lkx8 Privacy Policy

lkx8 ("we", "us", "our", "the Platform") is an online betting and casino platform operating at https://lkx8.io and serving users primarily in Bangladesh. For the purposes of this Privacy Policy, lkx8 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed.

Our platform provides sports betting (including cricket BPL, T20 World Cup, and IPL markets), live casino games, slots, blackjack, bingo, and crash games to registered adult users aged 21 and above. All financial transactions on the platform are conducted in Bangladeshi Taka (৳) via Approved Payment Methods including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and internet banking.

If you have any questions about this Privacy Policy or about how lkx8 handles your personal data, you may contact our Data Support team at [email protected] (plain text — not a clickable link) at any time. Our support team operates 24 hours a day, 7 days a week, aligned to Bangladesh Standard Time (BST, UTC+6).

lkx8 collects personal data across several categories. The table below summarises each category, specific data points within it, and the primary reason for collection:

lkx8 does not collect special category data (such as health data, racial or ethnic origin, religious beliefs, or biometric data) except where a submitted identity document incidentally contains such information, in which case that information is not extracted, processed, or stored separately.

lkx8 collects personal data through the following means:

• Direct submission: Information you provide when registering for an account, completing KYC verification, making a deposit or withdrawal request, contacting support, or participating in a promotion.
• Automated collection: Technical and behavioural data collected automatically as you interact with the lkx8 platform, including via cookies, log files, and analytics tools. See Section 7 (Cookies & Tracking) for full details.
• Payment processors: Transaction confirmation data received from payment partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and internet banking gateways when you initiate a deposit or withdrawal.
• Identity verification services: Data received from third-party KYC verification providers when your submitted documents are checked against reference databases.
• Fraud prevention services: Risk signals and device intelligence data received from third-party fraud detection partners used to protect the platform and all of its users.
• Publicly available sources: In limited circumstances, lkx8 may cross-reference publicly available information (such as self-exclusion registers) to meet responsible gaming obligations.

lkx8 uses the personal data we collect for the following specific purposes:

1. Account creation and management: Setting up, maintaining, and administering your lkx8 account, including processing login requests, applying account-level settings, and managing responsible gaming tools such as deposit limits and self-exclusion.
2. Identity verification (KYC): Confirming that you meet the minimum age requirement of 21 years and verifying your identity before processing withdrawal requests, as required for platform integrity and compliance.
3. Payment processing: Facilitating deposits into and withdrawals from your account wallet in Bangladeshi Taka (৳) via your chosen Approved Payment Method.
4. Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and other Prohibited Activity as defined in the lkx8 Terms & Conditions.
5. Responsible gaming compliance: Monitoring your betting and gaming behaviour to identify patterns that may indicate problem gambling, and communicating relevant responsible gaming resources where appropriate.
6. Customer support: Responding to account queries, disputes, complaints, and technical issues submitted via email, live chat, or WhatsApp support channels.
7. Platform improvement: Analysing aggregated, anonymised usage data to improve game performance, platform stability, and user experience across devices commonly used in Bangladesh.
8. Marketing communications: Sending promotional offers, bonus notifications, and lkx8 news updates to your registered email or mobile number, where you have provided consent to receive such communications. See Section 12 for your opt-out rights.
9. Legal compliance: Meeting our obligations under applicable laws, responding to lawful requests from authorities, and maintaining records required for audit and regulatory review purposes.

lkx8 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing that is required to perform the contract between you and lkx8 — including account management, payment processing, and KYC verification — is carried out on the basis that it is necessary to fulfil our obligations to you as a registered account holder.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming compliance is carried out on the basis of lkx8's legitimate interests in operating a safe, fair, and sustainable platform, where those interests are not overridden by your rights and freedoms.
• Legal obligation: Processing required to comply with applicable laws — such as retention of financial records, KYC document storage, and responses to lawful authority requests — is carried out to fulfil lkx8's legal obligations.
• Consent: Processing for marketing communications is carried out only where you have provided clear, informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

lkx8 may share your personal data with the following categories of recipients:

• Payment processors: bKash, Nagad, Rocket, Upay, and card/banking gateway operators receive the transaction data necessary to process your deposit or withdrawal request. Each processor operates under their own privacy policy and applicable financial regulations.
• KYC and identity verification providers: Third-party services contracted by lkx8 to verify the authenticity of identity documents submitted during the KYC process. These providers are contractually bound to process your data solely for verification purposes.
• Fraud detection and security services: Specialised technology partners that provide device fingerprinting, IP reputation analysis, and behavioural fraud signals to protect the lkx8 platform and all users.
• Game content providers: Casino game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive session-level technical data necessary to deliver their games within the lkx8 platform environment.
• IT and infrastructure providers: Cloud hosting, data storage, and platform infrastructure providers who process data on lkx8's behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by law, court order, or lawful regulatory request, lkx8 will disclose the minimum personal data necessary to comply with that obligation.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by lkx8, subject to professional confidentiality obligations.

