Your Privacy at lucy101 — Handled With Care

lucy101 is a premium online casino and sportsbook platform operating at https://lucy101.net. For the purposes of this Privacy Policy, lucy101 is the data controller — meaning we are the organisation responsible for deciding how and why your personal data is processed.

This Privacy Policy applies to all individuals who access or use the lucy101 platform, including registered players, visitors to the website, and individuals who contact our support team. It covers data collected through the lucy101 website, mobile-optimised interface, and any associated support or communication channels.

If you have any questions about this policy or our data practices before proceeding further, please contact our support team via the 24/7 live chat available on every page of the platform.

lucy101 collects the following categories of personal data, depending on how you interact with the platform:

We do not collect special category data (such as health, religious, or political information) unless you voluntarily provide context in a responsible gaming support interaction, in which case it is treated with the highest level of confidentiality and used solely to assist you.

lucy101 collects personal data through three primary channels:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your account settings, you are providing data directly to us.
• Automatically: When you visit or use the lucy101 platform, our servers and analytics tools automatically record technical and usage data including your IP address, device information, and session behaviour. This happens whether or not you are logged in to an account.
• From third parties: We may receive limited identity verification information from CNIC validation services or payment processors (such as JazzCash and EasyPaisa) to confirm the accuracy of details you have provided during registration or KYC. We do not purchase data from data brokers or marketing list providers.

lucy101 uses the personal data we collect for the following purposes:

• Account creation and management: To open, maintain, and administer your registered account on the lucy101 platform, including processing your login credentials and account preferences.
• Identity verification (KYC): To confirm that you meet our eligibility requirements, including age verification (21+) and identity checks required by applicable anti-money laundering regulations.
• Payment processing: To process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK, and to process withdrawal requests to your verified payment method.
• Gaming services delivery: To provide access to cricket betting markets, PSL and international fixtures, casino games, slots, poker, and live dealer tables.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and prohibited conduct as defined in our Terms and Conditions.
• Regulatory compliance: To meet our legal obligations under applicable anti-money laundering laws, including maintaining transaction records and responding to lawful requests from regulatory authorities.
• Responsible gaming: To monitor gaming patterns for indicators of problem gambling, enforce deposit limits and self-exclusion requests, and send responsible gaming alerts where appropriate.
• Customer support: To respond to your queries, complaints, and support requests via live chat and email in a timely and informed manner.
• Platform improvement: To analyse usage patterns and technical performance data in order to improve the lucy101 platform, fix bugs, and develop new features that serve Pakistani players better.
• Marketing (where consented): To send you promotional offers, bonus notifications, and platform news if you have opted in to receive marketing communications.

Every data processing activity at lucy101 is grounded in one of the following legal bases:

• Contract performance: Processing necessary to open and operate your account, process transactions, and deliver gaming services — i.e., fulfilling the contract you enter into with us when you register.
• Legal obligation: Processing required to comply with KYC regulations, anti-money laundering laws, tax reporting obligations, and responses to lawful authority requests.
• Legitimate interests: Processing for fraud detection, platform security, abuse prevention, and internal analytics — where those interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and certain non-essential cookies — where you have given a clear, freely withdrawable opt-in consent.

lucy101 does not sell your personal data. We share data only in the following limited and controlled circumstances:

• Payment processors: We share the minimum necessary financial data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and approved cryptocurrency processors to execute your deposit and withdrawal instructions.
• Identity verification providers: We share identity data with third-party KYC service providers to confirm your CNIC details and verify that you are who you say you are. These providers are contractually bound to use your data only for verification purposes.
• Game content providers: In the course of delivering live dealer games, slots, and poker content, limited technical identifiers may be shared with our licensed game software providers to enable gameplay. These providers do not receive financial or full identity data.
• Fraud prevention networks: In cases of suspected money laundering, account fraud, or prohibited conduct, we may share relevant data with industry fraud prevention databases to protect all players on the platform.
• Regulatory authorities: Where required by law or pursuant to a lawful regulatory instruction, we will disclose relevant personal and transaction data to competent authorities. We will notify you of any such disclosure to the extent permitted by law.
• Professional advisors: Legal counsel, auditors, and financial advisors may access limited personal data in the course of providing professional services to lucy101, subject to strict confidentiality obligations.

lucy101 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the site is used. Cookies are small text files stored on your device. They do not give us access to your device beyond what is described here.

