Privacy Policy luky365 – Personal Data Protection for Malaysia Users

This Privacy Policy ("Policy") describes luky365's practices regarding the collection, use, storage, disclosure, and protection of personal data collected through our platform, including the website, mobile app, and all related services.

By registering an account or using any luky365 service, you consent to the collection and use of your personal data as described in this Policy. If you do not agree with any part of this Policy, please stop using the platform and contact us to close your account.

This Policy applies to all registered and unregistered users of luky365, including general website visitors. We encourage you to read this document carefully and to contact our team if you have any questions or concerns.

Luky365 collects various types of personal data depending on how you interact with our platform. We only collect data that is genuinely necessary to deliver our services safely and effectively.

We only collect what is strictly necessary for the stated purpose. Sensitive data such as full credit card numbers is never stored in luky365 systems — all transactions are processed directly through certified payment gateways.

Luky365 collects your personal data for legitimate purposes that are necessary to operate our services properly. We do not collect data for purposes unrelated to platform operations.

• Account management: Creating, verifying and maintaining your member account securely.
• Identity verification (KYC): Verifying that you are a real, eligible individual and complying with anti-money laundering (AML) legal requirements.
• Transaction processing: Processing deposits, withdrawals and all financial transactions securely and accurately.
• Customer service: Processing and responding to inquiries, complaints and support requests.
• Platform security: Detecting and preventing fraud, account abuse and suspicious activity.
• Legal compliance: Meeting reporting obligations and regulatory compliance requirements applicable to platform operations.
• Service improvement: Analyzing usage patterns to improve user experience and develop better new features.
• Marketing communications: Sending promotional information, exclusive offers and platform news — only where you have given your consent.

Collected data is used in an integrated manner within luky365's internal systems to ensure a smooth, secure, and personalised user experience. Below is a more detailed breakdown of how your data is used in the platform's day-to-day operations:

Experience personalization: Your game records and preferences allow us to deliver relevant game recommendations, suitable promotions, and more meaningful content. This isn't about monitoring you — it's about making your experience at luky365 more comfortable and enjoyable.

Fraud detection: Your IP address, device data, and transaction patterns are continuously analysed by our automated security systems to detect unusual activity. This protects you from unauthorised access and safeguards the overall integrity of the platform.

Service communications: We use your email address and phone number to send important account notifications — including transaction confirmations, security alerts and policy updates. These communications are essential and cannot be fully unsubscribed as they are directly tied to your account security.

Luky365 does not sell, rent, or trade your personal data to any third party for marketing or other commercial purposes. This is our unwavering commitment.

However, there are limited situations where we share data with carefully selected third parties:

• Payment service providers: Payment gateways used to process deposits and withdrawals receive only the information necessary to complete the transaction. These providers are bound by strict confidentiality agreements.
• Game software providers: Licensed game providers receive only the player ID and minimum session information required to run games correctly. They do not receive your full personal information.
• Cloud & hosting services: luky365's infrastructure runs on secure cloud servers. Infrastructure providers have limited access and are bound by strict data agreements.
• Legal authorities: We will disclose the necessary information if required by a court order, law, or legitimate request from a law enforcement agency.
• Fraud prevention: In cases where serious fraud is suspected, relevant information may be shared with the appropriate authorities or third-party identity verification services.

All third parties we work with are required to comply with data protection standards equivalent to or exceeding those we uphold ourselves.

Protecting your personal data is a responsibility we take very seriously. luky365 continuously invests in the latest security infrastructure to keep your data protected at all times.

• 256-bit SSL encryption: All communications between your device and luky365 servers are protected by SSL 256-bit encryption — the same standard used by leading banking institutions in Malaysia.
• Two-factor authentication (2FA): 2FA is available for all accounts and we encourage all members to enable it for added security.
• 24/7 monitoring: Our security system monitors the platform around the clock for suspicious activity, unusual login attempts, and potential security threats.
• Encrypted password storage: Your account password is stored in a hashed format that cannot be decrypted — luky365 staff themselves cannot view your password.
• Regular security audits: Our platform undergoes regular penetration testing and security audits conducted by independent cybersecurity firms.

Luky365 uses cookies and similar tracking technologies to enhance the user experience and collect analytical information about platform usage. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance cookies: Collecting anonymous data on how users interact with the platform — such as the most visited pages and time spent in each section. This data helps us improve platform design and functionality.
• Preference cookies: Saving your preference settings such as language, display theme and game preferences so you don't need to reconfigure them every time you log in.
• Analytics cookies: We use certified third-party analytics services to understand aggregate usage patterns. This data cannot be re-identified to any individual.

You can manage and delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the luky365 platform.

Luky365 retains your personal data only for as long as it is needed for the purposes stated in this Policy, or as required by applicable laws and regulations.

Standard retention period: Active account data is retained for the duration your account remains active. Once an account is closed, we retain certain data for a minimum of five (5) years for legal compliance, fraud investigation, and resolution of any disputes that may arise.

Financial records: In accordance with Malaysian legal requirements, financial transaction records are retained for seven (7) years from the date of the transaction. This is a statutory requirement that cannot be waived, even at a member's request.

Deletion requests: For data not subject to legal retention requirements, you may request deletion of your personal data by contacting our team. Requests will be processed within 30 business days.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international privacy principles, you have the following rights regarding your personal data held by luky365:

To exercise any of the above rights, please contact the luky365 support team via live chat within the platform or by email. We will verify your identity before processing any data-related request to ensure the security of your information.

Luky365 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in platform operations. The latest update date will always be displayed at the top of this document.

For material and significant changes, we will endeavour to provide members with adequate notice via in-platform notifications or email to the registered address. However, it remains your responsibility to review this Policy periodically.

Continued use of the luky365 platform after any changes to this Policy are published means you accept and agree to the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the luky365 privacy team is ready to help.

You can reach us via:

• Live chat: Available 24/7 within the luky365 platform — the fastest way to get a response.
• Support email: [email protected] (response within 24–48 business hours).
• Dedicated privacy email: [email protected] for inquiries specifically related to data and privacy.

For formal requests relating to data rights under the PDPA, please clearly state the type of request and include sufficient proof of identity so we can process it securely and accurately.