luke55 Privacy Policy

1 Who We Are

luke55 is an internationally licensed online sports betting and casino platform operating under the domain luke55.net. We offer sports betting markets covering PSL cricket, international cricket, and other major global sports, alongside a full suite of casino games including slots, live dealer tables, and speciality games such as Monster Hi-Lo and Ocean Lord.

For the purposes of this Privacy Policy, "luke55", "we", "us", and "our" refer to the operating entity behind the luke55.net platform. "You" and "your" refer to any individual who accesses, browses, registers on, or places a bet or wager through the luke55 platform.

luke55 acts as the data controller in respect of all personal information collected through the platform. This means we determine the purposes for which your personal data is processed and are responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

2 Data We Collect

luke55 collects personal data from you in the categories described below. We only collect data that is necessary for the stated purposes — we do not engage in speculative or excessive data collection.

3 How We Collect Your Data

luke55 collects your personal data through the following channels and interactions:

• Registration: When you create a luke55 account, you provide identity and contact information directly through the registration form.
• Verification submissions: When you submit identity documents (CNIC, passport, address proof) as part of the KYC verification process required before withdrawals are processed.
• Deposits and transactions: When you initiate a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, your payment account details and transaction records are recorded.
• Platform usage: Our servers automatically log technical data such as your IP address, device identifiers, browser type, and the pages you visit within the luke55.net platform during each session.
• Support interactions: When you contact our support team via live chat or email, the content of your communications and any information you share during that interaction is recorded.
• Cookies and similar technologies: Our platform uses cookies and session tokens to maintain login state, prevent fraud, and analyse platform usage. See Section 7 for full details.
• Third-party verification services: Where necessary for identity verification or fraud screening, we may receive data from third-party identity verification providers. This data is used solely for the purpose for which it was obtained.

4 Why We Use Your Data

luke55 processes your personal data for the following clearly defined purposes:

• Account operation: To create, manage, and maintain your luke55 player account, including login authentication and profile settings.
• Transaction processing: To process deposits in PKR via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to process withdrawal requests to verified accounts.
• Identity and age verification: To verify that you are who you say you are and that you meet the mandatory 21+ age requirement for all real-money activities on the platform.
• Anti-money laundering (AML) compliance: To monitor transactions and gameplay patterns for signs of financial crime, as required under internationally applicable AML regulations.
• Fraud prevention and security: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct as defined in the luke55 Terms & Conditions.
• Customer support: To respond to your queries, investigate complaints, and resolve disputes related to your account or betting activity.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to administer self-exclusion, cooling-off, and deposit limit requests.
• Platform improvement: To analyse aggregate, anonymised usage data to improve the luke55 platform, identify bugs, and enhance the overall player experience.
• Legal compliance: To fulfil our obligations under applicable gaming, financial, and data protection law, and to respond to lawful requests from regulatory or law enforcement authorities.
• Marketing communications: To send you promotional offers, bonus notifications, and PSL cricket betting updates by email or SMS — but only where you have opted in to receive such communications. You may opt out at any time.

5 Legal Basis for Processing

luke55 processes your personal data under one or more of the following legal bases depending on the nature of the processing activity:

• Contractual necessity: Processing your data is necessary to fulfil the contract between you and luke55 — specifically, to operate your account, process your bets, and pay out your winnings.
• Legal obligation: Certain processing activities — particularly those related to identity verification, AML monitoring, and record retention — are required by law and cannot be waived.
• Legitimate interests: luke55 processes some data on the basis of legitimate business interests, including fraud detection, platform security, and platform improvement. We balance these interests against your privacy rights and only rely on this basis where such interests do not override your fundamental rights.
• Consent: For optional processing activities such as marketing communications, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Data

luke55 does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and only with parties that are bound by appropriate data protection obligations:

• Payment processors: Your financial data is shared with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank solely for the purpose of processing your deposits and withdrawal transactions. These entities operate under their own applicable privacy frameworks.
• Identity verification providers: Where third-party KYC (Know Your Customer) services are used to verify your identity documents or screen against sanctions lists, the minimum necessary data is shared for this purpose only.
• Fraud and security services: Technical data such as IP addresses and device fingerprints may be shared with fraud detection service providers to identify and prevent unauthorised access or financial crime.
• Game software providers: In operating games such as Monster Hi-Lo, Ocean Lord, and slot titles on the platform, limited session data may be shared with the relevant game provider for game integrity and RNG certification purposes.
• Regulatory and law enforcement authorities: luke55 is required by law to disclose data to competent regulatory bodies or law enforcement agencies upon receipt of a valid legal request. We do not disclose more than is strictly required.
• Professional advisers: Legal, accounting, and auditing professionals engaged by luke55 may access personal data to the minimum extent necessary for them to provide their professional services, subject to strict confidentiality obligations.

