luck22 Privacy Policy

This Privacy Policy applies to all personal data processed by luck22 in connection with the operation of the online gaming platform accessible at https://luck22.site and through any associated mobile or web applications. It applies to all registered players, prospective players who interact with the platform without completing registration, and individuals who contact luck22 through any support channel.

For the purposes of this Policy, luck22 acts as the data controller in respect of personal data collected directly from players and website visitors. Where luck22 engages third-party processors — including payment service providers and game technology vendors — those parties act as data processors and are contractually bound to process data only on luck22's documented instructions and in accordance with applicable data protection standards.

luck22 collects personal data in several categories, depending on the nature of your interaction with the platform. The table below provides a structured overview of the categories of data collected and the primary purpose for which each category is used:

luck22 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is required for standard identity document verification. Where the processing of sensitive categories of data is required for regulatory compliance purposes, such processing is conducted strictly within the bounds of the applicable legal basis.

luck22 collects personal data through the following means:

Data you provide directly when creating a luck22 account, completing KYC verification, making deposits or withdrawals, placing bets, contacting support, participating in promotions, or updating your account profile.

Technical and usage data collected automatically through cookies, web beacons, server logs, and similar technologies when you access and interact with the luck22 platform. This includes your IP address, device identifiers, and session activity data.

luck22 may receive data from third-party sources in limited circumstances, including:

• Payment service providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard) who confirm transaction status and, where required, provide account holder verification data.
• Identity verification service providers engaged to assist with KYC document authentication.
• Fraud prevention services that provide risk-scoring data based on technical signals associated with account activity.

luck22 processes personal data only for specific, defined purposes and in reliance on an identified legal basis. The principal processing activities and their legal bases are as follows:

• Account creation and management — Necessary for the performance of the contract between you and luck22, formed when you register an account and accept the Terms & Conditions.
• Identity verification and KYC compliance — Necessary for compliance with luck22's legal obligations under its international gaming licence, which mandates full KYC procedures for all account holders.
• Processing of financial transactions — Necessary for the performance of the contract; specifically, the processing of deposits, wagers, winnings, and withdrawals in PKR.
• Anti-Money Laundering (AML) monitoring — Necessary for compliance with AML legal obligations applicable under the licensing framework. Transaction data is analysed for patterns indicative of money laundering or terrorist financing.
• Fraud detection and prevention — Pursued in the legitimate interest of luck22 and its player community to protect the integrity of the platform and the security of player funds.
• Responsible gaming monitoring — Pursued in the legitimate interest of player welfare; usage and transaction data is monitored to identify potentially problematic gambling patterns and trigger support interventions where appropriate.
• Marketing communications — Where you have provided explicit consent, luck22 may send you promotional communications about bonuses and platform updates. Consent may be withdrawn at any time through your account settings.
• Platform analytics and improvement — Pursued in the legitimate interest of improving the luck22 platform based on aggregated, anonymised usage data.

luck22 does not sell, rent, or trade your personal data to third parties for commercial or advertising purposes. luck22 shares personal data with third parties only in the following limited and controlled circumstances:

Financial data is shared with payment processors — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard — only to the extent necessary to process your deposit and withdrawal transactions. These providers operate under their own regulated privacy frameworks and are contractually bound to handle your data securely.

Identity document data submitted for KYC verification may be processed by specialist third-party identity verification service providers engaged by luck22. These providers act as data processors and are subject to strict contractual data protection obligations.

Certain game-related technical data — such as session identifiers and game play logs — may be shared with the technology providers who supply the game software used on the luck22 platform. This data does not include full personal identity information.

luck22 is required by its international gaming licence to cooperate with regulatory authorities and, in certain circumstances, law enforcement agencies. Personal data may be disclosed to such authorities where required by law, regulation, court order, or where disclosure is necessary to prevent, detect, or prosecute criminal activity including money laundering or fraud.

In the event of a merger, acquisition, restructuring, or sale of all or part of luck22's business, personal data may be transferred to the relevant successor entity. Players will be notified of any such transfer and of any material change to the data controller's identity.

luck22 operates as an internationally licensed platform. Personal data collected from Pakistani players may be processed by servers, systems, or third-party service providers located outside Pakistan. Where such transfers occur, luck22 ensures that appropriate safeguards are in place to protect the security and integrity of your personal data, including contractual data protection clauses with all relevant processors and sub-processors.

luck22 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate supplementary safeguards. Players who have questions about specific international transfers may contact luck22 at [email protected].

luck22 retains personal data for as long as is necessary for the purposes for which it was collected, subject to mandatory retention periods imposed by the platform's licensing obligations. Specific retention periods applicable at luck22 include:

