Lucky Bets Privacy Policy — How We Keep Your Data Safe

Lucky Bets (luckybets.im) is deeply committed to your privacy. This Privacy Policy explains what personal information Lucky Bets collects, why it is collected, how it is used, and how it is kept secure.

This Privacy Policy applies whenever you register, log in, or use the Lucky Bets platform. We encourage you to read it — it explains exactly what happens with your information.

This policy has been developed in accordance with GDPR and international data protection standards.

Lucky Bets collects two types of information — what you provide directly and what is automatically gathered while you use the platform.

Lucky Bets only collects information that is genuinely necessary to provide our services. We never ask for data we don't need.

Lucky Bets collects information in the following ways:

• Directly Provided: Information you provide directly through the registration form, KYC verification form, payment details, support chat, and email.
• Automatically Collected: Device and activity information collected via cookies, log files, and tracking technologies while you use the platform.
• From third parties: Transaction confirmation data from payment gateways (bKash, Nagad).
• Identity verification agency: Sharing data with authorized agencies to verify identity documents as part of the KYC process.

Lucky Bets uses your information for the following clearly defined purposes. Each purpose is backed by a legal basis:

• Account Management: Keeping your account active, processing transactions, and delivering our services. (Contractual obligation)
• Security & Fraud Prevention: Detecting suspicious activity and preventing account hacking and money laundering. (Legal obligation)
• Legal Compliance: Compliance with KYC and AML (Anti-Money Laundering) regulations. (Regulatory obligation)
• Service Improvement: Analyzing user behavior to improve the platform experience. (Legitimate interest)
• Contact: Sending important updates, security notices, and support-related messages. (Contractual obligation & legitimate interest)
• Marketing (Optional): Sending you offers, bonuses, and promotions with your consent. (Consent)

Lucky Bets does not retain any data longer than necessary. Separate retention periods are defined for different types of information:

• Account information: Up to 5 years after account closure (legal obligation).
• Financial Transaction Records: 7 years (international financial regulatory requirements).
• KYC Documents: 5 years after account closure.
• Support Chat Logs: 3 years (for service quality assurance).
• Cookies & Session Data: Deleted automatically at the end of a session (persistent cookies: 12 months).
• Marketing Preferences: Deactivated immediately upon withdrawal of consent.

Once the retention period expires, your data is securely deleted or anonymized so that you can no longer be identified.

Lucky Bets Never sells your personal information. In certain specific circumstances, limited information may be shared with trusted third parties:

• Payment Processors: bKash, Nagad, Rocket — only the information necessary to complete transactions.
• Identity verification services: Authorized KYC verification partners — identity document data only.
• Legal Authority: In response to a court order or a lawful request from a regulatory authority — only the minimum necessary information.
• Technology Service Providers: Cloud hosting and cybersecurity providers — under strict confidentiality agreements.

Lucky Bets protects your data using industry-leading technology. These safeguards aren't just on paper — they operate actively every single day.

• 256-bit TLS/SSL Encryption: All data transfers are fully encrypted — bank-level security throughout.
• End-to-End Payment Protection: Payment details are not stored on Lucky Bets servers — they go directly to the payment gateway.
• Two-Factor Authentication: SMS OTP is required for all logins and large transactions.
• Regular Security Audits: An independent third-party cybersecurity team conducts system audits every 6 months.
• Data Masking: Financial information on the dashboard is partially masked.
• Access controls: Lucky Bets operates on a minimum necessary access policy for employee data access.

In the event of a data security breach (which has not occurred to date), we are required to notify affected users within 72 hours.

Lucky Bets uses cookies on its website. Cookies are small text files stored on your device that help the platform function more effectively.

You can manage cookies at any time through your browser settings. Please note that disabling essential cookies may limit certain features of the platform.

As a Lucky Bets member, you have several important rights regarding your personal data. Exercising these rights is completely free of charge.

Lucky Bets does not knowingly collect personal information from anyone under the age of 18. If we become aware that a minor's data has been collected inadvertently, it is deleted immediately and the account is closed.

A note for parents — please enable passwords and parental controls on your devices to prevent children in your household from accessing Lucky Bets.

Lucky Bets may update this Privacy Policy from time to time. For significant changes, you will be notified at least 30 days in advance via email or a platform notification.

The "Effective Date" at the top of this page is always kept up to date. Continued use of the platform after any changes constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or complaints, please contact our Data Protection team:

• Email: support@luckybets.im
• Live chat: Click the chat icon at the bottom right of the platform
• Response Time: 24 hours for general inquiries; 30 days for rights-related requests

If you are not satisfied with our response, you have the right to lodge a complaint with an international data protection authority.