lu777 Privacy Policy

1. What Data We Collect

1.1 Account Registration Data

When you create a lu777 account, we collect: Full name (as it appears on your government-issued ID), date of birth (to verify you are 21 years or older), residential address in Bangladesh (street, city, postal code), email address, mobile phone number (for two-factor authentication and account notifications), username and password (password is stored using one-way cryptographic hashing and cannot be retrieved by lu777 staff).

1.2 Identity Verification (KYC) Documents

Before processing your first withdrawal, we require proof of identity including: Government-issued ID (Bangladesh National ID card or passport — scanned copy or clear photo), proof of address (utility bill, bank statement, or tenancy agreement dated within the last 3 months), selfie photograph holding your ID (optional, requested only if we need additional verification). These documents confirm your identity and age, prevent fraud, and comply with anti-money laundering regulations.

1.3 Financial & Transaction Data

We collect information related to deposits and withdrawals including: Payment method (bKash, Nagad, Rocket, bank transfer, etc.), transaction amounts, transaction dates and times, payment account identifiers (masked — we never store your complete bKash PIN or bank account password). We do not store your full credit card numbers or CVV codes. All payment data is processed through encrypted payment gateways and stored securely according to payment card industry (PCI) standards.

1.4 Gaming Activity & Behavioural Data

To provide personalised service and detect unusual activity, we record: Games played (slots, live casino, sports bets), bet amounts and outcomes, session duration and frequency, bonus claims and wagering progress, favourite games and betting patterns. This data helps us identify problem gambling behaviour, customise game recommendations, and detect fraud or collusion.

1.5 Technical & Device Data

When you access lu777.io, our systems automatically log: IP address (to verify your geographic location in Bangladesh), device type (desktop, mobile, tablet), operating system and browser version, screen resolution, language settings, access times and dates, pages viewed and clicks made. We use this technical data to optimise platform performance, troubleshoot errors, and detect unauthorised access attempts.

1.6 Communications & Support Data

When you contact lu777 customer support via live chat, email, or phone, we record: Your messages and inquiries, support agent responses, case notes and resolution status, chat transcripts and email threads. This data ensures continuity of service, helps us train support staff, and provides evidence if disputes arise.

2. Why We Collect Data

lu777 collects personal data for four primary reasons:

• Service Delivery: To create and manage your account, process deposits and withdrawals, deliver games and betting services, and provide customer support.
• Legal Compliance: To verify your identity and age, comply with anti-money laundering (AML) and Know Your Customer (KYC) regulations, prevent fraud, and maintain transaction records required by law.
• Security & Fraud Prevention: To detect suspicious account activity, prevent multiple accounts, identify collusion or bonus abuse, and protect both your account and the integrity of our platform.
• Service Improvement: To analyse how players use our platform, identify popular games, optimise user experience, develop new features, and provide personalised game recommendations based on your preferences.

We do not collect data for purposes unrelated to operating a safe, compliant, and enjoyable online gaming platform.

3. How We Use Your Data

Data Category	Purpose of Use
Registration Data	Account creation, login authentication, identity verification, age validation (21+), communication with you regarding your account.
KYC Documents	Age and identity verification before first withdrawal, AML compliance, fraud prevention, confirming address for geo-restriction enforcement.
Financial Data	Processing deposits and withdrawals, calculating account balances, generating transaction history, complying with financial regulations, detecting money laundering.
Gaming Activity	Delivering games and betting services, applying bonus terms and wagering requirements, identifying problem gambling patterns, personalising game suggestions, fraud detection.
Technical Data	Platform security, geo-location verification, troubleshooting technical issues, optimising website performance, detecting unauthorised access attempts.
Communications	Providing customer support, resolving account issues, investigating disputes, improving support quality, maintaining records of agreements.

4. Legal Basis for Processing

lu777 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing gaming services, processing payments, delivering customer support).
• Legal Obligation: We are required by law to collect and process certain data (age verification, KYC/AML compliance, maintaining transaction records for regulatory authorities).
• Legitimate Interest: We have a legitimate business interest in preventing fraud, ensuring platform security, detecting problem gambling, and improving our services. We balance these interests against your privacy rights.
• Consent: For marketing communications and non-essential cookies, we obtain your explicit consent. You may withdraw consent at any time.

5. Data Sharing & Third Parties

5.1 When We Share Data

lu777 shares your personal data only when absolutely necessary and only with trusted partners who assist us in delivering services. We do not sell your data to advertisers or marketing companies. Data sharing occurs in the following limited circumstances:

• Payment Processors: bKash, Nagad, Rocket, and bank payment gateways receive your payment account details to process deposits and withdrawals. These partners are bound by strict confidentiality agreements and data protection standards.
• Identity Verification Services: Third-party KYC providers may receive your ID documents to verify your identity and age. Verification data is encrypted and processed in secure environments.
• Game Providers: When you play games from providers like Pragmatic Play, Evolution Gaming, NetEnt, or Microgaming, minimal data (username, bet amounts, game results) is shared to deliver the gaming experience. Game providers do not receive your email, address, or financial details.
• Customer Support Tools: Live chat software and ticketing systems process your support inquiries. These tools are hosted on secure servers with end-to-end encryption.
• Legal & Regulatory Authorities: If required by law, court order, or regulatory investigation, we may disclose your data to Bangladesh authorities, law enforcement, or dispute resolution bodies.

