Privacy Policy — lakiwin

📥 1. Information We Collect

lakiwin collects personal data in three broad categories: information you provide directly when registering or using the Platform, information generated automatically through your use of the Platform, and information received from third-party partners where necessary for KYC verification and payment processing.

1.1 Information You Provide Directly

When you register an account with lakiwin, you are required to provide the following:

• Identity information: Full legal name as it appears on your government-issued ID, date of birth, and nationality.
• Contact information: Email address and Bangladesh mobile phone number.
• Address information: Residential address in Bangladesh (required for KYC verification at the withdrawal stage).
• Payment information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay) or bank account details used for deposits and withdrawals. We do not store full card numbers or PIN codes.
• Identity documents: Scanned or photographed copies of your Bangladesh National Identity Card (NID) or other government-issued identification submitted for age and identity verification.
• Responsible gaming preferences: Any deposit limits, loss limits, session reminders, or self-exclusion preferences you set through the Account Settings panel.

1.2 Information Collected Automatically

When you access and use the lakiwin Platform, we automatically collect certain technical data including:

• Device information: Device type, operating system, browser type and version, and screen resolution.
• Network information: IP address, internet service provider, and approximate geographic location derived from IP data.
• Session data: Pages visited, time spent on each page, links clicked, games launched, and navigation paths through the Platform.
• Transaction logs: Records of all deposits, withdrawals, bets placed, game outcomes, and bonus activations associated with your account.
• Cookie and tracking data: Information collected via cookies, web beacons, and similar technologies as described in Section 4 of this Policy.

1.3 Information from Third Parties

In order to comply with our Know Your Customer (KYC) obligations and to facilitate secure payment processing, lakiwin may receive supplementary identity or verification data from third-party identity verification service providers. This data is used solely for the purpose of confirming your identity and eligibility to use the Platform, and is handled with the same level of care as data you provide directly.

⚙️ 2. How We Use Your Data

lakiwin uses the personal data we collect for clearly defined purposes. We do not use your data in any manner that would be incompatible with the purposes set out below without first obtaining your explicit consent or having a legitimate legal basis to do so.

2.1 Marketing Communications

If you have opted in to receive promotional emails or SMS messages from lakiwin, we will use your email address and/or phone number to send you information about new games, tournaments, seasonal promotions (including Eid, Pohela Boishakh, and Victory Day offers), and deposit bonus opportunities. You may withdraw your consent to receive marketing communications at any time by clicking the unsubscribe link in any email, or by contacting our support team.

2.2 Automated Decision-Making

lakiwin may use automated processes to flag accounts for fraud review, to apply responsible gaming interventions when certain behavioural thresholds are met, or to determine bonus eligibility. Where a significant decision affecting your account is made solely on an automated basis, you have the right to request human review of that decision by contacting our support team at support@lakiwin.

🤝 3. Data Sharing & Third Parties

lakiwin does not sell, rent, or trade your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

3.1 Payment Service Providers

To process your BDT deposits and withdrawals, we share relevant payment information with our approved payment partners including bKash, Nagad, Rocket, Upay, and cooperating Bangladesh banks such as Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These providers receive only the data necessary to execute and verify your transaction and are bound by their own data protection obligations.

3.2 Identity Verification Partners

Where automated or assisted KYC checks are required, we may share your submitted identity documents and personal details with our approved identity verification service provider. This provider processes your data solely for the purpose of confirming your identity and is prohibited from using it for any other purpose.

3.3 Game Technology Providers

Game studios and technology providers whose games are hosted on the lakiwin Platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive your player identifier and game session data in order to deliver the game, record outcomes, and handle jackpot or tournament logic. These providers do not receive your full personal details such as your NID or address.

3.4 Legal and Regulatory Disclosure

lakiwin may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally required to do so, or where such disclosure is necessary to protect the safety and security of the Platform, our players, or third parties. We will endeavour to notify you of any such disclosure where we are legally permitted to do so.

3.5 Business Transfers

In the event that lakiwin undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify affected players prior to any such transfer taking effect and will ensure that the receiving entity agrees to honour this Privacy Policy.

🍪 4. Cookies & Tracking Technologies

lakiwin uses cookies and similar technologies (such as web beacons and local storage) to ensure the Platform functions correctly, to remember your preferences, and to gather anonymised analytics data that helps us improve the player experience.

