Lucy 101 Privacy Policy – How We Keep Your Data Safe in Pakistan

1. Introduction

At Lucy 101, we take the privacy and security of our players' personal information seriously. This Privacy Policy applies to all Pakistani players who register, deposit, play games, or otherwise interact with the Lucy 101 platform at lucy101.com.

This document sets out what personal data we collect, the reasons we collect it, how long we hold it, who we might share it with, and the specific rights you have as a Lucy 101 player over your own information. We've written it as clearly as possible because we believe every Pakistani player should be able to understand exactly what happens to their data – not wade through pages of legal language to find out.

By registering an account at Lucy 101 or by continuing to use the platform, you confirm that you have read this Privacy Policy and that you accept its terms. This Policy forms part of the Lucy 101 Terms and Conditions. If you have any questions at any point, our support team is available 24/7 at support@lucy101.com.

2. Data We Collect

Lucy 101 collects personal data that falls into the following categories. We collect the minimum amount of information required to deliver a safe, functional, and compliant platform for Pakistani players.

We do not collect sensitive personal categories such as racial origin, political opinions, religious beliefs, health information, or biometric data unless this is specifically required by applicable law in a KYC or compliance context.

3. How We Collect Your Data

Lucy 101 collects your personal data through the following means:

• Registration Form: When you create your Lucy 101 account, you provide your name, date of birth, mobile number, and email address directly.
• Deposit & Withdrawal Transactions: When you make a PKR deposit or request a withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, your payment details are captured and logged.
• KYC Verification: When identity verification is required, you upload supporting documents directly through the secure account verification portal.
• Gameplay: Your gaming activity – the games you play, bet sizes, outcomes, session length – is recorded automatically as part of normal platform operation. This data is necessary for dispute resolution, fraud prevention, and regulatory compliance.
• Device and Browser Data: Standard technical information including your IP address, device model, operating system, and browser type is captured automatically when you access Lucy 101. This is used for security monitoring and platform optimisation.
• Cookies and Local Storage: The Lucy 101 platform uses cookies and similar browser storage mechanisms to maintain your session, remember preferences, and gather anonymous usage analytics. See Section 7 for full details.
• Customer Support: When you contact Lucy 101 support via live chat or email, the content of those communications is recorded and associated with your account.

4. How We Use Your Personal Data

Every piece of data that Lucy 101 collects is used for a specific, legitimate purpose. We do not collect data "just in case" or for unrelated commercial purposes. Here is how your information is actually used:

• Account Operation: To create and maintain your player account, verify your identity, process login requests, and enable you to access all platform features including games, betting markets, and the cashier.
• PKR Payment Processing: To process deposits from your Easypaisa, JazzCash, NayaPay, or bank account and to execute PKR withdrawals back to your registered payment method accurately and quickly.
• Fraud and Security: To detect and prevent fraudulent transactions, account takeovers, money laundering, bonus abuse, and other prohibited activities. Device data and IP information play an important role in this monitoring.
• KYC Compliance: To fulfil Know Your Customer obligations required for operating a financial services platform. KYC data is used solely for identity verification and is not shared with unrelated third parties.
• Customer Support: To understand the context of your query, access your account history, resolve disputes, and provide accurate, helpful responses.
• Responsible Gaming: To monitor for signs of problem gambling patterns and to enforce deposit limits, session restrictions, and self-exclusion settings that you have applied to your account.
• Platform Improvement: To analyse anonymous usage patterns and identify areas where the Lucy 101 platform can be made faster, more reliable, or easier to use for Pakistani players.
• Legal Obligations: To retain transaction and identity records as required by applicable financial regulations and to respond to lawful requests from authorities.