7 Cookies & Tracking Technologies

luke55 uses cookies and similar tracking technologies on the luke55.net platform. These serve functional, security, and analytical purposes. The types of cookies we use are described below:

• Essential cookies: These are required for the platform to function correctly. They maintain your login session, remember your language preference, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without severely affecting platform functionality.
• Security cookies: These help us detect suspicious login attempts, unusual account activity, and potential fraud. They are part of our core security infrastructure.
• Analytics cookies: We use anonymised analytics data to understand how players navigate the luke55 platform — which pages are most visited, where users drop off, and which features are most used. This data is aggregated and cannot be used to identify individual players.
• Preference cookies: These remember your platform settings such as odds format preferences and display options to improve your experience on return visits.

You can manage cookie preferences through your browser settings. Please note that disabling essential or security cookies may prevent you from logging into your luke55 account or using certain features of the platform.

8 Data Retention

luke55 retains your personal data only for as long as is necessary for the purposes for which it was collected, taking into account our legal and regulatory obligations. The general retention periods applicable to different categories of data are as follows:

• Account data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in accordance with applicable AML and gaming regulatory requirements.
• Transaction and betting records: Retained for a minimum of 5 years from the date of each transaction, as required for financial record-keeping and regulatory audit purposes.
• Identity verification documents: Retained for a minimum of 5 years from the date of submission or account closure, whichever is later.
• Support communications: Retained for 2 years from the date of the most recent communication in each support thread, unless the content relates to an ongoing dispute or legal matter.
• Technical and usage data: Retained in aggregated or anonymised form indefinitely for platform improvement purposes. Raw identifiable technical logs are retained for up to 12 months.
• Marketing consent records: Retained for the duration of your consent plus 3 years to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

9 Security Measures

luke55 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational security measures to protect it against unauthorised access, accidental loss, alteration, or disclosure.

• Encryption in transit: All data exchanged between your browser and the luke55.net platform is protected by TLS 1.2 or higher. This prevents interception of your data during transmission.
• Encryption at rest: Personal data and financial information stored in our systems is encrypted at rest using AES-256 encryption standards.
• Access controls: Access to personal data within the luke55 infrastructure is strictly limited to authorised personnel who require access to perform their job functions. Role-based access controls and audit logging are enforced.
• Secure payment processing: luke55 does not store your full JazzCash, EasyPaisa, or banking credentials on our servers. Payment transactions are handled through the respective providers' secure APIs.
• Intrusion detection: Our platform operates continuous monitoring systems designed to detect and alert on anomalous access patterns, potential intrusions, and data exfiltration attempts in real time.
• Staff training: All luke55 personnel with access to player data receive regular training on data protection obligations and security best practices.

10 Your Privacy Rights

As a user of the luke55 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team using the contact details in Section 13:

• Right of access: You have the right to request a copy of the personal data that luke55 holds about you, along with information about how it is used. We will respond to access requests within 30 days.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Where data has been shared with third parties, we will notify them of any correction where feasible.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that we may be required to retain certain data (such as transaction records) for regulatory compliance periods even after account closure.
• Right to restrict processing: You may request that we restrict the processing of your data in certain circumstances — for example, while an accuracy dispute is being investigated.
• Right to data portability: You have the right to receive a copy of the personal data you provided to luke55 in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests. luke55 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

11 Children & Minors

The luke55 platform is strictly for adults aged 21 years and over. We do not knowingly collect or process personal data relating to individuals under the age of 21. Registration is blocked for users who declare a date of birth that would make them under 21 years of age.

If luke55 becomes aware that personal data has been collected from an individual under the age of 21 — whether through misrepresentation at registration or any other means — we will immediately suspend the relevant account, void any associated bets or winnings, return deposits subject to payment verification, and permanently delete all associated personal data as promptly as our legal obligations allow.

Parents and guardians who believe their child may have registered on the luke55 platform should contact our support team immediately at [email protected] so that we can take immediate action.

12 Changes to This Policy

luke55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, services, or applicable data protection law. When we make material changes to this policy, we will notify registered users via email or through a prominent in-platform notice at least 7 days before the changes take effect.

The updated Privacy Policy will be published at luke55.net/privacy-policy with a revised "Last Updated" date clearly displayed at the top of the page. We encourage you to review this page periodically to stay informed about how luke55 protects your data.

Your continued use of the luke55 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you should cease using the platform and contact support to close your account.

13 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related complaint, please contact the luke55 Data Support team using the details below:

If you are not satisfied with our response to your privacy complaint, you have the right to escalate the matter to the relevant supervisory authority or regulatory body overseeing the luke55 operating licence and data handling obligations.

For questions specifically related to responsible gaming, self-exclusion, or deposit limits, please visit our dedicated Responsible Gaming page.