Lucky777 Privacy Policy – Player Data Protection in Malaysia

Lucky777 only collects personal data that is strictly necessary to provide the platform's services to you. We do not collect excessive or irrelevant information beyond what is needed for platform operations.

Data collected during lucky777 account registration:

• Full name as shown on your Malaysian MyKad or passport
• Date of birth for minimum age verification
• An active Malaysian mobile phone number
• A valid email address
• Encrypted passwords (we cannot read your password — it is stored as a non-reversible hash)

Data collected during identity verification (KYC):

• A copy of your MyKad or Malaysian passport
• Proof of payment method ownership (e.g. screenshots of your Touch 'n Go eWallet account, DuitNow account or Maybank/CIMB bank statement)
• In certain cases, a current facial photo (selfie) for face-matching verification

Data collected automatically during platform use:

• IP address and geographic location information derived from it
• The type of device, operating system, and web browser you are using
• Game history — game types, bets, winnings and outcomes
• Transaction history — deposits, withdrawals, and account balance
• Time and duration of each login session
• Cookie and tracking technology data as described in Section 6

Lucky777 collects your personal data through several different channels throughout your interactions with the platform:

• Directly from you — through the registration form, KYC form, customer support requests, feedback you submit, and any other information you voluntarily enter into the platform.
• Automatically — through cookies, tracking pixels and similar technologies as you browse and use the lucky777 platform. This data includes device information, navigation patterns and usage statistics.
• From payment providers — when you make a deposit or withdrawal via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, the respective provider sends us limited transaction verification details (success/failure status, transaction reference, amount) without disclosing your full account information.
• From technology partners — our game software providers, who supply live dealer tables, slot systems, and poker platforms, may send us technical data related to your game session for troubleshooting and fair play verification purposes.

Lucky777 uses your personal data for the following purposes, all of which are directly related to delivering the platform's services:

• Account management: To create, verify, and maintain your lucky777 account, including secure login and identity verification.
• Transaction processing: To process your deposits and withdrawals via supported Malaysian payment methods, including Touch 'n Go eWallet, DuitNow and FPX.
• Legal compliance (KYC/AML): To meet the Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements mandated by applicable law.
• Platform security: To detect and prevent fraud, hacking, bonus abuse, multi-account ownership, and other security threats to the lucky777 platform and its users.
• Customer support: To understand the context of your enquiry and provide effective assistance when you contact the lucky777 support team.
• Platform improvements: To analyse aggregated (not individual) usage patterns for the purpose of improving our interface, adding popular games, and enhancing the overall experience.
• Account-related communications: To send important account notifications such as deposit confirmations, security alerts, and significant policy updates.
• Responsible gaming: To monitor gameplay patterns in order to identify signs of potential problem gambling and to enforce the personal limits you have set.

We will not use your data for any purpose beyond those stated above without first obtaining your consent. If you wish to receive marketing and promotional communications from lucky777, you may opt in or out during registration or at any time through your account settings.

Lucky777 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited circumstances in which we may need to share your data:

All third parties with whom we share data (within the limits stated above) are bound by strict confidentiality and data protection agreements. They may only use your data for the specific purposes set out in those agreements.

Lucky777 stores your personal data using secure server infrastructure with multiple layers of protection:

Data retention period:

• Active account data: Retained for as long as your account remains active on the lucky777 platform.
• Closed account data: Retained for a minimum of 5 years after account closure to meet legal compliance and AML requirements.
• Financial transaction records: Retained for 7 years in accordance with Malaysian accounting and financial regulatory requirements.
• Security logs: Retained for 12 months for security incident investigation purposes.
• Cookie data: Depends on the type of cookie — described in Section 6.

Lucky777 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit a website.

What types of cookies we use:

• Essential Cookies: Required for core platform functionality — including maintaining your login session, ensuring transaction security, and preventing unauthorised access. These cookies cannot be disabled without affecting platform functionality. Stored for up to 30 days or until you log out.
• Functional Cookies: Remembering your preferences such as language, limits you have set, and your favourite tables on lucky777 to improve your experience. Stored for up to 90 days.
• Analytics Cookies: Aggregated and anonymised usage data is collected to help us understand how Malaysian players interact with the lucky777 platform — enabling us to improve the user experience and resolve technical issues. Retained for up to 12 months.

You can manage and delete cookies through your web browser settings at any time. However, disabling essential cookies may significantly affect the functionality of the lucky777 platform, including your ability to log in securely.

As a registered lucky777 player in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act (PDPA) 2010 and international best practices:

To exercise any of the rights above, please contact lucky777's Data Protection Officer by email at privacy@lucky777.click. Include your lucky777 account number and specify the right you wish to exercise. We will respond within 5 business days and fulfil valid requests within 30 business days.

In some cases, your personal data may be processed or stored on servers located outside Malaysia — for example, by cloud infrastructure providers or international gaming software providers that work with lucky777.

When such data transfers occur, lucky777 ensures that:

• Transfers only take place to countries or organisations that provide a level of data protection equivalent to or greater than that of Malaysia.
• All transfers are protected by comprehensive data transfer agreements with strict standard protection clauses.
• All transferred data is fully encrypted in transit using 256-bit SSL.
• Data recipients are contractually bound not to disclose your data to any third party without lucky777's authorisation.

Lucky777 is an adult entertainment platform only. Our platform is not designed for, directed at, or intended to collect personal data from any individual under the age of 21.

We use several mechanisms to prevent access by children and minors:

• Age verification at account registration — applicants must confirm they are 21 years of age or older.
• Identity document verification during the KYC process to confirm the declared date of birth.
• Ongoing monitoring to identify accounts that may belong to underage individuals.

If lucky777 discovers that we have collected personal data from an individual under the age of 21, we will take immediate steps to delete that information and close the account in question. Parents or guardians who believe their child has registered on lucky777 are encouraged to contact us promptly at support@lucky777.click.

Lucky777 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, the latest legal requirements, or relevant new technological developments.

How we notify you of important changes:

• An email notification to your registered address at least 14 days before the changes take effect.
• A prominent notice on the lucky777 platform when you log in.
• The "Updated" date at the top of this page will always be revised to reflect the latest update.

Continued use of the lucky777 platform after any changes to this Privacy Policy take effect will be considered acceptance of the revised terms. If you do not agree with the changes, please stop using the platform and contact us for information on available options.

Previous versions of the lucky777 Privacy Policy are available upon request by emailing privacy@lucky777.click.

If you have any questions, concerns, or complaints regarding how lucky777 handles your personal data, or if you wish to exercise any of the rights outlined in Section 7, please reach us through the following channels:

• Privacy Email: privacy@lucky777.click (for specific enquiries regarding privacy and data rights)
• General Support Email: support@lucky777.click (for general account enquiries)
• Live Chat: Available 24/7 on the lucky777 platform (for urgent enquiries)

We commit to acknowledging your enquiry within 2 business days and providing a full response within 14 business days. For more complex matters requiring internal investigation, we may need up to 30 business days — and we will keep you informed if your case requires additional time.