lk999 Privacy Policy — How We Handle Your Data

1 Introduction

lk999 ("we", "us", "our", or "the Platform") operates the online gaming and sports betting platform accessible at lk999.io. This Privacy Policy describes how lk999 collects, uses, discloses, stores, and protects the personal information of registered players and website visitors, with particular consideration for users based in Bangladesh.

By accessing the lk999 website, creating a player account, or using any of lk999's services — including deposits, game play, bonus claims, and customer support interactions — you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any aspect of this Privacy Policy, you should discontinue use of the lk999 platform immediately.

This Privacy Policy is incorporated into and must be read alongside lk999's Terms & Conditions. Capitalised terms used in this policy that are not separately defined here carry the meanings given to them in the Terms & Conditions.

2 Information We Collect

lk999 collects personal information through several channels, including direct input by the player during registration and account use, automated data collection during platform interactions, and from third-party service providers where necessary for compliance and payment purposes. The categories of personal data we collect include the following:

lk999 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If any such information is inadvertently included in a document submitted by a player for KYC purposes, it will not be processed for any purpose other than identity verification and will be stored securely under the same protections as all other personal data.

3 How We Use Your Information

lk999 uses the personal information it collects only for lawful, specified, and legitimate purposes. We do not use your data in ways that are incompatible with the purposes described below. The primary purposes for which lk999 processes personal data are:

• Account Management: To create, maintain, and administer your lk999 player account, including verifying your identity at registration and during ongoing account reviews.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and other supported payment methods. Financial data is shared with payment providers only to the extent necessary to complete the transaction.
• KYC and Fraud Prevention: To verify your identity, confirm your age (21+ requirement), detect and prevent fraud, money laundering, account takeover, and other prohibited activities in compliance with our internal AML policy.
• Customer Support: To respond to your queries, complaints, and account-related requests submitted via live chat or email. Support interaction records are retained to maintain quality and consistency of service.
• Responsible Gaming Compliance: To monitor player activity patterns and identify signs of problem gambling behaviour, and to apply responsible gaming tools such as deposit limits or cooling-off periods when necessary.
• Platform Improvement: To analyse aggregated, anonymised usage data that helps lk999 improve the platform experience, optimise game selection, and identify technical issues.
• Marketing Communications: To send promotional offers, bonus notifications, and seasonal campaign communications (such as BPL cricket season promotions or Eid special offers) to players who have opted in to receive marketing messages. You may opt out at any time.
• Legal and Regulatory Obligations: To comply with applicable legal requirements, respond to lawful requests from authorities, and maintain records required under applicable law.

4 Legal Basis for Processing

lk999 processes personal data only where a valid legal basis exists. The legal bases on which lk999 relies to process your personal information are as follows:

• Contractual Necessity: Processing is necessary to perform the contract between lk999 and the player — specifically, to provide gaming services, process payments, manage accounts, and deliver customer support. Without this processing, lk999 cannot provide its services.
• Legal Obligation: Processing is necessary to comply with legal obligations applicable to lk999, including anti-money-laundering requirements, know-your-customer obligations, and record-keeping requirements under applicable law.
• Legitimate Interests: Processing is necessary for lk999's legitimate interests, including fraud detection, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your fundamental privacy rights.
• Consent: For processing activities that are not strictly necessary to provide the service — principally the sending of marketing and promotional communications — lk999 relies on your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Cookies and Tracking Technologies

lk999 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. lk999 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential to the operation of the lk999 platform. They enable core functions such as session management, login persistence, and security verification. These cookies cannot be disabled without significantly impairing platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your selected language, display settings, and last visited game category — so that the platform provides a more personalised experience during subsequent visits.
• Analytics Cookies: lk999 uses anonymised analytics data to understand how players navigate the platform, which game categories are most popular, and where technical improvements are most needed. Analytics data is aggregated and does not identify individual players.
• Security Cookies: These cookies assist with fraud detection, bot identification, and session integrity monitoring, helping to protect your account and the platform against unauthorised access.

You may configure your browser to block or delete cookies. However, blocking strictly necessary cookies will prevent you from logging in and using the lk999 platform. Blocking functional or analytics cookies will not prevent access to the platform but may affect your experience. lk999 does not currently use third-party advertising cookies or cross-site tracking cookies for commercial advertising purposes.

6 Sharing Your Information

lk999 does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party. Your personal information is shared only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Service Providers: To process deposits and withdrawals, lk999 shares necessary financial and identity data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and cryptocurrency processing services. These providers process data only as directed by lk999 and are contractually bound to maintain data confidentiality.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate the game software delivered through the lk999 platform. Game session data — including bet amounts, game outcomes, and session identifiers — is transmitted to these providers' servers for game operation purposes. These providers are independent data controllers for their own game software operations.
• Identity Verification Services: Third-party KYC service providers may assist lk999 in verifying the authenticity of identity documents submitted by players. These providers process document images for verification purposes only and do not retain data beyond what is necessary for the verification task.
• Legal and Regulatory Authorities: lk999 may disclose personal data to law enforcement agencies, financial intelligence units, or other governmental bodies if required to do so by applicable law, court order, or lawful regulatory request. lk999 will, where legally permissible, notify the affected player of such a disclosure.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of lk999's assets, player personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance of any such transfer and given the opportunity to close their account if they do not wish their data to be transferred.

All third parties with whom lk999 shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the specified purposes communicated by lk999. lk999 does not permit third-party service providers to use player data for their own independent commercial purposes.

