lk666 Privacy Policy

1 Introduction

lk666 ("lk666", "we", "us", "our") is committed to protecting the privacy of every player who interacts with our online casino and sports betting platform. This Privacy Policy ("Policy") describes how lk666 collects, uses, stores, shares, and protects personal data provided by or generated about users ("you", "Player", "User") in connection with the use of the lk666 website and all associated services.

This Policy applies to all lk666 services, including account registration and management, casino games, sports betting (including cricket BPL, IPL, T20 World Cup, and ICC events), payment processing via Bangladesh mobile financial services and bank transfers, promotional communications, and customer support interactions.

This Policy should be read alongside lk666's Terms & Conditions and Responsible Gaming Policy. Where this Policy conflicts with any general site content, this Policy takes precedence with respect to privacy and personal data matters.

2 Data Controller

For the purposes of applicable data protection law and this Policy, lk666 acts as the data controller with respect to all personal data collected directly from players through the lk666 platform. As data controller, lk666 determines the purposes and means by which your personal data is processed.

Where lk666 engages third-party service providers — such as KYC verification partners, payment processors, or game studio providers — those parties process data as data processors acting solely on lk666's documented instructions. lk666 maintains written agreements with all data processors to ensure your data is handled to the same standard required under this Policy.

All data controller inquiries, subject access requests, and privacy complaints should be directed to lk666's designated privacy contact at: [email protected]

3 Personal Data We Collect

lk666 collects personal data through several channels. The categories of data collected and the context in which they are gathered are set out in the table below:

lk666 does not intentionally collect sensitive personal data (such as health information, religious beliefs, or political opinions) and requests that players do not include such information in any communication with our support team.

4 How We Use Your Personal Data

lk666 processes personal data for the following specific purposes:

• Account Management: To create, maintain, and administer your lk666 player account, including authenticating your identity at login and enabling account self-service features such as deposit limits and self-exclusion tools.
• Transaction Processing: To facilitate deposits and withdrawals via your chosen Bangladeshi payment method (bKash, Nagad, Rocket, Upay, or bank transfer) and to maintain accurate transaction records.
• Identity & Age Verification: To confirm that you are at least 21 years of age and to comply with Know Your Customer (KYC) obligations required by financial crime prevention standards.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms & Conditions. This includes automated monitoring of transaction patterns and gameplay behaviour.
• Responsible Gaming: To monitor gameplay patterns that may indicate problematic gambling behaviour and to apply responsible gaming tools (deposit limits, cooling-off periods, self-exclusion) in accordance with player requests or lk666's duty-of-care obligations.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through live chat and email support channels.
• Promotional Communications: To send you bonus offers, tournament invitations, and personalised promotions by email or in-platform notification, where you have provided consent or where this is permitted under applicable law. You may opt out of marketing communications at any time.
• Platform Improvement: To analyse aggregate usage data in order to improve game selection, platform performance, and the overall player experience on lk666.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including financial record-keeping requirements and cooperation with law enforcement or regulatory authorities where required by law.

5 Legal Basis for Processing

lk666 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil lk666's obligations under the Terms & Conditions agreement with you — including account creation, payment processing, and game access — is carried out on the basis that it is necessary for the performance of a contract to which you are a party.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming oversight is carried out on the basis of lk666's legitimate interest in operating a secure, fair, and sustainable gaming platform, provided that such interests are not overridden by your fundamental rights.
• Legal Obligation: Processing required to comply with anti-money-laundering (AML) obligations, financial record-keeping requirements, and cooperation with law enforcement or regulatory authorities is carried out on the basis that it is necessary for compliance with a legal obligation.
• Consent: Processing for direct marketing communications is carried out on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

lk666 does not sell, lease, or transfer personal data to unaffiliated third parties for their own commercial purposes. Personal data may be shared in the following limited circumstances only:

