lucky365 Privacy Policy

2 Data We Collect

2.1 Lucky365 collects the following categories of personal data from players and platform visitors:

2.2 Lucky365 does not collect sensitive personal data (as defined under applicable data protection law) beyond what is strictly necessary for age verification, identity verification, and AML compliance purposes.

3 How We Collect Data

3.1 Lucky365 collects personal data through the following methods:

• Direct collection: Data you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or using responsible gaming tools.
• Automated collection: Technical and usage data collected automatically when you access the lucky365 platform, including IP address, session data, browser fingerprint data, and in-game activity logs.
• Third-party sources: Identity verification data received from KYC/AML service providers in the course of account verification; fraud signals from payment processing partners; gaming activity data from integrated game provider systems.

3.2 Where lucky365 receives data from third-party sources, that data is received under contractual data sharing agreements and is used only for the specific purposes for which it was shared.

4 Legal Basis for Processing

4.1 Lucky365 processes personal data on the following legal bases under applicable data protection law:

• Contract performance: Processing necessary to provide account services, process transactions, and deliver gaming services.
• Legal obligation: Processing required to comply with AML legislation, KYC obligations, licensing conditions, and responsible gaming regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and aggregate analytics — where these interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications and non-essential analytics cookies, where you have given explicit consent. Consent may be withdrawn at any time.

5 How We Use Your Data

5.1 Lucky365 uses personal data for the following purposes:

• Verifying your identity and age as part of the account registration and KYC process;
• Processing deposits, withdrawals, and refunds via your chosen payment method (Touch 'n Go, Boost, GrabPay, DuitNow, FPX, USDT TRC20);
• Delivering and maintaining gaming services including live dealer games, slots, and sportsbook;
• Detecting and preventing fraud, money laundering, and prohibited activity on the platform;
• Enforcing responsible gaming obligations including the administration of deposit limits, self-exclusion, and other player-activated tools;
• Providing customer support and responding to disputes;
• Sending account and transaction notifications (these are not marketing communications and cannot be opted out of while an account is active);
• Sending promotional communications where you have given explicit consent — you may opt out at any time via account settings;
• Complying with legal and regulatory reporting obligations.

5.2 Lucky365 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without your ability to request human review. Where automated tools are used in fraud detection or responsible gaming monitoring, these tools flag cases for human review rather than taking automated enforcement action independently.

6 Data Sharing & Disclosure

6.1 Lucky365 does not sell personal data to third parties. Personal data is shared with third parties only in the following circumstances:

• Payment processors: Financial data shared with eWallet operators (Touch 'n Go, Boost, GrabPay), FPX banking network participants (Maybank, CIMB, Public Bank), DuitNow, and cryptocurrency processing services to facilitate deposits and withdrawals;
• KYC/AML service providers: Identity and document data shared with licensed identity verification providers for age and identity checks;
• Game content providers: Pseudonymised player IDs and game session data shared with integrated game studios for the purpose of delivering certified gaming content;
• Regulatory authorities: Data disclosed to licensing authorities, law enforcement, or financial intelligence units where required by law or regulatory obligation;
• Professional advisors: Data shared with legal counsel, auditors, or other professional advisors on a confidential basis where necessary.

6.2 All third parties with whom lucky365 shares personal data are bound by written data processing agreements that require them to implement appropriate technical and organisational measures to protect the data and to use it only for the specified purposes.

7 Cookies & Tracking

7.1 Lucky365 uses the following categories of cookies on the platform:

• Strictly necessary cookies: Session management, authentication tokens, CSRF protection. These cannot be disabled as they are essential for platform functionality.
• Analytics cookies: Aggregated, anonymised usage data collected to understand how players interact with the platform and to improve the user experience. No individual player profiling is conducted using analytics data.
• Preference cookies: Storing your language preference, notification settings, and display preferences.

7.2 No third-party advertising or retargeting cookies are used on the lucky365 platform.

7.3 You may manage cookie settings through your browser's privacy controls. Disabling analytics or preference cookies will not prevent you from accessing any core platform functionality.

8 Data Retention

8.1 Lucky365 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of the Account and for a minimum of 5 years following Account closure, in accordance with AML and licensing retention obligations;
• Financial transaction data: Retained for a minimum of 7 years from the date of the transaction;
• Gaming activity logs: Retained for a minimum of 5 years from the date of activity;
• Customer support communications: Retained for 3 years from the date of the communication;
• Marketing consent records: Retained until consent is withdrawn and for 2 years thereafter.

8.2 Upon expiry of the applicable retention period, personal data is securely destroyed or anonymised in accordance with lucky365's data disposal procedures.

9 Data Security

9.1 Lucky365 implements the following technical and organisational security measures to protect personal data:

• AES-256 encryption for data at rest; TLS 1.3 for data in transit;
• Role-based access controls and multi-factor authentication for all internal systems containing player data;
• Comprehensive access logging with anomaly detection;
• Regular penetration testing and vulnerability assessments by independent security firms;
• Documented incident response procedures with defined notification timelines in the event of a data breach.

9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, lucky365 will notify affected players and the relevant supervisory authority within the timeframes required by applicable law.

10 Your Rights

10.1 Subject to applicable law, you have the following rights in respect of your personal data held by lucky365:

• Right of access: To request a copy of the personal data lucky365 holds about you (a Subject Access Request);
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data where no legal retention obligation applies;
• Right to restriction: To request that lucky365 restrict processing of your personal data in certain circumstances;
• Right to data portability: To receive your personal data in a structured, machine-readable format where processing is based on consent or contract;
• Right to object: To object to processing based on legitimate interests;
• Right to withdraw consent: To withdraw consent for processing at any time where processing is consent-based, without affecting the lawfulness of processing prior to withdrawal.

10.2 To exercise any of the above rights, contact lucky365 via live chat support. Lucky365 will respond to verified requests within 30 days. Requests may be refused or restricted where legal obligations require retention of the data in question.

11 International Transfers

11.1 Lucky365's platform infrastructure and some third-party service providers may be located outside Malaysia. Where personal data is transferred internationally, lucky365 ensures that appropriate safeguards are in place, including standard contractual clauses or equivalent data transfer mechanisms, to ensure the data receives a level of protection equivalent to that applicable in the originating jurisdiction.

11.2 By using the lucky365 platform, you acknowledge that your data may be transferred to and processed in countries outside Malaysia.

12 Children's Privacy

12.1 The lucky365 platform is strictly for individuals aged 21 years and above. 21+ Only Lucky365 does not knowingly collect personal data from individuals under this age threshold.

12.2 If lucky365 becomes aware that personal data has been collected from an individual under 21 years of age, that data will be deleted without undue delay and the associated Account will be closed. Any funds held in such an Account will be dealt with in accordance with the lucky365 Terms & Conditions and applicable regulatory requirements.

12.3 If you believe that a minor has registered an Account on the lucky365 platform, please contact lucky365 support immediately via live chat.

13 Changes to This Policy

13.1 Lucky365 may update this Privacy Policy from time to time to reflect changes in law, regulatory requirements, or platform operations. Material changes will be notified to active Account holders via email or in-platform notification at least 7 days before taking effect.

13.2 The date of the most recent update is displayed at the top of this Policy. Continued use of the lucky365 platform following any update constitutes acceptance of the revised Policy.

14 Contact Us

14.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by lucky365, please contact the lucky365 support team via live chat, available 24/7 on the platform.

14.2 Email contact for privacy-related matters (plain text — not a clickable link):

14.3 Lucky365 aims to respond to all privacy-related communications within 5 business days.