luky22 Privacy Policy – How We Handle Your Data

1. Introduction

1.1 luky22 ("we", "us", "our") operates the online casino and sports betting platform available at luky22.com (the "Platform"). We are the data controller responsible for the personal data you provide to us.

1.2 This Privacy Policy explains what personal data luky22 collects when you visit or use the Platform, for what purposes that data is processed, with whom it may be shared, how long it is retained, and what rights you hold as a data subject.

1.3 By registering a luky22 account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not register or continue using the Platform.

1.4 This policy should be read alongside the luky22 Terms & Conditions. Capitalised terms not defined here have the meanings given in those Terms.

2. Personal Data We Collect

luky22 collects the following categories of personal data from players:

Category	Examples	Purpose
Identity Data	Full name, date of birth, CNIC number, CNIC scan/copy	Account registration, KYC age and identity verification
Contact Data	Pakistani mobile number, email address, city of residence (e.g., Karachi, Lahore, Islamabad)	Account communication, support, two-factor authentication
Financial Data	Payment method type (JazzCash, Easypaisa, HBL, UBL, etc.), transaction reference numbers, deposit/withdrawal amounts	Processing payments, fraud prevention, AML compliance
Technical Data	IP address, device type, browser type and version, operating system, session identifiers	Platform security, fraud detection, technical support
Usage Data	Games played, bets placed, win/loss records, session durations, login timestamps	Responsible gaming monitoring, dispute resolution, platform improvement
Communications Data	Support chat transcripts, emails sent to luky22, feedback submitted	Customer support, quality assurance, complaint handling

2.1 luky22 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity document review may incidentally disclose such information and where applicable law requires its processing for KYC purposes.

3. How We Collect Your Data

luky22 collects personal data through the following means:

• Direct Provision: Data you provide when registering a luky22 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys;
• Automated Collection: Data collected automatically when you use the Platform, including via cookies, log files, and session tracking technologies;
• Third-Party Sources: Data received from payment processors (e.g., JazzCash, Easypaisa) for transaction verification, identity verification service providers, and fraud-detection partners.

4. How We Use Your Personal Data

luky22 processes your personal data for the following purposes:

• To create, verify, and manage your luky22 account;
• To process deposits, withdrawals, and resolve payment queries;
• To comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) obligations;
• To enforce the 18+ age restriction and verify player eligibility;
• To detect, prevent, and investigate fraudulent activity, cheating, or abuse of the Platform;
• To provide customer support and respond to complaints, disputes, and enquiries;
• To administer bonuses and promotions and verify eligibility for promotional offers;
• To operate and improve responsible gaming tools, including monitoring for patterns that may indicate problem gambling;
• To send transactional communications (deposit confirmations, withdrawal notifications, security alerts);
• To send promotional communications, where you have opted in or where we have a legitimate interest to do so (with an opt-out available at any time);
• To comply with applicable legal, regulatory, and judicial obligations.

5. Legal Bases for Processing

luky22 processes personal data under the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the luky22 Terms & Conditions — including account management, payment processing, and game delivery;
• Legal Obligation: Processing required to comply with AML regulations, KYC requirements, age verification obligations, and lawful requests from competent authorities;
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improving the luky22 service, where those interests are not overridden by your data protection rights;
• Consent: Processing based on your explicit consent, such as receiving promotional email or SMS communications. You may withdraw consent at any time by contacting support or using the unsubscribe mechanism in any marketing communication.

6. Sharing Your Personal Data

6.1 luky22 does not sell or rent your personal data to any third party. We may share your data with the following categories of recipients strictly as necessary:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and international processors (Skrill, Neteller) for transaction processing;
• KYC and Identity Verification Providers: Third-party services used to verify CNIC documents and confirm player identity and age;
• Fraud Prevention and Security Partners: Services that help detect bot activity, account takeover attempts, and financial fraud;
• IT Infrastructure Providers: Cloud hosting, database, and security providers who process data on our behalf under binding data processing agreements;
• Legal and Regulatory Authorities: Law enforcement agencies, courts, regulators, or other government bodies where disclosure is required by applicable law or valid legal process;
• Professional Advisers: Legal counsel, accountants, and auditors who are bound by professional confidentiality obligations.

6.2 Any third party receiving personal data from luky22 is contractually required to handle that data securely and to use it only for the purposes for which it was shared.

7. Data Retention

7.1 luky22 retains personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulatory guidance. Specifically:

• Account and identity data (including CNIC documentation) is retained for a minimum of 5 years following account closure to comply with AML record-keeping requirements;
• Transaction records are retained for a minimum of 5 years from the date of each transaction;
• Support communications are retained for 2 years from the date of last contact;
• Marketing consent records are retained for 3 years from the date of last consent update or interaction.

7.2 Where data is no longer required and no legal obligation to retain it exists, luky22 will securely delete or anonymise that data.

8. Cookies and Tracking Technologies

8.1 luky22 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Essential Cookies: Required for the Platform to function. These include session cookies that maintain your luky22 login state. These cannot be disabled without impairing Platform functionality;
• Functional Cookies: Store your preferences such as language settings, preferred game lobby view, and responsible gaming reminder configurations;
• Analytical Cookies: Help luky22 understand how players navigate and use the Platform so we can identify and fix issues and improve the experience. Data collected is aggregated and does not identify you individually;
• Security Cookies: Used to detect fraud and protect the security of your luky22 account, including identifying unusual login patterns.

8.2 luky22 does not deploy behavioural advertising cookies or allow third-party advertisers to set cookies on the Platform.

8.3 You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent the Platform from functioning correctly.

9. Security Measures

9.1 luky22 implements technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:

• 256-bit SSL/TLS encryption on all pages of the Platform, including the login form and cashier;
• Encrypted storage of passwords using industry-standard hashing algorithms;
• Multi-factor authentication options for player accounts;
• Strict access controls limiting personal data access to authorised personnel;
• Regular security audits and penetration testing of Platform infrastructure;
• Monitoring systems that detect and alert on suspicious access patterns in real time.

9.2 Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. luky22 will notify affected players and relevant authorities promptly in the event of a data breach that poses a risk to individuals' rights and freedoms.

10. Your Data Rights

Subject to applicable law, you hold the following rights with respect to your personal data held by luky22:

• Right of Access: You may request a copy of the personal data luky22 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances;
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests at any time. Marketing communications include an unsubscribe option in every message.

To exercise any of the above rights, contact the luky22 support team via the official support email. We will respond within 30 days of receiving a verifiable request. Identity verification may be required before fulfilling a data rights request.

11. Children's Privacy

11.1 The luky22 Platform is strictly intended for individuals aged 18 and above. luky22 does not knowingly collect personal data from anyone under 18. Age is verified through CNIC documentation during account KYC.

11.2 If luky22 becomes aware that personal data has been collected from a person under 18 without appropriate age verification, that account will be suspended immediately, the personal data deleted (subject to any legal retention obligations regarding the under-age access incident), and the matter may be escalated to relevant authorities.

12. Changes to This Privacy Policy

12.1 luky22 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or Platform features. The "Last Updated" date at the top of this page indicates the date of the most recent revision.

12.2 Material changes to this Privacy Policy will be communicated to registered players via their registered mobile number or email address at least 7 days before the changes take effect. Continued use of the luky22 Platform after the effective date of any revised Privacy Policy constitutes acceptance of the updated terms.

13. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data luky22 holds about you, please contact our support team:

Email: [email protected]

Support Hours: 24 hours a day, 7 days a week

For formal data rights requests, please include "Data Rights Request" in the subject line of your email and provide your registered luky22 mobile number so we can verify your identity before processing your request.