4.1 Types of Cookies We Use

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types, or delete cookies already stored on your device. Please note that disabling essential cookies will impair your ability to log in and use the Platform. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

4.3 Do Not Track

Some browsers transmit a "Do Not Track" signal to websites. lakiwin currently does not alter its data collection practices in response to "Do Not Track" signals, as there is no universally accepted standard for how such signals should be interpreted. We are monitoring developments in this area and will update this section of the Policy if our approach changes.

🔐 5. Data Security & Storage

5.1 Security Measures

lakiwin employs a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive fields including passwords (hashed with bcrypt), NID data, and payment credentials at rest.
• Access controls: Personal data is accessible only to lakiwin staff who have a legitimate operational need to view it. All staff access is logged and audited.
• Two-factor authentication for internal administrative systems, reducing the risk of unauthorised staff access.
• Regular security audits and penetration testing conducted by independent third-party security professionals.
• Intrusion detection systems that monitor our servers around the clock for suspicious activity.

5.2 Data Breach Response

In the event that lakiwin becomes aware of a data breach that is likely to result in a risk to the rights and freedoms of our players, we will notify affected individuals promptly and without undue delay. Notification will be sent to the email address registered on the affected account and will include the nature of the breach, the categories of data affected, the likely consequences, and the steps we have taken or propose to take to address the incident.

5.3 Storage Location

Player data collected by lakiwin is stored on secure servers. Regardless of where our servers are located, the same data protection standards described in this Policy apply to all stored data. We take reasonable steps to ensure that any third-party hosting providers we use maintain security standards consistent with our own.

✅ 6. Your Rights & Choices

As a player on lakiwin, you have a number of rights in relation to the personal data we hold about you. We are committed to upholding these rights and will respond to all verified requests in a timely and transparent manner.

6.1 Right of Access

You have the right to request a copy of the personal data lakiwin holds about you. Upon receipt of a verified written request, we will provide you with a summary of your personal data, the purposes for which it is being processed, the categories of data involved, and any third parties with whom it has been shared. We will respond to access requests within 30 days.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details (such as your email address or phone number) directly through the Account Settings panel. For changes to identity documents or other sensitive data, please contact our support team.

6.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent and no other legal basis for processing exists. Please note that certain data must be retained for a minimum period to comply with our anti-money laundering and responsible gaming obligations — see Section 7 for details.

6.4 Right to Restrict Processing

In certain circumstances, you have the right to request that we restrict the processing of your personal data — for example, while a dispute about data accuracy is being resolved, or while you are waiting for a response to an erasure request.

6.5 Right to Data Portability

Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format. You may also request that this data be transmitted directly to another service provider where technically feasible.

6.6 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though in such cases we may be able to continue processing if we can demonstrate compelling legitimate grounds that override your interests.

6.7 Exercising Your Rights

To exercise any of the rights described above, please contact our data privacy team by email at support@lakiwin with the subject line "Privacy Rights Request". We will verify your identity before processing any request. There is no charge for exercising your rights, though we reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

🗓️ 7. Data Retention Policy

lakiwin retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The table below summarises our standard retention periods by data category.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures. Anonymised data that can no longer be attributed to any individual may be retained indefinitely for aggregated analytical purposes.

📝 8. Updates to This Policy

lakiwin reserves the right to update this Privacy Policy at any time. Changes may be made to reflect new legal requirements, changes in our data processing practices, or improvements to how we communicate with our players. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where changes are significant, we will notify registered players by email to the address on file, and/or by displaying a prominent notice on the Platform for a reasonable period following the update. We encourage you to review this Policy periodically to stay informed about how lakiwin protects your privacy.

Your continued use of the lakiwin Platform after an updated Privacy Policy has been published constitutes your acceptance of the revised terms, to the extent permitted by applicable law. If you do not agree with any changes to this Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.

8.1 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way lakiwin handles your personal data, please contact our support team at support@lakiwin. We will acknowledge your enquiry within 48 hours and aim to resolve all privacy-related concerns within 30 days. If you are not satisfied with our response, you have the right to seek independent legal advice or to escalate your concern to an appropriate authority.