Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how laky22, operating the online betting and live casino platform at laky22.cam ("the Platform", "we", "us", "our"), collects, processes, stores, and protects the personal data of individuals who access or use the Platform ("you", "User", "Player").

We take the privacy and security of your personal information seriously. This Policy is written in plain, accessible English to ensure that Users — including those accessing laky22 from cities across Pakistan such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, and Peshawar — can understand exactly how their data is handled.

By registering an account on laky22 or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information that relates to an identified or identifiable natural person, including name, email address, IP address, device identifiers, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For Users of laky22, the Data Controller is the operator of laky22.cam.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "KYC" — Know Your Customer verification process, involving identity, age, and address confirmation.
• "Cookies" — small data files placed on your device by the Platform to store session and preference information.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a defined purpose.

3 Data Controller

The Data Controller responsible for your Personal Data is the operator of the laky22 Platform, accessible at laky22.cam. For any data-related enquiries, please contact us using the details provided in Section 15 of this Policy.

Where laky22 engages third-party service providers to assist with payment processing, identity verification, fraud prevention, or platform analytics, those providers act as Data Processors under binding contractual arrangements that require them to handle your data in accordance with this Policy and applicable data protection standards.

4 Personal Data We Collect

laky22 collects Personal Data in the following categories, depending on how you interact with the Platform:

4.1 Registration & Account Data

4.2 Financial & Transaction Data

4.3 Technical & Usage Data

4.4 KYC & Compliance Data

5 Legal Basis for Processing

laky22 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to register your account, operate your betting activity, process deposits and withdrawals, and deliver the core services of the Platform.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) obligations, age verification requirements, and regulatory reporting duties under the operator's licensing jurisdiction.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and responsible gambling monitoring — where these interests are not overridden by your fundamental rights.
• Consent: Where you have provided explicit consent — for example, opting in to marketing communications or enabling optional tracking features. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6 How We Use Your Data

laky22 uses the Personal Data we collect for the following purposes:

1. Account Management: Creating, operating, and maintaining your registered account on the Platform.
2. Service Delivery: Processing bets, settling outcomes, calculating and crediting winnings, and managing deposits and withdrawals.
3. Identity Verification: Conducting KYC checks to confirm your identity, age, and address, as required for regulatory compliance and to prevent underage access.
4. Fraud Prevention & Security: Detecting suspicious activity, preventing multiple account registrations, investigating potential bonus abuse, and monitoring transactions for AML compliance.
5. Responsible Gambling: Monitoring account behaviour for signs of problem gambling and enabling the operation of self-exclusion, deposit limits, and cooling-off tools.
6. Customer Support: Responding to support enquiries, resolving complaints, and processing account adjustment requests.
7. Platform Improvement: Analysing anonymised or aggregated usage data to improve platform features, fix bugs, and optimise the user experience for mobile users across Pakistan.
8. Legal Compliance: Meeting our obligations under applicable laws, responding to lawful requests from competent authorities, and maintaining required business records.
9. Marketing Communications (with consent only): Sending promotional information about laky22 offers and events where you have opted in to receive such communications. You may opt out at any time.

7 Third-Party Data Sharing

laky22 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share Personal Data only in the limited circumstances described below:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process data on our behalf under binding data processing agreements. These include providers of payment processing infrastructure, identity verification services, fraud detection tools, cloud hosting, and customer support software. These providers are contractually prohibited from using your data for their own purposes.

7.2 Regulatory and Legal Disclosure

laky22 may disclose Personal Data to competent authorities, law enforcement agencies, or regulatory bodies when required to do so by applicable law, court order, or legal process. We will notify you of any such disclosure where legally permitted to do so.

7.3 Payment Context References

References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah on this Platform are for general context only. These organisations are not data processors for laky22 and do not receive Personal Data from us in connection with their mention on this Platform.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of laky22's business, User data may be transferred to the successor entity as part of the transaction. Users will be notified of any such transfer and of any resulting changes to this Policy prior to the change taking effect.

8 Cookies & Tracking Technologies

laky22 uses cookies and similar technologies (including web beacons and local storage) to operate the Platform and improve your experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load balancing cookies. These cannot be disabled without breaking core functionality.
• Performance & Analytics Cookies: Used to understand how Users interact with the Platform — which pages are visited most frequently, where errors occur, and how navigation flows are used. Data collected is aggregated and anonymised where possible.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and previously entered information to improve convenience on return visits.
• Marketing Cookies (consent-based): Used to deliver relevant promotional content and to measure the effectiveness of our marketing activity. These are only placed where you have provided explicit consent.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies in widely-used browsers, refer to your browser's help documentation.

