luky22 Privacy Policy

luky22 ("luky22", "we", "us", "our") operates the online casino and sports betting platform accessible at luky22.app, including any associated mobile-optimised interfaces and applications. luky22 is the data controller responsible for the personal information collected through this platform.

This Privacy Policy governs how luky22 handles the personal data of all registered players, prospective players, and visitors to the luky22 website, regardless of whether they are accessing the platform from Karachi, Lahore, Islamabad, Faisalabad, Peshawar, or any other location. By creating a luky22 account or using any part of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

For any privacy-related queries, you can reach the luky22 data protection team at [email protected]. We endeavour to respond to all data-related enquiries within 30 calendar days of receipt.

luky22 collects personal information in two primary ways: information you provide to us directly, and information collected automatically when you use the platform. The categories of data we collect are as follows:

luky22 does not collect sensitive personal data such as biometric data, religious beliefs, or political opinions. We do not require or store your full bank account numbers or card numbers — payment processing is handled entirely by our compliant third-party payment partners.

luky22 uses the personal data we collect for the following purposes, each of which is necessary for the operation of our platform and the delivery of our services to you:

• Account creation and management: To register your luky22 account, verify your identity, and manage your account settings and preferences.
• Service delivery: To provide access to casino games, live dealer tables, cricket betting markets, PSL wagering, slot titles, and all other luky22 features you use.
• Payment processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and supported cryptocurrency methods, and to maintain accurate transaction records.
• KYC and fraud prevention: To verify your identity and age (21+), detect and prevent fraud, money laundering, and other prohibited conduct as required by our regulatory obligations.
• Customer support: To respond to your queries, resolve disputes, and manage formal complaints submitted to our support team.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to apply self-exclusion, deposit limits, or account controls as requested by you or required by applicable responsible gaming standards.
• Legal compliance: To fulfil our obligations under applicable law, including reporting requirements to financial intelligence authorities where legally mandated.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the luky22 platform, fix technical issues, and develop new features.
• Marketing communications: To send you promotional offers, bonus notifications, and relevant updates where you have provided your consent to receive such communications. You may withdraw this consent at any time.

luky22 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or where otherwise required by applicable law.

luky22 processes your personal data on the following legal bases, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing your identity, contact, and financial data is necessary for us to perform our contract with you — i.e., to provide the luky22 gaming and betting services you have registered for. Without this data, we cannot operate your account.
• Legal obligation: Certain data processing activities — particularly KYC verification, age verification (21+ minimum), anti-money laundering checks, and financial record-keeping — are required by applicable laws and regulatory obligations. luky22 must comply with these requirements regardless of individual player preference.
• Legitimate interests: luky22 processes technical and usage data on the basis of our legitimate interests in operating a secure, fraud-free, and well-functioning platform. We have assessed that these interests are not overridden by your data protection rights where appropriate safeguards are in place.
• Consent: Where luky22 processes your data for marketing communications or for the use of non-essential cookies, we do so on the basis of your explicit consent. You have the right to withdraw this consent at any time by contacting [email protected] or adjusting your account communication preferences.

luky22 does not sell, rent, or trade your personal information to any third party for commercial purposes. We share your data only in the specific circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: Your financial transaction data is shared with our regulated payment processing partners (including JazzCash and EasyPaisa gateway operators, and supported banking partners such as HBL, UBL, and Meezan Bank) solely for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: Your identity document data may be shared with licensed third-party KYC verification services to confirm your identity and age eligibility as required by our platform policies.
• Regulatory and law enforcement authorities: luky22 may be required to disclose your personal data to Pakistani financial intelligence authorities, law enforcement agencies, or our licensing regulator where we are legally obligated to do so. Such disclosures will be made strictly in accordance with applicable legal requirements.
• Game software providers: Technical session data (excluding personally identifiable information) may be shared with our licensed game software providers to enable the delivery of casino and sportsbook content on the platform.
• Professional advisers: In limited circumstances, personal data may be shared with legal counsel, auditors, or insurers where strictly necessary for professional advisory purposes, and subject to binding confidentiality obligations.

The security of your financial information is of the highest priority at luky22. The following specific safeguards apply to all payment-related data processed on the platform:

• No card or account number storage: luky22 does not store full JazzCash wallet numbers, EasyPaisa account numbers, or bank account numbers on our own servers at any point. All such data is handled exclusively by our PCI-DSS compliant payment processing partners.
• Transaction reference only: luky22's own records hold only anonymised payment references, transaction amounts, timestamps, and the name of the payment method used — sufficient for our own accounting and dispute resolution purposes, but not sufficient to initiate a payment independently.
• Withdrawal verification: To prevent unauthorised withdrawals, luky22 applies identity verification checks before processing withdrawal requests. This is a security measure in your interest and is not negotiable.
• Chargeback and dispute records: In the event of a disputed transaction or chargeback claim, luky22 may be required to share relevant transaction records with payment processors or financial institutions to investigate and resolve the dispute.

If you have any concerns about a specific financial transaction on your luky22 account, contact our support team immediately via live chat or at [email protected]. We are available 24/7 to assist Pakistani players with payment-related queries.

luky22 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to analyse how the platform is used so we can continue improving the luky22 experience for Pakistani players.