All third-party service providers who receive personal data on lkx8's behalf are required to implement appropriate technical and organisational security measures and to process that data only for the specific purposes for which it was shared.

lkx8 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential to the operation of the lkx8 platform. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your platform preferences such as language settings, display preferences, and recently visited game categories to improve your experience on return visits.
• Analytics cookies: Collect anonymised or pseudonymised data about how users navigate the platform — including pages visited, time on page, and interaction patterns — to help lkx8 identify areas for improvement. This data is aggregated and does not identify you individually.
• Security cookies: Used by fraud detection systems to identify and flag suspicious device behaviour, multiple account usage from the same device, or automated bot activity.

lkx8 does not use third-party advertising cookies or serve behavioural advertising based on your lkx8 activity to external advertising networks.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent access to the lkx8 platform. For mobile users accessing lkx8 via a mobile browser on devices common in Dhaka, Chittagong, Sylhet, and other Bangladeshi cities, cookie behaviour is governed by your mobile browser's privacy settings.

lkx8 retains personal data for the periods described below, after which data is securely deleted or irreversibly anonymised:

Where lkx8 is required by law to retain data for a longer period than stated above, the legally mandated retention period will apply. Once data is no longer required, it is deleted using secure erasure methods or anonymised so that it can no longer be linked to any identifiable individual.

Our security measures include, but are not limited to:

• SSL/TLS encryption: All data in transit between your browser or mobile device and the lkx8 platform is encrypted using current SSL/TLS protocols, protecting your credentials and financial data during transmission.
• At-rest encryption: Sensitive stored data — including identity documents, financial records, and KYC files — is encrypted at rest on lkx8's servers using AES-256 or equivalent encryption standards.
• Password hashing: Account passwords are stored as irreversible cryptographic hashes. lkx8 staff cannot read your password. If you forget your password, it must be reset rather than retrieved.
• Access controls: Access to personal data within lkx8's internal systems is restricted to personnel who need it to perform their job functions, governed by role-based access controls and enforced by multi-factor authentication for all staff accounts.
• Two-factor authentication (2FA): Account holders are strongly encouraged to enable 2FA on their lkx8 accounts. This feature is available at no cost from within the account security settings and significantly reduces the risk of unauthorised account access.
• Penetration testing and security audits: lkx8 conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the unlikely event of a data security incident that affects your personal data, lkx8 will notify affected account holders as required by applicable law and will take immediate steps to contain and mitigate any harm.

While lkx8 takes all reasonable steps to secure your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying lkx8 immediately at [email protected] if you suspect any unauthorised access to your account.

As a registered lkx8 user, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request":

• Right of access: You may request a copy of the personal data lkx8 holds about you. We will provide this in a structured, readable format within 30 days of receiving a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly from within your account settings.
• Right to erasure: You may request the deletion of personal data that is no longer necessary for the purposes for which it was collected, subject to lkx8's legal retention obligations. Data that lkx8 is required to retain by law cannot be deleted prior to the expiry of the applicable retention period.
• Right to restrict processing: In certain circumstances — such as while a dispute about data accuracy is being resolved — you may request that lkx8 restrict its processing of your personal data to storage only.
• Right to data portability: You may request a copy of the personal data you provided to lkx8 in a structured, machine-readable format (such as CSV or JSON) for the purpose of transferring it to another service.
• Right to withdraw consent: Where lkx8 processes your data on the basis of your consent (primarily for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing of your personal data carried out on the basis of lkx8's legitimate interests, where you believe that interest is outweighed by your rights and freedoms. lkx8 will assess the objection and respond within 30 days.

lkx8 will respond to all verified data rights requests within 30 days. In complex cases, this period may be extended by a further 30 days, in which case lkx8 will notify you of the extension and the reasons for it before the initial 30-day period expires. lkx8 will not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive in nature.

