Contents
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How We Collect Data
- 5. Data Processing & Legal Basis
- 6. How We Use Your Data
- 7. Data Sharing & Disclosure
- 8. Cookies & Tracking
- 9. Data Retention
- 10. Data Security
- 11. User Rights
- 12. Children's Privacy
- 13. Third-Party Services
- 14. International Transfers
- 15. Policy Amendments
- 16. Contact Us
1. Introduction
This Privacy Policy ("Policy") is issued by luk22 ("we", "us", "our" or "the Platform"), accessible at https://luk22.cam, and governs the collection, processing, storage and disclosure of personal data belonging to users who access or interact with the Platform ("you", "User").
luk22 is an online betting and casino information platform designed for Pakistani users. We understand that privacy is a matter of significant importance to our users, particularly in the context of financial transactions and sensitive account information. This Policy is written in plain, professional English to ensure every user — whether based in Karachi, Lahore, Islamabad, Rawalpindi or any other part of Pakistan — can clearly understand how their data is handled.
By accessing the luk22 Platform, registering an account or using any feature of the service, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree, you must discontinue use of the Platform.
This Policy should be read alongside the luk22 Terms & Conditions and Responsible Gambling policy. Together, these documents form the complete framework governing your use of the Platform.
luk22 does not hold a gambling licence issued by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any provincial authority. Nothing in this Policy constitutes legal advice. Users are responsible for understanding and complying with applicable local laws, including those relating to data privacy, in their jurisdiction.
2. Definitions
The following terms carry the meanings assigned to them throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, including name, CNIC number, email address, phone number, IP address and payment details. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, transmission, disclosure, deletion or any other form of handling. |
| "Controller" | The entity that determines the purposes and means of processing Personal Data — in this case, luk22 and the associated Operator. |
| "Processor" | Any third party that processes Personal Data on behalf of luk22, under instruction and bound by data processing agreements. |
| "KYC Data" | Identity and address verification documents submitted by the User as part of the Know Your Customer process — e.g., CNIC copy, passport, utility bill. |
| "Cookies" | Small data files placed on a User's device by the Platform for the purposes of session management, analytics and personalisation. |
| "Sensitive Data" | A subset of Personal Data requiring heightened protection, such as financial account details, biometric identifiers and health-related information. |
| "Consent" | A freely given, specific, informed and unambiguous indication of the User's agreement to the processing of their Personal Data for a stated purpose. |
3. Data We Collect
luk22 collects the following categories of Personal Data from users in the course of platform operation:
3.1 Registration and Identity Data
- Full legal name as it appears on official identification.
- Date of birth (for age verification purposes — the Platform is strictly 18+ or the higher minimum required by the Operator's licence jurisdiction).
- National identity information — CNIC number for Pakistani users, or passport number for non-Pakistani nationals.
- Residential address, including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar) and postal code.
- Email address and contact telephone number.
3.2 Financial and Transaction Data
- Bank account details, including IBAN and account holder name, for withdrawal processing via channels such as HBL, UBL, Meezan Bank and Bank Alfalah.
- Mobile wallet identifiers (e.g., Easypaisa or JazzCash registered number) used for deposit or withdrawal transactions.
- Transaction history, including deposit amounts in PKR, withdrawal requests, bonus activity and account balance movements.
- Cryptocurrency wallet addresses where applicable (e.g., BTC, USDT).
Financial data references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are collected only as payment processing identifiers. Mention of these providers does not imply their endorsement of gambling or affiliation with luk22.
3.3 Technical and Usage Data
- IP address, device type, operating system and browser version.
- Session data including login timestamps, duration, pages visited and actions taken.
- Geographic location data (at city-level resolution) derived from IP address.
- Device identifiers and mobile advertising IDs where applicable.
3.4 KYC Documentation
- Copies of government-issued photographic identification (CNIC, passport, driving licence).
- Proof of address documents, such as utility bills or bank statements dated within 90 days of submission.
- Source of funds documentation where required by AML compliance procedures.
3.5 Communications Data
- Records of live chat interactions with the support team.
- Email correspondence with luk22 regarding account matters, complaints or enquiries.
- Survey or feedback responses submitted voluntarily by the User.
4. How We Collect Data
luk22 collects Personal Data through the following channels and mechanisms:
- Direct submission: Data you enter during account registration, profile updates, deposit/withdrawal requests, KYC submissions and support interactions.
- Automated technical collection: Data generated automatically when you access the Platform, including IP address, session identifiers and browser characteristics collected via server logs and cookies.
- Payment provider data: Transaction confirmation data received from payment processing intermediaries when you initiate a deposit or withdrawal.
