LGPD Compliance – Law No. 13,709/2018

Luck888 Privacy Policy – LGPD Data Protection

At luck888, player privacy isn't a footnote — it's central to how we operate. This document clearly explains what we collect, why we collect it, how we use it, and how you can control your own personal data in accordance with the Lei Geral de Proteção de Dados (LGPD).

Last updated: January 2026

Your Data in 6 Key Points

What you need to know before reading the full document

We Only Collect What's Necessary

Luck888 collects only the data strictly necessary for account creation, payment processing via Pix, boleto, or card, identity verification (KYC), and compliance with legal obligations. Nothing more.

You Control Your Data

The LGPD gives you the right to access, correct, export, and delete your personal data at any time. Simply contact luck888 support and the team will respond within 15 business days.

Encryption Across the Board

All communications between your device and luck888's servers are protected by 256-bit SSL encryption. Financial data — such as Pix and card details — is never stored in plain text.

We Don't Sell Your Data

Luck888 never sells or rents personal data to third parties for commercial purposes. Data sharing with partners occurs only when strictly necessary for the operation of the platform and always on an appropriate legal basis.

Marketing Only With Consent

Promotional emails and notifications from luck888 are sent only if you opted in during registration or at a later time. You can unsubscribe at any time through your account dashboard or via the unsubscribe link in any email.

Full LGPD Compliance

Luck888 operates in compliance with the General Data Protection Law (Law No. 13,709/2018) and the guidelines of the National Data Protection Authority (ANPD). We have a designated and accessible Data Protection Officer (DPO).

When creating an account on luck888, access the platform, or carry out any transaction, you confirm that you have read and understood this Privacy Policy. If you have any questions, please contact our Data Protection Officer before continuing to use the platform.

1Data Controller

For the purposes of the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018), the Data Controller responsible for processing the personal information collected on the platform luck888 is the operating company behind the luck888-bangla.com platform.

The Controller is responsible for defining the purposes and means of processing personal data collected during registration, platform use, and the processing of deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago, as well as all other User interactions with luck888.

To exercise your rights as a data subject or to clarify any questions about this Policy, please contact us at suporte@luck888-bangla.com or via the 24-hour live chat available on the platform.

2Personal Data We Collect

The luck888 collects personal data in different ways during platform use. The table below summarizes the categories of data collected and the context in which each is obtained:

CategoryData CollectedContext
Identification Full name, date of birth, CPF, RG or CNH Registration and KYC verification
Contact Email, mobile number, residential address Registration & communications
Financial Pix key, transaction details (amount, date, payment method), deposit and withdrawal history Payment processing
Verification Photo ID document, selfie with document, proof of address KYC — identity verification
Behavior Betting history, games accessed, session duration, gaming preferences Platform usage
Technical IP address, device type, operating system, browser, session cookies Platform access
Communication Support conversation history, emails exchanged, live chat transcripts Customer support

2.1 Data We Do Not Collect

Luck888 does not collect sensitive data categories such as racial or ethnic origin, religious beliefs, political opinions, genetic or biometric data (except the selfie for KYC, which is stored in encrypted form and used solely for identity verification), health data, or sexual orientation.

3How We Use Your Personal Data

The personal data collected by luck888 are used solely for the purposes described below. The platform does not use data for purposes incompatible with those disclosed at the time of collection:

  • Account creation and management: account registration, authentication, access recovery, and User profile maintenance;
  • Payment processing: processing deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago; processing withdrawals to the registered bank account;
  • Identity verification (KYC): compliance with legal obligations related to anti-money laundering and counter-terrorism financing as required under Brazilian law;
  • Service delivery: access to Sports Betting (Brasileirão, Copa do Brasil, Libertadores, Superliga de Vôlei, NBB), live casino, crash games, blackjack, and other platform products;
  • VIP Program: calculation and distribution of weekly cashback, level progression, and associated benefits;
  • Security and fraud prevention: detection of multi-accounting, bot usage, suspicious activity, and protection of platform integrity;
  • Customer support: handling support tickets, resolving disputes over bets or transactions, and providing live chat assistance;
  • Operational communications: notifications about changes to the Terms, security updates, transaction status, and bet confirmations;
  • Marketing and promotions: sending offers, bonuses, and platform news — exclusively to Users who have expressly consented to this type of communication;
  • Regulatory obligations: responding to requests from judicial, regulatory, or COAF authorities when legally required.

