Reference

How lucky9 Handles Your Privacy

We collect only what we need to run your account and process payments through bKash, Nagad or Rocket. This page explains exactly what data we hold, why we hold it, how long we keep it and how you can request changes or deletion.

Data Collection TransparencybKash & Nagad Payment PrivacyAccount Deletion RightsCookie ControlEncryption in Transit
lucky9 How lucky9 Handles Your Privacy
DATA HANDLING PRACTICES

How We Protect and Manage Your Information

Your data sits behind multiple layers of protection. We do not simply promise safety — here is what actually happens when your information moves through our systems, from the moment you tap 'deposit' in your Nagad app to the point your session ends.

Encryption Standards

All data transmitted between your device and our servers travels through encrypted channels. Payment details from bKash, Nagad or Rocket are never stored in plain text on our side — they are tokenised immediately after the transaction completes.

Cookie Usage

We use session cookies to keep you logged in and analytics cookies to understand how pages perform. You can disable non-essential cookies in your browser settings at any time. We never use cookies to track you across unrelated sites.

Account Security

Your account is protected by OTP verification sent to your registered mobile number. If you log in from a new device, we trigger an additional verification step. Failed login attempts lock the account temporarily to prevent unauthorised access.

Data Retention

Active account data stays on our servers while you use the platform. Once you close your account, personal records enter a retention window dictated by regional requirements, then we delete or fully anonymise them. No indefinite storage.

Third-Party Sharing

We share data only with payment processors (bKash, Nagad, Rocket) to complete your transactions and with infrastructure partners who maintain our servers. Each partner operates under strict data-handling agreements. We never sell personal information.

Your Rights and Requests

You can ask us to export your data, correct inaccuracies or delete your account entirely. Submit a request through live chat, email or phone.

PRIVACY CONTACT PATHS

How to Reach Us About Your Data

Have a question about your personal information? You do not need to navigate a maze of forms. We keep our privacy-related contact paths straightforward — reach the right person within one message, whether you want a data export, a correction or full account deletion.

Live Chat Open the chat widget from any page on our site. Let the agent know your query is about personal data, and they will route you to the privacy desk. Available every day, and responses typically come within minutes during active hours.
Email Request Send your data request to our support email with the subject line 'Privacy Request' and your registered phone number. We acknowledge receipt within one working day and action most requests within a few days after verifying your identity.
Phone Support Call our Bangladesh support line and select the account-privacy option. Speak directly with an agent who can walk you through data access, correction or deletion while you are on the line. Verification uses your registered bKash or Nagad number.

Common Questions About Your Data at lucky9

Below are the questions our support team receives most often regarding personal data, cookies, account deletion and payment information handling. If your question is not covered here, reach out through any of the contact paths above.

We collect your name, phone number, email address and the wallet details you use for deposits — typically your bKash, Nagad or Rocket account number. We also log your device type and IP address for security and fraud-prevention purposes.

No. Your full payment credentials are never stored on our servers. When you deposit through bKash or Nagad, we receive a transaction token confirming the payment went through. The actual PIN and wallet login stay entirely within your mobile wallet app.

Contact our support team via live chat, email or phone. Let them know you want full data deletion. After verifying your identity through your registered mobile number, we remove personal records within a few working days, subject to any regional retention obligations.

We share limited data with payment processors — bKash, Nagad, Rocket — to complete transactions and with infrastructure partners who maintain server security. Each operates under strict contractual data-handling terms. We do not sell or trade your data with advertisers.

Once your account is closed, we retain personal data only for the period required by applicable regulations in your region. After that window passes, records are permanently deleted or anonymised. You can ask support for the specific timeline that applies to you.

Yes, we use session cookies for login functionality and analytics cookies to monitor page performance. You can disable non-essential cookies through your browser settings. Doing so will not affect your ability to deposit, withdraw or access your account.

Our infrastructure partners operate servers in multiple regions to maintain uptime. Where data is processed outside Bangladesh, it remains subject to the same encryption and contractual protections described in this policy. Access depends on your local law and eligible regions.

We ask you to confirm the mobile number registered on your account — the same bKash, Nagad or Rocket number used for deposits. For sensitive requests like deletion, we may send an OTP to that number as an additional verification step.

Yes. If we make material changes to how your data is collected or used, we will notify you via email or an in-account message before the updated policy takes effect. You can then review the changes and decide whether to continue using the platform.

Absolutely. Submit a data-export request through live chat or email. After identity verification, we compile your account data — transaction history, profile details, session logs — into a downloadable file and send it to your registered email within a few working days.