Privacy Policy — laki97

Who We Are

laki97 is Pakistan's premier online casino and sports betting platform, operated by an internationally licensed gaming company (the "Company", "we", "us", "our"). The laki97 Platform is accessible at laki97.net and through any associated mobile applications or progressive web applications we may offer from time to time.

The Company acts as the data controller in respect of all personal data collected through the laki97 Platform. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those parties act as data processors and are bound by strict contractual obligations to handle your data lawfully and securely.

Data We Collect

laki97 collects personal data across several categories depending on how you interact with the Platform. Below is a comprehensive breakdown of the personal data we may collect from Pakistani players:

2.1 Registration & Identity Data

• Full legal name (as it appears on your CNIC or passport)
• Date of birth (for mandatory 21+ age verification)
• CNIC number or passport number
• Residential address (city, province, full postal address)
• Email address
• Mobile phone number
• Username and encrypted password

2.2 Financial & Transaction Data

• JazzCash or EasyPaisa mobile wallet numbers
• HBL, UBL, Meezan Bank, or MCB account details (for bank transfers)
• Deposit amounts, dates, and payment method references
• Withdrawal requests, amounts, and processing status
• Account balance history and bonus transaction records

2.3 Technical & Device Data

• IP address at time of login and registration
• Device type, operating system, and browser version
• Unique device identifiers
• Session timestamps and duration
• Geolocation data (city-level, derived from IP)

2.4 Behavioural & Gaming Data

• Games played, bet amounts, win/loss records, and session history
• Sports markets accessed and betting patterns
• Responsible gaming tool usage (deposit limits, self-exclusion requests)
• Bonus and promotion uptake history

2.5 Communications Data

• Live chat transcripts with customer support
• Email correspondence with laki97 support teams
• Feedback, complaints, and dispute records

2.6 KYC Verification Documents

• Scanned or photographed copy of CNIC (front and back) or passport
• Proof of address documents (utility bill, bank statement)
• Source of funds documentation where enhanced due diligence is required

How We Use Your Data

laki97 uses your personal data for the following specific purposes:

Legal Basis for Processing

laki97 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contract Performance: Processing is necessary to create and maintain your laki97 account, process deposits and withdrawals, and provide the gaming services you have signed up for.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, age verification obligations imposed by our gaming licence, and financial record-keeping obligations.
• Legitimate Interests: Processing is necessary for laki97's legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud prevention, security monitoring, and platform improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Sharing Your Data

laki97 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances, and only to the extent necessary:

5.1 Payment Service Providers

To process your deposits and withdrawals, laki97 must share relevant financial information with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and MCB. These providers operate under their own privacy policies and are bound by financial services regulations applicable in Pakistan.

5.2 Game Content Providers

laki97 integrates games developed by certified third-party game studios. When you play a casino game, limited technical data (session tokens, game round identifiers) may be shared with the relevant game provider to ensure correct game operation and RNG certification. Game providers do not receive your name, CNIC, or payment details.

5.3 Regulatory and Law Enforcement Authorities

laki97 may be required by law, court order, or regulatory instruction to disclose your personal data to competent governmental or law enforcement authorities. In such cases, we will disclose only the minimum data required to fulfil the legal obligation and, where permitted, will notify you of such disclosure.

5.4 Identity Verification Services

laki97 engages third-party KYC and identity verification services to assist with CNIC verification, age checks, and enhanced due diligence. These providers are contractually prohibited from using your data for any purpose other than identity verification on laki97's behalf.

5.5 Fraud Prevention and Anti-Money Laundering Agencies

Where required under our licensing obligations, laki97 may share transaction data and account information with AML compliance services and fraud prevention databases to detect and prevent financial crime. This sharing is a legal obligation and cannot be opted out of.

Cookies & Tracking Technologies

laki97 uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and gather analytical data. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These remember your language preferences, display settings, and responsible gaming configuration (such as your deposit limits and session reminders) so you do not need to re-enter them at each visit.
• Analytical Cookies: Used to understand how players navigate the Platform — which pages are most visited, how long sessions last, and where players encounter friction. This data is aggregated and anonymised and is used solely to improve the Platform.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic, account takeover attempts, and suspicious geographic access patterns.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core features of laki97, but some personalisation features may not function as intended.