💡 Automated decisions: luck888 uses automated systems for fraud detection and risk analysis. When an automated decision significantly affects your access to the platform — such as an account block or withdrawal hold — you have the right to request a human review of that decision, in accordance with Art. 20 of the LGPD.

4Legal Basis for Data Processing (LGPD)

All personal data processing carried out by luck888 is grounded in at least one of the legal bases set out in Art. 7 of the LGPD. The table below maps each processing purpose to its corresponding legal basis:

PurposeLegal Basis (LGPD, Art. 7)
Account creation & management Contract performance (item V)
Payment processing Contract performance (item V)
KYC Verification / Anti-Money Laundering Compliance with a legal obligation (item II)
Security and fraud prevention Legitimate interest of the controller (item IX)
Operational communications Contract performance (item V)
Marketing & Promotions Data subject consent (item I)
Compliance with authorities Compliance with a legal obligation (item II)

Where processing is based on the User's consent — particularly for marketing communications — the data subject may withdraw that consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

5Data Sharing with Third Parties

The luck888 does not sell, rent, or trade users' personal data. Data is only shared with third parties when strictly necessary for platform operations or required by law, always with adequate contractual data protection safeguards:

5.1 Operational partners

  • Payment processors: Pix operators (Banco Central), boleto issuers, card acquirers, PicPay, and Mercado Pago receive only the data required to process each specific transaction. None of these partners receive full betting history or behavioral data;
  • KYC Providers: identity verification service providers receive your document and selfie solely for validation purposes. Data is processed in accordance with the provider's privacy policies, which are contractually bound to luck888's requirements;
  • Game providers: providers of crash games, slots, live blackjack, and other titles receive an anonymized User identifier and game session data. They do not receive full name, CPF, or financial data;
  • IT Infrastructure: server providers, CDN, and cybersecurity services that host or protect the luck888 platform have access to data as part of the technical infrastructure, under confidentiality agreements.

5.2 Legal obligations

Luck888 may share data with government, judicial, or regulatory authorities — such as the Federal Police, Federal Revenue Service, COAF, and Public Prosecutor's Office — when required by a court order, legal request, or regulatory obligation. In such cases, only the specifically requested data is shared, and Users are notified whenever legally permitted.

No-sale guarantee: No personal data from luck888 Users is shared with advertisers, programmatic advertising platforms, affiliate networks, or any third party for those third parties' own commercial purposes.

6International Data Transfers

Some infrastructure services used by the luck888 — such as cloud servers, security providers, and game suppliers — may involve processing data on servers located outside Brazil. When this occurs, luck888 ensures the transfer falls within one of the legal bases set out in Art. 33 of the LGPD:

  • The recipient country offers a level of personal data protection equivalent to that provided under the LGPD; or
  • The recipient demonstrates compliance with the principles and rights established by the LGPD through specific contractual clauses, global corporate rules, or recognized certification standards.

Luck888 maintains an up-to-date record of international data transfers carried out and can provide information about them upon request to the Data Protection Officer.

7Data Security

The luck888 implements appropriate technical and organizational measures to protect Users' personal data against unauthorized access, alteration, disclosure, accidental or unlawful loss, or destruction. Key measures include:

  • Encryption in transit: 256-bit SSL/TLS encryption on all communications between the User's device and luck888's servers;
  • Encryption at rest: sensitive data — such as KYC documents and payment data — is stored with AES-256 encryption;
  • Access control: principle of least privilege — luck888 employees have access only to the data required for their specific roles, with audit logs maintained for all access to personal data;
  • Two-factor authentication (2FA): available to all Users as an extra layer of account protection. Recommended for accounts with regular financial activity;
  • Continuous monitoring: intrusion detection systems and anomaly analysis monitor the infrastructure 24 hours a day;
  • Security testing: the platform undergoes periodic penetration testing conducted by specialized external firms;
  • Incident response plan: luck888 maintains a documented data breach response plan, with clear procedures for containment, notification to the ANPD, and communication to affected Users.

