Luck88 handles your personal information with care and accountability. This document explains what we collect, why we collect it, and how we protect your data under the LGPD — in plain language, no unnecessary jargon.
The Essentials
A summary of the most important points before reading the full document.
Luck88 collects only the data strictly necessary for operations: identification, financial transactions, and experience improvement. No information is collected without a defined purpose. If we don't need a piece of data to operate, we don't ask for it.
All financial transactions — Pix deposits, withdrawals, boleto — and personal registration data are protected by end-to-end SSL encryption. Traffic between your device and luck88's servers is never transmitted in plain text.
Luck88 does not sell, rent, or trade personal data with third parties for commercial purposes. Data sharing occurs only with service providers essential to operations (payment processors, KYC) and in response to duly substantiated legal requests.
You have a legally guaranteed right to access, correct, port, and request the deletion of your data at any time. luck88 responds to requests within 15 business days. Simply send an email to contato@luck88.express with your formal request.
Luck88 uses essential cookies (required for the site to function), analytical cookies (anonymous performance data), and preference cookies. Marketing cookies are optional and can be declined in your browser settings without affecting platform access.
Promotional emails and notifications about luck88 updates are sent only to users who gave explicit consent at registration or through their communication preferences. Unsubscribing takes effect immediately and is available in every message sent.
Executive summary: luck88 collects the personal data necessary to operate the platform, process payments in BRL, and meet legal obligations. Your data is protected by encryption, never sold, and you can exercise your LGPD rights at any time by contacting us. This policy is aligned with Law No. 13.709/2018 (LGPD).
This Privacy Policy describes how luck88, operator of the luck88.express platform, collects, uses, stores, and protects its users' personal data in compliance with the General Data Protection Law (LGPD — Law No. 13.709/2018) and other applicable Brazilian laws.
By creating an account, accessing the platform, or using any service provided by luck88 — Sports Betting, Live Casino, slots, poker, jackpots, or any other category —, you acknowledge that you have read and understood this Privacy Policy.
This Policy supplements the Terms and Conditions of luck88. In the event of any conflict between the two documents regarding the processing of personal data, this document takes precedence.
Data controller: luck88 acts as the controller of users' personal data, being responsible for decisions regarding the processing of that information. To exercise your rights or clarify any questions, please contact us at contato@luck88.express.
The luck88 collects personal data at different points throughout your interaction with the platform. Below are the data categories and the context in which they are collected:
Data provided directly by the user at registration:
Data collected automatically during platform use:
Data collected during verification processes (KYC):
The personal data collected by luck88 are used exclusively for the following purposes:
The luck88 does not use personal data for advertising segmentation on third-party platforms, profile selling, or any purpose not declared in this Policy.
As required by the LGPD, all personal data processing carried out by luck88 is grounded in a specific legal basis. The main bases used are:
Right to withdraw consent: when processing is based on consent, you may withdraw it at any time. Withdrawal does not affect processing that took place prior to the request. To withdraw consent, go to the communication preferences in your account or send an email to contato@luck88.express.
The luck88 does not sell, rent, or share personal data with third parties for commercial purposes. Data sharing occurs exclusively in the following situations:
Please note: luck88 will never request your personal data through unofficial channels. Be wary of any contact claiming to be from luck88 and asking for your password, banking details, or documents by phone, SMS, or messaging apps. If you receive a suspicious contact, report it immediately to support via the official chat or by emailing contato@luck88.express.
The personal data of users of luck88 are stored on servers with the following security controls:
In the event of a security incident that could compromise users' personal data, luck88 will notify the National Data Protection Authority (ANPD) and affected users within the timeframe established by the LGPD — within 2 business days for the regulatory body and within a reasonable timeframe for data subjects, with clear information about what occurred and the measures taken.
The luck88 uses cookies and similar technologies to ensure the platform functions properly. The types of cookies used are:
Third-party marketing cookies for retargeting purposes are not used by luck88. You can manage and disable cookies in your browser settings. Disabling essential cookies may prevent login and account-related features from working correctly.
The services of luck88 are intended exclusively for users aged 18 and over. The platform enforces mandatory age verification during registration and does not knowingly collect personal data from anyone under 18.
If luck88 identifies that data from a minor has been collected, the account will be immediately closed, the data will be deleted, and the legal guardian will be notified as applicable.
If you are the legal guardian of a minor and found that they created an account at luck88, contact support immediately via live chat or at contato@luck88.express. The case will be handled with priority and full confidentiality.