9 Data Retention

laky22 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general principles apply:

• Account Data: Retained for the duration of your account relationship with laky22, and for a defined period thereafter as required by applicable AML, fraud prevention, and dispute resolution obligations. Typical post-closure retention is 5–7 years, subject to applicable law.
• KYC & Verification Documents: Retained for the minimum period required under AML obligations applicable to the operator's license jurisdiction, typically 5 years from the date of the last transaction.
• Transaction Records: Retained in accordance with applicable financial record-keeping requirements. Aggregated, anonymised transaction analytics may be retained indefinitely for business intelligence purposes.
• Support Correspondence: Retained for a period sufficient to resolve any outstanding complaint or legal claim, typically 3–5 years.
• Marketing Consent Records: Retained for as long as the consent remains active, plus a reasonable period thereafter to demonstrate compliance.

Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identified individual.

10 Security Measures

laky22 implements technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/HTTPS) encryption for all data transmitted between your device and the Platform.
• Password hashing using industry-standard cryptographic algorithms — passwords are never stored in recoverable form.
• Access controls limiting Platform data access to authorised personnel on a need-to-know basis.
• Regular security assessments, vulnerability monitoring, and patch management processes.
• Data breach response procedures, including defined timelines for notification to affected individuals and regulatory authorities where required.

No security system is completely infallible. While laky22 takes reasonable steps to protect your data, we cannot guarantee absolute security against all threats. You are also responsible for maintaining the security of your own Account credentials and for promptly notifying us if you suspect any unauthorised access.

11 Your Data Rights

Subject to applicable law and certain limited exceptions, you have the following rights in relation to your Personal Data held by laky22. To exercise any of these rights, contact us using the details in Section 15.

11.1 Right of Access

You have the right to request a copy of the Personal Data laky22 holds about you, along with information about how it is processed. We will respond to verified access requests within a reasonable timeframe.

11.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. Many account details can be updated directly through your account settings.

11.3 Right to Erasure

You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to overriding legal retention obligations — for example, AML law may require us to retain certain records regardless of an erasure request.

11.4 Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, machine-readable format, and to request its transfer to another controller where technically feasible.

11.5 Right to Withdraw Consent

Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To opt out of marketing emails, use the unsubscribe link in any communication or contact our support team.

12 Minors and Age Restrictions

laky22 is strictly an adults-only platform. Individuals under the age of 18 — or the higher minimum age required by the applicable license jurisdiction — are not permitted to register an account or use the Platform in any capacity.

laky22 does not knowingly collect Personal Data from minors. Age verification is conducted as part of our KYC process. If we become aware that Personal Data has been collected from a minor without parental consent or in violation of applicable law, we will take immediate steps to delete that data and close the associated account.

Parents and guardians in Pakistan are encouraged to use parental control software and internet filtering tools to prevent minors from accessing gambling websites. The presence of an 18+ age requirement does not constitute legal authorisation for gambling activity in Pakistan.

13 International Data Transfers

laky22 operates internationally, and your Personal Data may be transferred to and processed in countries outside your country of residence, including countries that may not have data protection laws equivalent to those in your jurisdiction.

Where Personal Data is transferred to third-party Data Processors located in other jurisdictions, laky22 implements appropriate safeguards — including contractual data processing agreements — to ensure that your data receives a level of protection consistent with this Policy and applicable data protection standards.

By using laky22 and providing your Personal Data, you acknowledge that your data may be transferred to and processed in other countries for the purposes described in this Policy.

14 Amendments to This Policy

laky22 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. The effective date at the top of this document will be updated to reflect the date of any revision.

Where a material change is made to this Policy, laky22 will make reasonable efforts to notify registered Users in advance — either by email or by in-platform notification — before the revised Policy takes effect. Your continued use of the Platform following notification of a material change constitutes acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how laky22 protects your Personal Data.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to raise a data protection concern, please contact the laky22 support team. We aim to respond to all data-related enquiries within a reasonable timeframe.

Our support team is available 24 hours a day and can assist in both English and Urdu for the convenience of Pakistani users.

Support Email: [email protected] (plain text — not a clickable link)

When submitting a data rights request, please include: your registered email address, the nature of your request, and any relevant details to help us locate and verify your account. We may require identity verification before fulfilling sensitive data requests in order to protect your data from unauthorised access.

For information about how laky22 operates, including its approach to responsible gambling, please visit our Responsible Gambling page. For the full rules governing your use of the Platform, please refer to our Terms & Conditions.