Privacy Policy of lucky555
At lucky555, protecting your personal data is a responsibility we take seriously. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, and the rights you hold over your own data as a player on our platform.
256-Bit SSL Encryption
Every data transmission between your device and lucky555 is protected by industry-standard 256-bit SSL encryption, ensuring your personal and financial information is never exposed in transit.
You Control Your Data
lucky555 provides clear tools for you to access, correct, or request deletion of your personal data at any time. Your privacy rights are real, exercisable, and responded to within 30 days.
No Unauthorised Selling
We do not sell, rent, or trade your personal data to third-party marketers. Data is shared only with service partners necessary to operate the platform — and never without appropriate data protection agreements in place.
Transparent Cookie Use
lucky555 uses cookies strictly to improve platform performance and personalise your experience. Our cookie policy is fully explained in this document, with details on the types of cookies used and how to manage your preferences.
Secure Data Storage
Personal data is stored on secure servers with restricted access controls, regular vulnerability assessments, and layered firewall protection. Only authorised lucky555 personnel with a legitimate business need may access your data.
Defined Retention Periods
We do not hold your data indefinitely. Retention periods are defined per data category, aligned to anti-money laundering (AML) obligations and responsible gaming requirements, and data is securely purged once retention periods expire.
Information We Collect
Personal Information You Provide
When you register for an account with lucky555, we collect personal information that you voluntarily submit. This information is necessary to create and manage your account, verify your identity, process financial transactions, and provide you with access to our betting and casino services. The personal information collected at registration includes:
- Full legal name as it appears on official identification documents.
- Date of birth (to verify you are 18 years of age or older).
- Email address (used as your primary account identifier and for communications).
- Mobile phone number (used for two-factor authentication and account notifications).
- Residential address, including city and country (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
- Username and encrypted password.
Identity Verification Documents (KYC)
As part of our Know Your Customer (KYC) obligations, we may request scanned copies or photographs of official identity documents. These may include your National Identity Card (NID), passport, or other government-issued photo identification. We may also request proof of address documents such as a recent utility bill or bank statement. These documents are used exclusively for identity verification and fraud prevention purposes.
Financial Information
When you make deposits or withdrawals on lucky555, we collect information related to the payment method you use. For mobile financial services such as bKash, Nagad, Rocket, and Upay, we record the registered mobile number associated with your wallet. For card payments via Visa or Mastercard, we receive tokenised payment references from our payment gateway — we do not store full card numbers on our servers. For cryptocurrency transactions, we record the wallet addresses involved in the transaction.
Usage and Activity Data
We automatically collect data about how you interact with the lucky555 platform. This includes pages you visit, games you play, bets you place, session duration, search queries within the platform, and the features you use. This data is used to improve platform performance, personalise your experience, and fulfil our responsible gaming obligations by monitoring for patterns that may indicate problem gambling behaviour.
Technical Data
We collect standard technical information when you access lucky555, including your IP address, browser type and version, operating system, device identifiers, time zone settings, and referring URLs. This data is used for security monitoring, fraud detection, and platform analytics.
Data Categories at a Glance
| Category | Examples |
|---|---|
| Identity | Name, DOB, NID, passport |
| Contact | Email, phone, address |
| Financial | bKash/Nagad number, payment refs |
| Activity | Bets, sessions, game history |
| Technical | IP address, device ID, browser |
| Communications | Support chat logs, emails |
How We Use Your Data
Primary Purposes
lucky555 processes your personal data for clearly defined purposes, each of which is supported by a legitimate legal basis. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your data are as follows:
- Account creation and management: To set up, maintain, and secure your lucky555 player account, including processing registration, handling login authentication, and managing account settings.
- Identity verification (KYC): To verify your identity and age in compliance with responsible gaming obligations and anti-money laundering (AML) best practices. This is a mandatory process for withdrawal eligibility.
- Processing transactions: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or cryptocurrency) and to maintain accurate transaction records.
- Providing gaming and betting services: To deliver access to lucky555's full suite of products, including sports betting (cricket BPL, IPL, T20 World Cup, Bangladesh Tigers), live casino, slots, and other game categories.
- Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance via live chat, email, or other supported channels.
