Privacy Policy – Lucky22 Protects Your Data in Pakistan

1. Data Controller

Lucky22 (operated at lucky22.cash) is the data controller responsible for your personal information. This means that Lucky22 decides what personal data is collected from you, the purposes for which it is used, and how long it is kept. If you have any questions or concerns about how your data is handled, Lucky22 is your first and primary point of contact.

This Privacy Policy applies to all personal data collected through the Lucky22 website and platform — including account registration, deposits, betting activity, game play, customer support interactions and any communications between you and Lucky22.

2. What Personal Data Lucky22 Collects

Lucky22 collects only the data that is genuinely necessary to provide you with a secure, personalised and legally compliant gaming experience. The categories of personal data we collect are set out below.

Lucky22 does not collect sensitive personal data such as biometric data, health records, religious beliefs or political opinions. We do not require you to submit a photograph unless specifically needed for identity verification on high-value withdrawals.

3. How Your Data is Collected

Lucky22 collects personal data through the following channels:

• Registration form — when you create your Lucky22 account, you provide your name, mobile number, email address and date of birth directly.
• Deposit and withdrawal requests — payment method details are captured when you initiate a financial transaction on Lucky22.
• Platform activity — Lucky22's systems automatically log your betting activity, game play, session data and feature usage as you use the platform.
• Cookies and similar technologies — as described in the Cookies section below, Lucky22 uses cookies to maintain your session and gather anonymised usage analytics.
• Support interactions — when you contact Lucky22 via live chat or email, the content of that communication is stored as part of your account record.
• Verification documents — if Lucky22 requests identity or age verification, you provide this directly to our support team.

Lucky22 does not purchase personal data from third-party data brokers, social media platforms or other commercial sources.

4. Why Lucky22 Uses Your Data

Lucky22 processes your personal data for the following purposes, each of which has a legitimate basis:

4.1 Operating Your Account

To create and maintain your Lucky22 account, authenticate your logins, process your bets and games, handle your PKR deposits and withdrawals, and communicate with you about your account. This is the core purpose for which Lucky22 needs your data — without it, the platform cannot function for you.

4.2 Compliance and Legal Obligations

Lucky22 is required to verify the identity and age of its players, maintain transaction records for audit purposes, and cooperate with regulatory authorities where legally required. These obligations necessitate the collection and retention of certain personal and financial data.

4.3 Security and Fraud Prevention

Lucky22 uses technical and behavioural data to detect and prevent fraudulent activity, account takeovers, money laundering and other prohibited conduct. This protects both individual players and the integrity of the Lucky22 platform as a whole.

4.4 Responsible Gaming

Lucky22 monitors player activity — including session lengths, deposit patterns and betting behaviour — to identify indicators of problem gambling. Where these are detected, Lucky22 may proactively offer responsible gaming tools or, in serious cases, restrict account activity. This monitoring is done to protect players, not to profile them for commercial purposes.

4.5 Platform Improvement

Anonymised and aggregated usage data helps Lucky22 understand which features are working well, which need improvement, and what Pakistani players want from the platform. This analysis never identifies individual players.

4.6 Customer Support

Communication records are kept to provide continuity of support — so that if you contact Lucky22 multiple times about the same issue, our team has context. Records are also kept for dispute resolution purposes.

5. Who Lucky22 Shares Your Data With

Lucky22 does not sell, rent or trade your personal data. Data is shared with third parties only in the following limited circumstances, and always subject to contractual data protection obligations:

• Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and card networks receive the transaction data necessary to process your deposits and withdrawals. These processors operate under strict data security standards.
• Fraud and risk management providers — specialised services that help Lucky22 detect and prevent fraudulent activity receive anonymised technical and behavioural signals. They do not receive your full identity or financial details.
• Game software providers — third-party game providers whose titles appear on Lucky22 may receive anonymised session data to support game performance. They do not receive your identity or payment details.
• Legal and regulatory authorities — Lucky22 will share data with law enforcement or regulatory bodies when required to do so by applicable law, or where Lucky22 believes disclosure is necessary to prevent serious harm.
• Successors in business — in the event of a merger, acquisition or sale of substantially all of Lucky22's assets, player data would transfer to the acquiring entity, subject to the same privacy protections described in this policy.

6. Payment Data and PKR Transactions

Because Lucky22 handles real money transactions in Pakistani Rupees, payment data receives an additional layer of care. Here is specifically how Lucky22 handles your financial information:

6.1 Card Data

Lucky22 does not store full card numbers. When you use a Visa or Mastercard, the transaction is processed by our payment gateway partner, which is PCI-DSS compliant. Lucky22 retains only a tokenised reference and masked card number (e.g. **** **** **** 1234) sufficient to recognise the payment method for future withdrawal routing.

6.2 Mobile Wallet Data

Your Easypaisa, JazzCash, NayaPay and SadaPay account numbers are stored in encrypted form. They are used only to route deposits and process withdrawals to your own registered wallet. Lucky22 verifies that wallet accounts are registered in your name before processing the first withdrawal to that method.

