lucky22 Privacy Policy

lucky22 ("we", "us", "our") is committed to protecting and respecting the privacy of every individual who accesses or uses the lucky22 platform at lucky22.ws. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by lucky22.

Please read this Privacy Policy carefully before using the lucky22 platform. By registering a lucky22 account, depositing funds, or otherwise using the lucky22 platform, you confirm that you have read, understood, and accepted the terms of this Privacy Policy. If you do not accept this Privacy Policy, you must not use the lucky22 platform.

This Privacy Policy applies to all lucky22 products and services, including cricket betting, live casino, slots, fishing games, and all other games and features available on lucky22.ws. It covers data collected through the website, any mobile-optimised interface, and any communications between you and lucky22's support team.

For the purposes of applicable data protection laws, lucky22 is the data controller in respect of the personal data of its registered players and website visitors. As data controller, lucky22 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

lucky22 operates under an international gaming license. All data processing activities conducted by lucky22 are carried out in accordance with the data protection obligations imposed by that licensing framework and applicable international data protection standards.

lucky22 collects personal data from you in the following ways: directly from you when you register an account, make a deposit or withdrawal, contact our support team, or use our platform; automatically when you browse the lucky22 website; and, in limited circumstances, from third-party sources as part of our verification and fraud-prevention processes.

3.1 Registration Data

When you create a lucky22 account, we collect the following information:

• Full legal name (as it appears on your CNIC or passport)
• Date of birth (to verify you are aged 21 or above)
• Pakistani mobile number
• Email address
• City of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad)
• Username and encrypted password

3.2 KYC Verification Data

As required under our international gaming license, lucky22 must verify the identity of all real-money players before permitting withdrawals. For KYC purposes, we may collect:

• Copy of your CNIC (front and back), passport, or other government-issued photo ID
• Proof of address documentation
• Source-of-funds documentation where required by our AML obligations

3.3 Financial Transaction Data

When you deposit or withdraw funds via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, we collect and retain transaction records including the payment method reference, transaction amount in PKR, date and time, and transaction status. We do not store full payment card numbers on our servers.

3.4 Gameplay Data

lucky22 records your betting and gaming activity on the platform, including stakes placed, game outcomes, session duration, and wagering history. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

3.5 Technical & Device Data

When you access lucky22.ws, our systems automatically collect certain technical data, including your IP address, device type and operating system, browser type and version, referring URL, and pages visited on the lucky22 platform. This data is used for security monitoring, fraud detection, and platform performance improvement.

3.6 Communications Data

If you contact lucky22 via live chat, email, or any other channel, we retain a record of that correspondence, including the content of messages and any attachments you send to us. This data is used to resolve queries, improve our support service, and maintain a record of our interactions with you.

lucky22 uses the personal data we collect for the following purposes. We will not use your personal data for any purpose that is incompatible with those listed below without first obtaining your explicit consent:

• Account Creation and Management: To register your lucky22 account, authenticate your identity when you log in, and manage your account settings and preferences.
• Age and Identity Verification: To confirm that you are aged 21 or above and are who you say you are, as required by our international gaming license.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain an accurate record of your PKR transaction history.
• Gameplay and Betting Services: To provide you with access to cricket betting, live casino, slots, fishing games, and all other lucky22 products, and to settle bets and gaming outcomes accurately.
• Responsible Gaming: To monitor your gaming behaviour for signs of problem gambling, to apply deposit limits, session limits, and self-exclusion tools where requested, and to fulfil our duty-of-care obligations under our licensing framework.
• Legal and Regulatory Compliance: To meet our anti-money laundering (AML) obligations, respond to lawful requests from regulatory and law enforcement authorities, and maintain records as required by our international gaming license.
• Customer Support: To respond to your queries, complaints, and requests, and to maintain a record of our correspondence with you for quality assurance purposes.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multiple accounts, bonus abuse, and other prohibited conduct on the lucky22 platform.
• Marketing Communications: Where you have provided your consent, to send you promotional offers, bonus notifications, and news about lucky22 products via email or SMS. You may withdraw your consent at any time via your account settings or by contacting support.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the lucky22 platform, identify technical issues, and enhance the overall player experience for our Pakistani users.

lucky22 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and lucky22 — for example, creating and managing your account, processing deposits and withdrawals, and delivering gaming services.
• Legal Obligation: Processing that is required to comply with our legal and regulatory obligations, including KYC verification, AML monitoring, and responding to lawful regulatory requests.
• Legitimate Interests: Processing that is necessary for the legitimate interests of lucky22 or a third party, provided those interests are not overridden by your rights and interests — for example, fraud detection, security monitoring, and platform performance analysis.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — for example, sending you marketing communications. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

lucky22 uses cookies and similar tracking technologies on lucky22.ws to improve your browsing experience, maintain your session when you are logged in, and analyse platform usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the lucky22 platform. These cookies enable you to log in, navigate the site, and use core features. They cannot be disabled without impairing platform functionality.
• Session Cookies: Temporary cookies that expire when you close your browser. Used to maintain your logged-in state and your betting or gaming session on lucky22.
• Analytics Cookies: Used to collect anonymised information about how visitors use the lucky22 website, helping us identify popular pages, traffic sources, and areas for improvement. No individually identifiable data is transmitted via analytics cookies.
• Preference Cookies: Used to remember your platform preferences, such as language settings and display options, so that your lucky22 experience is consistent across sessions.