The LGPD grants data subjects — you — a robust set of rights that luck88 is committed to respecting. You may exercise any of the rights below by submitting a formal request to contato@luck88.express:
The response timeframe for luck88 to data subject requests is up to 15 business days. In cases requiring more complex analysis, the timeframe may be extended with prior notice to the requester.
Rights exercise channel: send your request to contato@luck88.express with the subject line "LGPD Rights Request", providing your full name, registered CPF, and the specific right you wish to exercise. The requester's identity will be verified before the request is processed.
The luck88 retains personal data for as long as necessary for the purposes stated in this Policy. The main retention periods are:
Once retention periods expire, data is securely deleted or irreversibly anonymized. Data whose retention was based solely on consent is deleted within 30 days of consent withdrawal.
Some technology and game providers that luck88 may process data outside Brazil. When this occurs, the platform ensures that transfers are carried out with the safeguards required by the LGPD, including:
The list of main countries to which data may be transferred, along with the applicable safeguards, can be requested at any time via contato@luck88.express.
The luck88 may update this Privacy Policy whenever necessary — due to operational changes, new services, regulatory updates, or improvements in clarity. The date of the last update is always shown at the top of this page.
For changes that significantly affect data subjects' rights or the purposes of data processing, luck88 will notify users by email at least 7 days before the changes take effect. For minor adjustments, changes may take effect immediately.
Continued use of the platform after a new version of this Policy takes effect constitutes acknowledgment and acceptance of the changes. If you do not agree with the updates, you may exercise your right to data deletion and close your account as described in the Terms and Conditions.
The luck88 has appointed a Data Protection Officer (DPO) as required by the LGPD. For any questions regarding the processing of personal data, the exercise of your rights, or inquiries about this Policy, you can reach us through the following channels:
If you are not satisfied with the response from luck88 to exercise your rights, you may file a complaint directly with the National Data Protection Authority (ANPD), the authority responsible for overseeing LGPD compliance in Brazil.
Current version: this Privacy Policy came into effect on January 2026. The most up-to-date version is always available at luck88.express/privacy-policy. Save a copy of this page for your reference.
Overview
A consolidated overview of what data is collected, what it is used for, and how long it is retained.
| Category | Data | Purpose | Legal Basis | Retention |
|---|---|---|---|---|
| Identification | Full name, CPF, date of birth | Registration, KYC, fraud prevention | Contract · Legal | 5 years after account closure |
| Contact | Email, mobile number, address | Communication, authentication | Contract | Account duration |
| Financial | Pix key, card details | Deposits and withdrawals in BRL | Contract · Legal | 5 years after transaction |
| KYC Documents | Government-issued ID, proof of address, selfie | Identity verification | Legal | 5 years after account closure |
| Navigation | IP address, session, pages visited | Security, product improvement | Legitimate interest | 13 months (anon.) |
| Bets/Games | Betting and casino history | Support, auditing, personalization | Contract · Legitimate interest | 5 years after account closure |
| Marketing | Communication preferences | Sending promotions and news | Consent | Until withdrawal |
LGPD in Practice
The LGPD gives you concrete rights over your information. Here's how to exercise them in practice.
Request a copy of all personal data luck88 holds about you. The report is sent by email within 15 business days of a verified request.
Found outdated or incorrect information in your profile? Submit a correction request directly through support. Identity-related data requires up-to-date documentation.
Request the deletion of data processed on the basis of consent. Data required to fulfill legal obligations (KYC, financial history) is retained for the legally required period even after the request is submitted.
Receive your data in a structured format (JSON or CSV) for transfer to another service. Available for profile data and transaction history upon formal request.
Object to processing based on legitimate interest where you have grounds related to your specific situation. luck88 evaluates each request individually and provides a reasoned decision.
Request detailed information about which third parties your data has been shared with, in what context, and for what purpose. We respond by email within 15 business days.
To exercise any of your rights, send an email to contato@luck88.express with the subject line "LGPD Rights Request"
Privacy in practice
When you create an account on luck88, deposits R$ 50.00 via Pix to bet on the Brasileirão and then checks the result on their phone, a series of data points circulates behind the scenes to make everything work. Full name, CPF, Pix key, IP address, betting history — information that, taken together, paints a fairly detailed picture of who you are and how you use the platform. The privacy policy exists precisely to make clear what happens with all of that.
