Lucky55 Privacy Policy – Data Protection Malaysian Member Personal

Lucky55 collects members' personal data through several channels — registration forms, identity verification (KYC) processes, financial transactions, and direct use of the platform. The following are the categories of data we collect:

Data you provide directly to Lucky55:

• Registration information: Your full name, active Malaysian phone number, email address, and the password you chose when registering your Lucky55 account.
• Identity verification documents: When Lucky55 requires KYC verification, you may be asked to upload a valid copy of your MyKad or passport to verify your identity and age.
• Payment information: eWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or bank account numbers for deposit and withdrawal purposes. Lucky55 only retains the information needed to process transactions — full account numbers are not stored in our systems unless required for withdrawal security purposes.
• Communications with Lucky55: Any messages, complaints, or enquiries you send to Lucky55 customer support via Live Chat or email are retained for reference and service improvement purposes.

Data automatically collected when you use the Lucky55 platform:

• Technical data: IP address, device type (Android, iOS, desktop), operating system, web browser and its version, and your device's language settings.
• Platform activity data: Login history, pages visited, games played, bet amounts, game outcomes, and transaction history.
• Cookie data: Session information, preference cookies and analytics cookies that help Lucky55 understand platform usage patterns for improvement purposes.

The personal data Lucky55 collects is used solely for legitimate purposes that are directly related to providing our platform services to you. The following are the specific purposes for which we use your data:

• Account management: Creating and maintaining your Lucky55 account, processing password reset requests, and managing the account verification process when required.
• Financial transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as processing your winnings withdrawals to your preferred payment method.
• Platform security: Detecting and preventing fraud, account misuse, money laundering, and other illegal activities that could compromise the safety of other Lucky55 members.
• Customer support: Responding to enquiries, resolving technical issues, and handling complaints submitted to the Lucky55 customer support team.
• Legal compliance: Fulfilling Lucky55's obligations under Malaysia's PDPA, anti-money laundering (AML) compliance, and other applicable regulatory requirements.
• Platform improvements: Analysing aggregated usage patterns (not individual data) to understand how players interact with Lucky55 and make relevant improvements.
• Account-related communications: Sending important security notifications, transaction alerts, and policy updates that directly affect your Lucky55 account.

Lucky55 does not use your personal data to build advertising profiles, sell data to advertisers, or use it for any purpose not directly related to the provision of our platform services.

Lucky55 continually invests in the latest security technologies to ensure your personal data remains protected at all times. The technical and operational security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and Lucky55's servers is encrypted using 256-bit SSL standards — the same level of encryption used by major financial institutions in Malaysia.
• Sensitive data encryption: Sensitive personal data such as MyKad numbers and payment account information is stored in encrypted format within Lucky55's databases — not as plain text.
• Internal access controls: Only Lucky55 staff who require access to your data to perform their job duties are granted such access, with every instance of access logged and monitored.
• 24/7 Monitoring: Lucky55's security monitoring systems operate around the clock to detect intrusion attempts, unauthorised access, or anomalies in data activity.
• Two-factor authentication (2FA): Lucky55 offers a 2FA option for all members to add an extra layer of security to the account login process.

Lucky55's data is stored on servers located in physically and digitally secure environments. Lucky55 adheres to industry best practices in the management and protection of personal data.

Lucky55 does not sell, rent, or disclose members' personal data to third parties for marketing or commercial purposes. However, there are limited situations in which Lucky55 may need to share certain information with specific parties:

• Payment service providers: Lucky55 shares the necessary transaction details with eWallet and banking providers — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks operating via FPX such as Maybank2u and CIMB Clicks — solely to process your deposits and withdrawals. These providers maintain their own privacy policies and are responsible for the data they receive.
• Licensed game providers: To enable you to play slots, Live Casino, and other games on the Lucky55 platform, the required session information is shared with licensed game providers that operate under strict industry standards.
• Malaysian authorities: Lucky55 will disclose member information to the relevant Malaysian authorities when required by law, court order, or as part of a legitimate criminal investigation.
• Fraud prevention & AML: Lucky55 may share certain information with fraud prevention bodies or anti-money laundering (AML) compliance agencies operating under Malaysia's applicable legal framework.

In all of the data-sharing situations described above, Lucky55 ensures that the receiving parties are bound by appropriate confidentiality obligations and use the shared data solely for the specified purpose.

The Lucky55 platform uses cookies to enhance the user experience and ensure the platform functions smoothly. Cookies are small text files stored on your device when you visit the Lucky55 website.

Types of cookies used by Lucky55:

• Essential session cookies: Required to allow you to log in, maintain your active session, and process transactions securely. Without these cookies, the Lucky55 platform cannot function properly. These cookies are deleted automatically when you close your web browser.
• Preference cookies: Saves your preferences such as language and display settings so you do not need to reconfigure them each time you visit Lucky55.
• Analytics cookies: Helping Lucky55 understand how members use our platform — which pages are visited most frequently, time spent on the platform, and other technical details that help us improve it. This data is collected in aggregate form that does not identify individuals.