• Account and transaction data: Retained for a minimum of five years from the date of account closure, in compliance with AML and gaming licence record-keeping requirements.
• KYC documentation: Retained for a minimum of five years from the date of submission or the date of account closure, whichever is later.
• Support communications: Retained for a minimum of two years from the date of the communication, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your account's active status, plus two years following account closure or withdrawal of consent.
• Technical and usage data: Retained in anonymised or aggregated form for up to three years for platform analytics purposes. Identifiable technical data is deleted within 12 months of collection.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Players who request account closure are advised that retention obligations prevent the immediate deletion of all associated data, but that all retained data is held securely and used only for compliance purposes.

luck22 uses cookies and similar tracking technologies on the platform for the following specific purposes:

These cookies are essential to the operation of the luck22 platform and cannot be disabled without affecting core platform functionality. They include session authentication cookies that keep you logged in during a gaming session, CSRF protection tokens, and load-balancing cookies. No consent is required for strictly necessary cookies.

luck22 uses first-party analytics cookies to understand how players use the platform — such as which pages are visited most frequently, how long sessions last, and where players exit the platform. This data is collected in aggregated, anonymised form and is not used to identify individual players. Analytics cookies may be declined without loss of core platform functionality.

luck22 uses security-related cookies that assist in detecting unusual behaviour patterns, preventing account takeover, and identifying fraudulent activity. These cookies collect technical signals such as device fingerprints and behavioural patterns. They form part of luck22's fraud detection infrastructure and are necessary for the security of the platform.

luck22 does not deploy third-party advertising cookies, retargeting pixels, or social media tracking tools that follow your activity across other websites. Your luck22 gaming activity is not shared with advertising networks.

luck22 recognises and honours the following privacy rights in respect of personal data we hold about you. To exercise any of these rights, please contact luck22 at [email protected] with your full account details and a clear description of your request. luck22 will respond within 30 days.

The luck22 platform is strictly prohibited from being used by individuals under the age of 21 years. luck22 does not knowingly collect personal data from anyone under 21. Where luck22 discovers or reasonably suspects that personal data has been provided by or in relation to a minor, the associated account will be immediately suspended, the data will be permanently deleted, and the incident will be reported to the relevant regulatory authority if required.

luck22 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include but are not limited to:

• End-to-end SSL/TLS encryption for all data transmitted between your device and the luck22 platform.
• Encryption of personal data and financial information stored in luck22 databases at rest.
• Role-based access controls ensuring that luck22 personnel can only access personal data where necessary for their specific operational function.
• Multi-factor authentication for all internal administrative systems used by luck22 staff.
• Regular penetration testing and security audits of the luck22 platform infrastructure.
• Automated monitoring systems that detect and alert on unusual data access patterns or potential breaches in real time.
• A documented Data Breach Response Procedure that specifies containment, assessment, notification, and remediation steps in the event of a confirmed breach.

Notwithstanding these measures, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their luck22 account, enable two-factor authentication, and report any suspicious activity immediately through the luck22 support channels.

The luck22 platform may integrate with or reference third-party services in the normal course of its operations — including payment gateways accessed during the deposit or withdrawal process. When you navigate from the luck22 platform to a third-party service (for example, to authenticate a JazzCash payment), the third-party's own privacy policy governs the handling of your data on that service.

luck22 conducts due diligence on the data protection practices of all third-party processors it engages, and requires all processors to sign Data Processing Agreements confirming their compliance with applicable data protection standards. However, luck22 cannot guarantee the privacy practices of independent third parties and is not responsible for their policies or actions.

luck22 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform functionality. Material changes to this Policy will be communicated to registered players via email or in-platform notification at least 7 days before the updated Policy takes effect.

The effective date displayed at the top of this document will be updated upon each revision. Players are encouraged to review this Privacy Policy periodically. Continued use of the luck22 platform following the effective date of any updated Policy constitutes acceptance of the revised terms.

If you have questions, concerns, or complaints regarding luck22's handling of your personal data, or if you wish to exercise any of your privacy rights, please contact the luck22 Data Protection team through the following channels:

• Email: [email protected] — Data privacy requests are handled within 30 days of receipt.
• Live Chat: Available 24/7 through the luck22 platform for general account and privacy queries (login required).

When submitting a privacy request by email, please include your full registered name, your registered Pakistani mobile number, and a clear description of your request or concern. This information is required to verify your identity before processing any data access, correction, or deletion request.

If you are not satisfied with luck22's response to a privacy complaint, you may escalate the matter to the relevant regulatory authority under luck22's international gaming licence framework. luck22 cooperates fully with regulatory investigations into data protection complaints.