Luky365 Privacy Policy – Malaysian Member Personal Data Protection

This Privacy Policy explains how luky365 ("Company", "We") collects, uses, stores, discloses, and protects your personal information ("Data") when you use our platform – whether through the luky365.net website or our mobile app.

We are committed to protecting your privacy and ensuring your personal data is handled responsibly in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international standards.

Luky365 collects various types of personal data depending on how you interact with our platform. Below is a breakdown of the data collected:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data such as medical information or religious beliefs unless required by law.

Luky365 collects your personal data through several channels:

• During registration: Information you provide in the account registration form, including name, email, phone number, and date of birth.
• During KYC verification: Identity documents you upload for verification purposes, such as your national ID or passport.
• During financial transactions: Bank account or digital wallet details required to process deposits and withdrawals.
• Automatic platform usage: Technical data such as IP addresses, device information, and usage patterns are collected automatically when you use the platform.
• Cookies and tracking technologies: luky365 uses cookies to improve the user experience, remember your preferences, and analyse usage patterns.

The personal data we collect is used for the following purposes:

• Account management: Creating, verifying, and maintaining your luky365 account.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions on the platform.
• Platform security: Detecting and preventing fraud, money laundering, and suspicious activity.
• Legal compliance: Meeting legal and regulatory obligations, including KYC requirements and mandatory reporting.
• Service communications: Sending important notifications related to your account, transactions, and security.
• Marketing (with consent): Sending promotional information and exclusive offers where you have consented to receive them. You may withdraw this consent at any time.
• Platform improvement: Analysing usage patterns to improve user experience and platform performance.
• Responsible gaming: Monitoring gameplay patterns to identify and assist players who may be experiencing problem gambling.

Luky365 respects your privacy and does not share your personal data indiscriminately. Your data may be shared with third parties only in the following circumstances:

• Payment service providers: To process deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, and other relevant financial institutions.
• Technical service providers: Companies that help operate our platform, such as cloud computing and analytics providers — all bound by strict confidentiality agreements.
• Regulatory bodies and law enforcement: When required by law or a valid court order.
• Game providers: Game data required by third-party providers such as Pragmatic Play and PG Soft to deliver their games on our platform.

Luky365 uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use include:

• Essential cookies: Required for core platform operations such as login and session security. Cannot be disabled.
• Preference cookies: Remembering your settings and preferences, such as language and login records.
• Analytics cookies: Helps us understand how users interact with the platform for improvement purposes.
• Performance cookies: Collecting information about platform performance, such as page load times.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the luky365 platform.

Luky365 retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law:

• Active account data: Retained for the duration your account remains active.
• Financial transaction data: Retained for a minimum of 7 years in accordance with financial and tax legal requirements.
• KYC Records: Retained for a minimum of 5 years after account closure in accordance with anti-money laundering legal requirements.
• Technical log data: Retained for 90 days for security and troubleshooting purposes.
• Marketing data: Deleted when you withdraw consent or close your account.

Once the required retention period has elapsed, your data will be securely deleted or anonymised from our systems.

Under Malaysia's PDPA 2010 and the luky365 privacy policy, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the luky365 Privacy team via Live Chat in your account or by email at [email protected]. We will respond within 14 business days.

Luky365 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure:

• 256-bit SSL encryption for all data communication between the server and user devices.
• Role-based access control – only authorised staff can access user data, and only to the extent required by their role.
• Periodic independent security audits to identify and address vulnerabilities.
• Round-the-clock system monitoring to detect and respond to any security threats.
• A clear incident response procedure to address any data breaches promptly and notify affected users within the timeframe required by law.

Luky365 is an entertainment platform for adults aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will immediately take steps to delete that data and close the relevant account. Parents or guardians who become aware that their child has registered on luky365 are urged to contact us immediately.

Luky365 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When a material change occurs, we will:

• Sending email notifications to all registered members at least 14 days before changes take effect.
• Displaying a clear notice on the platform's home page regarding privacy policy changes.
• Updating the "Last Updated" date at the top of this document.

Continued use of the luky365 platform after the effective date of any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact the luky365 Data Protection Officer (DPO):

• Email: [email protected]
• Live Chat: Via the in-app chat icon on luky365 (24/7)
• Response time: Within 14 business days for all privacy-related enquiries