5.2 Third-Party Service Standards

All third-party partners with access to your data must sign data processing agreements committing them to: protect your data using industry-standard security measures, use your data only for the specific purpose we authorised, never sell or share your data with other parties without permission, delete or anonymise your data when it is no longer needed.

6. Security Measures

6.1 Encryption & Secure Infrastructure

All data transmitted between your device and lu777 servers is encrypted using 256-bit SSL (Secure Socket Layer) technology — the same encryption standard used by banks. Our servers are hosted in secure data centres with 24/7 monitoring, biometric access controls, fire suppression systems, and redundant power supplies. Database servers are isolated from public internet access and protected by multiple firewalls.

6.2 Access Controls

Only authorised lu777 employees with a legitimate need can access personal data. Access is granted on a role-based basis (e.g., customer support agents can view account details but not KYC documents; finance staff can process withdrawals but not view gameplay history). All access is logged and audited. Staff are trained in data protection principles and sign confidentiality agreements.

6.3 Password Protection

Your password is never stored in plain text. We use one-way cryptographic hashing (bcrypt with salt) to store password hashes. Even lu777 administrators cannot retrieve your original password. If you forget your password, you must reset it via email verification — we cannot "look up" or "send you" your existing password.

6.4 Regular Security Audits

lu777 conducts quarterly penetration testing and vulnerability assessments to identify and fix security weaknesses before they can be exploited. We maintain an incident response plan to quickly address any data breach or security event.

7. Data Retention

lu777 retains your personal data for the following periods:

Data Type	Retention Period
Account & Profile Data	Duration of active account + 5 years after account closure
KYC Documents	5 years after account closure (regulatory requirement)
Transaction History	5 years after transaction date (financial regulations)
Gaming Activity Logs	3 years (fraud detection and dispute resolution)
Support Communications	3 years after case closure
Marketing Preferences	Until you withdraw consent, then deleted within 30 days

After retention periods expire, personal data is securely deleted or anonymised so it can no longer identify you. Anonymised data (with all personal identifiers removed) may be retained indefinitely for statistical analysis and platform improvement.

8. Your Privacy Rights

As a lu777 player, you have the following rights regarding your personal data:

To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond within 30 days. If your request requires additional verification to protect your account security, we may ask for proof of identity before proceeding.

9. Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files stored on your device when you visit lu777.io. They help us recognise your device, remember your preferences, keep you logged in, and analyse how you use our platform. Cookies do not contain personal information like your name or email — they typically store anonymous identifiers.

9.2 Types of Cookies We Use

• Essential Cookies: Required for the website to function. These enable login, session management, security features, and payment processing. You cannot opt out of essential cookies.
• Performance Cookies: Collect anonymous data about how you use lu777 (pages visited, time spent, errors encountered) to help us improve website performance and user experience.
• Functional Cookies: Remember your preferences (language, currency, favourite games) so we can provide a personalised experience.
• Analytics Cookies: Used by Google Analytics or similar tools to understand traffic sources, user demographics, and behaviour patterns. Data is anonymised and aggregated.

9.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block third-party cookies, delete existing cookies, or receive warnings before new cookies are stored. Note that blocking essential cookies will prevent you from using lu777 services. For detailed instructions, visit your browser's help section (Chrome, Firefox, Safari, Edge all offer cookie management tools).

10. Children's Privacy

lu777 services are strictly for adults aged 21 years and older. We do not knowingly collect personal data from anyone under 21. If you are under 21, do not create an account, provide any personal information, or use lu777 services. If we discover that a user is under 21, we will immediately close the account, void all bets, and delete all personal data associated with that account (after returning any deposits made).

Parents and guardians should monitor their children's internet usage. If you believe a minor has created a lu777 account or provided personal data to us, contact [email protected] immediately so we can take corrective action.

11. International Data Transfers

lu777 primarily operates servers and data storage facilities within secure jurisdictions that provide adequate data protection standards. In some cases, your personal data may be transferred to or processed by service providers located outside Bangladesh. When international transfers occur, we ensure that:

• The receiving country provides adequate data protection standards recognised internationally.
• Data processing agreements include contractual clauses requiring the same level of protection as this Privacy Policy.
• Transfers are made using secure, encrypted channels.
• Only the minimum data necessary is transferred.

You have the right to obtain information about the safeguards we use for international transfers by contacting [email protected].

12. Contact & Complaints

12.1 Data Protection Officer

For questions about this Privacy Policy, data protection practices, or to exercise your privacy rights, contact our Data Protection Officer:

Email: [email protected]
Subject Line: Privacy Inquiry / Data Request / Privacy Complaint
Response Time: Within 30 days

12.2 Filing a Complaint

If you believe lu777 has violated your privacy rights or mishandled your personal data, you have the right to file a complaint with our Data Protection Officer. If you are not satisfied with our response, you may escalate the matter to the relevant data protection authority in your jurisdiction or seek legal advice.

12.3 Policy Updates

lu777 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new features. Significant changes will be communicated to you via email or a prominent notice on the website. The "Last Updated" date at the top of this policy reflects the most recent revision. Continued use of lu777 after policy updates constitutes your acceptance of the revised terms.