This Privacy Policy was last updated in June 2025. Continued use of lucky22 after any revision constitutes acceptance of the updated policy. Questions? Write to support@lucky22.wine.
1. Introduction
This Privacy Policy explains how lucky22 — the online gaming platform accessible at lucky22.wine — collects, uses, stores and protects the personal information of players who register and use the platform. It applies to all services offered by lucky22, including casino games, card games, poker, baccarat, virtual sports, Ludo and any other products added to the platform over time.
We take privacy seriously. The players who use lucky22 trust us with their personal and financial information — and we treat that trust as a responsibility, not an afterthought. This policy is written to be read, not to be avoided, and we have deliberately kept the language clear and direct.
This Privacy Policy should be read alongside our Terms and Conditions. Together, these documents govern the relationship between lucky22 and every registered player.
Who this policy applies to: Every person who visits lucky22.wine, creates an account, makes a deposit, plays a game or interacts with customer support. If you are using the platform on behalf of another person, you confirm that they have consented to their data being handled as described here.
2. What Personal Data We Collect
lucky22 collects only the personal data that is genuinely necessary to provide its services, comply with legal obligations and maintain the security and integrity of the platform. The categories of data we collect include:
| Data Category |
Examples |
Required? |
| Identity Data |
Full legal name, date of birth, CNIC number |
Yes – for verification |
| Contact Data |
Mobile number, email address |
Yes – for account access |
| Financial Data |
Easypaisa/JazzCash account refs, transaction history |
Yes – for payments |
| Technical Data |
IP address, device type, browser, OS |
Automatically collected |
| Usage Data |
Games played, session durations, bet history |
Automatically collected |
| Communication Data |
Support chat logs, emails, feedback |
When you contact us |
| Preference Data |
Responsible gaming settings, notification choices |
When you set preferences |
We do not collect sensitive personal data such as biometric information, health records, religious beliefs or political opinions.
3. How We Collect Your Data
Data is collected through the following means when you interact with lucky22:
- Direct registration: When you create an account, you provide your name, mobile number, date of birth and email address directly through the registration form.
- Deposits and withdrawals: Payment transactions via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card generate transaction reference data that is logged against your account.
- Gameplay activity: The platform automatically records which games you play, the duration of each session, bet sizes and outcomes. This is necessary for account integrity and responsible gaming monitoring.
- Customer support interactions: When you contact lucky22 support via live chat or email, the content of those conversations is retained for quality assurance and dispute resolution purposes.
- Cookies and tracking: When you browse lucky22.wine, cookies and similar technologies collect technical and usage data automatically. See Section 6 for full details.
- Identity verification: If lucky22 requests verification documents (such as a CNIC copy), the data within those documents is collected and stored for compliance purposes.
4. Why We Use Your Personal Data
lucky22 processes personal data for specific, legitimate purposes only. We do not collect data speculatively or retain it beyond what is necessary. The primary reasons we use your data are:
- To create and manage your account: Your registration details are needed to set up your player profile, authenticate your logins and maintain your account records.
- To process payments: Deposit and withdrawal transactions require financial data to be processed and matched to your account. This data is handled through encrypted payment gateways and is never stored as plain text on our servers.
- To deliver gaming services: Gameplay data allows lucky22 to maintain game history, resolve disputes, credit winnings accurately and personalise your in-lobby experience.
- To comply with legal and regulatory requirements: Anti-money laundering (AML) regulations and know-your-customer (KYC) requirements mean we must verify player identities and retain transaction records for specified periods.
- To maintain platform security: Technical and usage data helps detect fraud, account sharing, bot activity and other forms of abuse that could harm players or the platform.
- To support responsible gaming: Session duration, bet frequency and loss patterns are monitored to identify players who may benefit from responsible gaming interventions or support.
- To communicate with you: Contact data is used to send account notifications, transaction confirmations, support responses and — where you have opted in — promotional communications.
- To improve the platform: Aggregated, anonymised usage data helps the lucky22 development team understand how players use the platform and where improvements can be made.
