Privacy Policy
for luky555

This Privacy Policy ("Policy") is issued by luky555 ("luky555", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://luky555.cam. It applies to all personal data collected, processed, stored, or shared in connection with the operation of that platform and any related customer service interactions.

luky555 is committed to protecting the privacy and personal data of every registered player and website visitor. This Policy sets out, in clear and accessible terms, what personal data we collect, the purposes for which that data is processed, the legal basis on which processing rests, and the rights that you, as the data subject, hold over your own information.

By registering an account on luky555 or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood its contents. This Policy should be read alongside our Terms & Conditions, which govern your use of the platform more broadly.

The following terms carry the meanings set out below throughout this Policy:

luky555 collects the following categories of personal data in connection with the operation of its platform:

3.1 Registration Data

• Full legal name (as it appears on your government-issued identification);
• Date of birth (to verify that you are aged 21 or above);
• Gender (where provided);
• Residential address, including city, state, and postcode;
• Email address;
• Mobile phone number;
• Username chosen at registration.

3.2 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued photo identification (Malaysian NRIC, Passport, or Driver's License);
• Proof of residential address documentation (utility bills, bank statements);
• Selfie photographs taken for liveness and identity matching purposes;
• Source of funds documentation where required for enhanced due diligence.

3.3 Financial & Transaction Data

• Records of all deposit and withdrawal transactions, including amounts in MYR, timestamps, and payment method used;
• Payment method identifiers (e-wallet account names, bank account numbers last four digits, USDT wallet addresses) — full payment credentials are never stored by luky555 and are processed directly by the relevant payment service provider;
• Bonus credits received, wagering history, and cashback calculations.

3.4 Gaming & Betting Activity Data

• Detailed records of all bets placed, games played, wagers, and outcomes;
• Session duration, game preferences, and frequency of play;
• Responsible gambling tool usage (deposit limit settings, self-exclusion requests, session reminders activated).

3.5 Technical & Device Data

• IP address and geolocation data derived therefrom;
• Device type, operating system, and browser version;
• Session tokens and authentication logs;
• Cookie data and tracking pixel data as described in Section 10.

3.6 Communications Data

• Records of all live chat interactions with luky555 customer support agents;
• Email correspondence submitted to [email protected];
• Records of any complaints, disputes, or escalation communications.

luky555 collects personal data through the following channels and mechanisms:

• Directly from you: When you complete the registration form, submit KYC documentation, make a deposit or withdrawal request, contact customer support, or update your account settings.
• Automatically during platform use: Technical and device data (IP addresses, browser data, session activity) is collected automatically when you access and navigate the Platform via server logs and cookie-based tracking.
• From third-party service providers: Identity verification results from KYC vendors; confirmed transaction status data from payment processors including Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, Maybank, CIMB, Public Bank, and Hong Leong Bank; and fraud detection signals from security service providers.
• From publicly available sources: In limited cases and only where necessary for compliance purposes, luky555 may cross-reference registration data against publicly available sources such as sanction screening databases.

luky555 processes your personal data for the following specific purposes:

luky555 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing that is required to fulfil the agreement between you and luky555 — including account registration, KYC, transaction processing, and the delivery of gaming and betting services — is carried out on the basis that it is necessary to perform the contract you entered into when you registered.
• Legal obligation: Processing required to comply with anti-money-laundering (AML) regulations, licensing conditions, and other applicable legal obligations is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and internal analytics is carried out on the basis of luky555's legitimate interest in maintaining a secure and reliable platform, provided that interest is not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential cookies is carried out on the basis of your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

luky555 may share your personal data with the following categories of third party, strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:

7.1 Payment Service Providers

To process deposits and withdrawals, luky555 shares necessary transaction and identity data with payment service providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and the banking partners integrated through FPX (Maybank, CIMB Bank, Public Bank Berhad, Hong Leong Bank). These providers process your data strictly in accordance with their own privacy policies and applicable financial regulations.

7.2 KYC and Fraud Prevention Vendors

luky555 uses third-party identity verification and fraud detection services to carry out KYC checks. These vendors process identity documentation and device data on luky555's behalf and are contractually bound to use such data only for the verification purposes instructed by luky555.

7.3 Game and Platform Technology Providers

Game providers whose titles are available on the luky555 platform receive session and wagering data necessary to operate their games and calculate outcomes. luky555 enters into data processing agreements with all technology partners to ensure appropriate data handling standards are maintained.

7.4 Legal and Regulatory Authorities

luky555 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, court order, or applicable regulatory obligation. luky555 will use reasonable efforts to notify you of such disclosure where legally permitted to do so.

7.5 No Sale of Data

luky555 does not sell, rent, lease, or otherwise transfer your personal data to unaffiliated third parties for their own commercial or marketing purposes. Any disclosure of data is limited to the specific operational and legal purposes described in this Policy.

As an internationally licensed online gaming platform, luky555's operations may involve the transfer and storage of your personal data in jurisdictions outside Malaysia. Such transfers may occur, for example, when data is stored on cloud infrastructure hosted in another country, or when it is processed by a KYC or payment vendor based outside Malaysia.

