Lucky22 Me Privacy Policy — How We Protect Your Data in Pakistan

Lucky22 Me operates the online betting and casino platform accessible at https://lucky22me.com. For the purposes of this Privacy Policy, Lucky22 Me is the data controller responsible for the personal information you provide when using our services.

Lucky22 Me is designed specifically for players in Pakistan. Our platform, payment integrations, and customer service operations are all built around the Pakistani market. We process personal data in accordance with applicable data protection principles to ensure your information is handled with care, used only for the purposes explained in this policy, and protected against unauthorised access at every level of our operation.

This Privacy Policy applies to:

• All registered players who have created a Lucky22 Me account
• Visitors who browse the Lucky22 Me website without registering
• Individuals who contact our support team, whether or not they hold an account

By using Lucky22 Me, you acknowledge that you have read this Privacy Policy and understand how your data will be processed. If you have questions about any section, you can reach our team at support@lucky22me.com at any time.

Lucky22 Me collects personal data from you in three ways: information you provide directly during registration and account use, information generated automatically as you interact with the platform, and in some cases information from third-party payment providers. Here is a detailed breakdown of each category.

Lucky22 Me uses the data we collect for specific, legitimate purposes. We do not use your data in ways that go beyond what is necessary to provide our services and keep the platform running safely. Here is how each category of data is used in practice.

• Registration data is used to create and maintain your Lucky22 Me account, verify your identity at the point of registration, and ensure the account belongs to a real individual who meets our age requirement of 18+.
• KYC data is used solely for identity verification and compliance with anti-money laundering requirements. KYC documents are reviewed by our compliance team and are not used for any other purpose.
• Payment data is used to process your PKR deposits and withdrawals through your chosen payment channel. Lucky22 Me links your payment method to your account to ensure withdrawals go to the correct registered recipient and to detect fraudulent transaction patterns.
• Transaction and betting history is used to maintain accurate account records, calculate bonus wagering progress, settle disputes, generate account statements on request, and monitor for responsible gaming indicators such as unusually large or frequent losses.
• Technical and device data is used to detect multiple accounts, identify bot activity, prevent account takeover, and ensure the platform functions correctly across different devices and connection types.
• Usage data is used to improve the Lucky22 Me product — identifying pages with high bounce rates, features that players use frequently, and areas of the platform that can be made faster or easier to navigate.
• Support communications are retained so that our support team has full context when assisting you. If you contact support about a withdrawal issue, the previous conversation history helps the agent understand your situation without you having to repeat yourself.

Lucky22 Me does not use automated decision-making that would produce legally significant outcomes for players, with the exception of automated fraud detection which may temporarily flag an account for manual review.

Lucky22 Me processes your personal data under one or more of the following legal bases depending on the nature of the processing activity.

• Contractual necessity: The majority of our data processing is necessary to fulfil the contract between you and Lucky22 Me — namely, providing you with a betting and casino account, processing your PKR deposits and withdrawals, and maintaining your account balance and history. Without this processing, we cannot provide the service.
• Legal obligation: KYC verification and anti-money laundering checks are required by applicable law. Lucky22 Me processes identity data and transaction records to comply with these obligations regardless of individual consent.
• Legitimate interests: Lucky22 Me processes technical, device, and usage data under a legitimate interest in keeping the platform secure, preventing fraud, detecting duplicate accounts, and improving the user experience. This processing does not override your fundamental privacy rights.
• Consent: Where Lucky22 Me sends marketing communications — promotional emails, SMS notifications about bonuses, and platform announcements — this is done on the basis of your explicit consent provided during registration or via your account settings. You may withdraw this consent at any time.

Lucky22 Me shares your personal data with third parties only in specific, controlled circumstances. We do not share data for third-party marketing. We do not sell data. The categories of third parties who may receive data from Lucky22 Me, and the reason for sharing, are as follows.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking networks, and Visa/Mastercard processing networks receive the minimum data necessary to process your specific transaction — typically your wallet number or account identifier. These providers operate their own privacy policies governing how they handle this information.
• KYC verification service: In some cases Lucky22 Me uses a third-party KYC technology provider to assist with identity document verification. This provider acts as a data processor under contract with Lucky22 Me and may not use your identity data for any purpose beyond the specific verification task.
• Platform analytics: Lucky22 Me uses analytics tools to understand how the platform is used in aggregate. These tools receive anonymised or pseudonymised usage data. They do not receive your name, contact details, or financial information.
• Legal and regulatory authorities: Lucky22 Me will disclose player data to law enforcement agencies, financial regulators, or courts when required to do so by a valid legal request or order. We will notify affected players of such requests where legally permitted to do so.
• Fraud prevention agencies: Where Lucky22 Me suspects payment fraud, identity fraud, or money laundering, relevant data may be shared with fraud prevention networks to protect both the platform and other players from harm.

Lucky22 Me uses cookies and similar tracking technologies to make the platform work properly, remember your preferences, and understand how players use the site. A cookie is a small text file stored on your device when you visit a website. It cannot run programs, deliver viruses, or access other information on your device.

You can manage your cookie preferences through your browser settings at any time. Removing essential cookies will affect platform functionality — you may need to log in again and some features may not work as expected. Removing analytics or preference cookies does not affect your ability to deposit, withdraw, bet, or play casino games at Lucky22 Me.

Lucky22 Me retains personal data for as long as is necessary for the purpose for which it was collected, subject to any longer retention periods required by law.

