Privacy Policy — How lackybet Protects Your Data

1. Data Controller Information

For the purposes of this Privacy Policy, the data controller responsible for the personal information collected through the lackybet platform (the "Platform") is lackybet (the "Company", "we", "us", "our"). The Platform is operated for the benefit of players located in Bangladesh and is served in English.

By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the Terms & Conditions and the Responsible Gaming policy, both of which are incorporated by reference.

If you have any questions about how lackybet handles your personal data, or if you wish to exercise any of the rights described in this Policy, please contact the Data Support team at support at lackybet. All data-related queries are handled within 10 business days of receipt.

2. Information We Collect

lackybet collects personal data through several channels: directly from you during the account registration and verification process, automatically through your use of the Platform, and occasionally from trusted third-party verification or fraud-prevention partners. The categories of data we collect are described below.

2.1 Registration & Identity Data

When you register an account on lackybet, we collect the information you provide in the registration form, which may include your full name, date of birth, email address, mobile phone number (including bKash/Nagad-linked number), preferred username, and account password (stored in hashed, non-reversible form). We do not store your plaintext password at any point.

2.2 Identity Verification (KYC) Data

To comply with age-verification and anti-money-laundering obligations, we may request copies of identity documents including your National Identity Card (NID), passport, or birth certificate. We may also request proof of address and, where applicable, proof of the payment method used for deposits. These documents are stored securely and used only for verification purposes.

2.3 Financial & Transaction Data

We record all deposit and withdrawal transactions processed through your lackybet account, including the payment method used (e.g., bKash, Nagad, Rocket, Upay, or bank transfer), the transaction amount in BDT, the date and time of the transaction, and the transaction reference number assigned by the payment provider. We do not store full card numbers, bKash PINs, or Nagad PINs.

2.4 Gaming & Betting Activity Data

The Platform automatically records your gaming and betting activity, including games played, bet amounts, wager outcomes, session duration, and any bonuses applied. This data is used for account management, bonus tracking, responsible gaming monitoring, and fraud prevention.

2.5 Technical & Device Data

We collect technical data about the devices and connections you use to access the Platform, including your IP address, device type and operating system, browser type and version, screen resolution, and approximate geographic location (derived from IP). This data is used for security monitoring, fraud detection, and platform optimisation.

3. Legal Basis for Processing

lackybet processes your personal data on one or more of the following legal bases, depending on the category of data and the purpose for which it is used:

• Contractual Necessity: Processing your identity data, financial data, and gaming activity data is necessary to perform the contract between you and lackybet as set out in the Terms & Conditions — including operating your account, processing deposits and withdrawals, and delivering the gaming services you have requested.
• Legal Obligation: We are required by applicable laws to collect and retain certain data for age-verification, anti-money-laundering (AML), and know-your-customer (KYC) compliance purposes. We cannot waive these obligations on request; they are non-negotiable requirements of lawful platform operation.
• Legitimate Interests: We process technical and device data, and analyse gaming patterns, on the basis of our legitimate interest in maintaining platform security, detecting fraud, preventing problem gambling, and improving the user experience — provided those interests are not overridden by your rights and freedoms.
• Consent: Where we process data for marketing communications (promotional emails, bonus notifications), we do so on the basis of your explicit consent provided during or after registration. You may withdraw this consent at any time by adjusting your account communication preferences or by contacting support.

4. How We Use Your Data

lackybet uses the personal data it collects for the following specific purposes. We do not use your data in ways that are incompatible with the purposes described here without first obtaining your consent or establishing a separate lawful basis for the new use.

• Account Management: Creating, maintaining, and securing your player account; processing login authentication; and enabling account self-service features such as deposit limits and self-exclusion tools.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks; verifying payment-method ownership; and reconciling transaction records.
• Age & Identity Verification: Confirming that players are aged 18 or above in accordance with the lackybet 18+ policy; conducting KYC checks prior to processing withdrawals above threshold amounts.
• Fraud Prevention & Security: Monitoring account activity for indicators of fraud, collusion, bonus abuse, and money laundering; investigating suspicious activity; and enforcing platform security measures.
• Responsible Gaming: Tracking session lengths and betting patterns to identify at-risk players; delivering responsible gaming prompts; and administering self-exclusion and deposit-limit requests.
• Customer Support: Responding to queries, complaints, and technical support requests submitted via live chat or email; maintaining records of support interactions for quality assurance purposes.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game selection, interface design, payment-flow performance, and overall user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in — where consent has been given and has not been subsequently withdrawn.

5. Data Sharing & Third Parties

lackybet does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. We share data only as described below, and only to the minimum extent necessary for the stated purpose.

