luky555 Privacy Policy

1. Who We Are

luky555 ("luky555", "we", "us", "our") operates the online gaming platform accessible at luky555.org, including its associated mobile applications for Android and iOS. luky555 is the data controller in respect of all personal data collected through the platform.

This Privacy Policy applies to all individuals who visit luky555.org, register an account, or interact with any luky555 service. It describes how luky555 collects, stores, processes, and protects your personal data in connection with providing our gaming services to players in Malaysia and elsewhere.

---

2. Personal Data We Collect

Depending on how you interact with luky555, we may collect the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and copies of government-issued identification documents (e.g., Malaysian MyKad or passport) where verification is required.
• Contact data: Email address, mobile phone number, and country of residence.
• Account data: Username, account registration date, account status, and communication preferences.
• Financial data: Payment method identifiers (e.g., last four digits of bank account or e-wallet reference), transaction history, deposit amounts, withdrawal records, and any documentation submitted in connection with a Know Your Customer (KYC) or source-of-funds check.
• Gaming activity data: Betting history, game sessions, wager amounts, win/loss records, bonus usage, and responsible gaming tool configurations.
• Technical data: IP address, device type and identifier, browser type and version, operating system, time zone, and platform access logs.
• Communications data: Records of your interactions with luky555 customer support, including live chat transcripts, email correspondence, and any attachments you provide.
• Usage data: Information about how you navigate and use the luky555 platform, including pages viewed, features used, and session duration.

We do not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless specifically required for regulatory compliance. Where such collection is necessary, it will be clearly notified to you at the point of collection.

---

3. How We Collect Your Data

luky555 collects personal data through the following channels:

• Direct provision: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or completing any form on the platform.
• Automated collection: Technical and usage data collected automatically when you access the luky555 platform, including through cookies, server logs, and device fingerprinting technologies.
• Third-party sources: Identity and fraud verification data from licensed identity verification service providers; transaction verification data from payment processors including Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment partners.
• Publicly available sources: Where permitted by law, luky555 may supplement account information with data from publicly available databases to assist with fraud prevention and regulatory compliance.

---

4. How We Use Your Personal Data

luky555 uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your luky555 account, including processing deposits, withdrawals, and account verification requests.
• Service delivery: To provide sports betting, live casino, slots, and other gaming products and to settle bets and game outcomes accurately.
• Identity and age verification: To verify that you are who you say you are and that you meet the minimum age requirement of 21 years.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, account compromise, and other prohibited activities.
• Regulatory compliance: To fulfil our obligations under applicable gaming regulations and anti-money laundering (AML) requirements, including the retention of records as required by law.
• Customer support: To respond to your enquiries, resolve disputes, and improve support quality.
• Responsible gaming: To monitor gaming patterns, identify signs of problem gambling, administer self-exclusion and limit tools, and enforce responsible gaming obligations.
• Platform improvement: To analyse usage data and improve the performance, security, and features of the luky555 platform.
• Marketing communications: To send you promotional offers and updates regarding luky555 where you have opted in to receive such communications. You may opt out at any time.

---

5. Legal Basis for Processing

luky555 processes your personal data on the following legal grounds:

• Performance of a contract: Processing necessary to provide the Services you have requested, including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including identity verification, AML obligations, and record-keeping requirements.
• Legitimate interests: Processing for fraud prevention, platform security, analytics, and platform improvement where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications where you have provided express consent. Consent may be withdrawn at any time without affecting the legality of prior processing.

---

6. Sharing Your Personal Data

luky555 does not sell your personal data. We may share your data with the following categories of third parties, strictly for the purposes described in this policy:

• Payment processors: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and other payment partners, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Licensed KYC and AML screening service providers used to verify player identity and comply with regulatory requirements.
• Game platform providers: Third-party game studios and live casino operators whose games are offered on the luky555 platform, to the extent required to deliver and settle game outcomes.
• IT and infrastructure providers: Cloud hosting, server, and security service providers used to operate the luky555 platform, subject to appropriate data processing agreements.
• Regulatory and law enforcement authorities: Where required by law or court order, or where disclosure is necessary to protect the rights, property, or safety of luky555, our players, or the public.
• Professional advisers: Legal, accounting, and audit professionals, subject to professional confidentiality obligations.