• Essential cookies: These cookies are strictly necessary for the luky22 platform to operate. They enable functions such as maintaining your login session, remembering your language preference, and ensuring the security of your account. These cannot be disabled without affecting platform functionality.
• Analytics cookies: luky22 uses anonymised analytics tools to understand how players navigate the platform, which game categories are most popular, and where technical issues occur. This data is aggregated and does not identify you personally.
• Preference cookies: These cookies remember your settings and preferences across sessions — for example, your preferred currency display, game category filters, or notification settings — so you do not need to reconfigure them on each visit.
• Marketing cookies: With your consent, luky22 may use cookies to deliver relevant promotional content within the platform that is tailored to your interests and betting history. You may withdraw consent for marketing cookies at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent some or all luky22 platform features from functioning correctly.

luky22 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active account data: Identity, contact, and account data is retained for the full duration of your active luky22 account relationship, plus a minimum of 5 years following account closure, in accordance with financial record-keeping requirements.
• Transaction records: All financial transaction records are retained for a minimum of 7 years following the transaction date, as required for audit and anti-money laundering compliance purposes.
• KYC documents: Identity verification documents are retained for a minimum of 5 years following account closure, and for longer periods where required by applicable regulatory obligations.
• Support communications: Customer support correspondence is retained for a period of 3 years from the date of the most recent communication in a given support thread.
• Marketing data: Where you have consented to marketing communications, your contact and preference data for marketing purposes is retained until you withdraw your consent, at which point it is removed from active marketing lists promptly.

Upon expiry of the applicable retention period, luky22 will securely delete or anonymise your personal data. Where anonymisation is used, the resulting data cannot be re-identified and may be retained indefinitely for statistical and analytical purposes.

luky22 has implemented a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• TLS/SSL encryption: All data in transit between your device and luky22 servers is encrypted using current TLS protocols, preventing interception of your login credentials, payment details, and personal information during transmission.
• AES-256 data encryption at rest: Sensitive personal data stored in luky22 databases is encrypted at rest using AES-256 encryption, one of the strongest encryption standards commercially available.
• Access controls: Access to personal data within luky22 is strictly limited to authorised personnel on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and undergo data security training.
• Two-factor authentication: luky22 offers and strongly recommends the use of two-factor authentication (2FA) for player accounts, providing an additional layer of security beyond your password.
• Regular security audits: The luky22 platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: luky22 maintains a documented incident response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players and the relevant regulatory authority in accordance with applicable legal timelines.

As a luky22 player, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". luky22 will respond within 30 calendar days:

• Right of access: You have the right to request a copy of the personal data luky22 holds about you, along with information about how it is used and with whom it is shared.
• Right of rectification: If any personal data luky22 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your luky22 account settings.
• Right to erasure: In certain circumstances, you have the right to request that luky22 delete your personal data. This right is subject to limitations where retention is required by law — for example, the mandatory financial record retention periods described in Section 8 above.
• Right to restriction of processing: You have the right to request that luky22 temporarily restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or a complaint is under investigation.
• Right to data portability: Where technically feasible and where processing is based on your consent or a contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object to marketing: You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. luky22 will cease all marketing communications promptly upon receipt of such an objection.
• Right to withdraw consent: Where luky22 processes your data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The luky22 platform is strictly intended for adults aged 21 and above. luky22 does not knowingly collect, store, or process the personal data of any person under the age of 21. The minimum age requirement of 21 is enforced as a core responsible gaming measure and is non-negotiable.

If luky22 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to permanently close the associated account, delete the personal data, and return any deposited funds (net of winnings, which will be forfeited) to the originating payment method.

Parents and guardians who have reason to believe that a person under the age of 21 has registered a luky22 account should contact us immediately at [email protected]. luky22 treats all such notifications with the highest priority and will investigate and act promptly.

luky22 operates with server infrastructure and third-party service providers that may be located outside of Pakistan. Where your personal data is transferred to and processed in a country outside Pakistan, luky22 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or exceeding that which applies within Pakistan.

Such safeguards include contractual data processing agreements with all third-party recipients, incorporating standard data protection clauses that require the recipient to protect your personal data to an adequate standard. luky22 will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing the necessary protective mechanisms.

If you would like further information about the specific safeguards in place for any particular international data transfer, please contact the luky22 data protection team at [email protected].

luky22 reserves the right to update or amend this Privacy Policy at any time. When material changes are made — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify you via email to your registered address and/or via a prominent notice on the luky22 platform prior to the changes taking effect.

Non-material changes, such as minor clarifications or corrections to wording that do not alter the substance of this policy, may be made without advance notice. The "Last Updated" date at the top of this document will always reflect the most recent revision.

We encourage all luky22 players to review this Privacy Policy periodically to stay informed about how we are protecting your information. The current version of this Privacy Policy is always available at luky22.app/privacy-policy.

If you have any questions, concerns, or complaints about this Privacy Policy or about how luky22 handles your personal data, please get in touch with us using the contact details below:

• Email: [email protected] — please use the subject line "Privacy Query" or "Data Rights Request" as appropriate
• Live Chat: Available 24/7 from within your luky22 account dashboard for immediate assistance
• Response time: luky22 acknowledges all privacy-related communications within 48 hours and provides a substantive response within 30 calendar days

If you are not satisfied with luky22's response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority or to the dispute resolution body designated by our licensing regulator. Details of the applicable escalation process will be provided upon request to the support team.