Your privacy is not a checkbox for us — it is a genuine commitment. This page explains exactly what personal data Lucky22 collects, why we collect it, how we protect it, and the rights you have over your own information.
A quick summary of the key privacy commitments Lucky22 makes to every registered player in Pakistan.
Lucky22 collects personal data necessary to operate your account, process payments in PKR and meet legal obligations. We do not collect data for the sake of it.
All data transmitted between your device and Lucky22 is protected by bank-grade 256-bit SSL encryption. Your CNIC details, payment info and personal data are never sent in plain text.
Lucky22 does not sell, rent or trade your personal information to third parties for marketing purposes. Your data is yours — we only share it where required by law or to deliver our service.
Pakistani players have the right to access, correct, export and delete their personal data held by Lucky22, subject to legal retention requirements. Contact support to exercise any right.
Easypaisa and JazzCash wallet details, bank account numbers and card data are processed through certified payment processors. Lucky22 never stores full card numbers or wallet PINs.
Lucky22 only sends promotional emails and SMS messages to players who have opted in. You can withdraw consent at any time through account settings or by emailing support@lucky22.im.
This Privacy Policy ("Policy") explains how Lucky22 ("Lucky22", "we", "us", "our") collects, uses, stores, shares and protects personal data relating to you ("Player", "you", "your") when you access or use the Lucky22 platform at https://lucky22.im.
Lucky22 is committed to handling your personal data with the care, transparency and respect it deserves. We operate primarily for players based in Pakistan, and this Policy is written with Pakistani players in mind — the payment methods you use, the identity documents we may request, and the data protection practices relevant to the Pakistani context are all addressed here.
By registering an account at Lucky22, you acknowledge that you have read this Policy and understand how your personal data will be handled. If you have questions about anything in this Policy, please contact us at support@lucky22.im before registering.
Summary: This Policy tells you what data Lucky22 holds about you, why, and what your rights are. Reading it before you register is strongly recommended.
Lucky22 collects the following categories of personal data:
Lucky22 collects personal data through the following means:
Lucky22 uses your personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Creating and managing your Lucky22 account | Identity, contact data |
| Processing PKR deposits and withdrawals | Financial data, identity data |
| Identity and age verification | Identity data, CNIC copy |
| Detecting and preventing fraud and duplicate accounts | Technical data, financial data, identity data |
| Anti-money laundering compliance (AML checks) | Identity data, financial data, transaction history |
| Providing games and gaming services | Gaming activity data, account data |
| Calculating and applying bonuses | Gaming activity data, financial data |
| Responding to customer support queries | Communications data, account data |
| Sending service notifications (e.g. deposit confirmations) | Contact data |
| Sending marketing communications (where you have opted in) | Contact data, gaming activity data |
| Improving the Lucky22 platform and user experience | Technical data, gaming activity data (aggregated) |
| Responsible gaming monitoring and intervention | Gaming activity data, responsible gaming settings |
Lucky22 processes personal data on the following legal grounds:
Lucky22 does not sell, rent or trade your personal data. We share data only in the following limited circumstances:
To process your PKR transactions, Lucky22 shares necessary financial data with certified payment service providers including the operators of Easypaisa, JazzCash, NayaPay, SadaPay and bank IBFT infrastructure. These providers are contractually required to handle your data securely and may not use it for any purpose other than processing your transaction.
Where Lucky22 uses a third-party identity verification provider to check your CNIC, that provider receives the identity data necessary to complete the check. They are bound by strict data processing agreements and may not retain or use your data beyond the verification purpose.
Certified game providers integrated into Lucky22 — such as Spribe, Pragmatic Play and Evolution — may receive limited technical data (such as a pseudonymous player ID and session token) necessary to deliver their games. They do not receive your name, CNIC or financial details.
Lucky22 may disclose personal data to law enforcement authorities, regulatory bodies or courts where required to do so by applicable law or a binding legal order. We will notify you of any such disclosure where permitted by law.
Lucky22 will never share your data with third parties for their own marketing purposes without your explicit consent.
The security of your financial data is a priority at Lucky22. Here is how we handle it specifically:
Card data: Lucky22 does not store full card numbers. Card payments are processed through PCI-DSS compliant payment gateways. Lucky22 only retains the last four digits of a card number for reference purposes (for example, to identify your preferred withdrawal method).
Wallet data: Easypaisa and JazzCash wallet numbers used for transactions are stored in encrypted form. Lucky22 staff cannot view your full wallet number except where this is technically required to resolve a disputed transaction.
