lak22 Privacy Policy

1 Introduction and Scope

Welcome to lak22's Privacy Policy. lak22 is Pakistan's leading online gaming platform, offering sports betting, live casino, slots, bingo, and fishing games to players across Karachi, Lahore, Faisalabad, Islamabad, and beyond. We are committed to protecting your personal data and respecting your privacy in every interaction you have with our platform.

This Privacy Policy applies to all personal data collected, processed, and stored by lak22 in connection with your use of the lak22 website, mobile-optimised interfaces, customer support channels, and all associated services. It covers data collected from players registered in Pakistan and from visitors who browse lak22 without registering an account.

By registering a lak22 account or continuing to use the lak22 platform after the effective date of this policy, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of the lak22 platform and may contact our support team to request account closure.

2 Data Controller Information

For the purposes of this Privacy Policy, lak22 — the operator of the platform accessible at lak22.com — acts as the data controller in respect of all personal data collected from players and visitors. As data controller, lak22 determines the purposes and means by which your personal data is processed.

lak22 operates under an international gaming licence. The platform's data processing activities are aligned with internationally recognised data protection principles, including those set out under the General Data Protection Regulation (GDPR) framework, which we adopt voluntarily as a best-practice standard for all players regardless of jurisdiction.

For all data protection enquiries, correction requests, deletion requests, or complaints relating to the handling of your personal data, you may contact lak22's data support team directly via live chat or at the support email address provided in Clause 15 of this policy.

3 Personal Data We Collect

lak22 collects the following categories of personal data from players and platform visitors. We collect only the data that is necessary for the specific purposes outlined in Clause 6 of this policy.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes under our KYC obligations.

4 How We Collect Your Data

lak22 collects personal data through the following channels and mechanisms:

• Direct Registration: When you create a lak22 account, you provide identity data, contact data, and account credentials directly through the registration form on the platform.
• KYC Submission: When you submit identity documents for verification prior to your first withdrawal, we collect and process KYC data including government-issued identification and proof of address.
• Deposits and Withdrawals: Transaction data is recorded automatically each time you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT.
• Platform Usage: Technical data and gaming activity data are collected automatically through server logs and platform analytics as you use the lak22 website and games.
• Customer Support Interactions: When you contact lak22 via live chat or email, the contents of those communications are recorded and associated with your account for support quality and dispute resolution purposes.
• Cookies and Tracking: As described in Clause 9, lak22 uses cookies and similar technologies to collect technical and behavioural data during your browsing sessions on the platform.

5 Legal Basis for Processing

lak22 processes your personal data on the following legal bases, in alignment with internationally recognised data protection principles:

• Contractual Necessity: The majority of data processing by lak22 is necessary to perform our contract with you — that is, to provide you with access to the lak22 gaming platform, process your deposits and withdrawals, and manage your account. Without this processing, we cannot deliver the service.
• Legal Obligation: Certain data processing activities — particularly KYC verification, anti-money laundering (AML) checks, and the retention of transaction records — are required by the obligations attached to lak22's international gaming licence. We process this data because we are legally required to do so.
• Legitimate Interests: lak22 processes technical data, gaming activity data, and fraud detection data on the basis of our legitimate interests in maintaining platform security, preventing fraud, and ensuring the integrity of our gaming environment. We carefully balance these interests against your privacy rights.
• Consent: Where lak22 processes data for optional purposes — such as sending you promotional emails, PSL betting tips, or bonus notifications — we do so only with your explicit consent, which you may withdraw at any time through your account settings or by contacting our support team.

6 How We Use Your Data

lak22 uses your personal data for the following specific purposes, each linked to a legal basis as described in Clause 5:

• To create, manage, and maintain your lak22 account, including processing login authentication and account security.
• To verify your identity and age through the KYC process prior to authorising withdrawal requests, in compliance with our gaming licence obligations.
• To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT, and to maintain accurate transaction records.
• To detect and prevent fraudulent activity, money laundering, duplicate account creation, and other prohibited conduct as defined in our Terms & Conditions.
• To provide customer support, investigate complaints, and resolve disputes relating to your lak22 account or gaming activity.
• To monitor your gaming behaviour for signs of problem gambling and to contact you proactively if our responsible gaming systems detect concerning patterns — this is a core part of our player safety commitment.
• To send you transactional notifications relating to your account, deposits, withdrawals, and security alerts.
• To send you promotional communications — including lak22 bonus offers, PSL cricket betting promotions, and new game announcements — where you have provided consent to receive such communications.
• To improve the lak22 platform through anonymised, aggregated analytics of platform usage patterns.
• To comply with our legal obligations under our international gaming licence, including record-keeping and regulatory reporting requirements.