6.3 Transaction Records

Lucky22 maintains a full record of all deposits, withdrawals and bets associated with your account. These records are essential for account management, dispute resolution and regulatory compliance. You can view your complete transaction history at any time from within your Lucky22 account settings.

6.4 Anti-Money Laundering

Lucky22 is committed to preventing its platform from being used for money laundering or the processing of funds from illegal sources. Transaction monitoring is in place, and Lucky22 may request source-of-funds documentation for unusual deposit patterns. This is a legal obligation, not a commercial choice.

7. Cookies and Similar Technologies

Lucky22 uses cookies — small text files stored on your device — to make the platform function correctly and to understand how players use it. Here is what Lucky22 uses cookies for:

• Session cookies — keep you logged in during a browsing session. These are deleted when you close your browser and are essential for the platform to work.
• Authentication cookies — recognise your device on return visits so you do not need to re-enter credentials every time.
• Security cookies — help Lucky22 detect suspicious login attempts and protect your account.
• Analytics cookies — track anonymised usage patterns (pages visited, features used, session duration) to help Lucky22 improve the platform. No personally identifiable information is included in analytics data.
• Preference cookies — remember your settings, such as language preference or chosen deposit method.

Lucky22 does not use third-party advertising cookies or tracking pixels that would allow other companies to build a profile of your browsing activity across the web. You can control cookie settings through your browser, though disabling essential cookies may affect the functionality of Lucky22.

8. How Long Lucky22 Keeps Your Data

Lucky22 does not keep personal data for longer than is necessary for the purpose for which it was collected. The retention periods that apply to different categories of data are as follows:

• Active account data — retained for the duration of your Lucky22 account plus five years after account closure, to comply with financial record-keeping obligations.
• Transaction records — retained for seven years from the date of the transaction, consistent with financial audit requirements.
• Identity verification documents — retained for five years after account closure.
• Support communications — retained for three years from the date of the last communication in a support thread.
• Analytics and behavioural data — retained in anonymised, aggregated form indefinitely, as individual players cannot be identified from this data.
• Session and technical logs — retained for 90 days and then deleted.

When data is no longer required, Lucky22 deletes it securely — either through cryptographic erasure (for digitally stored data) or physical destruction (for any printed verification documents).

9. How Lucky22 Protects Your Data

Data security is taken very seriously at Lucky22. The technical and organisational measures in place to protect your personal data include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and Lucky22 servers.
• Encrypted storage of sensitive data fields including payment method identifiers, identity document numbers and passwords (passwords are hashed, never stored in plain text).
• Two-factor authentication available on all Lucky22 accounts — strongly recommended for all players.
• Access controls — only Lucky22 staff with a legitimate operational need can access player account data, and all such access is logged.
• Regular security audits — Lucky22's platform and infrastructure are subject to periodic security testing by internal and external reviewers.
• Intrusion detection — automated systems monitor for unusual access patterns and respond to potential security incidents in real time.

10. Your Rights Over Your Personal Data

As a Lucky22 player, you have the following rights in relation to the personal data Lucky22 holds about you. You can exercise any of these rights by contacting Lucky22 at support@lucky22.cash.

Lucky22 will respond to all data rights requests within 30 calendar days. In some cases, particularly for complex or high-volume requests, we may extend this to 60 days and will inform you accordingly. There is no charge for exercising your data rights.

11. Minors and Under-18 Protection

Lucky22 does not knowingly collect personal data from anyone under the age of 18. The platform is strictly for adults. During registration, players confirm that they are 18 or older, and Lucky22 may request age verification documents at any stage.

If Lucky22 discovers that a player account belongs to a person under the age of 18, the account will be immediately suspended, all activity will be voided, and any balance associated with the account will be returned to the source payment method after verification. Any personal data collected from a minor will be deleted as quickly as legally possible.

If you are a parent or guardian and believe that a minor has created a Lucky22 account without your knowledge, please contact us immediately at support@lucky22.cash. We will investigate and take action within 24 hours of receiving your report.

12. Changes to This Privacy Policy

Lucky22 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer or applicable legal requirements. When we make changes:

• The updated Privacy Policy is published at lucky22.cash/privacy-policy with a revised "Last updated" date.
• For material changes that affect how we use your data or your rights under this policy, Lucky22 will notify registered players by email at least seven days before the changes take effect.
• Your continued use of Lucky22 after the effective date of an updated Privacy Policy constitutes your acceptance of those changes.
• If you disagree with any changes to this Privacy Policy, you may request account closure before the updated policy takes effect.

Lucky22 recommends that you review this Privacy Policy periodically, particularly before making significant deposits or sharing new personal information with us.

13. Contact Lucky22 About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how Lucky22 has handled your personal data, please reach out through either of the following channels:

Lucky22 is committed to handling all privacy queries and complaints fairly, transparently and within a reasonable timeframe. Where a complaint relates to a significant data breach or misuse, Lucky22 will respond within 72 hours of receiving the report.