject line for data rights enquiries.
• Live Chat: Available 24/7 via the lk97 Platform. Our support agents can log your request and escalate it to the privacy team.
• Response Time: lk97 acknowledges all privacy enquiries within 72 hours and aims to resolve Subject Access Requests and data rights requests within 30 calendar days.