You can adjust your cookie settings in your web browser to block or delete cookies at any time. However, blocking essential cookies may affect the functionality of the Lucky55 platform and your overall user experience.

Lucky55 handles members' financial data with the highest level of protection, as we understand how sensitive this information is. Here is specifically how we manage your transaction and payment data:

• Payment account information: The eWallet or bank account numbers you use for deposits and withdrawals are stored in encrypted format. Lucky55 does not retain your full payment account details beyond what is strictly required for secure withdrawal processing.
• Transaction history: Lucky55 maintains a complete record of all deposits, withdrawals, and betting activity in your account. These records are available for you to review at any time via the "Transaction History" section of your Lucky55 account.
• Transaction security: All financial transactions are processed through encrypted channels and monitored in real time to detect any unusual or suspicious activity.
• AML compliance: In accordance with anti-money laundering (AML) compliance obligations, Lucky55 retains transaction records for the period prescribed by Malaysian law. This is a legal requirement that cannot be waived.

Lucky55 does not store credit or debit card information if used. Accepted deposit methods are the listed Malaysian payment options — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX via Maybank2u and CIMB Clicks internet banking.

As a Lucky55 member and data subject under Malaysia's PDPA, you have the following rights regarding the personal data Lucky55 holds about you:

• Right to Access: You have the right to request and receive a copy of the personal data Lucky55 holds about you. This request can be made through Lucky55 customer support and will be processed within a reasonable timeframe.
• Right to Rectification: If any personal data held by Lucky55 is inaccurate or out of date, you have the right to request a correction. You may also update much of your profile information directly within your Lucky55 account settings.
• Right to Withdraw Consent: For data processing that relies on your consent (such as receiving marketing communications), you have the right to withdraw that consent at any time without affecting the validity of prior processing.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, subject to legal requirements and Lucky55's operational needs.
• Right to Request Deletion: In certain circumstances and subject to Lucky55's legal data retention obligations, you may request the deletion of your personal data. Please note that some data may need to be retained for a specified period in accordance with Malaysian law.

To exercise any of the above rights, please contact the Lucky55 customer support team, available 24 hours a day via Live Chat within the platform or by email at support@lucky55-vip.com. Lucky55 will respond to all data rights requests within 14 business days.

Lucky55 does not retain your personal data longer than necessary for the purpose it was collected, or as required under Malaysian law. Lucky55's general data retention policy is as follows:

• Active account data: Retained for as long as your Lucky55 account remains active and you continue to use our platform.
• Financial transaction records: Retained for a minimum of seven years in accordance with Malaysian legal requirements relating to financial records and AML compliance.
• Customer support communication logs: Retained for a period of two years for service history reference and quality improvement purposes.
• Analytics data: Aggregated usage data (which does not identify individuals) may be retained for a longer period for trend analysis and Lucky55 platform improvement purposes.
• Following account closure: When a Lucky55 account is closed at your request, Lucky55 will delete or anonymise your personal data within a reasonable timeframe, except for data that must be retained under applicable law.

The Lucky55 platform may contain links to third-party websites or services in certain contexts — such as links to payment providers to complete a transaction. Lucky55 is not responsible for the privacy policies or data handling practices of these third parties.

When you leave the Lucky55 platform to visit a third-party website or app, you are subject to that party's privacy policy. Lucky55 encourages you to read the privacy policy of every platform you use, including the eWallet and internet banking providers you use for deposits and withdrawals.

Please note that all payment methods supported by Lucky55 — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX — are licensed platforms operating under Malaysian law with their own stringent data security standards.

Lucky55 reserves the right to amend, update, or replace any part of this privacy policy at any time to reflect changes in our data handling practices, new legal requirements, or improvements in how we protect your data.

When significant amendments are made to this privacy policy, Lucky55 will notify members via an in-platform notification or by email to the address registered to your account. The "Updated" date at the top of this page will be revised to reflect the date of the latest amendment.

Your continued use of the Lucky55 platform after any amendments to the privacy policy take effect constitutes full acceptance of the latest applicable version. Lucky55 encourages you to review this page periodically.

If you have any questions, concerns, or requests regarding this Lucky55 Privacy Policy or the personal data we hold about you, please reach out to us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week within the Lucky55 platform — the fastest way to get a response to your privacy-related enquiries.
• Email: support@lucky55-vip.com — for detailed written enquiries regarding data rights or formal privacy complaints.

The Lucky55 team will respond to all privacy-related enquiries in Bahasa Malaysia and will endeavour to resolve each enquiry within a reasonable timeframe. For formal requests relating to data rights under the PDPA, Lucky55 will process and respond within 14 working days from the date the request is received.