7 Data Retention

lk999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable legal, regulatory, or internal compliance obligations. The general data retention principles applied by lk999 are as follows:

• Active Account Data: Personal data associated with an active lk999 player account is retained for the duration of the account's active status plus a minimum period of five years following account closure, in accordance with standard financial record-keeping requirements.
• Transaction Records: Records of all deposits, withdrawals, and wagers are retained for a minimum of five years following the date of the transaction, for the purposes of financial audit, AML compliance, and dispute resolution.
• KYC Documents: Identity verification documents, including copies of NID cards, passports, and proof-of-address documents, are retained for a minimum of five years following account closure. After this period, documents are securely deleted unless a longer retention period is required by law.
• Customer Support Records: Communications records, including live chat transcripts and email correspondence, are retained for a period of three years following the closure of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Marketing Data: Email addresses and marketing preferences held for promotional communication purposes are retained only while the player maintains an active account or until the player withdraws consent to marketing communications, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with lk999's data destruction procedures. Anonymised data — from which it is not possible to identify an individual — may be retained indefinitely for statistical and analytical purposes.

8 Data Security

lk999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures in place include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and lk999's servers.
• Encryption of sensitive data fields at rest within lk999's database infrastructure, including financial data and identity document references.
• Role-based access controls limiting access to personal data to only those lk999 staff members whose job functions require it.
• Regular internal security audits and vulnerability assessments of the lk999 platform infrastructure.
• Two-factor authentication requirements for administrative access to systems containing player personal data.
• Contractual data processing agreements with all third-party service providers that handle player personal data on lk999's behalf.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, lk999 will notify the affected individuals without undue delay and will take all reasonable steps to contain and remediate the breach.

9 Your Privacy Rights

As a lk999 player, you hold a number of rights with respect to your personal data. lk999 is committed to upholding these rights and will respond to all valid privacy rights requests within a reasonable timeframe, typically within 30 calendar days of receipt of a verified request. Your rights include:

• Right of Access: You have the right to request a copy of all personal data that lk999 holds about you. We will provide this in a structured, commonly used, and machine-readable format upon verification of your identity.
• Right to Rectification: If any personal data held by lk999 is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain details directly from within your lk999 account settings, or by contacting our support team.
• Right to Erasure: You have the right to request deletion of your personal data. This right is subject to certain limitations — for example, lk999 is required to retain transaction records for a minimum period under applicable financial regulations. We will advise you clearly about which data can be deleted immediately and which must be retained under legal obligations.
• Right to Restriction of Processing: In certain circumstances, you may request that lk999 restrict the processing of your personal data — for example, while a dispute about the accuracy of the data is being resolved.
• Right to Data Portability: Where processing is carried out on the basis of your consent or by automated means, you have the right to receive your personal data in a portable format for transfer to another service provider.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing carried out under lk999's legitimate interests, on grounds relating to your particular situation.
• Right to Withdraw Consent: Where lk999 relies on your consent as the legal basis for processing — principally for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact lk999's support team using the contact details provided in Section 13 of this policy. lk999 will require you to verify your identity before processing any privacy rights request, in order to ensure that personal data is not disclosed to or altered by unauthorised parties.

10 Children and Minors

lk999 is strictly an adults-only platform. The minimum age to register and use lk999 is 21 years. lk999 does not knowingly collect personal data from individuals under the age of 21. If lk999 discovers that an account has been created by a person under 21, the account will be immediately suspended, all associated data will be reviewed, and the account will be permanently closed in accordance with our Terms & Conditions.

If you are a parent or guardian and you believe that a minor in your care has registered an account with lk999, please contact our support team immediately using the contact details in Section 13. lk999 will investigate the matter promptly and take all appropriate action, including deletion of data collected from the minor, subject to any legal retention obligations that may apply.

11 Third-Party Links and Services

The lk999 platform may contain references to, or integrations with, third-party services including game software providers, payment processors, and support tools. This Privacy Policy applies only to data processed by lk999 directly. Where you interact with third-party services — for example, when a game is loaded from a software provider's server, or when a payment is processed through bKash or Nagad — you are subject to that third party's own privacy policy.

lk999 is not responsible for the privacy practices of third-party game software providers, payment service providers, or any other external services. lk999 recommends that you review the privacy policies of any third-party services you interact with through the platform. lk999 does not endorse or make any representations about the privacy practices of third parties.

12 Changes to This Policy

lk999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. When material changes are made to this policy, lk999 will provide notice to registered players via the email address associated with their account, or via a prominent notice displayed on the lk999 platform.

The updated Privacy Policy will take effect from the date stated in the revision notice. Continued use of the lk999 platform after the effective date of an updated policy constitutes your acceptance of the revised terms. The "Last Updated" date displayed at the top of this document and in the notification bar above the table of contents will always reflect the date of the most recent revision.

lk999 encourages all players to review this Privacy Policy periodically to stay informed about how their personal data is being handled. If you do not accept a material change to this policy, you should stop using the lk999 platform and contact support to close your account.

13 Contact and Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights described in Section 9, or need to raise a data-related concern, please contact the lk999 support team. Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

Email: [email protected] — Please include "Privacy Request" in the subject line of your email for routing to the appropriate team member. Do not attach unencrypted copies of sensitive identity documents to email correspondence — use the secure document upload tool available within your lk999 account portal instead.

Live Chat: Available directly within the lk999 platform for all registered players. For privacy rights requests, please state clearly that you are submitting a data privacy request so that the support agent can direct your query appropriately.

When submitting a privacy rights request, please be prepared to verify your identity. lk999 requires identity verification before processing any request that involves access to, correction of, or deletion of personal data, to ensure the security and confidentiality of all player information.