luky22
Privacy Policy

1 About This Policy

luky22 is committed to protecting the privacy of all its players. This Policy is written in plain English and aims to give Pakistani players a clear, honest picture of how their personal data is handled — from the moment they register an account to the point at which their account is closed and data is securely deleted or anonymised.

This Policy should be read alongside luky22's Terms & Conditions and Responsible Gaming Policy, both of which are accessible at luky22.games and are incorporated herein by reference. In the event of any conflict between this Policy and another document regarding data matters, this Policy governs.

2 Data Controller

For the purposes of this Policy, luky22 acts as the data controller in respect of your personal data. This means luky22 determines the purposes and means by which your personal data is processed. luky22 accepts responsibility for the lawful, fair, and transparent processing of your data in accordance with this Policy.

All data-related queries, subject access requests, and deletion requests should be directed to: [email protected] with the subject line "Privacy Request – [your registered mobile number]".

3 Personal Data We Collect

luky22 collects the following categories of personal data from Pakistani players:

4 How We Collect Your Data

luky22 collects personal data through the following means:

• Direct submission: Data you provide during account registration, KYC verification, deposit/withdrawal forms, and support interactions at luky22.
• Automated collection: Technical and usage data collected automatically when you access luky22.games — including IP address, device identifiers, and browser data via cookies and session tracking tools.
• Payment processors: Transaction confirmation and payment status data received from Easypaisa, JazzCash, Raast, and banking partners when you make deposits or request withdrawals at luky22.
• KYC verification providers: Identity verification status and CNIC authenticity results received from third-party KYC service providers used by luky22.
• Game providers: Game round data, RNG outcomes, and session records received from Evolution Gaming, Microgaming, Pragmatic Play, and other game providers integrated into luky22's platform.

5 Legal Basis for Processing

luky22 processes your personal data on the following legal bases:

1. Contractual necessity: Processing required to fulfil our obligations to you as a registered luky22 player — account management, game delivery, deposit/withdrawal processing, and customer support.
2. Legal obligation: Processing required to comply with applicable laws — including anti-money laundering (AML) requirements, age verification obligations, and fraud prevention requirements.
3. Legitimate interests: Processing necessary for luky22's legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, and improving luky22's services — where those interests do not override your fundamental privacy rights.
4. Consent: Processing for marketing communications, where you have explicitly opted in to receive promotional messages from luky22. You may withdraw this consent at any time.

6 How We Use Your Personal Data

luky22 uses your personal data for the following specific purposes:

• Creating and maintaining your luky22 account, including identity verification and age confirmation (18+).
• Processing PKR deposits and withdrawals via Easypaisa, JazzCash, Raast, bank transfer, and cryptocurrency.
• Delivering games, live casino streams, sports betting markets, and all other luky22 Platform features to your account.
• Providing customer support through live chat and email in English.
• Monitoring your account for fraud, multi-accounting, prohibited activities, and money laundering indicators.
• Complying with responsible gaming obligations — including delivering self-imposed limit reminders, cooling-off period enforcement, and self-exclusion management.
• Sending you transactional communications — OTPs, deposit confirmations, withdrawal notifications, security alerts — all via your registered Pakistani mobile number.
• Sending you promotional communications about luky22 offers, if you have consented to receive them.
• Resolving disputes, investigating complaints, and maintaining audit records for regulatory compliance.
• Improving luky22's Platform, game catalogue, payment processes, and user experience using aggregated and anonymised usage data.

7 Who We Share Your Data With

luky22 does not sell, rent, or trade your personal data. We share your data only with the following categories of third party, and only to the extent strictly necessary for the stated purpose:

• Payment processors: Easypaisa (Telenor Microfinance Bank), JazzCash (Mobilink Microfinance Bank), State Bank of Pakistan Raast system, and major Pakistani banks — to process PKR deposits and withdrawals. These processors receive only the transaction data required to execute the payment.
• KYC verification providers: Third-party identity verification services that receive your CNIC data to verify your identity and age on luky22's behalf. These providers are bound by strict data processing agreements.
• Game providers: Evolution Gaming, Microgaming, Pragmatic Play, NetEnt, and other game studios receive the minimum session and account data required to deliver their games to your luky22 account.
• Fraud prevention services: Specialist fraud and AML screening providers that analyse transaction and account data to identify suspicious activity at luky22.
• Legal and regulatory authorities: Where luky22 is required by law or a valid regulatory order to disclose player data, we will do so to the extent required and will notify you where permitted by law.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity providers that process data on luky22's behalf under strict data processing agreements and confidentiality obligations.

8 KYC & Identity Data — Special Handling

CNIC data and identity documentation collected during KYC verification is treated as sensitive personal data within luky22's data classification framework and receives the highest level of protection available within our systems:

• CNIC images and selfie photographs are stored in an encrypted vault with access restricted to luky22's KYC and compliance team.
• CNIC data is never used for marketing purposes and is never shared with game providers or advertising partners.
• KYC records are retained for a minimum period as may be required under applicable AML regulations, following which they are securely deleted.
• luky22 staff who have legitimate access to KYC data are subject to confidentiality obligations and background check requirements.

