laky22 Privacy
Policy

This Privacy Policy ("Policy") is issued by laky22 ("laky22", "we", "us", "our") and applies to all personal data collected from individuals who access, register with, or use the laky22 website at laky22.net and all associated services, including casino games, sports betting, cricket betting, instant games, promotional offers, and customer support interactions.

laky22 operates under an international gaming licence and is subject to data protection requirements established by that licence. This Policy has been prepared to ensure full transparency regarding laky22's data processing activities and to clearly articulate the rights available to every player.

This Policy should be read alongside the laky22 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between laky22 and each registered player.

For the purposes of applicable data protection law, laky22 is the data controller in respect of all personal data collected from players and website visitors. As data controller, laky22 determines the purposes and means by which personal data is processed. laky22's licensing authority imposes data protection standards that the platform is required to maintain as an ongoing compliance obligation.

Where laky22 engages third-party service providers to process personal data on its behalf — such as payment processors, game providers, or technology vendors — those providers act as data processors and are subject to contractual obligations requiring them to process data only in accordance with laky22's documented instructions and to maintain appropriate technical and organisational security measures.

laky22 collects the following categories of personal data from players and website visitors. The specific data collected in each category depends on the nature of your interaction with the platform:

laky22 does not intentionally collect sensitive personal data (such as health information, religious beliefs, or political opinions) except where such data is voluntarily provided by a player in the context of a responsible gaming request or support interaction. Such data is handled with heightened care and is not used for any commercial purpose.

laky22 collects personal data through the following means:

• Direct Collection: Information you provide directly when registering an account, completing KYC, making a deposit or withdrawal request, or contacting customer support.
• Automated Collection: Technical data collected automatically when you access the laky22 website, including IP address, device identifiers, browser information, and session activity logs. This data is collected via server logs, cookies, and similar tracking technologies.
• Payment Processors: Transaction confirmation data and payment method verification information received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, and cryptocurrency network processors when you initiate a deposit or withdrawal.
• Third-Party Verification Services: Identity and address verification data received from KYC providers where laky22 uses automated identity verification tools to supplement manual review processes.
• Game Providers: Gaming activity and outcome data received from licensed game providers who supply the casino games, live casino tables, and instant games available on the laky22 platform.

laky22 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between laky22 and the player — including account creation, processing bets, paying out winnings, and managing withdrawals.
• Legal Obligation: Processing required by laky22's gaming licence, anti-money laundering regulations, age verification requirements, and other applicable legal and regulatory mandates. This includes all KYC processing and mandatory reporting obligations.
• Legitimate Interests: Processing necessary for laky22's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud prevention, platform security, responsible gaming monitoring, and service improvement analytics.
• Consent: Where laky22 processes data on the basis of your consent — primarily in relation to marketing communications — that consent is freely given, specific, and may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

laky22 uses personal data collected from players and website visitors for the following purposes:

• Account Management: Creating, maintaining, and administering your player account, including processing login credentials, managing account balances, and maintaining account security settings.
• Transaction Processing: Verifying and processing deposit and withdrawal transactions via JazzCash, EasyPaisa, USDT TRC20, Bitcoin, and bank transfer methods. Transaction data is retained for audit and regulatory compliance purposes.
• KYC & Compliance: Verifying your identity, age (minimum 21 years), and payment method ownership as required by laky22's gaming licence and anti-money laundering obligations. This processing is mandatory and cannot be opted out of by players who wish to continue using the platform.
• Game Operation: Recording gaming activity, bet history, win and loss data, and game session information necessary to operate games fairly and to resolve any disputes regarding game outcomes.
• Fraud Prevention: Monitoring account and transaction activity for indicators of fraudulent behaviour, bonus abuse, money laundering, or other prohibited conduct as defined in the laky22 Terms & Conditions.
• Responsible Gaming: Monitoring for indicators of problem gambling behaviour and administering player-requested responsible gaming tools including deposit limits, cool-off periods, and self-exclusion.
• Customer Support: Processing communications received via live chat and email for the purpose of responding to and resolving player queries, complaints, and account issues.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the laky22 platform, game selection, payment flow, and user interface.
• Marketing: Sending promotional communications, bonus notifications, and platform updates to players who have opted in to receive such communications. Marketing communications can be unsubscribed at any time.
• Legal and Regulatory Compliance: Fulfilling all obligations required by laky22's gaming licence, including record keeping, regulatory reporting, and cooperation with lawful authority requests.

laky22 does not sell, rent, or trade personal data with third parties for their own commercial purposes under any circumstances. Personal data is shared with third parties only in the following limited and controlled circumstances:

• Payment Processors: Necessary payment details are shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, and cryptocurrency processing services solely for the purpose of executing the specific transaction requested.
• Game Providers: Gaming activity data is shared with licensed game providers (such as Pragmatic Play, Evolution Gaming, and PG Soft) as necessary to operate games and verify outcomes. These providers are bound by contractual data protection obligations.
• KYC & Identity Verification Providers: Identity and document verification data may be shared with authorised third-party KYC service providers for automated verification processing. These providers act as data processors under a formal data processing agreement.
• Fraud Prevention Services: Technical data including IP addresses and device identifiers may be shared with fraud prevention and security service providers for the purpose of detecting and preventing prohibited conduct.
• Regulatory Authorities: laky22 may be required to disclose player data to its licensing authority, financial intelligence units, or law enforcement bodies in response to lawful requests or as required by mandatory reporting obligations under applicable anti-money laundering law.
• Legal Proceedings: Personal data may be disclosed in connection with legal proceedings, arbitration, or regulatory investigations where laky22 is a party or is required to provide information by a competent authority.

laky22 is an internationally licensed platform and its service infrastructure — including servers, game providers, and technology partners — may be located in jurisdictions outside Pakistan. As a result, personal data collected from Pakistani players may be transferred to and processed in countries other than Pakistan.

