luckywin Privacy Policy — Your Information Is Safe With Us

01 Introduction & Applicability

Welcome to luckywin. This Privacy Policy ("Policy") applies to the luckywin platform and all its associated services. It describes how luckywin collects, uses, stores, and protects your personal information.

We believe privacy is a fundamental right. That is why luckywin's Privacy Policy has been built from the ground up to keep your data as secure as possible and to ensure you have full visibility into how it is used.

This policy applies to all luckywin users, whether accessing from Bangladesh or any other country. It takes effect as soon as you create an account, play games, make payments, or simply browse the platform.

02 What Information Is Collected

Luckywin collects only the information genuinely necessary to provide its services and meet legal obligations. The different types of data are described below:

03 How Information Is Collected

Luckywin collects your information in the following ways:

• Directly Provided Information: Information you provide directly during registration, when updating your account, or when contacting support.
• Automatically Collected Information: Technical data collected automatically while you use the platform, such as IP address, device type, and browsing patterns.
• Payment Processing: Payment details required when transacting via bKash, Nagad, or Rocket.
• Verification Process: Identity document information uploaded during KYC verification.
• Cookies & Tracking Technologies: Cookies used for session management and remembering user preferences.

We never collect information about you from third-party sources without your consent. Data is not automatically pulled from social media or any other external platforms.

04 Purpose of Data Use

Luckywin uses your personal information only for the specific purposes outlined in this Privacy Policy. Your data is never used for undefined or unauthorized purposes:

• Account Management: For account creation, verification, and maintenance.
• Service Delivery: To provide uninterrupted gaming, betting, payment, and withdrawal services.
• Security & Fraud Prevention: For account security and detection of suspicious activity.
• Legal Obligations: For compliance with Anti-Money Laundering (AML) and KYC regulations.
• Service Improvement: To improve platform performance and enhance the user experience.
• Responsible Gaming: To identify problematic gaming patterns and provide appropriate support.
• Contact: To send important account updates and promotional offers (where consent has been given).

05 Data Sharing & Disclosure

Luckywin takes strict measures to ensure your data is not shared with third parties unnecessarily. However, limited sharing may occur in the following circumstances:

• Payment Processors: Information required solely to process transactions through approved payment gateways such as bKash, Nagad, and Rocket.
• Legal Authorities: In response to a court order, government directive, or lawful request from a law enforcement agency.
• Security Services: Limited technical data shared with authorized partners for fraud prevention and cybersecurity purposes.
• KYC Verification Provider: With regulated third-party verification services for identity verification.

In all of the above cases, strict confidentiality agreements are in place with the relevant parties before any data is shared. They are equally prohibited from disclosing your information to third parties.

06 Cookies & Tracking

Luckywin uses cookies to keep the platform running smoothly. Only essential cookies are enabled by default. The different types of cookies are described below:

• Essential Cookies: For maintaining login sessions, security tokens, and remembering user preferences. The platform cannot function properly without these.
• Functional Cookies: For language preferences, theme settings, and other personalized features. You can disable these, though some functionality may be reduced.
• Analytical Cookies: To monitor and improve platform performance. This data is kept fully anonymous.

You can delete cookies or block new ones at any time through your browser settings. Please note that disabling essential cookies may prevent you from logging into your account.

07 Data Protection Measures

Luckywin applies multiple layers of security to protect your data. In line with our Privacy Policy, the following measures are in place for every piece of information:

• 256-bit SSL/TLS Encryption: All data transfers take place over encrypted channels.
• Firewall & Intrusion Detection: Advanced firewalls are active to prevent unauthorized access.
• Two-Factor Authentication (2FA): An additional security layer for account access.
• Regular Security Audits: Regular security reviews conducted by third-party experts.
• Staff Training: All luckywin staff are trained to comply with our Privacy Policy.
• Data Minimization: Only the minimum information necessary to provide the service is collected.
• Encrypted Storage: Sensitive data stored in our databases is kept in encrypted form.

In the event of a data breach, luckywin will notify affected users within the required timeframe and take immediate steps to minimize any harm.

08 Data Retention Period

Luckywin does not retain your data longer than necessary. Retention periods vary by data type as follows:

• Account Information: For the duration the account is active and up to 5 years after closure (as required by law).
• Financial Transaction Records: Up to 7 years (as required by financial regulations).
• KYC Documents: Up to 5 years after account closure.
• Gaming History: For active accounts, indefinitely; for closed accounts, 2 years.
• Support Contact: Up to 2 years after resolution.
• Technical Logs: Up to 90 days.

09 Your Rights

Under luckywin's Privacy Policy, you hold the following rights over your own data:

• Right to Access: You have the right to know what information luckywin holds about you and to receive a copy of it.
• Right to Rectification: You may request corrections to any inaccurate or incomplete information.
• Right to Erasure: You may request that your information be deleted under certain circumstances (the "right to be forgotten").
• Right to Restrict Processing: You may request that the use of your information be restricted to specific purposes.
• Right to Portability: You may request a copy of your data in a structured, portable format.
• Right to Object: You may object to the processing of your information for specific purposes.
• Right to Withdraw Consent: Consent given for marketing communications may be withdrawn at any time.

To exercise any of these rights, please contact our support team. Requests are typically responded to within 30 business days of receipt.

10 Privacy of Minors

Luckywin strictly prohibits service to anyone under 18. We take extra precautions to protect the privacy of minors:

• Age verification is mandatory at the time of registration.
• We do not knowingly collect information from anyone under the age of 18.
• If we become aware that data has been collected from a minor, it will be deleted immediately and the associated account will be closed.
• If parents have any suspicion, they are urged to contact our support team immediately.

11 Policy Changes

Luckywin reserves the right to update this Privacy Policy when necessary. In the event of any changes, we will take the following steps:

• You will receive a notification to your registered email at least 30 days before any significant changes take effect.
• The "Last Updated" date at the top of this page will always reflect the most current version.
• Any changes will be communicated via a prominent banner on the platform.
• Consent may be sought again for significant changes.

Continued use of the platform after any changes will be taken as acceptance of the updated policy. We recommend checking this page regularly.

12 Contact

If you have any questions, concerns, or requests regarding our Privacy Policy, please do not hesitate to get in touch. luckywin's support team is available 24/7, 7 days a week.

To exercise your privacy rights, send an email with your registered account email address and a description of your request. Identity verification may be required for security purposes.