lucky555 Privacy Policy

lucky555 ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access or use the lucky555 Platform accessible at lucky555.vu ("Platform"). This Privacy Policy ("Policy") sets out, in accordance with applicable data protection legislation, the categories of personal data we collect, the purposes for which we process that data, the legal basis for processing, and the rights available to you as a data subject.

By registering an Account on the lucky555 Platform or by continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read, understood, and agreed to the practices described herein. This Policy is incorporated by reference into the lucky555 Terms & Conditions.

The data controller responsible for your personal data is the operator of the lucky555 Platform. For data protection enquiries, please contact us using the details provided in Section 14 of this Policy. We will respond to all legitimate data protection enquiries within 30 calendar days.

lucky555 collects personal data in the following categories:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification documents (e.g., Malaysian MyKad, passport).
• Contact Data: Email address, Malaysian mobile number, and residential address.
• Financial Data: Payment method details (e.g., Touch 'n Go eWallet account reference, bank account details for DuitNow, FPX transaction references), deposit and withdrawal history, and account balance information.
• Technical Data: IP address, browser type and version, device identifiers, operating system, referring URL, and session timestamps.
• Usage Data: Game history, wager records, bet stakes and outcomes, platform interaction logs, and feature usage patterns.
• Compliance Data: Responsible gaming tool settings (deposit limits, self-exclusion status), KYC/AML verification records, and any documents submitted in support of account verification.
• Communications Data: Records of your correspondence with lucky555 customer support, including live chat transcripts and email exchanges.

lucky555 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data, except where identity verification technology requires biometric matching as part of our age and identity verification process, in which case such data is processed only with your explicit consent and is not retained beyond the verification event.

lucky555 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your lucky555 Account, including processing your registration, verifying your identity, and managing login credentials.
• Service Delivery: To enable you to place wagers, access games, participate in promotions, and use all features of the lucky555 Platform.
• Payment Processing: To process deposits and withdrawals via your nominated Malaysian payment methods, including Touch 'n Go eWallet, DuitNow, Boost, GrabPay, and bank transfers.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable gaming licensing conditions, anti-money laundering (AML) regulations, and know-your-customer (KYC) requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, collusion, and other security threats.
• Responsible Gaming: To administer responsible gaming tools, enforce self-exclusion decisions, monitor for problem gambling indicators, and comply with player protection obligations.
• Customer Support: To respond to your enquiries, resolve complaints, and maintain records of communications for quality assurance and dispute resolution purposes.
• Platform Improvement: To analyse anonymised usage patterns and improve the functionality, content, and performance of the lucky555 Platform.
• Marketing Communications: To send you promotional offers and Platform updates, where you have provided consent to receive such communications. You may withdraw consent at any time.

lucky555 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and lucky555 (i.e., the Terms & Conditions), including to deliver gaming services, process payments, and manage your Account.
• Legal Obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including AML, KYC, responsible gaming mandates, and data retention obligations imposed by our licensing authority.
• Legitimate Interests: Processing is necessary for lucky555's legitimate interests in preventing fraud, maintaining Platform security, and improving our services, provided these interests are not overridden by your rights and freedoms.
• Consent: Where processing is based on your consent (e.g., marketing communications, biometric verification), you have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

lucky555 does not sell, rent, or otherwise commercially disclose your personal data to third parties. We may share personal data with the following categories of recipients, strictly to the extent necessary:

• Payment Processors: Malaysian e-wallet providers (Touch 'n Go, Boost, GrabPay), DuitNow, FPX, and participating banks — solely for the purpose of processing your deposits and withdrawals.
• Game Content Providers: Third-party game studios and live casino operators (e.g., Evolution Gaming, Pragmatic Play) who provide games accessible via the Platform. These providers may receive anonymised session data necessary to deliver their services.
• Identity Verification Providers: KYC and age verification service providers engaged to verify your identity and age as required by our licensing conditions.
• Regulatory Authorities: Our licensing authority and any governmental or law enforcement body with a lawful basis to request disclosure of personal data.
• Professional Advisers: Lawyers, auditors, and accountants engaged by lucky555 under confidentiality obligations where access to personal data is necessary for professional services.

All third parties who process personal data on lucky555's behalf are contractually bound to process such data only on our instructions, in compliance with applicable data protection law, and with appropriate technical and organisational security measures in place.

lucky555's servers and infrastructure may be located in jurisdictions outside Malaysia. Where personal data is transferred to a country that does not provide an equivalent level of data protection, lucky555 will implement appropriate safeguards, such as standard contractual clauses approved by relevant data protection authorities, to ensure your data receives adequate protection.

lucky555 retains personal data for as long as your Account remains active and for a minimum period of five (5) years following Account closure, to satisfy legal, regulatory, and audit requirements. Financial transaction records are retained for a minimum of seven (7) years to comply with AML obligations.

Where data is no longer required for any lawful purpose, it is securely deleted or anonymised in accordance with our data destruction procedures.

lucky555 uses cookies and similar technologies on the Platform for the following purposes:

• Strictly Necessary Cookies: Required for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Analytics Cookies: Collect anonymised data about how Members interact with the Platform to help us improve performance and user experience. No personally identifiable information is included in analytics data sets.
• Fraud Detection Cookies: Assist in identifying unusual account activity and preventing unauthorised access.

lucky555 does not deploy third-party advertising or behavioural tracking cookies. You may configure your browser to refuse non-essential cookies; however, doing so may affect the functionality of certain Platform features.

lucky555 implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest, including financial details and identity documents;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Regular penetration testing, vulnerability scanning, and security audits conducted by independent third parties;
• Incident response procedures with defined timelines for Member notification in the event of a data breach involving personal data.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely secure. lucky555 cannot guarantee absolute security but commits to maintaining industry-standard protections and responding promptly to any security incidents.

Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by lucky555:

• Right of Access: Request a copy of the personal data we hold about you;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations;
• Right to Restriction: Request that we limit processing of your personal data in certain circumstances;
• Right to Data Portability: Request a structured, commonly used, machine-readable copy of your personal data;
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting prior processing.

To exercise any of the above rights, please contact lucky555 support using the details in Section 14. lucky555 will respond within 30 calendar days. Requests may be subject to identity verification before processing.

The lucky555 Platform is strictly intended for adults aged 21+. lucky555 does not knowingly collect or process personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a minor, that data will be deleted promptly and the associated Account closed. If you believe a minor has registered on the Platform, please contact us immediately.

lucky555 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify registered Members by email or via a prominent notice on the Platform at least seven (7) days before the changes take effect. The "Last updated" date at the top of this Policy will be revised accordingly.

Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and may request account closure.

For all privacy-related enquiries, data subject rights requests, or concerns about this Policy, please contact the lucky555 data protection team:

• Email: [email protected]
• Live Chat: Available 24/7 via the lucky555 Platform

lucky555 aims to acknowledge all privacy enquiries within 5 business days and to resolve data subject rights requests within 30 calendar days of receipt of a complete and verified request.