Privacy Policy

This Privacy Policy ("Policy") describes how luky22 ("we", "us", "our"), accessible at https://luky22.cam, collects, uses, stores, discloses and protects personal data relating to users ("you", "your") of the luky22 Platform.

luky22 is an English-language online gaming information platform serving users in Pakistan and other jurisdictions where access is lawful. We are committed to handling your personal data responsibly, transparently and in accordance with applicable data protection principles.

By registering an account, submitting personal data or continuing to use the Platform following any update to this Policy, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or indirectly — for example, a name, email address, IP address or CNIC number.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer or deletion.
• "Data Controller" means luky22 — the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of luky22 under contractual obligation.
• "User" or "you" means any individual who accesses or registers on the luky22 Platform.
• "KYC" means Know Your Customer — the identity verification process required before certain platform functions, including withdrawals, become available.
• "Cookies" means small data files stored on your device by your browser when you visit the Platform, used to support session management, preferences and analytics.
• "Platform" means the luky22 website at https://luky22.cam and all associated pages, features and services.

We collect personal data in the following categories, depending on how you interact with the Platform:

• Registration Data: Full name, date of birth, email address, username, password (hashed) and country of residence provided during account sign-up.
• KYC Verification Data: Government-issued identity documents (such as a Pakistani CNIC or passport), proof of address and, where required, proof of source of funds.
• Contact & Support Data: Information you provide when you contact our support team, including message content, correspondence history and email address.
• Responsible Gambling Data: Limit preferences, self-exclusion requests and any information you provide in connection with responsible gambling tools.

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution and time zone.
• Usage Data: Pages visited, session duration, click patterns, referral source and in-platform navigation behaviour.
• Cookie Data: Session identifiers, preferences and analytics data as described in Section 7 of this Policy.

• Identity verification data returned from KYC/AML service providers following document checks.
• Transaction or payment status data from third-party payment processors where applicable.
• Fraud prevention data from industry-standard anti-fraud and risk management partners.

We process personal data for the following purposes:

• Account Management: To create, maintain, authenticate and secure your user account, including password management and session handling.
• KYC & AML Compliance: To verify your identity, satisfy anti-money laundering obligations and comply with applicable legal and regulatory requirements before enabling certain platform functions.
• Platform Delivery: To provide the core functionality of luky22, including content display, betting information, game guides and responsible gambling resources.
• Customer Support: To receive, process and respond to support enquiries, complaints and account-related requests.
• Security & Fraud Prevention: To detect, investigate and prevent fraudulent activity, unauthorised account access and other security incidents.
• Responsible Gambling: To process limit settings, cooling-off requests and self-exclusion elections in order to protect player welfare.
• Analytics & Improvement: To analyse aggregated, anonymised usage data for the purposes of improving Platform performance, content quality and user experience.
• Legal Obligations: To comply with applicable laws, court orders, regulatory requirements and law enforcement requests where legally compelled.

We process personal data only where we have a valid legal basis to do so. The legal bases we rely on include:

• Contractual Necessity: Processing required to perform the contract we have with you — for example, account registration, KYC verification and platform access.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML/KYC obligations imposed by the operator's licence jurisdiction.
• Legitimate Interests: Processing we carry out in our legitimate business interests — such as fraud prevention, platform security and analytics — where such interests do not override your fundamental rights and freedoms.
• Consent: Where we rely on your consent for specific processing activities (such as non-essential cookies), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

We do not sell or trade your personal data. We may share personal data in the following limited circumstances:

• KYC / Identity Verification Partners: We share identity documents and related data with accredited third-party KYC/AML service providers solely for the purpose of completing verification checks. These providers are bound by strict data processing agreements.
• Payment Processors: Where transaction data is shared to facilitate deposits or withdrawals, this is handled by the relevant payment processor under their own published privacy terms. References to payment methods familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are contextual only and do not imply any data-sharing arrangement with those organisations.
• Fraud Prevention & Security Services: We may share technical and usage data with industry-standard fraud prevention and risk management partners to protect the Platform and its users.
• Analytics Providers: Aggregated, anonymised usage data may be shared with analytics platforms to support Platform improvement. No personally identifiable information is included in such sharing.
• Legal & Regulatory Authorities: We may disclose personal data where required to do so by applicable law, court order, or government or regulatory authority — including in response to lawful requests from Pakistani or international authorities.
• Business Transfers: In the event of a merger, acquisition or transfer of business assets, personal data may be transferred to the successor entity, subject to equivalent data protection commitments.

luky22 uses cookies and similar tracking technologies to support the functionality, security and performance of the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies and security tokens. They cannot be disabled without impairing core platform functionality.
• Functional Cookies: Used to remember user preferences — such as language settings and display choices — to provide a more consistent experience across sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform. This data is used solely to improve platform performance and content quality. No personally identifiable data is included.
• Security Cookies: Used to support fraud detection, bot prevention and session integrity monitoring.