• Active account data: Retained for the full duration of your account's existence plus a period of at least 5 years after account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years after each transaction date in accordance with financial compliance obligations.
• KYC documents: Retained for a minimum of 5 years after the date of verification, or 5 years after account closure — whichever is later.
• Support communications: Retained for 2 years from the date of the most recent interaction, then deleted unless related to an ongoing dispute or compliance matter.
• Analytics and usage data: Retained in anonymised or aggregated form indefinitely for product improvement purposes. Personally identifiable usage data is anonymised within 13 months of collection.
• Marketing consent records: Retained for the full period during which you are a player and for 3 years after account closure as evidence of consent.

When the applicable retention period expires, Lucky22 Me securely deletes or anonymises the data so it can no longer be associated with an individual. Secure deletion methods are applied to all storage media.

Lucky22 Me takes data security seriously and implements technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

The security measures in place at Lucky22 Me include:

• Transport encryption: All data in transit between your device and Lucky22 Me servers is encrypted using TLS 1.3 with 256-bit keys. This covers every page visit, login, deposit, withdrawal, and support interaction.
• At-rest encryption: Sensitive data stored in Lucky22 Me's databases — including KYC documents, hashed passwords, and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Staff access to player data is governed by role-based access control. Only team members who genuinely need access to specific data types — compliance staff for KYC, support staff for account records — can access those records. All access is logged and auditable.
• Two-factor authentication: Lucky22 Me supports 2FA for player accounts. We strongly recommend enabling this in your account settings to add a second layer of protection beyond your password.
• Fraud monitoring: An automated system monitors transactions and account activity around the clock for patterns associated with account takeover, identity theft, and payment fraud. Suspicious activity triggers an immediate alert for manual review.
• Penetration testing: Lucky22 Me conducts regular security assessments including penetration testing to identify and address vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. If Lucky22 Me ever experiences a data breach that affects your personal information, we will notify you promptly and take immediate steps to contain the breach and protect affected accounts.

As a player at Lucky22 Me, you have specific rights over the personal data we hold about you. These rights can be exercised at any time by contacting support@lucky22me.com. Lucky22 Me will respond to all data rights requests within 30 days.

Lucky22 Me is strictly an adult platform. Our services are available only to individuals who are 18 years of age or older. We do not knowingly collect personal data from anyone under the age of 18.

During registration, all users are required to confirm they are 18 or over and provide a date of birth. Accounts found to belong to individuals under 18 are closed immediately and all data associated with the account is deleted, subject to any legally mandated retention requirements related to the detection of underage gambling.

If you are a parent or guardian and believe that a person under your care has registered an account at Lucky22 Me, please contact support@lucky22me.com immediately. We take underage gambling extremely seriously and will act swiftly on any such report.

Lucky22 Me also supports parental control software for households where children may access devices used by adults. Information about parental control tools is available on our Responsible Gaming page.

Lucky22 Me sends marketing communications — including promotional email newsletters, SMS notifications about bonuses, and in-platform messages about new features — only to players who have explicitly opted in during registration or via their account settings.

Marketing communications from Lucky22 Me may include:

• Welcome and first-deposit bonus offers
• PSL and cricket season promotions
• VIP Club tier upgrade notifications
• New game and new betting market announcements
• Personalised reload bonus offers based on your platform activity
• Responsible gaming reminders (these are sent regardless of marketing preference as they are considered service communications)

You can unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link in any Lucky22 Me marketing email
• Updating your notification preferences in your account settings under "Communication Preferences"
• Contacting support@lucky22me.com and requesting to opt out

Opting out of marketing communications has no effect on your ability to use Lucky22 Me, receive transactional account notifications (such as deposit confirmations and withdrawal updates), or access any features of the platform.

The Lucky22 Me platform does not contain links to third-party websites for commercial or advertising purposes. Where links to our payment providers' own pages or documentation are referenced, those providers operate independently under their own privacy policies.

If you navigate away from Lucky22 Me to any external website through a bookmark, search result, or any other means, Lucky22 Me is not responsible for the privacy practices of that external site. We encourage you to review the privacy policy of any website you visit and to exercise appropriate caution when sharing personal information online.

Lucky22 Me reviews this Privacy Policy regularly and may update it from time to time to reflect changes in our data practices, applicable legal requirements, or the services we offer. The "Last Updated" date at the top of this page always reflects when the most recent revision was made.

When Lucky22 Me makes material changes to this Privacy Policy — changes that affect your rights or how your data is used in a significant way — we will notify registered players by email at least 7 days before the changes take effect. Minor clarifications and corrections that do not change the substance of the policy may be made without advance notice.

Your continued use of Lucky22 Me following notification of a policy update constitutes your acceptance of the revised Privacy Policy. If you disagree with any change, you should stop using the platform and contact support to close your account and receive a copy or deletion of your personal data as appropriate.

We recommend bookmarking this page and reviewing it occasionally — particularly if you are considering sharing new types of personal information with Lucky22 Me, such as during a KYC update or a payment method change.

If you have a question about this Privacy Policy, want to exercise one of your data rights, or have a concern about how Lucky22 Me has handled your personal information, please contact us through any of the following channels:

• Email: support@lucky22me.com — please use the subject line "Privacy Request" so your message is routed to the correct team
• Live Chat: Available 24/7 within the Lucky22 Me platform when you are logged in
• Response time: Privacy requests are acknowledged within 48 hours and fully responded to within 30 days

If you are not satisfied with Lucky22 Me's response to a privacy concern after using our internal complaint process, you have the right to escalate the matter to the relevant data protection authority applicable under the laws of your jurisdiction. Lucky22 Me will cooperate fully with any such investigation.