lukybd Privacy
Policy

This Privacy Policy ("Policy") is published by lukybd ("we", "us", "our"), the operator of the online gaming and sports betting platform at lukybd.com. This Policy applies to all individuals who visit, register on, or otherwise interact with the lukybd platform, including players located across Bangladesh in cities such as Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

By creating a lukybd account or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the lukybd platform immediately and contact our support team to request account closure.

We take your privacy seriously. lukybd does not sell, rent, or trade your personal data to third parties for their own marketing purposes. All data processing activities described in this Policy are carried out for legitimate purposes directly related to the operation of the lukybd platform and your experience as a player.

lukybd collects personal information in several ways: directly from you when you register or interact with the platform, automatically as you use the platform, and occasionally from third-party sources such as payment processors and identity verification providers. The categories of information we may collect include:

Registration & Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify you meet the 18+ age requirement).
• Mobile phone number and/or email address used for account creation and OTP verification.
• Residential address (city, district, division) within Bangladesh.
• National ID card number, passport number, or other government-issued identification when required for KYC (Know Your Customer) verification.

Financial & Transaction Data

• bKash, Nagad, Rocket, or Upay mobile wallet numbers associated with your deposits and withdrawals.
• Bank account details (account number, bank name) when bank transfer is used.
• Transaction history including deposit amounts in ৳ (Bangladeshi Taka), withdrawal requests, and bonus credits.
• Visa or Mastercard partial card details (last four digits only) where applicable — full card numbers are never stored on lukybd servers.

Usage & Behavioural Data

• Games played, bet amounts, session duration, and wagering history on lukybd.
• Login timestamps, IP address, device type, browser type, and operating system.
• Pages visited and features used within the lukybd platform, including cricket betting markets, slots, and casino sections.
• Responsible gaming settings you have configured, including deposit limits or self-exclusion requests.

Communications Data

• Records of Live Chat, WhatsApp, and email correspondence with the lukybd support team.
• Feedback, complaints, and dispute resolution records.
• Marketing preference settings, including whether you have opted in or out of promotional communications.

lukybd processes your personal information only for legitimate, clearly defined purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The primary purposes for which lukybd uses your data are set out in the table below:

Where lukybd relies on your consent as the legal basis for processing — most notably for marketing communications — you may withdraw that consent at any time by contacting our support team or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

lukybd does not sell, rent, or trade your personal data. We may, however, share your information with carefully selected third parties in the following circumstances:

1. Payment Service Providers: We share transaction data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank solely to facilitate deposits and withdrawals on your lukybd account. These providers process your data under their own privacy policies and applicable financial regulations.
2. Game Content Providers: Game studios and technology providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised or pseudonymised session data necessary to deliver their games on the lukybd platform. These providers do not receive your full identity or financial data.
3. Identity Verification Services: To fulfil our age verification (18+) and KYC obligations, lukybd may share your identity documents with specialist third-party verification providers. These providers are contractually bound to process your data solely for verification purposes.
4. Analytics and Platform Providers: lukybd uses trusted technology partners to analyse platform performance and detect technical issues. These partners receive aggregated or pseudonymised data only and are not permitted to use it for their own commercial purposes.
5. Law Enforcement and Regulatory Bodies: lukybd may disclose your personal data to law enforcement agencies, government authorities, or courts if we are legally required to do so, or if we believe in good faith that disclosure is necessary to investigate fraud, prevent illegal activity, or comply with a valid legal order.
6. Business Transfers: In the event of a merger, acquisition, or sale of all or part of lukybd's business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and given the opportunity to exercise your rights under this Policy.

In all cases where lukybd shares data with third parties, we apply appropriate contractual safeguards to ensure that your data is processed securely and only for the stated purpose. lukybd does not transfer your personal data outside of Bangladesh to countries that do not provide an adequate level of data protection without applying appropriate safeguards.

The lukybd platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and help us understand how players interact with our platform. A cookie is a small text file placed on your device by a website. Cookies do not contain malware and cannot access other information stored on your device beyond what was placed there by the lukybd platform itself.

