Privacy Policy – laki22

1. Data Controller

laki22 ("we", "us", "Company") is the data controller responsible for the personal data processed through the laki22 platform at laki22.net ("Platform"). By registering and using the Platform, you acknowledge that laki22 processes your personal data in accordance with this Privacy Policy. For any data-related enquiries, contact us via the details in Section 13.

2. Data We Collect

2.1 Identity and Contact Data

When you register on laki22, we collect your full name, date of birth, gender, nationality, residential address, email address, and Pakistani mobile number. This information is required to create and verify your account and comply with Know Your Customer (KYC) obligations.

2.2 Identity Verification Documents

To fulfil anti-money laundering and responsible gaming obligations, laki22 may collect copies of government-issued identity documents (such as your CNIC, passport, or driving licence), proof of address documents, and proof of payment method. These documents are processed securely and are subject to strict access controls.

2.3 Financial Data

We collect transaction records — including deposits, withdrawals, bet amounts, winnings, and bonus activity — associated with your laki22 account. We do not store full payment card numbers or JazzCash/Easypaisa wallet credentials. Payment processing is handled by PCI-DSS compliant third-party payment gateways.

2.4 Technical and Usage Data

We automatically collect certain technical data when you access laki22, including your IP address, device type, browser type and version, operating system, session duration, pages visited, and referring URLs. This data is used for security monitoring, fraud prevention, platform optimisation, and analytics.

2.5 Communications Data

If you contact laki22 support via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How We Collect Data

laki22 collects personal data through the following means:

• Direct provision: Information you provide when registering, completing KYC, making deposits or withdrawals, placing bets, or contacting support.
• Automated collection: Technical and usage data collected automatically via cookies, server logs, and analytics tools when you use the Platform.
• Third parties: Identity verification agencies, payment processors, and fraud prevention providers who supply data to assist with account verification and security checks.

4. Purpose of Processing

laki22 processes your personal data for the following purposes:

• Creating, managing, and operating your laki22 account.
• Processing deposits, withdrawals, bets, and related financial transactions in PKR.
• Verifying your identity and age (18+) in compliance with our KYC and responsible gaming obligations.
• Detecting, preventing, and investigating fraud, money laundering, and other prohibited activities.
• Providing customer support and resolving disputes.
• Complying with applicable laws, regulatory requirements, and court orders.
• Monitoring and enforcing responsible gaming limits and self-exclusion arrangements.
• Improving Platform functionality, user experience, and security through aggregated analytics.
• Sending transactional communications (account notifications, security alerts, deposit and withdrawal confirmations).
• Sending marketing communications where you have given explicit consent, or where a legitimate interest applies and you have not opted out.

5. Legal Basis for Processing

laki22 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil the laki22 user agreement — account management, betting, payments, and support.
• Legal obligation: Processing required to comply with anti-money laundering regulations, identity verification laws, and responsible gaming requirements.
• Legitimate interests: Fraud prevention, platform security, abuse detection, and product improvement, provided such interests do not override your fundamental rights.
• Consent: Direct marketing communications and certain cookie categories, where your explicit consent has been obtained and can be withdrawn at any time.

6. Data Sharing

laki22 does not sell your personal data. We may share your data with the following categories of recipients, under appropriate contractual and legal safeguards:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, Neteller, and crypto gateway partners, solely for the purpose of processing transactions.
• Identity verification providers: Third-party KYC and AML screening services used to verify identity documents and screen for sanctions or fraud risk.
• Game providers: Game studios whose products are hosted on laki22 may receive anonymised session data for game integrity and RNG auditing purposes.
• Technology providers: Cloud hosting, analytics, and security service providers who process data on laki22's behalf under data processing agreements.
• Regulatory and law enforcement authorities: Where disclosure is required by applicable law, court order, or regulatory direction.

All third parties with whom laki22 shares data are contractually obligated to handle it securely and only for the specified purposes. Cross-border data transfers are subject to appropriate legal mechanisms.

7. Data Retention

laki22 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, or reporting requirements. Specifically:

• Account data is retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations.
• Transaction records are retained for a minimum of five (5) years.
• KYC documents are retained as required by applicable law and licensing conditions.
• Marketing consent records are retained until withdrawal of consent, plus a reasonable period for compliance evidence.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8. Data Security

laki22 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• HTTPS/TLS encryption for all data in transit between your browser and laki22 servers.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Access controls limiting personal data access to authorised staff with a legitimate operational need.
• Regular security assessments, penetration testing, and vulnerability management.
• Incident response procedures for detecting, reporting, and remedying personal data breaches.

While laki22 takes all reasonable steps to protect your data, no internet transmission is completely secure. You are responsible for maintaining the security of your laki22 login credentials.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by laki22:

• Right of access: Request a copy of the personal data laki22 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to legal retention obligations.
• Right to restrict processing: Request that laki22 limit processing of your data in certain circumstances.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact laki22 support via the details in Section 13. We will respond within a reasonable period in accordance with applicable law. Identity verification may be required before your request is actioned.

10. Cookies

laki22 uses cookies and similar tracking technologies to operate and improve the Platform. Categories of cookies used include:

• Strictly necessary cookies: Required for the Platform to function (session management, authentication, security). These cannot be disabled.
• Performance cookies: Anonymised analytics data used to understand how users navigate laki22 and improve the user experience.
• Functional cookies: Remember your preferences such as language, region, and display settings.
• Marketing cookies: Used only where you have provided consent, to serve relevant promotional content.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair Platform functionality including your ability to log in to laki22.

11. Minors

laki22 does not knowingly collect personal data from individuals under 18 years of age. Access to the Platform is strictly restricted to adults. If laki22 discovers that personal data has been collected from a minor, the account will be closed and the data deleted promptly. Parents or guardians who believe a minor has accessed laki22 should contact support immediately.

12. Changes to This Policy

laki22 reserves the right to update this Privacy Policy at any time. Material changes will be communicated via a notice on the Platform or, where appropriate, by email to registered account holders. The "Last updated" date at the top of this page reflects the date of the most recent revision. Continued use of laki22 after any update constitutes acceptance of the revised Privacy Policy.

13. Contact

For any questions, requests, or concerns relating to this Privacy Policy or laki22's handling of your personal data, please contact our support team:

• Live Chat: Available 24/7 at laki22.net — average response under 3 minutes.
• Email: [email protected]

We are committed to addressing all data-related queries promptly and transparently.