At luck88, the approach is one of minimal collection. We collect what we need to operate — nothing more. To create an account, we need your name, CPF, date of birth, and contact details — information that allows us to verify your identity, confirm you are over 18, and ensure each CPF corresponds to exactly one account on the platform. To process a Pix, we need your key. To notify you that your withdrawal has been processed, we need your email or mobile number. We don't collect data for the sake of it.
Pix deserves special attention as it is the primary payment method at luck88. When you make a deposit of R$ 10.00 or request a withdrawal after winning a UFC bet, your banking details travel through the platform's infrastructure and reach the financial institutions responsible for processing. This transmission is protected by end-to-end TLS 1.3 encryption — meaning that even if someone intercepts the network traffic, all they will see is an unreadable string of characters, not your actual data. Financial data stored on luck88's servers is also encrypted at rest.
The General Data Protection Law (LGPD) is not just a regulatory requirement for luck88 — is a framework the platform adopts as its operational standard. Every instance of data processing has a documented legal basis: contract performance for core operations, legal obligation for KYC and financial compliance, legitimate interest for fraud prevention, and consent for marketing communications. This means no data is processed without justification — and every justification is auditable.
When we talk about fraud prevention, it's worth explaining what that means in practice at luck88. The platform analyzes behavioral patterns — IP addresses, devices used, betting frequency, deposit amounts — to identify activity that may indicate multiple accounts, bot usage, or money laundering. This analysis is largely automated and is designed to protect both the platform and other users. When a suspicious pattern is detected, the account may be placed under manual review, and the user always has the right to present their case to support.
Data sharing with third parties is the part of any privacy policy that raises the most questions — and understandably so. At luck88, sharing is restricted and documented. Banking details are transmitted to financial institutions (Nubank, Itaú, Bradesco, Banco do Brasil, and others) exclusively for Pix processing. KYC documents are handled by specialized partners under strict confidentiality agreements. Casino game providers — Pragmatic Play, PG Soft, NetEnt, and others — receive a session identifier and balance information required for gameplay, with no identifiable personal data beyond what is strictly necessary. And in the event of a formally substantiated legal request from a competent authority, luck88 provides the information required by law. That's it.
The rights established by the LGPD are concrete, and luck88 is built to address them. To find out what data we hold about you, simply email us requesting a data report. If you spot incorrect information in your profile, just submit a correction request. If you want your marketing data deleted because you no longer wish to receive promotions, the opt-out is immediate and does not affect your account access or betting history. Most requests are handled within 15 business days.
Cookies are another topic that requires clarity. The luck88 uses essential cookies — without them, login will not work. It also uses anonymous analytics cookies to understand how users navigate the platform and identify areas for improvement. It does not use retargeting cookies, does not sell profiles to advertising platforms, and does not track you outside the luck88.express domain. You can disable non-essential cookies in your browser settings without losing access to your account.
The data security of luck88 is continuously monitored. Vulnerability scans, periodic penetration testing, strict internal access controls, and encrypted backups stored in separate environments are all part of standard operations. In the event of an incident that compromises personal data, the platform notifies the ANPD within 2 business days and informs affected users with clear details about what happened and what steps were taken to address it.
Ultimately, privacy at luck88 is an extension of the same philosophy that drives the entire platform: clear rules, fast payouts, and respect for the user. Your data stays with the platform while you use the service, is protected as it should be, and belongs to you — you have real tools to access, correct, or delete it. This is not a marketing promise; it is documented here, with a defined legal basis and response timeframe.
Frequently Asked Questions
The most common questions about how your data is handled, answered straight to the point.
Responsible Gambling
Privacy and responsible gambling go hand in hand. You control your data and your experience.
Set daily, weekly, or monthly limits. Reductions take effect immediately; increases have a 7-day waiting period to protect the user.
Set a maximum session time and receive a notification when you reach it. Short breaks lead to better decision-making.
Pause your account for 24 hours, 7 days, 30 days, or indefinitely — effective immediately. No red tape, no judgment.
Age verification is mandatory at registration. Users under 18 are not permitted to access the luck88 platform under any circumstances.
You are reading the official privacy document of luck88, in compliance with the LGPD (Law 13.709/2018). For questions about your data, send an email to contato@luck88.express. Also refer to the Terms and Conditions for the platform's general terms of use.
Luck88 brings together real excitement — Brasileirão, UFC, Live Casino, progressive jackpots — with the security you deserve. Sign up in minutes, deposit via Pix, and get 24/7 support in Portuguese. Everything in BRL, everything transparent.