All third parties with whom luky555 shares personal data are required to handle such data in accordance with applicable data protection laws and to implement appropriate technical and organisational security measures.

---

7. International Data Transfers

luky555 operates under international gaming licensing and may process or store your personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, luky555 implements appropriate safeguards — including data processing agreements incorporating standard contractual clauses or equivalent protections — to ensure your data receives a level of protection consistent with applicable data protection standards.

By using luky555, you acknowledge and consent to the transfer of your personal data to servers or processors located outside Malaysia where necessary to provide the Services.

---

8. Data Retention

luky555 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Specific retention periods apply as follows:

• Account data: Retained for the duration of the account relationship and for a minimum period of five years following account closure, to satisfy AML and regulatory record-keeping requirements.
• Transaction and gaming records: Retained for a minimum of five years from the date of the transaction or game session.
• KYC and identity documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Support communications: Retained for a period of three years following resolution of the relevant matter.
• Marketing consent records: Retained for as long as you remain opted in, plus a further three years following opt-out to demonstrate compliance.

Where data is no longer required, luky555 will securely delete or anonymise it in a manner that prevents reconstruction of the original personal information.

---

9. Cookies and Tracking Technologies

luky555 uses cookies and similar technologies on its platform. These include:

• Strictly necessary cookies: Required for the platform to function correctly, including maintaining your login session and security tokens. These cannot be disabled.
• Analytics cookies: Used to understand aggregate player behaviour and platform usage patterns, helping us improve the luky555 experience. Analytics data is processed in anonymised or pseudonymised form where possible.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming configurations.

luky555 does not deploy third-party advertising or tracking cookies. You can manage browser cookie settings at any time; however, disabling essential cookies may affect platform functionality.

---

10. Your Data Protection Rights

Subject to applicable law, you have the following rights in respect of your personal data held by luky555:

• Right of access: You may request a copy of the personal data luky555 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances, for example while a rectification request is assessed.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease processing for that purpose immediately.
• Right to data portability: Where processing is based on consent or contract and conducted by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the luky555 support team. We will respond to all legitimate requests within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing a request.

---

11. Security Measures

luky555 implements a comprehensive range of technical and organisational security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the luky555 platform.
• Encrypted storage for sensitive account and financial data at rest.
• Role-based access controls limiting internal access to personal data to personnel who require it to perform their job functions.
• Regular security audits and penetration testing of the platform infrastructure.
• Multi-factor authentication options for player accounts.
• Incident response procedures for detecting, reporting, and managing data security breaches.

Notwithstanding these measures, no internet transmission is completely secure. luky555 cannot guarantee the absolute security of data transmitted to or from the platform and recommends that players take their own precautions, including using strong passwords and enabling two-factor authentication on their accounts.

---

12. Children and Minors

The luky555 platform is strictly intended for adults aged 21 and above. luky555 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, the relevant account will be immediately closed and all associated data deleted, subject to any mandatory regulatory retention requirements. If you believe a minor has created a luky555 account, please contact our support team immediately.

---

13. Third-Party Links

The luky555 platform does not include links to third-party websites for advertising or general referral purposes. Where links to third-party payment service providers or game platforms are necessary to deliver the Services, those third parties operate under their own privacy policies. luky555 is not responsible for the data practices of third-party service providers beyond the data processing agreements in place with them.

---

14. Changes to This Privacy Policy

luky555 reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify registered players via email or a prominent notice on the platform prior to the change taking effect. Continued use of luky555 following notification of a policy update constitutes acceptance of the revised policy. The date of the most recent update is displayed at the top of this page. We recommend reviewing this policy periodically.

---

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have a concern about how luky555 handles your personal data, please contact our support team via the 24/7 live chat available on luky555.org, or email our data team at:

[email protected]

We will acknowledge your request within two business days and aim to provide a full response within 30 days. For complex requests, we may extend this period by a further 30 days with notice.

---

This Privacy Policy was last updated on 12 June 2026. Prior versions are available on request.