Privacy Policy – luky22 Pakistan Online Betting Platform

1. Introduction

This Privacy Policy applies to luky22 (referred to throughout this document as "luky22", "we", "us", or "our") and governs how we collect, use, store, share, and protect the personal information of all users — referred to as "you" or "the player" — who access or use the luky22 platform at luky22.bet and any associated services.

luky22 is built for Pakistani players, and we understand that privacy is a genuine concern for people sharing their personal details with any online platform. This policy is written in plain English, structured clearly, and designed to give you a complete picture of how your information is handled — not to obscure that picture behind legal language.

By registering for and using luky22, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any part of this policy, you should not use the luky22 platform.

This Privacy Policy should be read alongside the luky22 Terms and Conditions, which form part of the overall agreement between you and luky22.

2. Personal Data We Collect

luky22 collects personal information through different points of interaction on the platform. Below is a clear breakdown of what we collect and how it comes to us.

Information You Provide Directly:

• Registration data: Your full name, mobile number, date of birth, and a password when you create your luky22 account.
• Identity verification documents: A copy of your CNIC or other government-issued identity document when requested for KYC (Know Your Customer) verification.
• Payment information: Your Easypaisa or JazzCash account number, bank account details (IBAN for IBFT), or card details (Visa/Mastercard) as required to process deposits and withdrawals. Full card numbers are never stored by luky22 — these are handled by our PCI-compliant payment processors.
• Communications: Any messages, emails, or live chat conversations you have with the luky22 support team.
• Survey and feedback responses: If you choose to complete any feedback form or survey on luky22, the responses you provide.

Information Collected Automatically:

• Device and browser data: Your device type, operating system, browser version, and screen resolution when you access luky22.
• IP address: Used for security monitoring, fraud prevention, and approximate geographic location verification.
• Session data: Pages visited, time spent, features used, bet history, deposit and withdrawal records, and game play logs.
• Cookie data: Information stored by cookies and similar tracking technologies as described in Section 7 of this policy.

3. Why We Collect Your Information

luky22 only collects personal data for specific, legitimate purposes. We do not collect data speculatively or for purposes that are not clearly tied to providing and improving our services to you. Here is a full account of why we collect each type of information:

• Account creation and management: Your name, mobile number, and date of birth are required to create and manage your luky22 account, verify your eligibility to play (18+ requirement), and allow you to log in securely.
• Identity and age verification (KYC): Regulations and our operational obligations require that we verify the identity and age of players before processing withdrawals above certain thresholds. CNIC information is used solely for this verification purpose.
• Processing financial transactions: Payment method information is required to credit deposits to your luky22 account and to send withdrawals to you. We use this data only in connection with your transactions on luky22.
• Fraud prevention and security: IP address data, device information, and behavioural patterns are monitored to detect and prevent fraud, money laundering, account takeovers, and other security threats to you and to luky22.
• Customer support: Communications data enables our support team to respond accurately to your queries and resolve account issues effectively.
• Responsible gaming compliance: Behavioural data — such as betting frequency, session length, and deposit patterns — is used to identify potential indicators of problem gambling so that luky22 can take appropriate supportive action as required.
• Platform improvement: Aggregated and anonymised behavioural data helps luky22 understand how the platform is being used so that we can improve the experience for all Pakistani players over time.
• Marketing communications (with your consent): If you have opted in to marketing communications, we may send you information about luky22 promotions, new games, and relevant offers. You can opt out at any time.

4. Sharing Your Personal Data

luky22 does not sell your personal information to any third party. We do not share your data with advertisers or data brokers. However, in the course of providing our services, we do share certain data with trusted third parties in limited circumstances:

• Payment processors: When you make a deposit or request a withdrawal, your payment details are shared with the relevant payment processor (such as Easypaisa, JazzCash, or your bank). These processors are bound by their own data protection obligations and PCI-DSS compliance standards.
• Identity verification providers: If luky22 uses a third-party KYC provider to verify your identity documents, your CNIC data may be shared with that provider securely for verification purposes only.
• Game software providers: The game providers whose titles appear on luky22 (such as Spribe, Pragmatic Play, and others) may receive anonymised technical data necessary to operate their games on the platform. These providers do not receive your personal contact or payment details.
• Legal and regulatory authorities: luky22 will share personal data with law enforcement, regulatory bodies, or financial authorities when required to do so by applicable law, court order, or as part of our obligations to detect and prevent financial crime, including money laundering. We do not do this voluntarily — only when legally required.
• Fraud prevention services: We may share IP addresses or other technical identifiers with fraud prevention databases to verify that accounts are legitimate and that transactions are not fraudulent.

In all cases where data is shared with third parties, luky22 requires that those parties protect your data to a standard equivalent to our own and use it only for the specific purpose for which it was shared.

