Privacy Policy Lucky555 – Data Protection & Privacy for Malaysian Players

1 Introduction & Scope of This Privacy Policy

This Privacy Policy ("Policy") is published by Lucky555, operating through the website lucky555.express. This document explains in detail how Lucky555 collects, stores, processes, uses, and protects the personal information you provide when using our platform – whether when registering a new account, making a deposit via DuitNow or Touch 'n Go eWallet, playing jackpot slots, Live Casino, betting on sports such as the Malaysia Super League or badminton, e-sports like Mobile Legends, or any other services Lucky555 offers.

Lucky555 takes seriously our responsibility as custodians of Malaysian players' personal data. We are committed to handling your information in a transparent, responsible, and secure manner. The trust you place in Lucky555 when you register and share your personal details is something we do not take lightly — and this Privacy Policy is our written commitment to that promise.

This Policy applies to all Lucky555 users regardless of how you access the platform – whether via a smartphone browser, tablet, or personal computer. By using Lucky555, you acknowledge that you have read, understood, and agreed to how we handle your personal data as described in this Policy.

2 Personal Information Lucky555 Collects

Lucky555 collects your personal information in two main ways: information you provide directly, and information collected automatically as you use our platform.

Information you provide directly to Lucky555 includes:

• Registration information: Full name, Malaysian phone number, email address, date of birth, and account password.
• Identity verification (KYC) information: A copy of your identity card (MyKad), proof of address, and any other supporting documents required for the account verification process.
• Financial information: Malaysian bank account or e-wallet details (such as bank account numbers for withdrawals), and deposit and withdrawal transaction information. Lucky555 does not store full card numbers or CVV details.
• Communications: Any information you share when contacting the Lucky555 support team via live chat, email, or other communication channels.
• Game preferences: Game preferences, account settings, and information related to your use of responsible gaming tools such as deposit limits you have set.

Information collected automatically when you use Lucky555 includes:

• Technical data: IP address, web browser type and version, device operating system, screen resolution, and other technical device information.
• Usage data: Pages visited within Lucky555, time spent on each page, games played, betting history, and navigation patterns within the platform.
• Cookie data: Information stored by cookies to identify your session, save your preferences, and enhance your experience on Lucky555.
• General location data: Approximate location data based on IP address for security and verification purposes.

3 How We Use Your Personal Information

Lucky555 uses the personal information we collect solely for the following purposes. We will not use your information for any other purpose without prior notice and, where required, your consent.

The table below summarises how Lucky555 uses each category of your personal information:

Lucky555 may also use your aggregated information (without personal identifiers) for internal analytics purposes to improve the platform, understand usage patterns, and plan service enhancements. This aggregated data cannot be used to identify you as an individual.

4 Sharing Information with Third Parties

Lucky555 does not sell, rent, or distribute your personal information to third parties for their own marketing purposes. This is an unwavering commitment and a core value in the way we handle player data.

However, in the course of operating the Lucky555 platform, there are limited situations in which Lucky555 may need to share your personal information with carefully selected third parties:

• Service providers: Companies that assist Lucky555 in delivering its services – including Malaysian payment processors such as DuitNow/PayNet, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX; gaming software providers such as Evolution Gaming and Pragmatic Play; and other technical service providers. All such providers are bound by strict data confidentiality agreements.
• Legal compliance: When Lucky555 is required by law, court order, or direction from a competent authority to disclose personal information. Lucky555 will notify you of such disclosure where permitted by law.
• Fraud prevention and security: Sharing information with fraud prevention agencies or cybersecurity bodies to protect the platform and other players from unlawful activity.
• Business transfers: In the event of a merger, acquisition, or asset transfer, personal information may be transferred as part of that transaction. You will be notified before any such transfer takes place.