- Responsible gaming: To monitor your activity for signs of problem gambling behaviour, apply deposit or stake limits you have set, enforce self-exclusion periods, and fulfil our duty of care obligations.
- Security and fraud prevention: To detect, investigate, and prevent fraud, money laundering, collusion, bonus abuse, account sharing, and other prohibited conduct. This includes automated profiling for risk assessment purposes.
- Platform improvement: To analyse aggregate usage data and improve the performance, features, and user experience of the lucky555 platform.
- Legal compliance: To comply with applicable laws, regulatory obligations, court orders, and lawful requests from competent authorities.
Marketing Communications
With your consent, lucky555 may send you promotional communications about new games, seasonal bonuses (such as Eid promotions, Pohela Boishakh offers, BPL season specials), and platform updates via email or SMS. You may withdraw your consent to marketing communications at any time by using the unsubscribe link in any marketing email, or by contacting our support team at support@lucky555. Withdrawal of marketing consent does not affect your right to receive transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts), which are sent as part of the service regardless of marketing preferences.
Automated Decision-Making
lucky555 uses automated systems for certain decisions, including real-time fraud scoring, responsible gaming monitoring, and bonus eligibility assessments. Where an automated decision has a significant effect on your account (such as a suspension triggered by fraud detection), you have the right to request human review of that decision by contacting our support team.
Data Sharing & Third Parties
When We Share Your Data
lucky555 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the circumstances described below, and only to the extent necessary for the specified purpose:
Payment Processors
To process deposits and withdrawals, your payment-related data is shared with our authorised payment processing partners, including mobile financial service providers (bKash, Nagad, Rocket, Upay) and card payment gateways (Visa, Mastercard processors). These partners are contractually bound to process your data solely for the purpose of facilitating your transaction and to maintain appropriate security standards.
Game Software Providers
To deliver casino games and sportsbook products, certain gameplay data (such as player session identifiers and bet amounts) is shared with our game software providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive only the minimum data necessary to operate the game or market in question and are bound by data processing agreements with lucky555.
Identity Verification Partners
To fulfil our KYC obligations, we may share identity document information with third-party identity verification service providers. These partners operate under strict data processing agreements and use your data solely to confirm the authenticity of the documents you have submitted.
Regulatory and Legal Authorities
lucky555 may disclose your personal data to financial intelligence units, law enforcement agencies, or other regulatory authorities where required to do so by applicable law, by a court order, or as part of an investigation into financial crime, fraud, or money laundering. Such disclosures are made only to the extent required by law and are not within the control of lucky555 once mandated by a competent authority.
Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of lucky555's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any change to the privacy practices applicable to your data in advance of the transfer taking effect.
Third-Party Categories
- Payment processors (bKash, Nagad, Visa gateway partners).
- Game software providers (Pragmatic Play, Evolution, Spribe, etc.).
- KYC and identity verification service providers.
- IT infrastructure and cloud hosting providers.
- Fraud detection and AML compliance platforms.
- Customer support platform providers.
- Legal, regulatory, and financial intelligence authorities (when required by law).
International Data Transfers
Some of lucky555's third-party partners operate outside of Bangladesh. Where personal data is transferred internationally, lucky555 ensures that appropriate contractual safeguards are in place to maintain a standard of data protection equivalent to the principles set out in this Privacy Policy. We do not transfer personal data to countries or organisations that do not offer an adequate level of data protection.
Cookies & Tracking Technologies
What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred language, login status, and session preferences — making your next visit easier and the site more useful to you. Cookies cannot execute programs or deliver viruses to your device; they are simply data files tied to a browser and a domain.
How lucky555 Uses Cookies
lucky555 uses cookies and similar technologies (including browser local storage and session storage) for the following purposes:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Enable core platform functions: login session management, account security, anti-CSRF protection, game loading. | Session or up to 24 hours |
| Performance | Collect anonymised analytics data on page load times, error rates, and navigation patterns to improve platform stability. | Up to 13 months |
| Functional | Remember your preferences such as preferred language, last visited game category, and deposit method for a faster experience. | Up to 12 months |
| Security | Support fraud detection systems by tracking unusual login patterns, device fingerprinting, and session anomalies. | Up to 30 days |
Third-Party Cookies
Some lucky555 pages may include content served by our game software providers (such as Pragmatic Play or Evolution Gaming). These providers may set their own cookies on your device to facilitate game loading and session management within their respective game clients. lucky555 does not control the cookie practices of these third-party providers; please refer to the relevant provider's own privacy documentation for further details.
