Privacy Policy for luckbed

1. Information We Collect

luckbed collects personal information in several ways — directly from you when you register and use the platform, automatically through your device and browser as you interact with our services, and occasionally from trusted third parties who assist us in verifying your identity or processing your payments.

1.1 Information You Provide Directly

When you create and manage your luckbed account, we collect the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and a copy of your government-issued identification document (National Identity Card, passport, or driving licence) when required for KYC verification.
• Contact data: Email address, mobile phone number, and residential address including city, district, and postcode within Bangladesh.
• Financial data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay numbers), bank account details (DBBL, City Bank, BRAC Bank), transaction history, deposit and withdrawal records, and account balances. We do not store full card numbers or mobile banking PINs.
• Account credentials: Username and encrypted password hash. We never store your password in plain text.
• Communications data: Records of your interactions with our customer support team, including live chat transcripts, email correspondence, and any documentation you submit in connection with a complaint or query.

1.2 Information Collected Automatically

When you access luckbed via a browser or mobile device, we automatically collect certain technical and behavioural data, including:

1.3 Information from Third Parties

We may receive supplementary information about you from third-party sources in limited, controlled circumstances. These include identity verification agencies that confirm the authenticity of your KYC documents, payment processors that confirm transaction status, and fraud prevention services that flag unusual activity patterns. In each case, the third party is contractually bound to share only the minimum data necessary for the specific purpose.

2. How We Use Your Data

luckbed uses your personal data for the following purposes, each of which is tied to a lawful basis described in Section 3:

• Account management: Creating, maintaining, and administering your player account, including processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer.
• Identity verification (KYC): Confirming your age (18+), identity, and address to comply with responsible gaming obligations and prevent fraudulent account creation.
• Platform delivery: Providing access to casino games from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as well as sports betting markets including cricket (BPL, IPL, T20 World Cup), football, kabaddi, and other events.
• Customer support: Responding to your queries, resolving account disputes, and handling complaints submitted via live chat or email to support@luckbed.
• Responsible gaming: Monitoring your gaming activity to identify patterns that may indicate problem gambling and, where appropriate, applying account restrictions, cooling-off periods, or self-exclusion in accordance with our Responsible Gaming policy.
• Fraud and security: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, money laundering, unauthorised account access, and other illegal or harmful activity on the platform.
• Marketing communications: Sending you promotional offers, bonus notifications, and updates about new games or features — but only where you have given explicit consent and have not subsequently opted out.
• Legal compliance: Fulfilling obligations imposed by applicable law, including record-keeping requirements, responding to lawful requests from regulatory authorities, and cooperating with law enforcement investigations.
• Platform improvement: Analysing aggregated usage data to improve the design, functionality, and performance of luckbed for all players.

3. Legal Basis for Processing

Every processing activity conducted by luckbed relies on at least one of the following lawful bases. We do not process personal data arbitrarily or without justification.

• Contractual necessity: Processing that is required to perform the contract between you and luckbed — specifically, the Terms & Conditions you accepted at registration. This covers account creation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable law, including age verification, anti-money laundering checks, and the retention of financial records.
• Legitimate interests: Processing carried out in the legitimate interests of luckbed or third parties, where those interests are not overridden by your rights. This covers fraud prevention, platform security, and service improvement activities.
• Consent: Processing based on your freely given, informed, and specific consent — primarily for direct marketing communications. You may withdraw consent at any time by updating your notification preferences in your account settings or by emailing support@luckbed. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

4. Data Sharing and Third Parties

luckbed does not sell your personal data. We share your information only with carefully selected third parties in circumstances where sharing is necessary for the provision of our services, required by law, or in your direct interest. The categories of third parties with whom we may share your data are as follows:

4.1 Payment Processors

To process your deposits and withdrawals, luckbed shares your financial identifiers (such as your registered bKash or Nagad mobile number, or bank account details) with the relevant payment processor. These processors act as independent data controllers in respect of the transaction data they handle and operate under their own published privacy policies. luckbed is not responsible for the data practices of payment processors once your transaction data has been transmitted to them.

4.2 Identity Verification Providers

Where KYC verification is required, your identity documents and biographic data may be shared with a third-party identity verification service. These providers are engaged solely to confirm your identity and age and are prohibited from using your data for any other purpose.

4.3 Game Software Providers

Our game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive limited technical data (such as a pseudonymous player identifier and session token) to deliver game content. They do not receive your full name, contact details, or financial information.

4.4 Analytics and Security Providers

luckbed uses third-party analytics tools and fraud detection services. These receive aggregated or pseudonymised data and are contractually prohibited from re-identifying individual players or using the data for their own commercial purposes.