7.1 Security Incidents

In the event of a security incident that poses a significant risk or harm to Users, luck888 will notify the ANPD and affected data subjects within the legal timeframe — within 2 business days of becoming aware of the incident — as required by Art. 48 of the LGPD. The notice will include the nature of the affected data, the containment measures taken, and guidance to help Users protect their information.

8Data Retention & Deletion

The luck888 retains personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with applicable minimum legal retention periods:

Data TypeRetention PeriodLegal basis
Registration and KYC data 5 years after account closure Law No. 9,613/98 (anti-money laundering)
Financial history (deposits, withdrawals) 5 years Tax and anti-money laundering legislation
Betting history 3 years after account closure Dispute resolution and auditing
Access and security logs 6 months Marco Civil da Internet (Law No. 12.965/2014)
Support communications 2 years Dispute resolution
Marketing data (consent) Until consent is withdrawn LGPD Art. 7, item I

Once the applicable retention period expires, data is securely and permanently deleted — or anonymized where immediate deletion is not technically feasible — so that the User can no longer be identified from the remaining information.

9Your Rights as a Data Subject (LGPD)

The General Data Protection Law (LGPD) guarantees you, as the data subject, a set of rights that the luck888 is committed to respecting and facilitating the exercise of your rights. See each right and how to exercise it below:

Access

Request confirmation of whether we process your data and, if so, obtain a full copy of the information we hold about you.

Correction

Request the correction of incomplete, inaccurate, or outdated data — such as your registered address, mobile number, or email.

Deletion

Request the deletion of your personal data processed on the basis of consent, once that consent is withdrawn. Data retained under a legal obligation cannot be deleted before the applicable legal deadline.

Portability

Receive your personal data in a structured, machine-readable format for transfer to another controller, where technically feasible.

Objection

Object to data processing carried out on the basis of legitimate interest, where there are grounds relating to your specific situation.

Data Sharing Information

Request information about which public or private entities luck888 has shared your personal data with.

9.1 How to exercise your rights

To exercise any of the rights listed above, contact luck888's Data Protection Officer by email at suporte@luck888-bangla.com, providing your full name and registered CPF and clearly describing the right you wish to exercise. luck888 will respond within 15 business days from the date the request is received, pursuant to Art. 19 of the LGPD.

If a request is denied on legal grounds, luck888 will clearly explain the reason for the refusal and inform the User of available recourse, including the option to file a complaint with the ANPD.

10Cookies and Tracking Technologies

The luck888 uses cookies and similar technologies to ensure the platform functions correctly, improve the User experience, and — with your consent — personalize content and offers. See the types of cookies used below:

10.1 Cookie Management

When you first access luck888, a cookie consent banner lets you accept essential cookies only or all cookie types. You can update your preferences at any time through the account settings panel, under "Privacy and Cookies". Declining non-essential cookies does not affect your ability to place bets, make deposits, or withdraw funds on the platform.

11Children and Minors

The platform luck888 is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. Accounts identified as belonging to minors are immediately closed and any collected data is deleted, except for records required to document the account closure as mandated by law.

If you are a parent, guardian, or legal representative and have found that a minor under 18 created a luck888 account using your personal data or their own, please contact our support team immediately to arrange account closure and deletion of any collected data. luck888 will take all necessary steps at no cost or inconvenience to you.

🔒 Protection of minors: luck888 recommends that parents and guardians use parental control tools on devices shared with minors to prevent access to betting platforms. Parental controls are a complementary measure — not a substitute — for the age verification carried out by luck888 during KYC.

12Links to Third-Party Platforms

The luck888 may contain links to third-party pages — such as sports rules guides, Banco Central Pix information, or game provider pages — for informational purposes only. These external platforms have their own privacy policies, over which luck888 has no control or responsibility.

When you click an external link and leave the luck888 platform, you will be subject to the destination platform's privacy policy. We recommend reading the privacy policy of any website before providing personal data on it.

13Data Protection Officer (DPO)

In compliance with Art. 41 of the LGPD, the luck888 has appointed a Personal Data Protection Officer (also known as DPO — Data Protection Officer). The DPO is responsible for:

  • Receive and respond to communications from data subjects regarding the processing of their personal information;
  • Receive communications from the ANPD and take the necessary action;
  • Guide luck888 employees and service providers on data protection practices;
  • Carry out any other duties assigned by the Controller or established by supplementary regulations.