Managing Your Cookie Preferences
Most web browsers allow you to control cookies through your browser settings. You may choose to block all cookies, accept only first-party cookies, or clear cookies after each browsing session. Please note that blocking strictly necessary cookies will impair your ability to log in and use the lucky555 platform effectively. To manage cookies in your browser, refer to the help documentation for your browser (Chrome, Firefox, Safari, Edge, or Samsung Internet on Android devices common among players in Dhaka, Chittagong, and Sylhet).
Data Security Measures
Technical Security Controls
lucky555 employs a multi-layered approach to information security designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our technical security controls include:
- 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
- AES-256 encryption for sensitive data fields stored in our databases, including payment references and identity document metadata.
- Password hashing using industry-standard one-way hashing algorithms — your plaintext password is never stored.
- Two-factor authentication (2FA) available for all player accounts, adding an additional verification layer at login.
- Web application firewall (WAF) to filter and monitor HTTP traffic and block common web attacks.
- DDoS mitigation infrastructure to maintain platform availability and prevent disruption-based attacks.
- Intrusion detection and prevention systems (IDS/IPS) monitoring network traffic for anomalous activity in real time.
- Regular penetration testing conducted by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
Organisational Security Controls
In addition to technical controls, lucky555 maintains strict organisational policies governing access to personal data. Access to player data is restricted on a need-to-know basis; only personnel with a legitimate business requirement may access specific data categories. All lucky555 staff who handle personal data are subject to confidentiality obligations and receive regular data protection training. Access credentials are reviewed and rotated periodically.
Breach Response
In the unlikely event of a data breach that poses a risk to your personal data, lucky555 maintains an incident response protocol that includes: immediate containment and forensic investigation; risk assessment of the affected data categories; notification to affected players within a reasonable timeframe; and steps to prevent recurrence. If you believe your account has been compromised, contact us immediately at support@lucky555.
Your Responsibility
While lucky555 takes all reasonable steps to protect your data on our end, the security of your account also depends on you. You are responsible for keeping your account password confidential, not sharing your login credentials with anyone, logging out of your account when using shared devices, and using a strong, unique password for your lucky555 account that you do not reuse on other platforms.
Security Standards Summary
- 256-bit SSL/TLS encryption for all data in transit.
- AES-256 encryption for stored sensitive data fields.
- Passwords stored as one-way hashes only — never in plaintext.
- Optional 2FA available to all registered players.
- Web application firewall active 24/7.
- DDoS mitigation infrastructure in place.
- Real-time intrusion detection monitoring.
- Regular independent penetration testing.
- Role-based data access controls for all staff.
- Staff data protection training conducted regularly.
- Incident response protocol for breach scenarios.
Data Retention
Retention Principles
lucky555 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. We do not retain data beyond these periods without a specific, documented justification. Once a retention period expires, data is securely deleted or anonymised so that it can no longer be associated with any individual player.
Retention Periods by Data Category
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML obligations and dispute resolution |
| KYC Documents | Duration of account + 5 years after closure | Regulatory compliance and fraud prevention |
| Transaction Records | 7 years from transaction date | Financial record-keeping and AML compliance |
| Betting & Game History | 3 years from bet/game date | Dispute resolution, responsible gaming monitoring |
| Support Communications | 3 years from last interaction | Dispute evidence and quality assurance |
| Marketing Consent Records | Until consent withdrawn + 3 years | Proof of valid consent for communications |
| Technical / Log Data | 13 months | Security monitoring and fraud detection |
| Cookie Data | Up to 13 months (per cookie type) | Platform performance and session management |
Dormant and Closed Accounts
If your lucky555 account is voluntarily closed, suspended, or deemed dormant, your personal data is retained for the periods specified in the table above, calculated from the date of closure or last account activity. During this retention period, your data is not used for marketing purposes and access is restricted to personnel with a specific compliance or legal need. At the end of the applicable retention period, all retained data is either securely deleted or irreversibly anonymised.