5.1 Payment Processors

To process your deposits and withdrawals, lackybet shares the necessary transaction data with payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Each of these providers operates under its own privacy policy and is bound by applicable financial data-protection standards.

5.2 Identity Verification Services

Where third-party KYC or age-verification services are used to validate identity documents, the minimum necessary data (typically name, date of birth, and document reference) is transmitted to the verification provider over an encrypted connection. Verification providers are contractually prohibited from using this data for any purpose other than the verification service.

5.3 Game Providers

Game studios and live casino providers (including but not limited to Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) receive technical session data — such as a pseudonymous session token — to launch and authenticate game sessions. These providers do not receive your name, contact details, or financial data.

5.4 Legal & Regulatory Disclosure

lackybet may disclose personal data to law-enforcement agencies, courts, or regulatory bodies if required to do so by applicable law, a valid court order, or where disclosure is necessary to protect the rights, property, or safety of lackybet, its players, or the public. We will notify you of such disclosure where legally permitted to do so.

6. Cookies & Tracking Technologies

lackybet uses cookies and similar tracking technologies (including web beacons and local storage) to operate the Platform, remember your preferences, and analyse usage patterns. Below is a summary of the cookie categories in use.

You may manage non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent certain core Platform features — including login and game launch — from functioning correctly. lackybet does not use third-party advertising cookies or retargeting pixels.

7. Data Retention

lackybet retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

• Account Data (active accounts): Retained for the lifetime of the account and for a period of 5 years following account closure, to satisfy AML record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of last account activity, in accordance with financial record-keeping obligations.
• Transaction Records: Retained for 5 years from the date of each transaction, as required for financial audit and AML compliance.
• Gaming Activity Logs: Retained for 2 years for responsible gaming monitoring purposes, and up to 5 years where the data relates to a disputed transaction or fraud investigation.
• Technical & Device Logs: Retained for up to 12 months, after which they are anonymised or deleted.
• Support Communications: Retained for 3 years from the date of last interaction for quality assurance and dispute-resolution purposes.
• Marketing Consent Records: Retained for the duration of the consent and for 3 years after consent is withdrawn, to evidence that communications were sent on a lawful basis.

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted or anonymised so that it can no longer be associated with any individual. Anonymised data may be retained indefinitely for aggregate statistical analysis.

8. Your Privacy Rights

As a player on lackybet, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the support team at support at lackybet with the subject line "Privacy Rights Request". We will respond within 10 business days and may need to verify your identity before processing the request.

9. Data Security Measures

lackybet implements a layered approach to data security, combining technical controls, operational procedures, and staff training to protect your personal information against unauthorised access, disclosure, alteration, or destruction.

Technical Controls

• TLS/SSL Encryption: All data in transit between your browser and lackybet servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). The Platform is only accessible over HTTPS.
• Data Encryption at Rest: Sensitive stored data — including KYC documents and account credentials — is encrypted at rest using AES-256 encryption.
• Hashed Passwords: Account passwords are stored as one-way hashed values using a strong adaptive hashing algorithm. We cannot retrieve your plaintext password and will never ask for it.
• Access Controls: Access to personal data within lackybet systems is governed by role-based access control (RBAC). Only staff with a legitimate operational need are granted access to player data, and all access is logged.
• Intrusion Detection: The Platform is monitored continuously for anomalous access patterns, brute-force attempts, and other indicators of compromise.

Operational Measures

• Regular security audits and vulnerability assessments are conducted on Platform infrastructure.
• All staff with access to personal data receive data-protection and security training on joining and annually thereafter.
• Third-party service providers who process personal data on behalf of lackybet are subject to contractual data-security obligations and periodic review.

Despite these measures, no internet-based platform can guarantee absolute security. If you suspect that your lackybet account has been accessed without your authorisation, contact the support team immediately via live chat so that the account can be secured without delay.

10. Policy Updates & Contact

Updates to This Policy

lackybet reserves the right to update this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where the changes are significant, notify registered players by email to the address on file. The most current version of this Privacy Policy is always available at /privacy-policy. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must stop using the Platform and may request account closure.

How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by lackybet, please use one of the following contact methods:

• Email: support at lackybet — include "Privacy Query" in the subject line for fastest routing to the data team.
• Live Chat: Available 24/7 within the lackybet Platform. For data-rights requests, live chat agents will route your enquiry to the data team and provide a reference number within the session.
• Support Hours: The dedicated data-support team operates 09:00–24:00 BST (UTC+6), seven days a week including Bangladeshi public holidays.