4.5 Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so or where disclosure is necessary to protect the rights, property, or safety of luckbed, our players, or the public. We will, where legally permissible, notify you of such a disclosure.

5. Cookies and Tracking Technologies

luckbed uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics that help us improve the player experience. The table below describes the categories of cookies we use:

luckbed does not use third-party advertising cookies. We do not participate in cross-site retargeting networks or share cookie data with external ad platforms. You can manage cookie preferences at the browser level at any time. Note that disabling functional or analytics cookies will not prevent you from using the platform, but may affect your experience in minor ways.

6. Data Retention

luckbed retains personal data for as long as is necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations. The following retention guidelines apply:

• Active account data: Retained for the lifetime of your account plus a minimum of five years following account closure, to meet financial record-keeping and anti-money laundering obligations.
• KYC and identity documents: Retained for five years from the date of submission or five years from account closure, whichever is later. After this period, documents are securely destroyed.
• Transaction records: Deposit, withdrawal, and wagering histories are retained for seven years to comply with financial record-keeping requirements applicable to online platforms operating in the Bangladesh market.
• Customer support records: Correspondence related to resolved complaints is retained for three years. Correspondence related to ongoing legal matters is retained until the matter is fully resolved.
• Marketing consent records: Records of your consent to, or withdrawal from, marketing communications are retained for the duration of your account and for three years following closure.
• Anonymised analytics data: Aggregated, anonymised usage statistics that cannot be linked back to any individual are retained indefinitely for platform improvement purposes.

At the end of the applicable retention period, personal data is either securely deleted from our systems or, where deletion is not technically feasible, irreversibly anonymised so that it can no longer be associated with any identifiable individual.

7. Your Privacy Rights

As a player on luckbed, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at support@luckbed with your registered account email address and a clear description of your request. We will respond within 30 days.

Please be aware that certain rights are subject to limitations. For example, we cannot erase data that we are legally required to retain for financial or regulatory compliance purposes. Where we are unable to fully comply with a request, we will explain the reason in our response.

8. Data Security Measures

luckbed treats the security of your personal data as a non-negotiable operational priority. We implement a layered approach to data security that encompasses technical, administrative, and physical safeguards appropriate to the sensitivity of the data we process.

• Encryption: All data in transit between your device and luckbed servers is encrypted using TLS 1.3. Data stored on our servers is encrypted at rest using AES-256. Database backups are encrypted before transmission to secure off-site storage.
• Access controls: Access to personal data within luckbed is restricted on a strict need-to-know basis. Staff who handle player data are subject to confidentiality agreements and receive regular data protection training.
• Intrusion detection: Our infrastructure is monitored continuously for anomalous access patterns, unauthorised login attempts, and indicators of compromise. Security incidents are escalated to our dedicated security team for immediate response.
• Penetration testing: luckbed commissions independent security assessments of its platform on a periodic basis to identify and remediate vulnerabilities before they can be exploited.
• Breach notification: In the unlikely event of a data breach that poses a risk to your rights and freedoms, luckbed will notify affected players without undue delay and will take all reasonable steps to contain the breach and mitigate its impact.

While we employ industry-standard security measures, no online platform can guarantee absolute security. You play an important role in protecting your own data by maintaining a strong, unique password for your luckbed account, enabling any available two-factor authentication features, and logging out of your account when using shared devices.

9. Contact and Data Queries

luckbed is committed to handling all privacy-related queries and data subject requests with care and transparency. If you have any question about this Privacy Policy, wish to exercise any of your rights described in Section 7, or wish to raise a concern about how your personal data has been handled, please contact us using the details below:

• Email: support@luckbed — please use the subject line "Privacy Request" or "Data Query" so your message is routed to the correct team.
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours of receipt and to provide a substantive response within 30 calendar days. Complex requests may require additional time, in which case we will inform you of the expected timeframe.
• Language: All formal privacy requests should be submitted in English to ensure accurate and efficient processing by our compliance team.
• Verification: To protect your data, we will ask you to verify your identity before processing any data subject request. This typically involves confirming your registered email address, account username, and providing a copy of your identification document.

9.1 Updates to This Privacy Policy

luckbed reviews and updates this Privacy Policy periodically to reflect changes in our data processing activities, applicable law, or regulatory guidance. When material changes are made, we will post the updated policy on this page with a revised "Last Updated" date and, where the changes significantly affect your rights, notify you via your registered email address. We encourage you to review this page regularly.

Your continued use of luckbed following publication of an updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with any changes, you may close your account in accordance with Section 8.1 of our Terms & Conditions.