Bank account data: IBAN and bank account numbers provided for IBFT withdrawals are stored encrypted and accessed only to process your withdrawal request.
Transaction history: A complete record of your deposit and withdrawal history is maintained as part of your account record. This data is necessary for legal compliance and for resolving any transaction disputes. You may request a copy of your transaction history at any time by contacting Lucky22 support.
Lucky22 uses cookies and similar tracking technologies on its platform. Here is what we use and why:
These cookies are necessary for the Lucky22 platform to function. They maintain your login session, remember your preferences within a session and enable secure transactions. These cookies cannot be disabled without impairing platform functionality.
Lucky22 uses analytics tools to understand how players use the platform — which pages are visited most, where players navigate after landing, how long sessions last. This data is collected in aggregated, anonymised form and is used to improve the platform. You may opt out of analytics cookies through your browser settings.
Certain cookies contribute to Lucky22's fraud detection systems, helping identify unusual activity patterns that may indicate account compromise or attempted abuse. These are considered essential for security purposes.
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect your experience on the Lucky22 platform, particularly login persistence and transaction security features.
Lucky22 retains personal data for the periods necessary to fulfil the purposes described in this Policy, taking into account legal and regulatory requirements. In general:
When data is no longer required to be retained, Lucky22 deletes or anonymises it securely so that it cannot be attributed to any individual.
Lucky22 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include:
In the event of a data breach that is likely to affect your rights or freedoms, Lucky22 will notify affected players and take immediate remediation steps. We will also notify any applicable regulatory authority as required by law.
As a Lucky22 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@lucky22.im with your registered email address and the specific request. We will respond within 10 business days.
You may request a copy of all personal data Lucky22 holds about you at any time. This includes your account data, transaction history, gaming activity records and communications. Lucky22 will provide this in a structured, readable format.
If any personal data Lucky22 holds about you is inaccurate or incomplete, you have the right to request correction. Some changes — such as name corrections — may require supporting documentation to verify the change.
You may request deletion of your personal data where it is no longer necessary for the purposes collected, where you withdraw consent, or where there is no overriding legal basis for retention. Note that certain data must be retained for legal compliance and cannot be deleted on request during the mandatory retention period.
Where processing is based on your consent or on contract performance, you may request your personal data in a machine-readable format (CSV or JSON) for transfer to another service provider.
In certain circumstances — such as where you contest the accuracy of your data or object to processing — you may request that Lucky22 restricts further processing of your data while the matter is resolved.
You may object to processing based on Lucky22's legitimate interests at any time. Where the objection relates to direct marketing, Lucky22 will cease that processing immediately without requiring a reason.
Lucky22 sends marketing communications — including promotional emails, SMS messages about bonuses, tournament announcements and platform updates — only to players who have explicitly opted in during registration or subsequently through account settings.
If you have opted in and wish to withdraw your consent at any time, you can do so by:
Opting out of marketing communications does not affect service notifications — you will still receive emails about your deposits, withdrawals, identity verification and account security, as these are necessary for the operation of your account.
Lucky22's responsible gaming systems require the use of personal data to function effectively. Specifically:
Spending and session monitoring: Lucky22 uses gaming activity data to identify patterns that may indicate a player is experiencing harm from gambling. This monitoring is a core part of our duty of care and operates in accordance with responsible gaming best practice.
Limit and exclusion records: When you set a deposit limit, loss limit or self-exclusion at Lucky22, a record of that instruction is maintained. This record is used to enforce your chosen limits and cannot be deleted upon request during the period the limit is active — it exists to protect you.
Self-exclusion lists: Where a player self-excludes, their account and contact details are added to an exclusion list to prevent Lucky22 from sending marketing communications during the exclusion period. This is a regulatory requirement, not optional.
More information about responsible gaming tools at Lucky22 is available on the Responsible Gaming page.
Lucky22 does not knowingly collect personal data from individuals under the age of 18. The platform is strictly restricted to adults, and age verification is enforced at registration and before first withdrawal.
If Lucky22 becomes aware that personal data has been collected from a minor, the account will be closed immediately, all data relating to the minor will be deleted to the extent possible under applicable law, and any deposits made will be returned through the original payment method.
Parents and guardians who believe a minor has registered at Lucky22 should contact support@lucky22.im immediately.
Lucky22 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform features. When material changes are made, we will notify registered players by email and display a notice on the Lucky22 platform at least 7 days before the changes take effect.
