Privacy Policy lucky365 — Protecting Your Personal Data

Welcome to lucky365 (lucky365.bz). We, the lucky365 management team, take our responsibility to protect every user's privacy seriously. This Privacy Policy is designed to ensure you fully understand how your personal data is managed in a transparent, responsible and secure manner.

This policy applies to all users and members who interact with the lucky365 platform — including browsing our website, registering an account, making transactions, using casino or sports betting services, and contacting our customer support team through any official communication channel.

Lucky365 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), which is the primary legal framework governing how companies in Malaysia collect and process users' personal data. In addition to the PDPA, we also adhere to international online gaming industry standards on privacy and data security.

Lucky365 collects various categories of personal information to ensure our platform operates smoothly, securely and in compliance with applicable legal requirements. The following are the types of data we collect:

Personal Identification Information:

• Full name as shown on official identification documents.
• National identification number (MyKad), passport number, or equivalent identification document.
• Date of birth for age verification (18 and above).
• Full current residential address and postcode.
• An active mobile number registered in Malaysia.
• A valid and active email address.

Financial Information:

• Bank name and bank account number for withdrawal processing.
• Digital wallet details (Touch 'n Go eWallet, GrabPay, and others) registered in your name.
• Deposit and withdrawal transaction history within the platform.
• Records of betting and gaming activity for audit and AML compliance purposes.

Technical and Usage Data:

• The IP address of the device used to access the platform.
• Device type, operating system, and web browser version.
• Login information including access time and location.
• In-platform navigation data such as pages visited and time spent.

Every piece of data collected by lucky365 is used only for legitimate and necessary purposes. We strictly uphold the principle of data minimisation — meaning we only use information that is genuinely required for the stated purpose.

Primary Purposes of Data Use:

• Account Management: Registering new accounts, verifying member identity through the KYC process, and managing your account profile on an ongoing basis.
• Transaction Processing: Processing deposits, verifying sources of funds, and executing withdrawals to members' bank accounts or digital wallets.
• Platform Security: Detecting and preventing fraudulent activity, money laundering, multi-account usage, and any activity that violates our terms of service.
• Legal Compliance: Fulfilling reporting obligations to regulatory bodies, law enforcement agencies, and financial authorities as required by law.
• Customer Support: Resolving complaints, responding to enquiries, and providing technical assistance when members need it.
• Responsible Gaming: Monitoring members' gaming habits to identify signs of problem gambling and taking appropriate preventive action.
• Platform Improvement: Analysing usage patterns to improve user experience, platform performance, and product offerings.

Lucky365 continuously invests in the latest security infrastructure to ensure members' personal data is protected at every stage — during transmission, storage and processing. We employ multiple layers of security to ensure no unauthorised party can access your information.

• 256-bit SSL Encryption: All data transmitted between your device and lucky365's servers is protected by high-grade SSL encryption, ensuring your information cannot be intercepted in transit.
• Encrypted Storage: Sensitive data including financial information and KYC documents are stored in encrypted databases with strict access controls.
• Two-Factor Authentication (2FA): Member accounts are protected with two-factor authentication options that add an extra layer of security at login.
• 24/7 Monitoring: Our systems are continuously monitored by an experienced cybersecurity team to detect any suspicious activity or attempted data breaches.
• Certified Data Centres: Member data is stored in data centres that meet international physical and digital security standards.

Data Retention Period:

Lucky365 retains members' personal data for as long as your account is active and for a minimum period of 5 years after account closure, in line with Malaysia's anti-money laundering legislation and financial regulations. Data that is no longer required will be securely deleted or anonymised.

Lucky365 does not sell, rent or disclose members' personal data to third parties for marketing purposes. However, there are limited situations where information sharing is necessary and legally permitted:

• Payment Service Provider: Licensed payment processing partners such as DuitNow providers and authorised payment gateways receive only the minimum transaction information required to process your deposits and withdrawals.
• Game Software Provider: Licensed game providers supplying casino, slots, and Live Casino content may receive non-personally identifiable session IDs for technical game management purposes.
• Regulatory Bodies and Law Enforcement: Information required by law or court order will be disclosed to the relevant authorities upon formal request.
• Identity Verification Service: Accredited third-party KYC service providers assist us in securely verifying member identity and complying with AML requirements.
• Audit and Compliance: Licensed auditors and legal advisors bound by professional confidentiality obligations may access relevant data within the scope of their engagement.

Lucky365 uses cookies and similar tracking technologies to enhance your user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as maintaining login sessions and ensuring transaction security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use our platform — most frequently visited pages, time spent, and errors encountered — to help us improve the user experience.
• Functional Cookies: Remembering your preferences such as interface language, display settings, and login details so you do not need to re-enter them each time.
• Analytics Cookies: Helping us understand platform usage patterns in aggregate and anonymised form for continuous improvement purposes.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality or user experience of the lucky365 platform.

Under Malaysia's Personal Data Protection Act 2010, you as a data subject have legally protected rights regarding your personal information held by lucky365. We are committed to respecting and facilitating the exercise of these rights.

• Right of Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to Rectification: If any of your personal information is inaccurate or out of date, you have the right to request that we correct it promptly.
• Right to Withdraw Consent: You may withdraw consent for data processing for marketing purposes at any time without affecting your core account services.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes not related to legal or contractual requirements.
• Right to Erasure: In certain circumstances and subject to our legal obligations, you may request the deletion of your personal data.

The lucky365 platform is a service designed exclusively for adults aged 18 and above. We do not intentionally collect, store or process any personal information from individuals under the age of 18.

If you are a parent or guardian and believe that a child under your care has registered an account on lucky365 or provided us with their personal information without your knowledge, please contact our support team immediately. We will take prompt action to investigate, close the account in question, and delete all related data.

Lucky365 reserves the right to modify or update this Privacy Policy from time to time to reflect changes in our business practices, applicable legal requirements or the latest technological developments. The most recent update date will always be displayed at the top of this document.

If there are material changes to this Privacy Policy, lucky365 will notify members via in-platform notifications or email to the registered address. Continued use of the lucky365 platform after such changes are published will be deemed as your acceptance of the updated terms.

We encourage you to review this page regularly to stay informed about how we protect your personal information.

If you have any questions, concerns, or complaints regarding how lucky365 handles your personal data, we encourage you to contact us directly. Our Data Protection Officer (DPO) team is ready to assist you.

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the lucky365 platform.
• Support Email: [email protected] — we aim to respond within 1 to 2 business days.
• Service Languages: Malay and English.