- Third-party verification services: Identity and fraud-check data received from KYC and AML verification providers used to validate User identities.
- Analytics tools: Aggregated, anonymised usage statistics collected through privacy-compliant analytics services to understand how users navigate the Platform.
5. Data Processing & Legal Basis
luk22 processes Personal Data on the following legal bases, depending on the specific purpose and nature of the data involved:
| Legal Basis | Processing Activity |
|---|---|
| Contractual necessity | Processing required to create and manage your Account, process deposits and withdrawals, apply bonuses and deliver the betting and casino services. |
| Legal obligation | KYC identity verification, AML transaction monitoring and regulatory reporting required to comply with applicable laws in the Operator's licence jurisdiction. |
| Legitimate interests | Fraud prevention, platform security, technical performance monitoring and responsible gambling enforcement — where these interests are not outweighed by your rights. |
| Consent | Marketing communications, optional personalisation features and the placement of non-essential cookies — where you have given freely withdrawable consent. |
Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact us via the details in Section 16.
6. How We Use Your Data
Personal Data collected by luk22 is used solely for legitimate operational, compliance and user-service purposes as described below. We do not use your data for any purpose that is incompatible with the reason for which it was collected.
- Creating and managing your luk22 Account, including processing registration, login authentication and profile updates.
- Processing financial transactions in PKR and other supported currencies, including deposits, withdrawals, bonus crediting and balance adjustments.
- Verifying your identity and eligibility to use the Platform through KYC procedures — a requirement before any withdrawal can be processed.
- Conducting AML screening to detect and prevent financial crime, money laundering and the financing of unlawful activities.
- Enforcing responsible gambling obligations, including applying self-exclusion periods, deposit limits and other player protection measures.
- Providing customer support via live chat, email and the Help Centre — in English and Urdu where applicable.
- Sending transactional communications including deposit confirmations, withdrawal status updates and security alerts.
- Sending promotional communications where you have given explicit consent and not subsequently withdrawn it.
- Analysing aggregated, anonymised usage patterns to improve Platform design, performance and user experience.
- Complying with legal obligations and responding to lawful requests from regulatory or law enforcement bodies.
7. Data Sharing & Disclosure
luk22 does not sell, rent or trade your Personal Data to third parties for commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:
7.1 Operational Service Providers
We engage third-party service providers — acting as Processors under data processing agreements — to support our operations. These include KYC/AML verification services, payment processing intermediaries, cloud hosting providers and analytics platforms. All Processors are bound by contractual obligations to handle your data securely and only for the purposes we specify.
7.2 Regulatory and Legal Disclosure
We may disclose Personal Data to regulatory bodies, law enforcement agencies or courts where we are legally required to do so by applicable law in any relevant jurisdiction. This includes disclosures required under AML legislation, where suspicious financial activity must be reported to competent authorities.
7.3 Corporate Transactions
In the event of a merger, acquisition, restructuring or sale of some or all of luk22's assets, Personal Data may be transferred to the acquiring entity as part of the business transaction. Users will be notified of such a transfer where required by applicable law.
7.4 Aggregated and Anonymised Data
We may share aggregated, anonymised statistical data about Platform usage with analytics and research partners. Such data cannot be used to identify any individual User and is not subject to the same restrictions as Personal Data.
luk22 will never share your Personal Data with third-party gambling operators, advertisers or data brokers without your explicit, freely given consent. If you receive unsolicited communications purporting to be from luk22, please report them to [email protected].
8. Cookies & Tracking Technologies
luk22 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies may be placed on your device:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly necessary | Authentication session management, security tokens and core Platform functionality. The Platform cannot function without these cookies. | No — essential to service |
| Functional | Remembering user preferences such as language settings, previously visited pages and display options. | Yes — opt-in |
| Analytics | Aggregated, anonymised data on page visits, session duration and navigation paths to improve Platform design and performance. | Yes — opt-in |
| Marketing | Tracking of promotional campaign performance where you have consented to receive marketing communications. | Yes — explicit opt-in |
You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the Platform's core features. Note that blocking strictly necessary cookies may impair session management and Platform functionality.
9. Data Retention
luk22 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following retention principles apply:
- Account data and transaction history are retained for a minimum of five (5) years following account closure to satisfy AML recordkeeping obligations in the Operator's licence jurisdiction.
- KYC documentation is retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
- Customer support communications are retained for a minimum of two (2) years to facilitate dispute resolution and service improvement.
- Marketing consent records are retained for the duration of your consent plus a reasonable period thereafter to demonstrate compliance.
- Technical log data and anonymised analytics data may be retained for up to two (2) years for security and performance analysis purposes.