5. Who We Share Your Data With

Lucy 101 does not sell, rent, or trade your personal data to any third party. The only circumstances in which your data is shared outside the Lucy 101 platform are described below, and all involve strict data processing agreements:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, and bank payment gateways receive the minimum necessary data to process your PKR deposits and withdrawals. They handle this data under their own privacy frameworks as regulated financial institutions in Pakistan.
• KYC Verification Providers: Where Lucy 101 uses a third-party service to assist with identity document verification, your submitted documents are shared with that provider solely for verification purposes and are not retained by them beyond the verification process.
• Game Content Providers: Game studios such as Evolution Gaming, Ezugi, and Pragmatic Play receive your session data (player identifier, bet amounts, game outcomes) as part of normal game operation. They do not receive your name, contact details, or payment information.
• IT and Security Partners: Technical partners who provide infrastructure, hosting, or security monitoring services for the Lucy 101 platform may have limited access to data as part of their contracted services. All such partners are bound by confidentiality and data protection agreements.
• Legal and Regulatory Authorities: In cases of suspected fraud, money laundering, or in response to a lawful request from a Pakistani or international authority, Lucy 101 may disclose relevant account and transaction data as required by law.

6. Payment Data & PKR Transactions

Given that Lucy 101 processes real PKR deposits and withdrawals for Pakistani players, payment data deserves specific attention in this Privacy Policy.

What is stored: Lucy 101 retains a record of every deposit and withdrawal transaction including the amount in PKR, the payment method used, the date and time, and the transaction status. This is necessary for account management, dispute resolution, and financial compliance. We store the last four digits of card numbers and the registered wallet numbers of Easypaisa and JazzCash accounts for your convenience, but we never store full card numbers, CVV codes, or mobile banking PINs.

How it is protected: Payment transaction records at Lucy 101 are stored in encrypted databases with access restricted to authorised finance and compliance staff only. All data transmitted between you and the Lucy 101 payment portal is encrypted via SSL/TLS.

Third-party payment processors: Actual payment processing is handled by licensed third-party payment gateways. When you initiate a deposit or withdrawal, the payment data travels between your wallet app and the payment processor directly. Lucy 101 does not intercept or store live payment credentials during this process.

Withdrawal verification: To protect against fraud, withdrawals are only processed to payment methods registered in the account holder's own name. Lucy 101 may request additional verification before processing large withdrawal amounts. This is a security measure designed to protect your PKR balance.

7. Cookies & Tracking Technologies

Lucy 101 uses cookies and similar browser-based storage technologies to operate the platform and improve the player experience. Here is a breakdown of the types used:

• Essential Cookies: Required for the platform to function at all. These maintain your logged-in session, remember your account preferences (such as language and preferred game lobby view), and enable the cashier and game loading to work correctly. These cannot be disabled without breaking core platform functionality.
• Analytics Cookies: Anonymous data about how players navigate the platform – which pages are visited most, where players encounter loading delays, which game categories are most popular – helps Lucy 101 improve the platform. This data is aggregated and does not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent login attempts, session hijacking, and other security threats. These operate silently in the background and are essential for protecting your account.

Lucy 101 does not use third-party advertising cookies or allow external advertising networks to place tracking cookies on the platform. You will not see your Lucy 101 activity reflected in targeted advertising on other websites.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect platform functionality. Disabling analytics cookies will not affect your ability to play games or make transactions.

8. Data Retention

Lucy 101 retains your personal data for as long as your account is active and for the periods required by applicable financial and legal regulations after account closure. Below are the general retention guidelines:

• Account and identity data is retained for the duration of your active account plus a minimum of five years after account closure, in line with standard financial record-keeping requirements.
• Transaction records (deposits, withdrawals, bet history) are retained for a minimum of five years for audit, dispute resolution, and regulatory compliance purposes.
• KYC documents are retained for as long as required by applicable anti-money laundering regulations, typically five years from the date of submission or account closure, whichever is later.
• Support communications are retained for three years from the date of the conversation to support dispute resolution and service quality review.
• Anonymous analytics data is retained indefinitely in aggregated form, as it contains no personally identifiable information.

