Privacy Policy — How Lucky Winner Protects Your Data

Lucky Winner collects two types of data — what you provide directly, and what is gathered automatically from your usage.

Information you provide directly:

• At registration: name, email, phone number, date of birth, and address
• During KYC verification: a photo of your national ID or passport, and a selfie
• At the time of payment: your mobile banking number (full account details are not stored)
• When contacting support: the content of your chat messages and emails

Automatically collected information:

• Device information: model, operating system, and browser version
• Connection data: IP address, Internet Service Provider
• Usage data: which games you played, how long you played, and how much you wagered
• Cookies & Tracking: session cookies, preference cookies

Lucky Winner uses your data only for defined purposes — using it for anything beyond that goes against our policy.

Lucky Winner never sells your data to advertisers or shares it with partners for marketing purposes.

Lucky Winner shares data with third parties only in limited circumstances. There is a clear reason in each case:

• Payment Providers (bKash, Nagad, Rocket): Only the information needed to complete a transaction — name and amount. All providers follow their own privacy policies.
• KYC verification providers: Your NID details are transmitted securely for identity verification. The verification provider does not retain the data once the process is complete.
• Game providers (Pragmatic Play, Evolution, etc.): An anonymous player ID used solely to store game results — no personal information is involved.
• Law enforcement agencies: We may be legally required to disclose data if we receive a valid court order or government directive.
• Cybersecurity Partner: To help prevent fraud and hacking — only technical log data is shared, never personal information.

Lucky Winner does not retain your data longer than necessary. Retention periods depend on the purpose for which the data was collected:

• Account information: Retained for 5 years after account closure — due to legal obligations.
• Transaction History: 7 years — in accordance with anti-money laundering laws.
• KYC documents: Five years after the end of the relationship.
• Support chat history: 2 years — for quality assurance and dispute resolution purposes.
• Cookie data: Session cookies are deleted when the browser is closed; preference cookies last up to 1 year.
• Marketing Preferences: Removed immediately once you unsubscribe.

Once the retention period has passed, Lucky Winner permanently deletes your data or anonymizes it so that you can no longer be identified.

The Lucky Winner website and app use cookies and similar technologies. Cookies are small files stored in your browser.

The types of cookies we use:

• Essential Cookies: To maintain your login session and ensure site security. These cannot be disabled, as the site will not function without them.
• Preference cookies: To remember your language preference and your favourite game categories.
• Analytics cookies: Data on which pages are visited most and which features are popular is used to improve our services. All data is anonymised.
• Performance Cookies: Assists with server load balancing and loading speed optimisation.

You can manage cookies through your browser settings. However, disabling essential cookies will prevent many features on Lucky Winner from working properly.

Lucky Winner follows the highest industry security standards to protect your data. Some key measures include:

• SSL/TLS Encryption: All data transmitted between your device and our servers is protected with 256-bit encryption — no one can intercept it in transit.
• Database Encryption: Stored sensitive data (password hashes, KYC data) is encrypted separately.
• Two-Factor Authentication (2FA): Logging in from a new device triggers SMS or email verification.
• Regular Security Audits: Third-party cybersecurity experts audit our systems every six months.
• Staff Training: Annual privacy training is mandatory for every Lucky Winner employee who handles personal data.
• Minimum access policy: Each staff member has access only to the data required for their specific role.

In the event of a data breach, Lucky Winner will notify affected users within 72 hours and take immediate steps to resolve the issue.

Because Lucky Winner works with global gaming partners, some data may be processed outside Bangladesh — for example, Evolution Gaming's live casino servers are based in Europe.

For any such international transfer, Lucky Winner ensures that:

• Equivalent or stronger data protection laws apply in the destination country
• Data processing agreements with partners include confidentiality clauses
• All transferred data is always encrypted

Lucky Winner does not knowingly collect or store personal data from anyone under 18. Age is verified at registration, and KYC verification is mandatory in any cases where there is doubt.

If a minor's data has been collected by mistake, a parent or guardian can notify Lucky Winner and the data will be deleted and the account closed immediately.

Lucky Winner sends promotional emails and SMS with your consent, obtained at registration. You may withdraw this consent at any time:

• By clicking the "Unsubscribe" link at the bottom of the email
• From the "Notifications" section in your account settings
• By submitting a request via email or live chat to our support team

Opting out of marketing will not stop essential account-related emails (such as payment confirmations and security alerts), as these are part of our service.

As Lucky Winner's business and technology evolve, this Privacy Policy will be updated from time to time. For significant changes:

• You will be notified by email or in-app notification at least 14 days before any changes take effect
• The "Last Updated" date at the top of the page will be changed
• Continued use of the service after changes indicates acceptance of the updated policy

To request a copy of a previous version, email support@luckywinner.best — we'll send it to you within 24 hours.