Luck2 handles your personal data with the utmost seriousness and in full compliance with the Lei Geral de Proteção de Dados (LGPD). This document explains exactly what information we collect, why we collect it, how we use it, and what your rights are as a data subject.
Six pillars that guide how your data is handled on the platform.
All data transmitted between your device and luck2's servers is protected by 256-bit SSL encryption — the same standard used by digital banks like Nubank and Itaú. No information travels exposed over the network.
Luck2 collects only the data strictly necessary to provide the service, verify user identity, and meet legal obligations. We do not collect unnecessary information or sell data for third-party commercial purposes.
Luck2 operates in full compliance with the General Data Protection Law (Lei nº 13.709/2018). All internal data processing procedures are reviewed on a regular basis to ensure ongoing alignment with Brazilian legislation.
You can request access to, correction of, portability of, or deletion of your data at any time, directly through our support channel. Your data subject rights are respected without unnecessary red tape.
When we share data with technical partners — payment processors, game providers — we do so under strict confidentiality agreements and share only the minimum necessary to deliver the service.
In the event of any security incident that may affect your personal data, luck2 will notify the affected users and the Autoridade Nacional de Proteção de Dados (ANPD) within the legal timeframes established by the LGPD.
Luck2 — accessible at luck2.best — is the controller of the personal data processed under this Privacy Policy. For the purposes of the Lei Geral de Proteção de Dados (LGPD), a "controller" is the entity that determines what data is collected, why it is collected, and how it is used.
Luck2 is a Sports Betting and online casino platform built for the Brazilian market, covering football (Brasileirão Série A, Copa do Brasil, Libertadores), volleyball, e-sports, blackjack, roulette, and more. All services are offered in BRL (R$) and are intended exclusively for the Brazilian audience.
To contact luck2 about any privacy or data processing matter, please use the email suporte@luck2.best with the subject line "Privacy – LGPD".
Data Protection Officer (DPO): luck2 has a Data Protection Officer responsible for overseeing internal LGPD compliance and serving as the communication channel with the Autoridade Nacional de Proteção de Dados (ANPD). To reach the DPO directly: dpo@luck2.best.
Luck2 collects personal data at different points during your interaction with the platform. Below, we outline the categories of data collected and the situations in which each occurs.
| Category | Examples | Collection Point |
|---|---|---|
| Identity | Full name, CPF, date of birth | Registration |
| Contact | Email, mobile, address | Registration / Update |
| KYC Documents | Government-issued ID (RG or CNH), proof of address | Account verification |
| Financial | Pix key, card details | Deposit / Withdrawal |
| Platform usage | Betting history, sessions | Continued use |
| Technical | IP, browser, device | Platform access |
Luck2 uses the personal data collected solely for the purposes described below. No information is used for purposes not listed here without the user's express consent.
Important: luck2 does not use your data to sell third-party advertising or to build behavioral profiles that are commercialized outside the platform. Your data exists to improve your experience on luck2 — not to generate revenue in other ways.
The LGPD requires that all personal data processing have a specific legal basis. luck2 processes your data in accordance with the following legal grounds set out in Article 7 of Lei nº 13.709/2018:
Where processing is based on your consent, you may withdraw that consent at any time without affecting your use of luck2 services that don't rely on that legal basis. Consent can be withdrawn directly in your account settings or through support.
Luck2 does not sell users' personal data. Sharing only occurs in the situations described below, always with appropriate contractual safeguards in place.
To deliver its services, luck2 shares the minimum necessary data with the following types of partners, all bound by confidentiality and data protection agreements:
Luck2 may share data with government authorities, regulatory bodies, and judicial entities when required by law, court order, or formal request from a competent authority. In such cases, data sharing is limited to the minimum required by the applicable legal instrument.
Luck2 retains personal data only for as long as necessary to fulfill the purposes for which it was collected or to meet legal obligations. Retention periods vary by data category:
Once the applicable retention period expires, data is securely deleted or irreversibly anonymized. Anonymized data may be retained for statistical purposes indefinitely, as it no longer allows identification of the data subject.
Luck2 implements a comprehensive set of technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Key measures in place include:
In the event of a security incident that results in real risk or harm to data subjects, luck2 will notify affected users by email as quickly as possible and report to the National Data Protection Authority (ANPD) within the 72-hour timeframe established by the LGPD. The notification to users will include the nature of the incident, the data affected, the measures taken, and recommendations for additional protection.
Your role in security: luck2 protects your data on the platform side, but you also share responsibility for your password and account access. Use a strong, unique password for luck2, enable 2FA in your account settings, and never share your credentials with anyone.
Luck2 uses cookies and similar technologies to ensure the platform works properly, improve the user experience, and — with your consent — personalize the content you see. Here's an overview of the types of cookies we use:
Required for the platform's basic operation. Without them, features such as login, the bet slip, and secure sessions would not function. These cookies cannot be disabled and do not collect personal information beyond what is technically necessary.