• KYC & Identity Verification Providers: lk666 shares identity and document data with certified third-party KYC verification partners to confirm player identity, age, and eligibility. These partners act as data processors under written agreement with lk666.
• Payment Processors: Transaction data necessary to process deposits and withdrawals is shared with the relevant payment service providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank) strictly for the purpose of executing the requested financial transaction.
• Game Studio Providers: Technical session data (such as player ID, bet amounts, and game results) is shared with certified game studio providers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) solely for the purpose of facilitating game play and resolving disputes.
• Fraud Prevention Services: lk666 may share limited data with specialist fraud detection and prevention services to identify and mitigate financial crime risks.
• Law Enforcement & Regulatory Authorities: lk666 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by law, court order, or in response to a formally issued legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of lk666's assets, personal data held about players may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

In all cases of data sharing described above, lk666 takes reasonable steps to ensure that recipient parties maintain appropriate security and confidentiality standards consistent with this Policy.

7 Payment Data & KYC Verification

lk666 places particular importance on the secure handling of financial and identity verification data. The following principles apply specifically to payment data and KYC documentation:

• lk666 does not store bKash PINs, Nagad PINs, bank passwords, or any payment credential that could independently authorise a financial transaction. Payment authentication is handled entirely by the respective payment provider's own secure interface.
• KYC documents (National ID copies, passport scans, proof of address) are stored in an access-controlled, encrypted document management environment. Access is restricted to authorised lk666 compliance personnel and, where necessary, the appointed KYC verification partner.
• All player transaction records, including deposit and withdrawal history in BDT (৳), are retained for a minimum of five years in compliance with standard financial record-keeping obligations. This retention period applies even after account closure.
• lk666 carries out KYC verification for all players at the time of first withdrawal and may carry out enhanced due diligence (EDD) checks for transactions above ৳50,000 or where a transaction pattern gives rise to reasonable suspicion of financial crime.

8 Cookies & Tracking Technologies

lk666 uses cookies and similar tracking technologies on its platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the lk666 platform to function. They maintain your login session, remember your language preferences, and enable core security features. These cookies cannot be disabled without materially impairing your ability to use lk666.
• Analytics Cookies: lk666 uses first-party analytics tools to understand aggregate traffic patterns, game popularity, and platform navigation behaviour. This data is used to improve the platform experience and is not used for individual profiling or cross-site tracking.
• Functional Cookies: These cookies remember your in-platform preferences, such as game layout settings and notification preferences, to provide a more personalised experience on return visits.

lk666 does not use third-party advertising cookies, cross-site tracking pixels, social media tracking scripts, or any retargeting technology. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair platform functionality; disabling analytics or functional cookies will not prevent you from using lk666's core services.

9 Data Security

lk666 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or mobile device and lk666's servers.
• Encrypted storage for all sensitive personal data and financial records at rest.
• Role-based access controls ensuring that lk666 staff can only access the personal data necessary for their specific job function.
• Regular security audits and vulnerability assessments conducted by qualified internal and external security professionals.
• Multi-factor authentication (MFA) available on player accounts and required for all lk666 administrative system access.
• Automated anomaly detection systems that flag unusual login activity, transaction patterns, or access attempts for immediate review.

While lk666 takes all reasonable and practicable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in a risk to your rights, lk666 will notify affected players without undue delay and will take all appropriate remedial action.

10 Data Retention

lk666 retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your account's active period plus a minimum of five years following permanent account closure.
• Transaction & Financial Records: Retained for a minimum of five years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five years following account closure or the completion of the relevant KYC process, whichever is later.
• Customer Support Records: Live chat transcripts and support ticket correspondence are retained for a minimum of two years from the date of the interaction.
• Marketing Consent Records: Consent records are retained for as long as necessary to demonstrate compliance and for a period following withdrawal of consent sufficient to address any potential complaint or dispute.
• Inactive Accounts: Accounts with no balance and no login activity for 24 consecutive months may be flagged for deletion. Prior to deletion, lk666 will send a notice to the registered email address allowing the player to reactivate their account within 30 days.