You can control or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the lucky22 platform. lucky22 does not use cookies to serve third-party advertising on its platform.

lucky22 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the following limited circumstances:

• Payment Service Providers: We share necessary transaction data with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank to process your deposits and withdrawals. These providers are contractually bound to process your data only for payment processing purposes.
• KYC and Identity Verification Providers: We may share your identity documentation with third-party KYC verification service providers to fulfil our age verification and identity verification obligations under our gaming license.
• Fraud Prevention and AML Services: We may share data with specialist fraud detection and AML compliance providers to identify and prevent suspicious activity on the lucky22 platform.
• Regulatory and Law Enforcement Authorities: lucky22 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by law or by our international gaming license obligations. We will always seek to limit such disclosures to the minimum data necessary.
• Gaming Software Providers: In order to deliver game content — including slot titles, live casino streams, and sports betting markets — limited technical data may be shared with our licensed game content providers. These providers are not permitted to use such data for their own marketing or commercial purposes.
• Group Companies: lucky22 may share data within its corporate group for internal administrative purposes, subject to the same data protection standards set out in this Privacy Policy.

lucky22 operates globally and, as a result, your personal data may be transferred to and processed in countries outside Pakistan. Where such international transfers occur, lucky22 takes appropriate steps to ensure that your personal data receives a level of protection equivalent to that afforded within Pakistan, including by:

• Transferring data only to countries or organisations that maintain internationally recognised data protection standards.
• Entering into data processing agreements with all third-party processors that impose binding data protection obligations consistent with this Privacy Policy.
• Applying technical and organisational security measures to all cross-border data transfers, including encryption in transit and at rest.

By using the lucky22 platform, you acknowledge and consent to the transfer of your personal data outside Pakistan as described in this section, where such transfers are necessary to provide you with lucky22's services.

lucky22 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our regulatory obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, as required by our AML and licensing obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in compliance with standard financial record-keeping requirements under our licensing framework.
• Gameplay and Betting Records: Retained for a minimum of 3 years from the date of each gaming session, for dispute resolution, responsible gaming monitoring, and regulatory audit purposes.
• Communications Data: Support communications are retained for 2 years from the date of last contact, or longer if related to an unresolved dispute or regulatory inquiry.
• Technical and Device Data: Retained for up to 12 months from the date of collection, unless required to be retained longer for active fraud or security investigations.

When personal data is no longer required, lucky22 will securely delete or anonymise it in accordance with our data disposal procedures. Anonymised, aggregated data may be retained indefinitely for platform analytics and improvement purposes, as it can no longer be used to identify any individual player.

Subject to applicable law and certain exemptions, you have the following rights in respect of your personal data held by lucky22. To exercise any of these rights, please contact us via live chat or at [email protected]. We will respond to all verified requests within 30 days.

• Right of Access: You have the right to request a copy of the personal data that lucky22 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: You have the right to request that lucky22 correct any inaccurate or incomplete personal data held about you. You may also update certain account information directly through your lucky22 account dashboard.
• Right to Erasure: You have the right to request that lucky22 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory retention obligations.
• Right to Restriction of Processing: You have the right to request that lucky22 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where lucky22 relies on its legitimate interests as the legal basis for processing. You may also object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

lucky22 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and lucky22.ws is encrypted using industry-standard SSL/TLS protocols. Look for the padlock symbol in your browser address bar when accessing lucky22.
• Password Hashing: Account passwords are stored as salted cryptographic hashes. lucky22 staff cannot view your plaintext password and will never ask you to disclose it.
• Two-Factor Authentication: lucky22 offers optional two-factor authentication for your account, adding an additional layer of protection beyond your username and password.
• Access Controls: Access to personal data within lucky22's systems is restricted to authorised personnel who require it to perform their job functions, on a strictly need-to-know basis.
• Regular Security Audits: lucky22 conducts regular internal security reviews and works with third-party security specialists to identify and address vulnerabilities in our systems.
• Fraud Detection Systems: Automated monitoring systems analyse platform activity in real time to detect unusual patterns that may indicate unauthorised account access or fraudulent activity.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. If you become aware of any security incident affecting your lucky22 account, please notify our support team immediately via 24/7 live chat.

The lucky22 platform is strictly for individuals aged 21 and above. lucky22 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the lucky22 registration and KYC process, and any account discovered to belong to a person under 21 will be suspended immediately and all associated personal data will be deleted or returned, subject to any mandatory retention obligations.

If you are a parent or guardian and believe that a minor under your care has registered a lucky22 account or provided personal data to lucky22, please contact our support team immediately via live chat or at [email protected]. We will investigate and take appropriate action without undue delay.

lucky22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or the services we offer. Where changes are material, lucky22 will provide advance notice to registered players via email or a prominent notice on the platform at least 14 days before the changes take effect.

Minor or administrative amendments may take effect immediately upon publication of the updated Privacy Policy on lucky22.ws. The effective date at the top of this page will always reflect when the current version came into force.

Your continued use of the lucky22 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how lucky22 is protecting your data.

If you have any questions, concerns, or complaints about this Privacy Policy or about how lucky22 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly from the lucky22 platform — the fastest way to reach our Data Protection team for privacy-related queries.
• Email: [email protected] — for formal data rights requests or privacy complaints. Please include "Privacy Policy" or "Data Rights Request" in your subject line. We aim to respond within 30 days.

When submitting a privacy-related request, please include your registered account username, the email address associated with your lucky22 account, and a clear description of your query or request. This helps us locate your records and respond efficiently.