Where data is no longer required and retention is not mandated by law, Lucy 101 securely deletes or anonymises it. Deletion means permanent removal from our active systems; anonymisation means stripping all personally identifiable fields so the data can no longer be traced to you.

9. Security Measures

Lucy 101 implements industry-standard and above-standard security controls to protect the personal data of Pakistani players. These measures are maintained continuously and reviewed regularly:

• AES-256 Encryption at Rest: All personal data and payment records stored in Lucy 101's databases are encrypted using 256-bit Advanced Encryption Standard. Even if a database were somehow accessed by an unauthorised party, the data would be unreadable without the encryption keys.
• SSL/TLS Encryption in Transit: All data exchanged between your browser or app and the Lucy 101 platform travels over SSL/TLS encrypted connections. You can verify this by the padlock icon in your browser's address bar.
• Access Controls: Access to personal data within Lucy 101 is restricted on a strict need-to-know basis. Different staff roles have access only to the data relevant to their function. Administrative access to production systems requires multi-factor authentication.
• Two-Factor Authentication (2FA): Lucy 101 offers 2FA for all player accounts. We strongly recommend enabling it in your account settings. 2FA means that even if someone obtains your password, they cannot log in without access to your registered mobile number or authentication app.
• Fraud Monitoring: Automated and manual monitoring systems run continuously to detect unusual login activity, payment anomalies, and patterns consistent with account takeover attempts. Suspicious activity triggers an automatic account hold and player notification.
• Security Audits: Lucy 101 undergoes periodic independent security reviews to identify and address potential vulnerabilities in the platform infrastructure.

10. Your Rights Over Your Personal Data

As a Lucy 101 player, you have the following rights over the personal data we hold about you. To exercise any of these rights, contact support@lucy101.com from your registered email address. We will respond within 30 days of receiving your request.

11. Minors & Age Verification

Lucy 101 does not knowingly collect personal data from individuals under the age of 18. The platform is strictly intended for adult use only. All players must be 18 years of age or older to register and use the Lucy 101 platform.

Age verification is carried out as part of the KYC process. Where there is reasonable suspicion that an account holder is under 18, the account will be suspended immediately pending verification. If verification confirms the account holder is underage, the account will be permanently closed, all funds will be returned to the deposit source, and any gaming activity will be voided.

If you are a parent or guardian and you believe a minor has created an account on Lucy 101, please contact us immediately at support@lucy101.com. We will investigate and take appropriate action promptly.

12. Third-Party Links

The Lucy 101 platform does not contain links to external third-party websites. All navigation within the platform stays within the lucy101.com domain. This Privacy Policy applies only to the Lucy 101 platform itself.

Third-party game content (slots, live casino, fishing games) is delivered from providers' servers as part of the gaming experience. While these providers are contractually bound to data security standards as part of their integration with Lucy 101, their own data practices are governed by their own policies. Lucy 101 shares only the minimum necessary session data with game providers, as described in Section 5.

13. Changes to This Privacy Policy

Lucy 101 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify all registered players via their registered email address at least 7 days before the changes take effect.

The revised Privacy Policy will be published on this page with an updated "Last Updated" date at the top. We recommend checking this page periodically. Your continued use of the Lucy 101 platform after the effective date of any update constitutes acceptance of the revised Policy.

If you do not accept a revised Privacy Policy, you may request account closure and data deletion by contacting support@lucy101.com before the changes take effect.

14. Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise one of your data rights, or need to report a privacy concern, please contact the Lucy 101 privacy team using the details below:

• Email: support@lucy101.com – mark your subject line "Privacy Request" for fastest routing
• Live Chat: Available 24/7 on the Lucy 101 platform – ask to be connected to the privacy or compliance team

We will acknowledge all privacy-related requests within 48 hours and aim to resolve them within 30 days. For complex requests involving large amounts of data or legal verification requirements, we will communicate any extension of this timeline proactively.

Lucy 101 takes every privacy request and concern seriously. If you feel your privacy rights have not been respected after contacting us, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.