Where personal data is no longer required for any legitimate purpose, it is securely deleted or anonymised in accordance with lk666's internal data disposal procedures.

11 Your Data Rights

As a player whose personal data is processed by lk666, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of all personal data lk666 holds about you. lk666 will provide this in a structured, commonly used format within 30 days of a verified request.
• Right to Rectification: If any personal data lk666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request that lk666 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis exists), or where the data has been unlawfully processed. This right is subject to lk666's legal retention obligations, which may require certain data to be kept for a defined minimum period.
• Right to Restrict Processing: You may request that lk666 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being evaluated.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that lk666 provide your personal data in a portable, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. lk666 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please contact lk666 via live chat or by emailing [email protected]. All requests will be acknowledged within 5 business days and actioned within 30 calendar days of identity verification. lk666 does not charge a fee for processing data rights requests under normal circumstances.

12 Children & Minors

lk666 is strictly an adults-only platform. Access to and use of lk666 is prohibited for any individual under the age of 21 years. lk666 does not knowingly collect personal data from individuals under the age of 21.

lk666 employs mandatory age verification checks at account registration and at the point of first withdrawal to enforce this restriction. If lk666 discovers or has reasonable grounds to believe that personal data has been collected from an individual under 21, that account will be immediately suspended, all funds will be frozen pending investigation, and the relevant personal data will be deleted in accordance with applicable legal requirements.

If you believe that lk666 may have inadvertently collected personal data from a minor, please contact [email protected] immediately so that we can investigate and take appropriate action without delay.

13 International Data Transfers

lk666 primarily processes and stores player data on servers located in secure data centre environments. Where it is necessary to transfer personal data to service providers or infrastructure located outside Bangladesh — for example, to cloud hosting providers or internationally operating KYC partners — lk666 takes appropriate contractual and technical measures to ensure that such transfers are conducted securely and that the receiving party provides an equivalent standard of data protection.

lk666 does not transfer personal data to countries or territories that do not maintain adequate data protection standards without first implementing appropriate safeguards, such as standard contractual clauses or binding corporate rules, to protect your data during and after the transfer.

14 Third-Party Links

The lk666 platform may occasionally contain references to or integrations with third-party service providers, such as game studio providers (Evolution Gaming, Pragmatic Play, Spribe, etc.) or payment service providers (bKash, Nagad, Rocket, Upay). When you interact with a third-party payment interface or launch a third-party game, you are subject to the privacy practices of that third party.

lk666 is not responsible for the privacy practices or content of any third-party service, even where that service is integrated into the lk666 platform. lk666 recommends that you review the privacy policies of all third-party providers whose services you use in connection with your lk666 account.

15 Amendments to This Policy

lk666 reserves the right to amend, update, or replace this Privacy Policy at any time. Any material changes to the way in which lk666 processes your personal data will be communicated to registered players via the email address on file and/or via a prominent in-platform notification displayed at the time of your next login.

The effective date displayed at the top of this Policy indicates when the current version came into force. Your continued use of lk666 following the communication of a policy update constitutes your acknowledgement of the revised Policy. If you do not accept the revised Policy, you must cease using the platform and request account closure as described in the Terms & Conditions.

lk666 recommends that you review this Privacy Policy periodically, and especially before making a deposit or providing any new personal information to lk666's support team.

16 Contact & Privacy Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how lk666 has handled your personal data, please contact us using the following details:

• Live Chat: Available 24/7 via the lk666 platform after login. Privacy and data requests are treated as high-priority inquiries.
• Email: [email protected] — please include "Privacy Request" or "Data Rights" in your subject line so your message is routed to the correct team.
• Response Time: All privacy-related inquiries will be acknowledged within 5 business days (Bangladesh Standard Time, BST UTC+6) and fully actioned within 30 calendar days of identity verification.

If you are not satisfied with lk666's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection or consumer protection authority in your jurisdiction. lk666 will cooperate fully with any such authority in the investigation of a complaint.