Your Privacy Rights
Rights You Hold Over Your Data
As a user of lucky555, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, contact our support team at support@lucky555 with the subject line "Privacy Rights Request". We will respond to all verified requests within 30 days of receipt.
Right of Access
You have the right to request a copy of the personal data lucky555 holds about you, along with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed. We will provide this information in a structured, commonly used format.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your registered email address or phone number, you may update these directly via your account settings. For KYC-related data corrections, contact our support team.
Right to Erasure
You have the right to request that lucky555 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where you object to processing and there are no overriding legitimate grounds. Please note that this right is subject to our legal retention obligations — certain data categories must be retained for the periods specified in Section 6, and erasure requests cannot override mandatory retention requirements under AML or financial record-keeping rules.
Right to Restriction of Processing
You have the right to request that lucky555 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed. During a restriction period, we will continue to store your data but will not actively process it beyond storage.
Right to Data Portability
Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another data controller where technically feasible.
Right to Object
You have the right to object to the processing of your personal data where lucky555 relies on legitimate interests as the legal basis for processing. You also have the right to object at any time to processing for direct marketing purposes, including profiling carried out for marketing. Where you object to marketing, we will cease marketing processing immediately upon receipt of your objection.
Rights Related to Automated Decision-Making
Where lucky555 makes decisions about you using solely automated means that have a significant effect — such as an automated account suspension triggered by a fraud detection system — you have the right to request human review of that decision, express your point of view, and contest the outcome. Contact our support team to invoke this right.
Summary of Your Rights
- Access — Request a copy of your data held by lucky555.
- Rectification — Correct inaccurate or incomplete data.
- Erasure — Request deletion where lawfully permitted.
- Restriction — Limit processing in defined circumstances.
- Portability — Receive your data in a machine-readable format.
- Object — Object to processing based on legitimate interests or marketing.
- Human Review — Contest automated decisions that affect you.
How We Handle Your Requests
All privacy rights requests submitted to lucky555 are acknowledged within 5 business days and resolved within 30 calendar days of receipt. For complex or high-volume requests, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason before the initial 30-day period expires. We do not charge a fee for exercising your rights in ordinary circumstances. However, where requests are manifestly unfounded or excessive in nature, we reserve the right to charge a reasonable administrative fee or decline to act.
Contact & Complaints
Data Protection Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or the way lucky555 processes your personal data, you are welcome to contact our data protection team at any time. We are committed to addressing all privacy-related queries promptly and transparently.
Our data protection contact email is: support@lucky555
When contacting us about a privacy matter, please include your registered account username, a clear description of your query or request, and any relevant details that will help us locate your records and respond accurately. Please do not include your full password in any correspondence — we will never ask for your password.
Updates to This Privacy Policy
lucky555 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform features. When we make material changes to this policy, we will notify registered players via email to the address on file, or via a prominent notice on the lucky555 platform. The effective date at the top of this document will always reflect when the policy was last updated. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
Governing Language
This Privacy Policy is written in English. In the event of any inconsistency between the English version of this policy and any translated version, the English version shall prevail.
Filing a Complaint
If you are not satisfied with how lucky555 has handled your personal data or a privacy rights request, you have the right to escalate a complaint. We encourage you to contact us directly first at support@lucky555 so that we have the opportunity to resolve the matter before it is escalated. If you remain dissatisfied after contacting us, you may submit a complaint to the relevant data protection or consumer rights authority in your jurisdiction.
Contact Information
- Data queries: support@lucky555
- Response time: Within 5 business days
- Resolution time: Within 30 calendar days
- Support language: English
- Platform: lucky555
- Primary market: Bangladesh (BST, UTC+6)
Policy Version History
- Version 2.0 — 1 January 2026 (current)
- Version 1.0 — Initial release
Always refer to the current version published on this page. Archived versions are available on request by contacting our support team.
Ready to Play?
Explore lucky555 — Trusted by Players Across Bangladesh
Now that you know how we protect your data, discover our full range of games and sports betting markets — cricket, slots, live casino, and more. Deposits via bKash, Nagad, and Rocket. Fast payouts, fair play, and 24/7 support.