The types of cookies used on the lukybd platform are described below:

Strictly necessary cookies cannot be disabled as they are essential to the operation of the lukybd platform. For all other cookie categories, you may adjust your preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform, including your ability to maintain a login session across pages. Most modern browsers allow you to view, manage, and delete cookies through the browser's settings menu.

lukybd employs a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the lukybd platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. You can verify this by the padlock icon in your browser's address bar when visiting lukybd.com.
• Password Hashing: Your lukybd account password is never stored in plain text. Passwords are processed through a one-way cryptographic hashing function with salt, making them unreadable even to lukybd staff.
• Two-Factor Authentication (OTP): lukybd supports one-time passcode (OTP) verification sent to your registered mobile number to provide an additional layer of protection at login.
• Access Controls: Access to player personal data within lukybd is restricted to authorised personnel on a strict need-to-know basis. All staff with data access undergo security training and are bound by confidentiality obligations.
• Fraud Detection Systems: lukybd operates continuous automated monitoring to detect suspicious account activity, unusual transaction patterns, and potential unauthorised access attempts in real time.
• Secure Data Storage: Personal data is stored on secured servers with restricted physical and network access, protected by firewalls and regular security audits.

Despite these measures, no online platform can guarantee absolute security. You are responsible for keeping your lukybd login credentials confidential and for logging out after each session, particularly when using a shared or public device. If you suspect any unauthorised access to your lukybd account, contact our support team immediately via Live Chat or WhatsApp so we can take swift protective action.

lukybd retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The general retention periods applied by lukybd are as follows:

• Active Account Data: Retained for the entire duration of your active relationship with lukybd, including all transaction records, identity documents, and betting history.
• Closed Account Data: Following account closure, lukybd retains your identity and financial transaction records for a minimum of five (5) years to comply with anti-money laundering (AML) obligations and to handle any retrospective disputes.
• Customer Support Records: Communications with the lukybd support team are retained for a minimum of two (2) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing Preferences: Records of your marketing consent or opt-out are retained for the full duration of your account, and for three (3) years following account closure, to demonstrate compliance.
• Responsible Gaming Records: Self-exclusion requests, deposit limit settings, and problem gambling support interactions are retained for a minimum of five (5) years to enforce exclusion periods and protect vulnerable players.

Once the applicable retention period has expired, lukybd securely deletes or anonymises your personal data so that it can no longer be associated with you. Anonymised aggregated data (for example, overall platform usage statistics) may be retained indefinitely as it no longer constitutes personal data.

As a player on the lukybd platform, you have a number of rights with respect to your personal data. lukybd is committed to honouring these rights promptly and transparently. Your rights include:

1. Right of Access: You have the right to request a copy of the personal data lukybd holds about you. We will provide this information in a clear, structured format within a reasonable timeframe upon receipt of a verified request.
2. Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many of your details directly through your lukybd account settings, or by contacting our support team.
3. Right to Erasure ("Right to be Forgotten"): You may request that lukybd delete your personal data. This right is not absolute — we may be required by law to retain certain data (such as AML-related records) for a minimum period, even after account closure. We will inform you of any such limitations when handling your request.
4. Right to Restriction of Processing: In certain circumstances, you may ask lukybd to restrict how we process your data — for example, while a dispute is being investigated or while you verify the accuracy of the data we hold.
5. Right to Data Portability: Where processing is based on your consent or a contract, you may request that we provide your data in a structured, machine-readable format so it can be transferred to another service provider.
6. Right to Object: You have the right to object to lukybd processing your data on the basis of legitimate interests, including the use of your data for direct marketing or profiling purposes. We will stop processing for marketing purposes immediately upon receipt of a valid objection.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the lukybd privacy team via Live Chat or by writing to [email protected] (plain text — not a clickable link). We will acknowledge your request within 72 hours and aim to fulfil it within 30 days. In cases of complexity or high volume, we may extend this period by a further 30 days and will notify you accordingly.

To protect your privacy, lukybd will verify your identity before processing any rights request. We may ask you to confirm your registered mobile number, email address, or provide a copy of your identification document.

lukybd reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, or our business practices. When we make a material change to this Policy, we will notify registered players via email or an in-platform notification at least seven (7) days before the revised Policy takes effect.

The "Last Revised" date at the top of this page will always reflect the most recent version of the Policy. Minor changes such as formatting corrections, clarifications, or updates to contact details may be made without prior notice and will be effective immediately upon publication.

We encourage you to review this Privacy Policy periodically to stay informed about how lukybd protects your data. Continued use of the lukybd platform following notification of a material change constitutes your acceptance of the revised Policy. If you do not agree with the changes, you may close your account before the revised Policy takes effect by contacting our support team.