5. How Long We Keep Your Data

luky22 retains your personal data only for as long as it is necessary for the purposes described in this policy, or as required by applicable law and our operational obligations. The following general retention periods apply:

• Active account data: For as long as your luky22 account remains active. This includes your registration details, contact information, and account preferences.
• Transaction and betting records: A minimum of five (5) years from the date of each transaction, as required for financial record-keeping and anti-money laundering compliance.
• Identity verification documents (CNIC etc.): A minimum of five (5) years from the date of verification, or from account closure, whichever is later.
• Customer support communications: Three (3) years from the date of the communication, unless the matter relates to an ongoing dispute, in which case records are retained until final resolution.
• Marketing consent records: Until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance with your opt-out request.

After the applicable retention period has passed, luky22 will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual. Anonymised, aggregated data may be retained indefinitely for platform analytics purposes.

6. How luky22 Protects Your Information

Protecting the personal and financial information of our Pakistani players is one of luky22's highest operational priorities. We apply the following security measures across our platform:

• 256-bit SSL/TLS encryption: All data transmitted between your device and luky22's servers is encrypted in transit using industry-standard SSL/TLS encryption.
• Secure server infrastructure: luky22's data is stored on servers with physical and network-level access controls. Only authorised personnel with a legitimate operational need can access player data.
• Restricted internal access: Personal data is accessible only to luky22 staff who need it to perform their job functions. Access levels are role-based and reviewed regularly.
• Regular security audits: luky22 conducts periodic security reviews and penetration testing to identify and address vulnerabilities proactively.
• Payment data handled by PCI-compliant processors: Full payment card numbers are never stored on luky22's own servers. All card data is handled by our PCI-DSS certified payment processing partners.
• Fraud monitoring: Automated and manual monitoring systems run continuously to detect unusual account activity, suspicious transactions, and potential account compromises.

While luky22 implements robust security measures, no online platform can guarantee absolute security against all possible threats. You also play a role in protecting your account — use a strong, unique password, do not share your login credentials with anyone, and contact luky22 support immediately if you believe your account has been accessed without your authorisation.

7. Cookies and Tracking Technologies

luky22 uses cookies and similar tracking technologies (such as local storage and session tokens) to make the platform function properly and to improve your experience. A cookie is a small text file stored on your device when you visit a website. It allows the website to recognise your device on subsequent visits.

Here is a breakdown of the different types of cookies used at luky22 and their purpose:

Most browsers allow you to manage cookie preferences in their settings. Disabling all cookies may affect some features of luky22. For detailed instructions on managing cookies in your specific browser, consult your browser's help documentation.

8. Your Privacy Rights

As a luky22 player, you have the following rights regarding your personal information. These are not conditional on account status — you can exercise them at any time by contacting our support team at support@luky22.bet.

9. Minors and Under-18 Players

luky22 is strictly an 18+ platform. We do not knowingly collect or process personal information from anyone under the age of 18. Our registration process includes a date of birth field and we verify age at the account creation stage and again as part of our KYC verification process before any withdrawal is processed.

If luky22 becomes aware that personal data has been collected from a person under the age of 18, we will immediately suspend that account, delete all associated personal data, and return any deposits made, subject to verification of the correct return payment method.

Parents and guardians of minors who may have accessed the internet without appropriate supervision are encouraged to use parental control software and to ensure that gaming and betting websites are restricted on shared devices. If you believe a minor has registered an account on luky22, please contact us immediately so that we can investigate and take appropriate action.

10. International Data Transfers

While luky22 is designed for Pakistani players and our operations are focused on the Pakistani market, some of the third-party service providers we work with — particularly game software providers and certain payment processing partners — may process data in jurisdictions outside Pakistan.

When this occurs, luky22 ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require recipients to apply data protection standards equivalent to our own. We only transfer data internationally where it is strictly necessary to provide the service and where we are satisfied that the recipient's data protection practices are adequate.

luky22 does not proactively seek international data processing arrangements and prefers to use Pakistan-based or regional providers where comparable options exist.

11. Changes to This Privacy Policy

luky22 may update this Privacy Policy from time to time as our services evolve, as new legal requirements come into effect, or as we make changes to how we collect or use data. The "Last Updated" date at the top of this page will always reflect the most recent version.

When we make material changes to this policy — changes that meaningfully affect how we collect, use, or share your personal information — we will notify registered luky22 members by email at least 14 days before the changes take effect. This gives you time to review the changes and, if you disagree with them, to close your account and request withdrawal of your balance before the new policy applies to you.

Continued use of luky22 after the effective date of any policy change constitutes your acceptance of the revised Privacy Policy.

12. Contact & Complaints

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a complaint about how luky22 has handled your personal information, please reach out through the following channels:

• Live Chat: Available 24/7 from within your logged-in luky22 account. The fastest way to reach us for any privacy-related query.
• Email: support@luky22.bet — Please include "Privacy Query" in the subject line so your message is directed to the right team. We aim to respond to all privacy-related emails within 48 hours.

If you submit a privacy complaint and are not satisfied with the response you receive from our support team, you may escalate your complaint through the formal complaints process described in your luky22 account support section. luky22 is committed to resolving all data-related complaints fairly and within a reasonable timeframe.

We take privacy complaints seriously. If you believe your data has been misused in any way, we want to know about it and we will act on it. No complaint will be dismissed without a genuine review.