7 Data Sharing and Disclosure

lak22 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share your personal data only in the following strictly defined circumstances:

• Payment Processors: We share the minimum necessary transactional data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and our USDT payment gateway to process your deposits and withdrawals. These providers process data in accordance with their own privacy policies and are bound by data processing agreements with lak22.
• KYC and Identity Verification Providers: Where lak22 uses third-party identity verification technology to assist with KYC document review, your submitted documents may be processed by that provider under a strict data processing agreement. No KYC data is shared with unrelated third parties.
• Game Software Providers: Certain lak22 casino, slot, bingo, and fishing game products are powered by third-party game studios. Anonymised session data may be shared with these providers for game performance monitoring; no personally identifiable data is shared with game studios without your explicit consent.
• Regulatory and Law Enforcement Authorities: lak22 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, by a lawful court order, or under the requirements of our gaming licence. We will notify you of such disclosures where legally permitted to do so.
• Fraud Prevention Services: lak22 participates in industry-wide fraud prevention initiatives and may share limited account data with fraud prevention databases to detect and prevent financial crime.

8 Payment Data and Security

The security of your payment information is a top priority at lak22. Our approach to payment data is designed to ensure that sensitive financial credentials are never unnecessarily exposed or stored on our systems:

• lak22 does not store JazzCash or EasyPaisa wallet credentials, mobile wallet PINs, or bank account passwords on its servers at any point.
• Bank account details provided for HBL, UBL, or Meezan Bank transfers are used solely to process the specific transaction for which they were provided and are not retained beyond the minimum period required for transaction reconciliation.
• All payment data transmitted between your device and the lak22 platform is encrypted using TLS 1.3 (Transport Layer Security), ensuring that data in transit cannot be intercepted by third parties.
• USDT cryptocurrency transaction data is processed through our designated crypto payment gateway. Wallet addresses associated with USDT transactions are retained for the purposes of transaction verification and AML compliance only.
• lak22 employs tokenisation technology for recurring payment method identification — meaning that your payment method is identified by a secure token in our system rather than by your actual account credentials.

If you suspect unauthorised access to your lak22 account or believe your payment credentials have been compromised, please contact our support team immediately via live chat. We will suspend your account pending investigation and assist you in securing your lak22 profile and associated payment methods.

9 Cookies and Tracking Technologies

lak22 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather anonymised analytics about platform usage. The following categories of cookies are used on lak22:

• Strictly Necessary Cookies: These cookies are essential for the lak22 platform to function correctly. They manage your login session, maintain your authentication state between pages, and ensure that your account data is displayed correctly. These cookies cannot be disabled without disrupting your ability to use the platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming tool configurations — so that you do not have to re-enter them each time you visit lak22.
• Analytics Cookies: lak22 uses anonymised analytics data to understand how players navigate the platform, which game categories are most popular, and where technical issues may be occurring. This data is aggregated and does not identify individual players.
• Security Cookies: These cookies assist in detecting and preventing fraudulent login attempts, account takeover attacks, and suspicious activity on the lak22 platform.

You can manage your cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use the lak22 platform. Blocking analytics or functional cookies will not affect your core account functionality but may result in a less personalised experience.

10 Data Retention

lak22 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by our legal and regulatory obligations. The following retention periods apply:

• Account Data: Retained for the duration of your active lak22 account, plus a minimum of five (5) years following account closure, in compliance with our gaming licence record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, in accordance with anti-money laundering regulations applicable under our international gaming licence.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, for financial record-keeping and regulatory compliance purposes.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Gaming Activity Logs: Retained for three (3) years from the date of each session, for responsible gaming monitoring, fraud detection, and dispute resolution.
• Marketing Consent Records: Retained for as long as your consent is active, plus two (2) years following withdrawal of consent as evidence of the consent lifecycle.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. If you request early deletion of your data, lak22 will comply to the extent permitted by our legal and regulatory obligations — where a legal retention obligation applies, we will explain this to you clearly.