Used to understand how users interact with the platform — which pages are visited most, where errors occur, and how the registration flow can be improved. Data is collected in aggregate form and does not identify individual users. You can decline these cookies without any impact on platform functionality.
They allow luck2 to display relevant ads on other sites and measure campaign effectiveness. They are activated only with your explicit consent and can be revoked at any time in the platform's cookie settings.
You can manage your cookie preferences at any time through the platform's privacy settings panel, accessible in the footer of any page. You can also configure your browser to block or delete cookies — though this may affect the functionality of some parts of the platform.
Luck2 is a platform restricted to users aged 18 and over. We do not intentionally collect personal data from minors. Registration requires a CPF and date of birth, and the platform automatically verifies that the user meets the age requirement.
If luck2 identifies at any time that an account was created by a minor, the account will be immediately suspended, the data will be deleted, and any existing balance will be returned to the original payment method following an investigation.
If you suspect that a minor has created a luck2 account using your data or someone else's, contact support immediately so the case can be handled as a priority.
Parental controls: If you share a device with minors, we recommend enabling parental controls on your browser and making sure your luck2 login credentials are never saved in a way that could be accessed by others.
The LGPD grants you, as the data subject of personal data processed by luck2, a comprehensive set of rights. All of them can be exercised at any time at no cost by emailing suporte@luck2.best with the subject line "LGPD Rights".
Request a copy of all personal data luck2 holds about you, including the purposes of processing and the recipients with whom it has been shared.
Request the correction of outdated, incomplete, or incorrect data — for example, a change of address, email, or registered phone number.
Request the deletion of data that is unnecessary or processed in violation of the LGPD. Some data may be retained to fulfill legal obligations even after a deletion request.
Receive your data in a structured, machine-readable format for transfer to another controller, in accordance with ANPD regulations.
Object to processing based on legitimate interest, particularly for direct marketing purposes. luck2 will assess the objection and cease processing if no overriding legal basis exists.
Withdraw at any time any consent given for processing based on this legal ground — such as marketing emails or analytics cookies — without affecting your access to luck2's core services.
Requests under LGPD data subject rights will be responded to within up to 15 business days from receipt confirmation. luck2 may request additional information to verify the identity of the requestor before processing sensitive requests, such as data deletion or portability.
In some cases, personal data may be processed by luck2's technical partners operating outside Brazil — for example, cloud infrastructure providers or international security software vendors. In such cases, luck2 ensures that transfers are carried out with the appropriate safeguards set out in the LGPD, including:
Financial data and KYC documents of Brazilian users are preferably stored on servers located in Brazil or in countries with adequacy recognition granted by the ANPD. luck2 periodically reviews international transfers to ensure ongoing compliance.
Luck2 may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered. When significant changes are made, users will be notified by email at least 10 days before the new terms take effect.
The most up-to-date version of this Policy will always be available at luck2.best/privacy-policy, with the last updated date shown at the top of the document. Continued use of the platform after changes take effect constitutes acceptance of the updated terms. If you do not agree with the changes, you may close your account and request data portability or deletion as described in section 10.
Changes that expand data collection or materially alter processing purposes will never be implemented without prior notice and, where applicable, renewed explicit consent from the user.
For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please use the channels below:
The standard response time for personal data requests is up to 15 business days. For urgent requests — such as suspected unauthorized account access — the deadline is 24 business hours. All communications regarding personal data are logged and retained by luck2 for the minimum period required by the LGPD.
Your rights under the LGPD — exercisable at any time, at no cost.
Request a complete copy of all data luck2 holds about you. We'll deliver it within 15 business days.
Outdated or incorrect data? Request a correction through support and we'll update it within up to 5 business days.
Request the deletion of your data. Some data is retained due to legal obligations, but we will inform you of what is kept and why.
Receive your data in a structured format to transfer to another service, in accordance with ANPD regulations.
Disagree with a specific use of your data? Submit your objection and we'll review it within up to 15 business days.
No longer want to receive promotional emails? Withdraw your consent at any time, with no impact on your service.
To exercise any of these rights, send an email to suporte@luck2.best with the subject "LGPD Rights" and describe your request.
This Policy is part of a set of documents that govern your relationship with luck2.
Platform usage rules, registration, betting, payments, and bonuses.
Read documentSelf-control tools, limits, self-exclusion, and support resources.
Read documentQuestions about data, account, payments, and privacy answered directly.
Read documentLuck2 is committed to protecting your personal data and fully complying with Brazil's General Data Protection Law (Lei nº 13.709/2018). Our Data Protection Officer (DPO) is available at dpo@luck2.best for any privacy-related questions. You can also exercise your rights as a data subject by contacting us at suporte@luck2.best with the subject line "LGPD Rights".