Luck888's Data Protection Officer can be reached by email at suporte@luck888-bangla.com, with the subject line "Data Protection Officer — LGPD". All requests will be responded to within 15 business days.

14Changes to This Privacy Policy

The luck888 reserves the right to update this Privacy Policy at any time to reflect changes in legislation, our data processing practices, or our operational structure. Material changes will be communicated at least 7 days in advance via registered email and through a prominent notice on the platform before the effective date.

The last updated date is always shown at the top of this page. We recommend reviewing this Policy periodically. Continued use of the luck888 platform after any changes take effect constitutes acceptance of the updated version. If you do not agree with the changes, you may request account closure as described in Section 11 of the Terms and Conditions.

For the version history of previous editions of this Privacy Policy, please contact the Data Protection Officer at suporte@luck888-bangla.com.

Privacy Questions at luck888

The most common questions about how we handle your data

No. luck888 does not store your full credit or debit card details on its servers. Card payment processing is handled by PCI-DSS certified processors, which meet international security standards for card data. luck888 only receives the transaction result — approved or declined — and has no access to your full card number, CVV, or PIN. For recurring card deposits, tokenization (replacing real card data with a secure identifier) is managed exclusively by the certified payment processor.

To request deletion of your data, send an email to suporte@luck888-bangla.com with the subject line "Data Deletion Request — LGPD", including your full name and registered CPF. luck888 will respond within 15 business days. Please note that data retained due to legal obligations — such as financial records required under anti-money laundering legislation — cannot be deleted before the minimum legal retention period, even upon request. In such cases, luck888 will inform you which data will be retained, for how long, and on what legal basis.

No. luck888 does not share User data with external advertising networks, retargeting platforms, or any third-party advertising service for displaying ads outside the platform. The marketing cookies described in this Policy are used solely for content personalization within luck888 itself — such as showing relevant promotions based on the games you typically play. If you prefer to opt out of this internal personalization as well, you can disable marketing cookies in your account's privacy settings.

After account closure, luck888 retains your personal data for the minimum legal periods outlined in Section 8 of this Policy — primarily 5 years for financial and KYC data, as required by anti-money laundering legislation. Data that does not need to be retained for legal compliance — such as gaming preferences, marketing communication history, and account settings — is deleted within 30 days of account closure. Once retention periods expire, all data is permanently deleted or anonymized.

There are three ways to stop receiving promotional emails from luck888: (1) click the "Unsubscribe" link in the footer of any promotional email — the request is processed within 24 hours; (2) log in to your account dashboard, go to Settings > Notifications, and turn off marketing communications; (3) send an email to suporte@luck888-bangla.com requesting removal from promotional emails. Please note that operational emails — such as deposit and withdrawal confirmations and account security updates — will continue to be sent regardless of this setting, as they are required for the service to function.

🔥 Play at luck888 with Guaranteed Privacy

Your data protected under LGPD, Pix deposits processed in under 2 minutes, and a bonus of up to R$ 500.00 on your first deposit. Sign up and explore the platform.

Create Free Account

Privacy Questions? Get in Touch

Our Data Protection Officer is available to answer any questions about how luck888 handles your personal information. We can also help you exercise any rights granted under the LGPD.

Your Data Protected at luck888. This Privacy Policy was drafted in compliance with the LGPD (Law No. 13,709/2018). All your personal data is processed on an appropriate legal basis, encrypted with 256-bit SSL, and never shared with third parties for commercial purposes. To exercise your rights as a data subject, please contact us at suporte@luck888-bangla.com. By using the platform, you confirm that you have read this Policy and our Terms and Conditions.

Official License
SSL 256-bit
LGPD Compliant
24×7 Support EN
Instant Pix
Responsible Gambling

Play Responsibly

Betting is entertainment — not a guaranteed source of income. luck888 provides control tools such as deposit limits, scheduled breaks, and immediate self-exclusion to keep you in charge. If you feel gambling is affecting your financial or emotional well-being, visit our Responsible Gambling. Prohibited for users under 18.

Português