• Strictly Necessary Cookies: These are required for the platform to function. They maintain your login session, remember your language and currency preferences, and enable security features. These cannot be disabled without breaking core functionality.
• Analytics Cookies: We use anonymised analytics data to understand how players navigate the platform — which pages are most visited, where users encounter difficulties, and how game categories are browsed. This data is aggregated and does not identify you personally.
• Functional Cookies: These remember your preferences such as chosen games, responsible gaming reminders, and interface settings. They improve your experience but are not strictly required.
• Marketing Cookies (Consent Required): If you have opted in to marketing communications, we may use cookies to understand which promotions are relevant to you and to avoid sending duplicate offers. You can withdraw consent at any time.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging in or using certain features of the lucy101 platform.

lucy101 applies technical and organisational security measures appropriate to the sensitivity of the data we hold. These include:

• TLS 1.2 or higher encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest, including identity documents and financial account details.
• Role-based access controls that limit internal access to personal data to only those staff members who require it to perform their duties.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Intrusion detection systems and 24/7 monitoring of our infrastructure for anomalous activity.
• Secure deletion protocols applied when data reaches the end of its retention period.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, lucy101 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

lucy101 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention schedule is as follows:

When data reaches the end of its retention period, it is either securely deleted from our systems or anonymised so that it can no longer be associated with any individual player.

As a player on the lucy101 platform, you hold the following rights with respect to your personal data. These rights are genuine and exercisable — not merely stated for compliance purposes:

• Right of Access: You may request a copy of all personal data that lucy101 holds about you. We will provide this in a structured, readable format within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections (such as updating your contact number) can be made directly through your account settings.
• Right to Erasure: You may request that we delete your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. Note that we may be legally required to retain certain categories of data (see Section 9) and cannot comply with erasure requests where retention is mandated by law.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that we provide your data in a machine-readable format suitable for transfer to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact our support team via live chat or write to [email protected]. We will verify your identity before processing any data rights request. There is no fee for exercising your rights under normal circumstances.

lucy101 sends promotional communications — including bonus offers, free bet notifications, PSL cricket promotions, and platform news — only to players who have explicitly opted in to receive them during registration or through their account settings.

Marketing communications may be sent via SMS to your registered Pakistani mobile number, via email to your registered address, or via in-platform notifications. Each communication channel is controlled separately, allowing you to opt in to one without opting in to all.

You can unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link in any promotional email.
• Replying STOP to any SMS marketing message.
• Updating your communication preferences in your account settings.
• Contacting our support team via live chat and requesting removal from marketing lists.

Players who have registered a self-exclusion will not receive any marketing communications from lucy101 for the duration of their exclusion period, regardless of their prior marketing consent settings.

The lucy101 platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21, and we take active steps to prevent under-age access to our platform.

Age verification is performed during the registration process through CNIC-based identity checks. All accounts are subject to further age verification at the KYC stage before any withdrawal is processed. Where our verification process identifies that an account holder may be under 21, the account is immediately suspended pending investigation.

If lucy101 discovers that personal data has been collected from an individual under the age of 21, that data will be deleted without retention and the account will be permanently closed. Any deposits made to the account will be returned to the originating payment method after verification that the payment method belongs to an adult account holder.

The lucy101 platform serves Pakistani players and processes PKR transactions. While our primary data processing infrastructure is designed to serve this market, certain service providers — including game content providers and fraud prevention network operators — may be located in jurisdictions outside Pakistan.

Where personal data is transferred to a third country, lucy101 ensures that appropriate safeguards are in place before the transfer occurs. These safeguards may include contractual data protection clauses, adequacy decisions, or equivalent technical and organisational measures that provide a level of protection comparable to the standards we apply within the platform.

We do not transfer your data to jurisdictions that offer inadequate data protection standards without first implementing appropriate contractual or technical safeguards. If you would like specific information about the safeguards governing any particular data transfer, please contact our support team.

lucy101 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable regulations, or platform features. The effective date at the top of this page will always reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect how we use your data or the rights available to you — we will notify you by email to your registered address or through a prominent notice displayed upon your next platform login, at least 14 days before the changes take effect.

For non-material changes — such as clarifications, corrections, or minor wording improvements that do not alter the substance of our data practices — we may update the policy without individual notification. We encourage you to review this page periodically so that you remain informed about how lucy101 handles your personal data.

Continued use of the lucy101 platform after any updated Privacy Policy takes effect constitutes your acknowledgement of the revised terms. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way lucy101 handles your personal data, please reach out to our team through either of the following channels:

• Live Chat: Available 24/7 on every page of the lucy101 platform. This is the fastest way to get a response for urgent privacy matters.
• Email: Write to our support team at [email protected] — please use the subject line "Privacy Request" so your message is routed to the correct team.

We aim to respond to all privacy-related enquiries within 5 business days, and to fulfil all verified data rights requests within 30 days of receipt.

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. lucy101 is committed to resolving privacy complaints in good faith and will cooperate fully with any regulatory investigation.