You may control cookie settings through your browser's privacy preferences. Disabling certain cookies may affect the availability of some Platform features. For strictly necessary cookies, no opt-out is available as they are integral to platform operation.

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable law, regulation or legitimate business need. General retention principles include:

• Account Data: Retained for the duration of your active account and for a period thereafter as required by AML/KYC obligations and applicable regulatory requirements of the operator's licence jurisdiction.
• KYC / Identity Documents: Retained in accordance with the AML retention requirements applicable under the relevant operator licence — typically a minimum of five years from account closure.
• Support Correspondence: Retained for a reasonable period to support ongoing queries, disputes and quality assurance, typically up to three years.
• Technical and Usage Data: Retained in anonymised or aggregated form for analytics purposes. Personally identifiable technical logs are retained for a shorter period — typically up to 12 months.
• Responsible Gambling Records: Self-exclusion and limit-setting records are retained as required to honour the user's elected protection measures, and for audit and compliance purposes.

When personal data is no longer required and no legal retention obligation applies, we take appropriate steps to securely delete or anonymise it.

We implement appropriate technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform.
• Password hashing using industry-standard cryptographic algorithms. Passwords are never stored in plain text.
• Role-based access controls limiting internal access to personal data to authorised personnel only, on a need-to-know basis.
• Regular security assessments and monitoring to identify and address potential vulnerabilities.
• Data processing agreements with third-party service providers mandating equivalent security standards.

Subject to applicable law, you have the following rights in relation to your personal data held by luky22. To exercise any of these rights, contact us at [email protected].

We will respond to data rights requests within a reasonable timeframe — typically within 30 days. In complex cases, we may extend this period and will inform you accordingly. We may be required to verify your identity before processing a data rights request.

The luky22 Platform is strictly intended for adults aged 18 or over, or the higher minimum age required by the applicable operator or licence jurisdiction. We do not knowingly collect personal data from minors.

If we become aware that personal data has been collected from a person under the applicable minimum age, we will take prompt steps to delete such data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

Age verification is a core component of our KYC process. Users who cannot satisfy age verification requirements will not be permitted to access age-restricted platform features.

luky22 operates as an internationally accessible platform. As a result, your personal data may be transferred to, stored in or processed in countries outside Pakistan, including the jurisdiction in which our operator holds its licence.

Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Policy. These safeguards may include contractual obligations on recipient third parties, adherence to recognised data transfer frameworks or equivalent protective measures.

By using the luky22 Platform, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan, whose data protection laws may differ from those applicable in Pakistan. We remain committed to protecting your data regardless of where it is processed.

Pakistan's digital and data governance landscape is governed by several legal instruments, including the Prevention of Electronic Crimes Act, 2016 (PECA) and associated data protection guidance from the Pakistan Telecommunication Authority (PTA). luky22 operates as an international platform and applies internationally recognised data protection standards.

We wish to be transparent with Pakistani users about the following:

• luky22 is not registered with, authorised by or regulated by the PTA, the State Bank of Pakistan, any Pakistani provincial authority or any Pakistani government body in relation to data processing activities.
• Identity data submitted during KYC verification — including Pakistani CNIC or passport documents — is processed solely for the purpose of satisfying the operator's KYC/AML obligations under its international licence. This data is not used for any other purpose.
• References to payment methods familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — do not represent data-sharing arrangements with those organisations. These references are contextual only.
• Pakistani users have the same data rights as described in Section 10 of this Policy and may exercise those rights by contacting [email protected].

We reserve the right to update or amend this Privacy Policy at any time. Any changes will be published on this page with an updated effective date. Where changes are material, we may provide additional notification via the email address registered to your account or through on-site notifications.

Your continued use of the Platform following publication of an amended Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically to stay informed of how we handle your personal data.

The version of this Policy displayed on this page is the currently applicable version. All previous versions are superseded upon publication of an updated Policy.

If you have any questions, concerns or requests relating to this Privacy Policy or to the handling of your personal data, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Support Language: English. Urdu assistance may be available upon request.
• Response Time: We aim to acknowledge all data-related enquiries within 5 business days and provide a substantive response within 30 days.
• Geographical Coverage: We serve users across Pakistan, including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.

For data rights requests — including access, erasure or portability requests — please include "Data Rights Request" in the subject line of your email and provide sufficient detail to allow us to identify your account and process your request efficiently.