5 Security & Data Protection

Lucky555 invests seriously in technical and organisational security measures to protect your personal information from unauthorised access, loss, alteration, or disclosure. The following are the layers of protection we have in place at Lucky555:

• Transmission encryption: All data transmitted between your device and Lucky555's servers is encrypted using TLS 1.3 with AES-256 encryption — the same technology used by Malaysia's leading banks.
• Storage encryption: Sensitive data such as passwords is stored in an irreversible hashed format. Lucky555 does not store your password in plain text.
• Access control: Only Lucky555 staff who require access to specific data for their job functions are permitted to do so – in accordance with the "least privilege" principle.
• 24/7 Monitoring: Lucky555's security systems are monitored around the clock to detect and respond to any unauthorised access attempts or suspicious activity.
• Two-factor authentication: Lucky555 encourages players to enable two-factor authentication (2FA) as an added layer of security for their accounts.
• Secure payment processing: Lucky555 does not store full card numbers, expiry dates, or CVV codes. All transactions are processed through PCI-DSS compliant, certified payment processors.

While Lucky555 takes all reasonable measures to protect your data, no system can guarantee 100% absolute security. You also play an important role in keeping your account secure — use a strong password, never share it with anyone, and contact Lucky555 immediately if you suspect your account has been compromised.

6 Cookies & Tracking Technologies

Lucky555 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser when you visit Lucky555.

Lucky555 uses the following types of cookies:

• Essential Cookies: Required for the Lucky555 platform to function properly. This includes session cookies that keep you logged in while using the platform. These cookies cannot be disabled without affecting Lucky555's core functionality.
• Preference Cookies: Storing your preferences such as language, display settings, and account configuration so you don't have to reconfigure them each time you visit Lucky555.
• Analytics Cookies: Helps Lucky555 understand how players use the platform — which pages are visited most, where players encounter difficulties, and how the platform can be improved. This data is aggregated and cannot be used to identify any individual.
• Security Cookies: Used for identity verification, fraud prevention, and protecting your account from unauthorised access.

You can manage your cookie settings through your web browser preferences. Most modern browsers allow you to view, manage, block, or delete cookies. However, disabling essential cookies may affect your ability to log in and use certain Lucky555 features.

7 Data Retention Period

Lucky555 retains your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or for as long as required by applicable law – whichever is longer.

• Active account data: For the duration of your active Lucky555 account and for a reasonable period after account closure, for the purpose of resolving any disputes that may arise.
• Financial transaction records: Lucky555 retains deposit and withdrawal transaction records for a minimum of seven (7) years as required by anti-money laundering legislation and applicable accounting requirements.
• KYC documents: Retained for the duration of account activity and for at least five (5) years after account closure, in line with legal compliance requirements.
• Support communication logs: Retained for three (3) years for reference purposes and resolution of any disputes that may arise at a later date.
• Aggregated analytics data: May be retained for longer as it contains no personally identifiable information.

Once the retention period has expired and there is no legal requirement to continue holding the data, Lucky555 will securely delete or anonymise your personal information. Secure deletion means the data cannot be recovered or reused.

8 Your Privacy Rights as a Lucky555 Player

As a Lucky555 player based in Malaysia, you have the following privacy rights regarding your personal information held by Lucky555. These rights may be exercised at any time by contacting our support team.

9 Children's Privacy

Lucky555 is a platform intended exclusively for adults aged 18 and above. Lucky555 does not knowingly collect personal information from individuals under the age of 18.

If Lucky555 becomes aware that personal information has been collected from a minor without appropriate verification, Lucky555 will take immediate steps to delete that information and close the relevant account. If you believe a child may have provided personal information to Lucky555, please contact us immediately at support@lucky555.express.

10 Links to Other Websites

The Lucky555 platform may from time to time contain links or references to third-party websites or services for informational or player convenience purposes. Lucky555 is not responsible for the privacy practices or content of those third-party websites.

Once you leave the Lucky555 platform and access a third-party website, this Privacy Policy no longer applies. We encourage you to read the privacy policy of every website you visit, particularly before providing any personal information. Lucky555 is not responsible for how third parties handle your personal information.

11 Changes to This Privacy Policy

Lucky555 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. All changes will be published on this page with a revised update date.

For material changes – those that significantly affect how Lucky555 handles your personal data – we will notify you via email or an in-platform notification at least seven (7) days before the changes take effect. This gives you sufficient time to review the changes and decide whether to continue using our platform.

Continued use of the Lucky555 platform after the effective date of any updated Privacy Policy changes will be considered acceptance of those changes. If you do not agree with the changes made, you may close your Lucky555 account by contacting our support team.