Upon the expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised. You may request early deletion of certain categories of your data under the conditions described in Section 11, subject to overriding legal retention obligations.
10. Data Security
luk22 implements appropriate technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction or alteration. These measures include:
- Transport Layer Security (TLS/HTTPS) encryption for all data transmitted between your browser or device and the Platform servers.
- Encryption of sensitive data at rest, including financial account details and KYC documentation, using industry-standard cryptographic methods.
- Role-based access controls limiting staff access to Personal Data to those with a genuine operational need.
- Two-factor authentication (2FA) options for user accounts to reduce the risk of unauthorised account access.
- Regular security assessments and penetration testing of the Platform infrastructure.
- Secure data disposal procedures for physical and digital records at the end of their retention period.
While luk22 takes all reasonable steps to secure your data, no internet-based system can guarantee absolute security. You are responsible for keeping your account login credentials confidential. If you suspect unauthorised access to your account, contact our support team immediately via live chat or at [email protected].
11. User Rights
Subject to applicable law and the specific circumstances of your request, you have the following rights in relation to your Personal Data held by luk22. To exercise any of these rights, please contact us using the details in Section 16.
We will respond to all valid data rights requests within 30 days of receipt. Where the complexity or volume of requests warrants it, this period may be extended by up to a further 60 days, with notice provided to you. Some rights may be limited where legal retention obligations, fraud prevention or other overriding considerations apply — in which case we will explain the applicable restriction.
12. Children's Privacy
The luk22 Platform is strictly intended for adults aged 18 or above — or the higher minimum age required by the Operator's licence jurisdiction — and is not directed at children or minors under any circumstances.
luk22 does not knowingly collect Personal Data from individuals below the applicable minimum age. If we become aware that Personal Data has been submitted by or on behalf of an underage individual, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that your child has registered on luk22 or submitted personal data to the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.
13. Third-Party Services
The luk22 Platform may reference or link to third-party services including payment processing channels such as Easypaisa, JazzCash, Raast and banking institutions such as HBL, UBL, Meezan Bank and Bank Alfalah. These references are provided for contextual familiarity with Pakistani payment methods.
When you interact with any third-party service — including initiating a payment through a mobile wallet or bank transfer — that interaction is governed by the third party's own privacy policy. luk22 does not control the privacy practices of third-party services and accepts no responsibility for how those services handle your data.
Payment provider name references on this Platform do not imply that any such provider has reviewed, approved or endorsed luk22's privacy practices or the operation of the Platform. Users are encouraged to review the privacy policies of any third-party service they interact with independently.
14. International Data Transfers
luk22 may transfer Personal Data to servers or service providers located outside Pakistan, including within the Operator's licence jurisdiction and data centres in other countries. Such transfers are necessary for the operation of the Platform and the delivery of services to Pakistani users.
Where Personal Data is transferred internationally, luk22 takes steps to ensure that appropriate safeguards are in place, including:
- Data processing agreements incorporating standard contractual clauses or equivalent mechanisms.
- Transfers only to jurisdictions offering an adequate level of data protection, or to processors who have committed to equivalent safeguards by contract.
- Regular review of the security posture of international processing partners.
Users in Pakistan should note that Pakistan's Personal Data Protection Act and related data privacy legislation may not apply extraterritorially in the same manner as the laws of the Operator's jurisdiction. By using the Platform, you consent to the international transfer of your data under the conditions described in this section.
15. Policy Amendments
luk22 reserves the right to update or amend this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. Where amendments are material — for example, changes to the categories of data collected, the purposes of processing or your rights — we will make reasonable efforts to communicate these changes through a prominent notice on the Platform prior to the changes taking effect.
Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of those changes. If you do not accept the revised Policy, you must cease using the Platform and may request account closure and data deletion in accordance with Section 11.
16. Contact Us
For any questions, concerns or requests relating to this Privacy Policy, your Personal Data or the exercise of your data rights, please contact the luk22 Privacy Team using the channels below:
Email: [email protected] — plain text only, not a clickable link. Please use the subject line "Privacy Request" when contacting us about a data rights matter.
Live Chat: Available 24/7 from within your logged-in Account dashboard. For privacy-related queries, please indicate the nature of your request at the start of the conversation.
Help Centre: Our searchable Help Centre contains guidance on common data and account queries. Available in English and Urdu.
We aim to acknowledge all privacy-related requests within 5 business days and to fully resolve them within 30 days, as described in Section 11. Complex requests may take longer — we will notify you of any extension and the reason for it.
luk22 does not operate a physical office in Pakistan. All communications with our team must be conducted through the official channels listed above. Do not share Personal Data, financial information or account credentials through any unofficial channel or social media account claiming to represent luk22.