5. Sharing Your Data with Third Parties
lucky22 does not sell your personal data to any third party. We do not share your information for marketing or commercial purposes with external organisations. Data is shared with third parties only in the following limited circumstances:
- Payment processors: When you make a deposit or request a withdrawal, transaction data is shared with the relevant payment provider (e.g. Easypaisa, JazzCash) to complete the transaction. These providers operate under their own privacy policies and data security obligations.
- Game software providers: Some games on lucky22 are powered by licensed third-party game engines. Limited gameplay data may be shared with these providers for game operation and fairness auditing purposes.
- Regulatory and legal authorities: We may be required by law to disclose personal data to Pakistani regulatory authorities, financial intelligence units or law enforcement agencies in connection with anti-money laundering investigations or other legal obligations.
- Identity verification services: Third-party KYC providers may receive identity document data for the purpose of verifying player age and identity.
- Fraud prevention services: Anonymised or pseudonymised risk indicators may be shared with fraud detection partners to protect the platform and its players.
Important: All third parties with whom lucky22 shares data are contractually required to handle that data securely, use it only for the stated purpose and not share it further without authorisation.
6. Cookies and Tracking Technologies
Like most websites, lucky22 uses cookies — small text files stored on your device — and similar technologies to make the platform work properly and to understand how players use it.
The types of cookies used on lucky22.wine include:
- Essential cookies: Required for the website to function. These include session cookies that keep you logged in during a browsing session. The site cannot work without these.
- Functional cookies: Remember your preferences, such as your chosen display language, notification settings and responsible gaming configurations.
- Analytics cookies: Collect anonymised data about how visitors navigate the platform — which pages are visited, how long is spent on each section and where users exit. This helps lucky22 improve the player experience.
- Security cookies: Help detect and prevent fraudulent sessions and unauthorised account access.
You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling essential cookies will affect your ability to use the platform properly. lucky22 does not use advertising cookies or third-party behavioural tracking tools.
lucky22 players across Pakistan trust us to keep their data safe
7. How We Protect Your Data
Data security at lucky22 is taken seriously at every level — from how data is transmitted to how it is stored and who can access it internally. The measures in place include:
- 256-bit SSL encryption on all data transmitted between your device and lucky22.wine. The padlock in your browser address bar confirms this is active.
- Encrypted storage for all personally identifiable information and financial data at rest on our servers.
- Access controls: Only staff with a legitimate operational need are permitted to access player personal data. Access is logged and reviewed regularly.
- Payment tokenisation: Full payment account numbers (card numbers, mobile wallet credentials) are never stored on lucky22 servers. Transactions are processed via tokenised references provided by payment gateways.
- 24/7 security monitoring: Automated systems flag unusual account activity, login anomalies and potential data breaches in real time.
- Regular security reviews: The platform undergoes periodic security assessments to identify and address vulnerabilities proactively.
Important: While lucky22 implements strong security measures, no system is 100% immune to all threats. You also play a role in protecting your account — never share your password, use a strong unique password, and contact us immediately if you suspect unauthorised access to your account.
8. How Long We Keep Your Data
lucky22 retains personal data only for as long as it is necessary for the purposes it was collected, or as required by applicable legal and regulatory obligations. In practice:
- Active account data (identity, contact, financial) is retained for the duration of your active relationship with lucky22 and for a minimum of 5 years after account closure, in compliance with anti-money laundering regulations.
- Transaction records are kept for a minimum of 5 years from the date of the transaction as required by financial compliance regulations.
- Gameplay and session data is retained for up to 2 years for dispute resolution and responsible gaming monitoring purposes, after which it is anonymised or deleted.
- Support communications are retained for up to 3 years to allow for follow-up on complaints and for quality assurance.
- Identity verification documents (e.g. CNIC copies) are retained for the duration of the account and for 5 years after closure, or longer if required by applicable law.
When data is no longer required, it is securely deleted or irreversibly anonymised so that it can no longer be associated with an individual player.
9. Your Data Rights
As a player on lucky22, you have a number of rights in relation to your personal data. These are listed below. To exercise any of these rights, contact us at support@lucky22.wine with the subject line "Data Rights Request" and we will respond within 30 days.