Where personal data is transferred internationally, laky22 ensures that appropriate safeguards are in place to protect that data, including:

• Contractual clauses requiring the recipient to maintain data protection standards equivalent to those imposed by laky22's gaming licence
• Transfer only to jurisdictions or organisations that have been assessed as providing an adequate level of data protection for the purposes of the specific transfer
• Technical security controls applied at the point of transfer and at the destination, including encryption in transit

By using the laky22 platform, players acknowledge and consent to the international transfer of their personal data as described in this section.

laky22 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by laky22's gaming licence and applicable law:

• Account Data: Retained for the duration of the account's active status plus a minimum of five years following account closure, as required for regulatory audit purposes.
• Transaction Records: All deposit and withdrawal records, including JazzCash, EasyPaisa, bank transfer, and crypto transaction logs, are retained for a minimum of five years from the date of each transaction.
• KYC Documentation: Identity verification documents, including CNIC copies and proof of address, are retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Gaming Activity Records: Bet history, game outcome records, and session logs are retained for a minimum of three years.
• Customer Support Communications: Live chat transcripts and email correspondence are retained for a minimum of two years from the date of the interaction.
• Responsible Gaming Records: Self-exclusion orders and deposit limit settings are retained for a minimum of the duration of the restriction plus three years, to prevent circumvention through re-registration.

After the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to a specific individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

The laky22 website uses cookies and similar tracking technologies to provide essential platform functionality, maintain session security, and gather performance analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session cookies that maintain your login state, security tokens, and cookies that remember your language and display preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Used to collect information about how the laky22 website is used — including which pages are visited most frequently and how players navigate the platform. This data is used in aggregated form to improve the site. These cookies do not identify you personally.
• Functional Cookies: Used to remember choices you have made on the platform — such as deposit limit settings displayed during account setup — to provide a more personalised experience.

laky22 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and laky22 servers
• Encryption at rest for all stored personal and financial data
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication requirements for all administrative system access
• Regular security audits and penetration testing by independent third-party security professionals
• Audit logging of all access to player data, with regular review of access logs
• Incident response procedures for detecting, reporting, and managing data security incidents

While laky22 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is 100% secure. Players are responsible for maintaining the security of their own account credentials, including passwords and OTP codes. laky22 will never ask for your password via live chat, email, or any other communication channel.

As a registered laky22 player, you have the following rights in respect of your personal data. These rights are subject to applicable law and laky22's regulatory obligations, which may in certain circumstances limit or delay their exercise:

To exercise any of these rights, please contact the laky22 support team via live chat or email. laky22 will respond to all valid rights requests within 30 days. Where a request cannot be fulfilled due to a conflicting legal obligation, laky22 will explain the reason in writing.

The laky22 platform is not intended for use by anyone under the age of 21 years. laky22 does not knowingly collect personal data from individuals under 21. If laky22 becomes aware that an account has been opened by an underage individual, the account will be immediately closed and any remaining balance forfeited.

Age verification is a mandatory part of the laky22 KYC process. All players are required to provide documentary proof of age before any withdrawal can be processed. laky22 also employs automated age-screening tools at registration to prevent underage registration attempts.

laky22 may send promotional communications to registered players, including bonus notifications, exclusive offers for Pakistani players, PSL betting promotions, crypto deposit bonuses, and general platform updates. Marketing communications are sent via email and SMS to the contact details registered to your account.

Marketing communications are sent only to players who have opted in to receive them. Opt-in consent is requested at the time of account registration and can be withdrawn at any time by:

• Clicking the unsubscribe link included at the bottom of every marketing email
• Replying STOP to any marketing SMS message
• Contacting the laky22 support team via live chat or email to request removal from marketing lists
• Updating your marketing preferences in your account settings

Unsubscribing from marketing communications will not affect essential service communications, such as transaction confirmations, security alerts, account verification requests, or responsible gaming notifications, which laky22 is required to send as part of the account operation.

laky22 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, or platform functionality. The "Last Updated" date displayed at the top of this document indicates the date of the most recent revision.

Where changes to this Policy are material and affect the way laky22 uses or shares player data, laky22 will notify registered players via email to the registered email address or via notification within the player account dashboard. Continued use of the laky22 platform following notification of any update constitutes acceptance of the revised Privacy Policy.

Players are encouraged to review this Privacy Policy periodically. A copy of previous versions of this Policy can be requested from the support team for reference purposes.

If you have any questions, concerns, or complaints regarding this Privacy Policy, the way laky22 processes your personal data, or the exercise of your data rights, please contact the laky22 support team:

• Live Chat: Available 24/7 directly on the laky22.net website after login
• Email: support at laky22.net

laky22 will acknowledge receipt of any privacy-related query within 48 hours and will endeavour to provide a substantive response within 30 days. Where a response requires additional time due to the complexity of the query or a need to consult with third parties, laky22 will inform you of the delay and provide an estimated timeframe for resolution.

If you are not satisfied with laky22's response to a privacy complaint, you may have the right to lodge a complaint with the data protection authority in the jurisdiction in which laky22 is licensed, or with the relevant supervisory authority in your own country of residence.