11 International Data Transfers

lak22 is operated under an international gaming licence, and as such, certain data processing activities may involve transferring your personal data to servers or service providers located outside Pakistan. Where such transfers occur, lak22 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards employed for international data transfers include:

• Contractual data processing agreements with all third-party service providers that receive your personal data, requiring them to maintain equivalent data protection standards.
• Encryption of all data in transit using TLS 1.3, ensuring that data cannot be intercepted during international transmission.
• Restriction of international data transfers to jurisdictions and providers that maintain adequate data protection frameworks recognised by major international data protection authorities.

If you have concerns about international data transfers relating to your personal data, please contact our support team for further information about the specific safeguards applicable to your data.

12 Your Rights and How to Exercise Them

As a lak22 player, you hold the data rights described in the "Your Data Rights" section above. To exercise any of these rights, please contact lak22 support via live chat or at the support email address listed in Clause 15. When submitting a data rights request, please:

• Clearly identify yourself by providing your registered lak22 username and the email address associated with your account.
• Specify the right you wish to exercise (e.g., access, rectification, erasure, portability).
• Provide sufficient detail to allow lak22 to locate and process your request accurately.

lak22 will acknowledge your request within 48 hours and provide a full response within thirty (30) days of receipt. In cases of complex or multiple requests, this period may be extended by a further thirty (30) days, in which case lak22 will notify you of the extension and the reason for it.

lak22 will not charge a fee for processing data rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. If lak22 is unable to fulfil a request due to a legal obligation or other legitimate ground, we will explain the reason clearly in our response.

13 Children and Age Verification

lak22 operates a strictly enforced 21+ age policy. The lak22 platform is not intended for and must not be used by individuals under the age of 21. lak22 does not knowingly collect personal data from individuals under the age of 21.

As part of the registration process, all players are required to confirm that they are aged 21 or above. This confirmation is followed up with documentary age verification during the KYC process before any withdrawal is processed. If lak22 discovers or reasonably suspects that a registered account belongs to a player under the age of 21, the following steps will be taken immediately:

• The account will be suspended pending investigation.
• All personal data associated with the account, including any submitted KYC documents, will be quarantined and reviewed by our compliance team.
• Any deposited funds will be returned via the original payment method, less any amounts already wagered, following compliance review.
• The account and all associated personal data will be permanently deleted in accordance with our data minimisation obligations.

If you are a parent or guardian and believe your child has registered an account on lak22, please contact our support team immediately via live chat or at the support email address in Clause 15. We will investigate and take appropriate action within 24 hours of receiving your report.

14 Changes to This Policy

lak22 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, updates to our gaming licence obligations, changes in our data processing practices, or improvements to our platform. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this policy to reflect the date of the most recent revision.
• Display a prominent notice on the lak22 platform informing players that the Privacy Policy has been updated.
• Where the changes materially affect how we process your personal data or reduce your privacy rights, we will notify you directly via your registered email address or via an in-platform notification before the changes take effect.

Your continued use of the lak22 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with any changes made to this Privacy Policy, you should discontinue use of the lak22 platform and may request account closure by contacting our support team.

We encourage all lak22 players to review this Privacy Policy periodically to stay informed about how we protect your personal data. The most current version of this policy will always be available at lak22.com/privacy-policy.

15 Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way lak22 handles your personal data, you may contact our data support team through any of the following channels:

• Live Chat: Available 24/7 directly on the lak22 platform. Our average response time is under 2 minutes. Live chat is the fastest way to raise an urgent data concern.
• Support Email: [email protected] — please use the subject line "Privacy Enquiry" to ensure your message is routed to the data protection team promptly.

When contacting lak22 about a data matter, please include your registered username, the email address on your account, and a clear description of your enquiry or request. This will help our team to locate your records quickly and respond to you within the timelines described in Clause 12.

lak22 is committed to resolving all data protection concerns fairly and transparently. If you are unsatisfied with our response to a data rights request or privacy complaint, you have the right to escalate your concern to the relevant data protection supervisory authority in your jurisdiction.