Privacy Policy lucky33 — Protection of Your Personal Data

1. Introduction

Lucky33 is an online gaming platform that operates with a full commitment to protecting every member's privacy. We understand that your trust is our most valuable asset, and that trust can only be maintained when we are transparent about how we handle your personal information.

This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of personal information you provide to Lucky33 when registering and using our platform. This document applies to all users of the Lucky33 platform, including website visitors, registered members, and Lucky33 mobile app users.

By registering an account or continuing to use Lucky33's services, you consent to the collection and use of your personal information as described in this Privacy Policy. If you disagree with any part of this policy, please stop using the platform and contact us to close your account.

2. Personal Data We Collect

Lucky33 only collects personal data that is strictly necessary to provide a secure, seamless and legally compliant platform service. The following are the categories of data we collect:

Registration Information

• Identity information: Full name, date of birth, identity card number (MyKad) or passport number.
• Contact information: Email address, mobile number, and current residential address.
• Account eligibility: Username and encrypted password — we do not store passwords in plain text.

Financial Information

• Bank account number or e-wallet used for deposits and withdrawals.
• Transaction history including deposits, withdrawals, and wagering activity on the platform.
• Identity verification documents (KYC) such as a copy of your MyKad or passport that have been uploaded.

Platform Usage Data

• IP address, device type, operating system, and web browser information.
• Log data such as login times, in-platform activity, and games played.
• Preferences and account settings that you have configured yourself.

3. How We Collect Data

Your personal data is collected through several different channels as you interact with the Lucky33 platform:

• Direct Registration: Information you fill in when registering a new account on the lucky33 website or app.
• Platform Usage: Data automatically generated when you log in, play games, or carry out financial transactions.
• KYC Verification: Identity documents you upload as part of the account verification process.
• Communications with Support: Information you provide when contacting the lucky33 customer support team via live chat or email.
• Cookies and Tracking Technology: Data automatically collected via cookies and similar technologies as you browse our platform.
• Authorised Third Parties: In certain cases, we may receive information from authorised payment partners or identity verification bodies for verification and fraud prevention purposes.

4. Purpose of Data Use

Lucky33 uses collected personal data solely for lawful and stated purposes. The table below summarises the primary purposes for which data is used:

5. Sharing Information with Third Parties

Lucky33 does not sell, rent or share member personal data with third parties for their own marketing purposes. However, in the course of operating the platform, we may need to share certain information with the following parties:

• Payment Service Providers: Payment gateways and financial institutions that process your deposit and withdrawal transactions. They receive only the information necessary to process the relevant transaction.
• KYC Service Providers: Identity verification companies that assist us in verifying members' documents as part of our compliance process.
• Gaming Software Providers: Third-party game providers may receive data required to run their games on the lucky33 platform, but only to the extent necessary.
• Legal Authority: Law enforcement agencies, regulatory bodies, or courts when we are legally required to disclose such information.
• Professional Advisors: Lawyers, auditors and consultants bound by strict confidentiality obligations when providing services to lucky33.

All third parties receiving lucky33 members' personal data are required to comply with data protection standards equivalent to or stricter than those practised by lucky33 itself. Legally binding data processing agreements are in place with all such third parties.

6. Data Security

Lucky33 implements comprehensive technical and organisational security measures to protect member personal data from unauthorised access, loss, destruction or disclosure. Key measures we have in place include:

• Data Encryption: All data transmitted between your device and lucky33's servers is encrypted using TLS 1.3 protocol with 256-bit encryption. Sensitive data at rest is also encrypted using industry-grade encryption algorithms.
• Access Control: A role-based access control (RBAC) system ensures staff can only access data necessary for their duties. All access to sensitive data is logged and monitored.
• Two-Factor Authentication: lucky33's internal systems require two-factor authentication for all staff accessing members' personal data.
• Regular Security Audits: lucky33 conducts regular penetration testing and security audits to identify and address any system vulnerabilities before they can be exploited.
• Incident Response Plan: In the event of a data breach, lucky33 has a clear response plan to contain the incident, notify the relevant authorities, and inform affected members within the timeframe required by law.

7. Cookies & Tracking Technologies

Lucky33 uses cookies and similar tracking technologies to enhance the user experience, ensure platform security and analyse usage patterns for continuous improvement.

Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login verification and session management. These cookies cannot be disabled.
• Functional Cookies: Stores your preferences such as preferred language, display settings and game choices for a more personalised experience.
• Analytics Cookies: Helps us understand how users interact with the platform to identify areas for improvement.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and ensure the integrity of your login session.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the Lucky33 platform. For more information on managing cookies, refer to your web browser's help documentation.

8. Your Rights as a Data Subject

As a lucky33 member and data subject under Malaysia's PDPA, you have several rights you can exercise over your personal data. lucky33 is committed to facilitating the exercise of these rights:

9. Data Retention Period

Lucky33 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law. In general, retention periods are as follows:

• Active Account Data: Retained for the duration your account remains active on the Lucky33 platform.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with Malaysia's accounting and tax legal requirements.
• KYC Documents: Retained for 5 years after account closure or the date of the last transaction, whichever is later, in accordance with AML/CFT legal requirements.
• Security Logs: Retained for 12 months for security incident investigation and fraud prevention purposes.
• Customer Support Communications: Retained for 3 years for reference and service improvement purposes.

Upon expiry of the retention period, your personal data will be securely deleted or anonymised so that you can no longer be identified from that data.

10. Changes to the Privacy Policy

Lucky33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or platform improvements. When significant changes are made, lucky33 will notify registered members via:

• In-platform notification upon your next login after the changes take effect.
• An email will be sent to the address registered in your account at least 14 days before any material changes take effect.
• Update the "Last Updated" date at the top of this page.

Continued use of the lucky33 platform after notice of changes constitutes acceptance of the updated Privacy Policy. You are encouraged to review this page periodically to stay informed of the latest applicable version.

11. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how lucky33 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week within the lucky33 platform — the fastest way to get an immediate response.
• Privacy Email: [email protected] — dedicated to privacy and data protection enquiries. Response within 24–48 hours on business days.
• General Support Email: [email protected] — for other general enquiries regarding your account and services.

Lucky33 takes every privacy-related complaint seriously. We will investigate and respond to all complaints received within a reasonable timeframe. If you are unsatisfied with our response, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department.