9 Cookies & Tracking Technologies

luky22 uses cookies and similar tracking technologies on luky22.games to operate essential platform functions, improve performance, and analyse usage. The cookies luky22 uses fall into the following categories:

• Strictly necessary cookies: Required for the Platform to function — maintaining your login session, storing your luky22 wallet balance display, and preserving game state during active sessions. These cannot be disabled without breaking the Platform.
• Performance cookies: Collect anonymised data on how players navigate luky22.games — which pages are most visited, where errors occur, and how long sessions last. This data is used to improve the Platform.
• Functional cookies: Remember your language preferences, responsible gaming settings you have set within your luky22 account, and display preferences.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of luky22.games and may prevent you from accessing some features. Strictly necessary and security cookies cannot be disabled while using luky22.

10 Data Security

luky22 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption on all data transmitted between your device and luky22's servers.
• Encryption at rest for all stored personal data, including payment details, CNIC records, and communications data.
• Role-based access controls ensuring luky22 staff can only access the specific data necessary for their defined function.
• Two-factor authentication required for all luky22 staff accessing sensitive player data systems.
• Regular independent security audits and penetration testing of luky22's infrastructure.
• Intrusion detection systems monitoring luky22's network for anomalous activity around the clock.
• Secure disposal procedures for all physical and digital data when retention periods expire.

11 Data Retention

luky22 retains personal data for as long as your account remains active and for a period thereafter as required by applicable regulatory, legal, and contractual obligations. Specific retention periods apply as follows:

• Account and identity data: Retained for the duration of your active luky22 account plus a minimum of five years following account closure, as required for AML record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five years following the transaction date for regulatory compliance and dispute resolution purposes.
• Gaming activity data: Retained for the duration of your account plus two years following closure for dispute resolution and responsible gaming monitoring.
• Support communications: Retained for two years following the resolution of each interaction for quality assurance and dispute reference purposes.
• Technical and usage data: Anonymised or aggregated within 12 months of collection and retained in anonymised form for platform improvement purposes.
• Marketing consent records: Retained for the period of consent plus two years to demonstrate compliance.

When the applicable retention period expires, luky22 securely deletes or irreversibly anonymises the relevant data. Requests for early deletion are evaluated individually against luky22's regulatory and legal obligations — not all data can be deleted on request.

12 Children's Privacy — Under 18

luky22 is strictly for adults aged 18 and above. luky22 does not knowingly collect, store, or process personal data from any person under the age of 18. If you are under 18, you are not eligible to register at luky22 and must not attempt to do so.

If luky22 becomes aware that an account belongs to a player under the age of 18 — whether through KYC verification, report from a parent or guardian, or internal detection — the account will be immediately suspended, deposits will be returned, and all personal data relating to the underage individual will be securely deleted from luky22's systems.

If you believe a minor may have registered at luky22, please contact [email protected] immediately. luky22 takes underage gambling extremely seriously and will act on all credible reports without delay.

13 Marketing Communications

luky22 may send you promotional communications about new games, special offers, deposit bonuses, and platform features — provided you have explicitly consented to receive such communications during registration or subsequently via your account settings.

You may withdraw your consent to marketing communications at any time by:

• Adjusting your notification preferences within your luky22 account settings.
• Replying "STOP" to any SMS marketing message sent by luky22 to your Pakistani mobile number.
• Contacting luky22 support at [email protected] and requesting removal from all marketing communications.

Withdrawal of marketing consent does not affect your ability to use your luky22 account or any other aspect of these Terms. Transactional communications — OTPs, deposit confirmations, withdrawal notifications, security alerts, and account-critical notices — are not marketing communications and cannot be unsubscribed from while your account is active, as they are necessary for account security and operation.

14 Your Data Rights

As a registered luky22 player in Pakistan, you have the following rights in respect of your personal data:

• Right to Access: You may request a copy of the personal data luky22 holds about you, including your identity data, transaction history, and gaming activity records. Requests are processed within 30 days.
• Right to Rectification: You may request correction of any inaccurate personal data luky22 holds — for example, if your registered name contains an error. Contact [email protected] with the corrected information and supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to luky22's legal and regulatory retention obligations which may prevent full deletion.
• Right to Restrict Processing: In certain circumstances, you may request that luky22 restrict processing of your data — for example, while a complaint is under investigation — without requesting full deletion.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to Object to Marketing: You may object to the processing of your personal data for marketing purposes at any time, as described in Section 13.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request – [your registered mobile number]". luky22 may require identity verification before processing your request to protect against fraudulent data disclosure.

15 Policy Updates

luky22 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable law. Where changes are material, luky22 will notify registered Pakistani players via their registered mobile number prior to the changes taking effect.

The current version of this Policy, with the effective date displayed at the top, is always available at luky22.games/privacy-policy. Continued use of luky22 following the effective date of any updated Policy constitutes acceptance of the revised data practices described therein.

16 Contact Us — Privacy Enquiries

For all privacy-related questions, data rights requests, or concerns about how luky22 handles your personal data, please contact luky22's privacy team through the following channels:

• Email: [email protected] — Subject line: "Privacy Request – [your registered mobile number]"
• Live Chat: Available 24/7 from within your logged-in luky22 account. For immediate privacy concerns, live chat is the fastest route to the luky22 team.

luky22 acknowledges all privacy enquiries within 2 business days (Pakistan Standard Time) and aims to provide a substantive response within 5 business days. Complex requests involving large data exports or legal review may take up to 30 days, in which case luky22 will inform you of the extended timeline promptly.