Privacy Policy lucky999 — Malaysia User Data Protection

01Scope of This Privacy Policy

This Policy applies to all users who access or use the Lucky999 platform, including the lucky999.ml website and the Lucky999 mobile app for Android and iOS. It covers all activities on the platform — from account registration and gaming activity to financial transactions and interactions with our customer support team.

By using the Lucky999 platform, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree, please discontinue use of the platform.

02Personal Data We Collect

Lucky999 only collects data that is strictly necessary to operate the platform safely and effectively. This data is collected through several methods:

Data you provide directly:

• Account registration details such as full name, email, phone number, and date of birth
• Identity verification documents for the KYC (Know Your Customer) process, such as national ID and proof of address
• Bank account or digital wallet details for deposit and withdrawal purposes
• Any information you share when interacting with the lucky999 customer support team

Data collected automatically:

• Technical information about your device, including IP address, browser type, operating system, and screen resolution
• Platform usage data such as pages visited, time spent, and features used
• Game records and wagering history for responsible gaming monitoring purposes
• Access logs and error logs for security and system maintenance purposes

03How We Use Your Data

Data collected by Lucky999 is used solely for the purposes stated below, and never for any purpose you have not consented to:

• Account management: Creating, verifying, and maintaining your lucky999 account securely
• Transaction processing: Facilitating deposits, withdrawals, and all financial transactions you make through the platform
• KYC compliance: Meeting identity verification requirements mandated by anti-money laundering laws
• Platform security: Detecting and preventing fraud, multi-account usage, and other suspicious activity
• Customer support: Helping resolve your queries and issues effectively
• Responsible gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offer appropriate assistance
• Service improvement: Analyzing usage data in aggregate (not individually) to improve the overall user experience
• Communications: Sending important notifications regarding your account, security, and updated terms

04Data Sharing with Third Parties

Lucky999 does not sell, rent, or disclose your personal data to third parties for commercial or marketing purposes. Your data may be shared only in the following situations:

• Service providers: Third parties that assist lucky999 in operating the platform, such as payment gateway providers, email delivery services, and cloud infrastructure. All such providers are bound by strict data protection agreements.
• Legal requirements: When required by Malaysian law or directives from competent authorities such as Bank Negara Malaysia, the Malaysian Communications and Multimedia Commission (MCMC), or law enforcement agencies.
• Fraud prevention: In certain cases where information sharing is required to investigate fraud or illegal activity involving the Lucky999 platform.
• Change of business ownership: If Lucky999 undergoes a merger, acquisition, or asset sale, user data may be transferred to the relevant entity with reasonable notice given to users.

In all cases of data sharing, Lucky999 will ensure that the receiving party complies with an equivalent or higher standard of data protection.

05Data Security Measures

Lucky999 implements multiple layers of security to protect users' personal data from unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL encryption for all data transmitted between your device and lucky999 servers
• Passwords are stored using strong hashing algorithms — your original password is never stored in our system
• Two-factor authentication (2FA) is available and encouraged for all user accounts
• Intrusion detection system (IDS) operating 24/7 to monitor suspicious activity
• Periodic security audits by independent third parties
• Role-based access control (RBAC) for lucky999 internal staff
• Data centers with high-grade physical security

06Data Retention Period

Lucky999 retains users' personal data only for as long as necessary for the purposes stated in this Policy, or as required by applicable law.

• Active account data: Retained for as long as your account is active and for a reasonable period following account closure
• Financial transaction data: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements
• KYC Data: Retained for as long as required for legal compliance related to anti-money laundering
• Communication logs: Retained for 2 years for dispute resolution and auditing purposes
• Cookie data: Validity period depends on the cookie type, ranging from the current session to a maximum of 2 years

Once the retention period expires, data will be securely deleted or anonymized in accordance with established procedures.

07Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 and Lucky999's policy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the lucky999 customer support team via live chat on the platform. lucky999 will process your request within 14 working days and may require additional identity verification before fulfilling the request.

08Cookies and Tracking Technologies

Lucky999 uses cookies and similar tracking technologies to enhance the user experience and platform security. Types of cookies used:

• Session cookies: Used to maintain your login session and gaming session. Automatically deleted when you close your browser.
• Preference cookies: Saving settings such as your preferred language and display preferences for future visits.
• Security cookies: Helping detect and prevent suspicious login attempts and cyberattacks.
• Analytics cookies: Collecting usage data in aggregate form that does not identify individuals, to help us understand how users interact with the platform.

You can manage cookie settings through your browser; however, disabling certain cookies may affect the functionality of the Lucky999 platform.

09Children's Privacy

The lucky999 platform is intended for individuals aged 18 and above only. lucky999 does not knowingly collect personal data from anyone under the age of 18. Should we discover that a child's data has been collected without our knowledge, it will be deleted immediately and the associated account will be terminated.

If you are a parent or guardian and discover that your underage child has registered an account at Lucky999, please contact our support team immediately.

10Privacy Policy Amendments

Lucky999 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or new platform features. The "Last updated" date at the top of this document will reflect the date of the most recent changes.

For material and significant changes, lucky999 will notify users via in-platform notifications or through the registered email address at least seven days before the changes take effect. Continued use of the lucky999 platform after such notice is considered acceptance of the updated privacy terms.