Where personal data is transferred internationally, luky555 takes steps to ensure that appropriate safeguards are in place, including:

• Contractual data protection clauses with third-party processors that impose obligations equivalent to those under the Malaysian PDPA;
• Transfer only to jurisdictions that are assessed to provide an adequate level of data protection;
• Implementation of technical security measures (encryption in transit and at rest) for all transferred data.

You may request information about the specific safeguards applied to any international transfer of your personal data by contacting luky555 at the details provided in Section 15.

luky555 retains personal data only for as long as is necessary for the purposes described in this Policy, and in accordance with applicable legal retention requirements. Indicative retention periods by data category are as follows:

At the expiry of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is technically possible, luky555 may retain anonymised datasets for statistical and analytical purposes indefinitely.

luky555 uses cookies and similar tracking technologies to operate core platform functionality and to improve your user experience. The categories of cookies used are set out below:

Strictly Necessary Cookies

These cookies are essential for the platform to function. They maintain your logged-in session, store security tokens, and preserve your language and currency preferences. These cookies cannot be disabled without significantly impairing platform functionality.

Analytical / Performance Cookies

With your consent, luky555 uses analytical cookies to understand how players interact with the platform — including which games are most popular, where users encounter navigation difficulties, and how pages are loaded. This data is used in aggregated, anonymised form to improve platform performance and user experience.

Functional Cookies

Functional cookies remember your preferences — such as your preferred deposit method or notification settings — so you do not need to re-enter them on each visit. These are set on the basis of your consent or where they are necessary to provide a feature you have explicitly requested.

Marketing Cookies

Where you have provided consent, marketing cookies may be used to tailor promotional communications delivered within the platform. luky555 does not use third-party advertising networks or retargeting cookies that track your activity on external websites.

You may manage your cookie preferences through the cookie settings panel accessible in your account settings, or through your browser's privacy controls. Please note that disabling certain cookies may affect the functionality of the platform.

As a data subject, you hold the following rights in respect of your personal data held by luky555. These rights may be exercised by contacting us at the details provided in Section 15:

luky555 will respond to all verified data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it. luky555 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.

luky555 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and luky555 servers is encrypted using 256-bit TLS (SSL) encryption. This applies to all login sessions, deposit and withdrawal requests, and API communications.
• Encryption at rest: Sensitive personal data and financial records stored on luky555 infrastructure are encrypted at rest using industry-standard encryption standards.
• Access controls: Access to personal data within luky555's internal systems is restricted on a strict need-to-know basis. Administrative access is protected by multi-factor authentication (MFA) and audit logging.
• Password security: Account passwords are stored using one-way cryptographic hashing with salt. luky555 never stores plaintext passwords and cannot retrieve your password — only reset it.
• Penetration testing and vulnerability management: luky555 conducts regular security assessments and penetration testing of its platform infrastructure to identify and remediate vulnerabilities proactively.
• Incident response: In the event of a confirmed personal data breach that is likely to result in a risk to your rights and freedoms, luky555 will notify affected users without undue delay and in accordance with applicable legal notification requirements.

While luky555 takes all reasonable steps to protect your data, no internet transmission or digital storage system is 100% secure. You are also responsible for maintaining the security of your own account credentials. If you believe your account has been compromised, contact luky555 support immediately at [email protected].

luky555 is strictly an adult platform. Registration and use of the platform is prohibited for any person under the age of 21. luky555 does not knowingly collect personal data from individuals under the age of 21.

Where luky555 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, it will:

• Immediately suspend the relevant account;
• Void any wagers placed and any associated winnings;
• Delete the personal data of the minor from its systems as soon as practicable, subject to any legal obligations requiring it to retain evidence of the age verification failure for regulatory compliance purposes;
• Return any deposited funds to the originating payment source where technically feasible, in accordance with AML procedures.

If you are a parent or guardian and believe that your child may have registered on luky555, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

luky555 reserves the right to amend this Privacy Policy at any time. Amendments may be made in response to changes in applicable law, regulatory requirements, or changes to luky555's data processing activities.

Where amendments are material — meaning they change the purposes for which your data is processed, introduce new categories of data collected, or alter your rights — luky555 will provide notice to registered users via the email address on file, with a minimum of 14 days' notice before the amendment takes effect. For non-material amendments (such as clarifications of existing language), changes will take effect upon publication at this URL.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to remain informed of how luky555 handles your personal data. Continued use of the platform following any amendment constitutes your acknowledgment of the revised Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how luky555 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the luky555 platform. Live chat is the fastest channel for urgent data protection queries.
• Email: [email protected] — for formal data rights requests, complaints, or detailed queries. Please mark the subject line as "Privacy Request" or "Data Rights" for faster routing. We aim to acknowledge all email enquiries within 2 business days and to respond substantively within 30 calendar days.

Malaysia-based support agents are available during peak Malaysia Standard Time (MST, UTC+8) hours. All formal data rights requests must include your full name, registered email address, and a description of the specific right you are exercising or the concern you are raising. luky555 may request additional identity verification before processing a data access or erasure request.