The date at the top of this Policy reflects when it was most recently updated. We recommend reviewing this Policy periodically. Continued use of Lucky22 following the effective date of any update constitutes acceptance of the revised Policy.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how Lucky22 handles your personal data, please contact us through the following channels:
Lucky22 aims to respond to all data-related enquiries within 10 business days. For complex access requests or erasure requests that require data retrieval across multiple systems, we may take up to 30 calendar days, and we will inform you of this if it applies.
This Privacy Policy was last updated on 1 January 2025. Lucky22 is committed to reviewing and updating this Policy whenever our data practices change.
Privacy commitments are only as good as the technical measures behind them. Here is what Lucky22 actually does to keep your data safe.
Every byte of data that travels between your phone or computer and Lucky22's servers is wrapped in 256-bit SSL/TLS encryption. Even if someone intercepted the transmission, they would see nothing but unreadable encrypted data. This applies equally to your game sessions, login requests, deposit instructions and withdrawal confirmations.
Not everyone at Lucky22 can see everything. Customer support staff see account data relevant to resolving your query. Finance staff see transaction records. No one employee has unrestricted access to the full database. Access is logged, time-stamped and audited. Any unusual internal access triggers an automated alert that is reviewed by the security team.
Lucky22 never stores your full debit or credit card number. Card payments are processed through PCI-DSS Level 1 certified payment gateways — the highest standard of card data security in the industry. Lucky22 only ever stores a masked reference (last four digits) so you can identify your saved payment method. The rest is handled entirely by the certified gateway.
Privacy policies tend to be documents that people skip past. They are long, they are written in legal language, and they appear right before a button that most people click without reading them. Lucky22 wants to do better than that — not just by writing a cleaner document, but by taking a moment to explain what the important parts actually mean for you as a Pakistani player using the platform day to day.
The most important thing to understand is why Lucky22 collects any personal data at all. The short answer: a gaming platform that processes real money in PKR has legal obligations that require it. Identity verification — uploading your CNIC — is not something Lucky22 invented to create bureaucracy. It is a standard requirement for financial services operating in the digital space, and it protects you as much as it protects Lucky22. If someone tried to use your CNIC to open a Lucky22 account in your name, identity verification is precisely what would catch it. Your CNIC copy is stored encrypted, accessed only by the verification team, and never shared with third parties for any purpose other than completing your verification.
Pakistani payment data deserves special attention because it is so closely tied to daily life here. Your Easypaisa number, your JazzCash wallet, your bank account — these are how you manage your money, pay bills and send funds to family. Lucky22 understands that access to these details is a serious responsibility. Wallet numbers and bank account details stored at Lucky22 are encrypted at the database level. The team members who process withdrawal requests see enough to route the payment correctly, but the systems are designed so that full wallet numbers are not displayed in plaintext across the platform. Your payment data is used for one purpose: getting your money where it needs to go.
The gaming activity data that Lucky22 holds — your bet history, session durations, win and loss records — serves multiple purposes. Some of those purposes benefit Lucky22 commercially: understanding which games are popular helps with platform decisions. But a significant part of this monitoring exists specifically to protect you. Lucky22's responsible gaming systems use activity data to identify patterns consistent with problem gambling — chasing losses, dramatically increasing bet sizes after a losing streak, very long unbroken sessions. When these patterns appear, Lucky22's responsible gaming protocols may prompt a check-in, provide information about available tools, or in serious cases restrict activity pending a support conversation. This is not surveillance for its own sake; it is the platform taking its duty of care seriously.
Marketing communications from Lucky22 are opt-in only, and that opt-in is genuine — it is not a pre-ticked box buried in registration small print. If you have received marketing from Lucky22 and want it to stop, the unsubscribe mechanism in every email works immediately. An SMS reply of STOP processes instantly. An email to support@lucky22.im requesting removal will be actioned the same day. Opting out of marketing does not affect your ability to use the platform and does not mean Lucky22 will stop sending you transaction confirmations or security alerts — those are necessary service communications, not marketing.
If you want to know exactly what data Lucky22 holds about you, you have the right to ask for it. A data access request to support@lucky22.im will be acknowledged within 2 business days and fulfilled within 10. You will receive a structured file covering your account data, transaction history, gaming records and communications history. If you want anything corrected or deleted, those requests are handled through the same channel. Lucky22 takes these rights seriously because the data belongs to you, not to the platform.
Now you know exactly how Lucky22 handles your data. Register a free account, deposit in PKR via Easypaisa or JazzCash, and play knowing your personal information is encrypted, protected and never sold. Welcome bonus up to Rs 50,000 for new players.