lkx8 takes the protection of minors extremely seriously. During the registration process, all users are required to confirm they are at least 21 years of age. All accounts are subject to KYC age verification before withdrawal requests are processed. If lkx8 discovers at any point — whether during KYC verification, routine account review, or as a result of a third-party report — that personal data has been collected from a person under the age of 21, the following steps will be taken immediately:

1. The account will be suspended pending investigation.
2. All personal data associated with the account will be identified and flagged for deletion.
3. Any balance in the account will be handled in accordance with applicable legal requirements and returned to the payment source where possible.
4. The account will be permanently closed and the device identifiers associated with it will be blocked from re-registration.

Parents and guardians who believe a minor may have accessed the lkx8 platform should contact our support team immediately at [email protected]. We will prioritise all such reports and take appropriate action within 24 hours.

With your consent, lkx8 may send you marketing communications about bonuses, promotions, new games, and platform features via email, SMS, or in-platform notifications. You may provide or withdraw consent at any time through the following channels:

• Account settings: Navigate to the Notifications section of your lkx8 account settings to manage your communication preferences at any time.
• Email unsubscribe: Every marketing email sent by lkx8 includes a clearly visible unsubscribe link. Clicking this link will remove you from lkx8's marketing mailing list within 5 business days.
• Support request: Contact lkx8 support at [email protected] with the subject line "Unsubscribe from Marketing" and we will update your preferences within 24 hours.

Opting out of marketing communications will not affect your ability to use the lkx8 platform, nor will it prevent lkx8 from sending you transactional communications that are necessary for the management of your account — such as deposit confirmations, withdrawal notifications, KYC verification requests, and account security alerts. These service communications are not optional and will continue regardless of your marketing preference settings.

The lkx8 platform integrates with third-party services to deliver its full range of features. Each third-party integration involves a defined and limited data exchange governed by a contractual data processing agreement. The categories of third-party services currently integrated into the lkx8 platform include:

• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studios whose games are available on lkx8. These providers may receive session tokens and technical identifiers to authenticate your game session within their systems.
• Payment gateways: bKash, Nagad, Rocket, Upay, and card processing gateways operated by Visa and Mastercard partners. These services receive only the data required to execute your specific payment transaction.
• Analytics services: Aggregated and anonymised platform analytics tools used to monitor performance, uptime, and user flow patterns. No individually identifiable data is shared with analytics providers.
• Security and fraud prevention: Device intelligence and fraud scoring services that process technical identifiers (IP address, device fingerprint, browser data) to assess the risk level of login and transaction events.

lkx8 is not responsible for the privacy practices of third-party services operating outside the lkx8 platform environment. If you navigate away from lkx8 to a third-party website through any link, the privacy policy of that third-party site will govern the collection of your data from that point onward. lkx8 does not link to external websites other than those necessary to deliver payment services.

lkx8 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Privacy Policy, lkx8 will:

• Update the "Last Updated" date at the top of this document.
• Send a notification to your registered email address summarising the key changes at least 14 days before they take effect.
• Display a prominent notice on the lkx8 platform for a period of not less than 14 days prior to the changes becoming effective.

Minor changes — such as clarifications that do not alter substantive rights, corrections of typographical errors, or updates to contact information — may be made without prior notice and will take effect upon publication.

Your continued use of the lkx8 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any updated version of this Privacy Policy, you must stop using the lkx8 platform and close your account by contacting support at [email protected].

We recommend that you review this Privacy Policy periodically to stay informed about how lkx8 protects your personal data. The most current version of this document will always be accessible at https://lkx8.io/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way lkx8 handles your personal data, please reach out to our dedicated support team through any of the following channels:

• Email: [email protected] — please include "Privacy Policy Enquiry" in the subject line for fastest routing.
• Live Chat: Available 24/7 directly on the lkx8 platform. Access live chat from the support section of your account dashboard.
• WhatsApp: Available 24/7. WhatsApp contact details are provided within your account dashboard after login.

Our support team operates around the clock, 7 days a week, in alignment with Bangladesh Standard Time (BST, UTC+6). We aim to respond to all privacy-related enquiries within 2 business days and to resolve all data rights requests within the 30-day statutory timeframe.

lkx8 is committed to resolving all data privacy concerns fairly and transparently. We value every registered player in Bangladesh and take our responsibility as a data controller seriously.