Data Security

laki97 implements a multi-layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• AES-256 Encryption: All data stored in laki97's databases is encrypted at rest using AES-256 encryption, the same standard used by international financial institutions.
• TLS/SSL in Transit: All data transmitted between your device and laki97's servers is protected by TLS 1.3 encryption, indicated by the padlock icon in your browser's address bar.
• Two-Factor Authentication (2FA): laki97 supports 2FA on all player accounts. We strongly encourage all players — particularly those in Karachi, Lahore, Islamabad, and Faisalabad — to enable 2FA from their account security settings.
• Access Controls: Access to player data within laki97's internal systems is restricted on a strict need-to-know basis. All internal access is logged, audited, and reviewed regularly.
• Penetration Testing: laki97's infrastructure undergoes regular independent penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, laki97 will notify affected players within 72 hours of becoming aware of the breach, in accordance with applicable data protection requirements.

Data Retention

laki97 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following retention periods apply:

Upon expiry of the applicable retention period, laki97 will securely delete or irreversibly anonymise your personal data so that it can no longer be attributed to you as an individual.

Your Privacy Rights

As a laki97 player, you have the following rights in respect of your personal data. To exercise any of these rights, contact our support team via live chat or email — we will respond within 10 business days.

• Right of Access: You have the right to request a copy of all personal data laki97 holds about you. We will provide this in a clear, machine-readable format.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected. Minor updates (such as address changes) can be made directly from your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. Note that this right is not absolute — where laki97 is required to retain your data under AML or licensing regulations, deletion may be deferred until those obligations are fulfilled.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to our processing on legitimate interest grounds.
• Right to Data Portability: Where processing is based on your consent or contract performance, you have the right to receive your data in a structured, commonly used, and machine-readable format and to have it transmitted to another service provider where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling. You also have an absolute right to object to processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where we process your data on the basis of consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

Children's Privacy

laki97 is strictly an adult gaming platform. All real-money features, account registration, and access to gaming content on laki97 are restricted to individuals who are 21 years of age or older. This is a non-negotiable requirement enforced through mandatory age verification at the point of registration.

Parents and guardians in Pakistan who are concerned about a minor accessing gambling websites are strongly encouraged to use parental control software and internet filtering tools to restrict access to online gaming platforms. laki97 supports all efforts to prevent underage gambling in Pakistan.

International Data Transfers

laki97 is operated by an internationally licensed gaming company, and as a consequence, some of your personal data may be processed on servers located outside Pakistan. Where such international transfers occur, laki97 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or exceeding the protections described in this Privacy Policy.

Safeguards used for international transfers include:

• Standard contractual clauses binding recipient entities to equivalent data protection standards
• Transfer only to jurisdictions that maintain adequate data protection frameworks recognised under our licensing authority's requirements
• Encryption of all data in transit using TLS 1.3 regardless of geographic routing

laki97's primary data hosting infrastructure is located in secure, certified data centres. All sub-processors handling your data internationally are contractually required to maintain equivalent security standards and are audited regularly.

Policy Updates

laki97 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal obligations, or improvements to our platform. When material changes are made, we will notify registered players via email and display a prominent notice on the Platform at least 7 days before the updated policy takes effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Continued use of the laki97 Platform after the effective date of any revision constitutes your acceptance of the updated policy.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about how laki97 has handled your personal data, please get in touch through any of the following channels:

• Live Chat: Available 24/7 directly on the laki97 platform — the fastest route to our privacy team.
• Email: [email protected] — all privacy-related queries are escalated to our data protection team within one business day.
• Support Hours: Live agents available 08:00 – 02:00 Pakistan Standard Time (PKT), 7 days a week.

When submitting a privacy-related request, please include your registered laki97 username, a clear description of your request or concern, and any relevant dates or transaction references. We will acknowledge your request within 2 business days and provide a full response within 10 business days.

If you are not satisfied with laki97's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority or to the dispute resolution mechanism specified under laki97's gaming licence. Details of the applicable supervisory authority are available in the laki97 licensing documentation accessible via our About Us page.