Privacy Policy – lucky55

1. About This Policy

This Privacy Policy applies to lucky55 (referred to as "lucky55", "we", "us", or "the Platform"), the online casino and sportsbook platform operated at https://lucky55.lat. It sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed.

lucky55 is committed to handling personal data responsibly and in accordance with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia and international data protection standards where applicable.

By registering an account with lucky55, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the lucky55 Platform.

2. Data We Collect

lucky55 collects personal data that is necessary to provide our gaming, sportsbook, and payment services. The categories of data we may collect include:

2.1 Identity Data

• Full legal name as it appears on your identity document
• Date of birth (for age verification — all lucky55 users must be 21 or older)
• Gender
• Government-issued identification number (e.g., MyKad number for Malaysian residents)
• Copies of identification documents submitted during KYC verification

2.2 Contact Data

• Email address registered to your lucky55 account
• Mobile phone number
• Residential address

2.3 Financial Data

• Payment method details (Touch n Go eWallet ID, Boost account reference, bank account details for Maybank, CIMB, Public Bank, Hong Leong Bank, or other supported Malaysian banking institutions)
• Deposit and withdrawal transaction records
• Account balance history

2.4 Usage & Technical Data

• IP address and device identifiers at time of login and gameplay
• Browser type, operating system, and device model
• Game session data including stakes, outcomes, session duration, and game history
• Sportsbook betting history including markets, odds, stake amounts, and settlement outcomes
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

2.5 Communication Data

• Records of correspondence between you and the lucky55 support team via live chat or email
• Your preferences for marketing communications from lucky55

3. How We Collect Your Data

lucky55 collects personal data through the following channels:

• Account registration: information you provide when creating a lucky55 account, including name, date of birth, email, and contact details.
• KYC verification: identity documents you submit in response to a verification request from lucky55.
• Deposits and withdrawals: payment details and transaction records generated when you add or withdraw funds via Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, or other supported payment methods.
• Platform interaction: automatically collected data on how you use lucky55, including game play, betting activity, pages visited, and session duration.
• Cookies and tracking technologies: as described in Section 7 of this Policy.
• Support communications: data you provide when contacting lucky55's customer support team.

4. Legal Basis for Processing

lucky55 processes your personal data under the following legal bases:

5. How We Use Your Data

lucky55 uses the personal data it collects for the following purposes:

• To create, manage, and maintain your lucky55 account, including authentication and security.
• To verify your identity and age in compliance with our age restriction policy (minimum 21 years) and applicable regulatory requirements.
• To process deposits and withdrawals in Malaysian Ringgit (MYR) via your selected payment method.
• To detect, prevent, and investigate fraud, money laundering, and other prohibited activity on the Platform.
• To administer the lucky55 Rewards programme, calculate points, and apply bonus credits to your account.
• To provide customer support and respond to your enquiries and complaints.
• To monitor your gaming activity for responsible gaming purposes and apply limits, cooling-off periods, or self-exclusion where required or requested.
• To send you service-related communications, including account security alerts, transaction confirmations, and policy update notices.
• To send you promotional communications about lucky55 offers, new games, and sportsbook events — only where you have opted in to marketing communications and may withdraw consent at any time.
• To analyse Platform usage patterns to improve the lucky55 user experience, product features, and technical performance.
• To comply with our regulatory and legal obligations as an internationally licenced gaming operator.

6. Sharing Your Data

lucky55 does not sell your personal data to third parties. We may share your data in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers to support the operation of lucky55, including payment processors (Touch n Go eWallet, Boost, GrabPay, and banking partners), game software providers, identity verification services, fraud detection platforms, and IT infrastructure providers. These parties are permitted to process your data only for the specific purpose of providing services to lucky55 and are contractually bound to maintain appropriate data security standards.

6.2 Regulatory and Legal Disclosure

lucky55 may disclose personal data to regulatory authorities, law enforcement agencies, or other competent governmental bodies where required by law, court order, or applicable regulatory obligation. This includes disclosures required under anti-money laundering and counter-terrorism financing regulations.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets involving lucky55, personal data held by lucky55 may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this Policy.

6.4 With Your Consent

lucky55 will not share your personal data with any third party for purposes not described in this Policy without your explicit prior consent.

7. Cookies & Tracking Technologies

lucky55 uses cookies and similar tracking technologies to enable core Platform functionality, analyse usage, and improve the user experience. The types of cookies we use include:

• Strictly necessary cookies: required for authentication, session management, and security. These cannot be disabled without breaking Platform functionality.
• Functional cookies: remember your preferences such as language settings, responsible gaming limit configurations, and favourite games.
• Analytics cookies: collect aggregated, anonymised data about how users navigate lucky55, which games are played most, and how different features are used. This data informs Platform improvements.
• Marketing cookies: used only where you have consented to receive personalised promotional communications from lucky55. You may withdraw consent at any time via your account settings.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to access lucky55 account features.

8. Data Retention

lucky55 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in any event for a minimum period required by applicable law and regulatory obligation. Specific retention periods include:

• Account data and KYC documents: retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulatory requirements.
• Financial transaction records: retained for a minimum of seven (7) years from the date of transaction, for audit and regulatory compliance purposes.
• Game and betting history: retained for a minimum of two (2) years from the date of the relevant session or bet.
• Support communications: retained for three (3) years from the date of the last communication in a given thread.
• Marketing preferences and consent records: retained until you withdraw consent or for three (3) years following last engagement, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

9. Data Security

lucky55 implements technical and organisational security measures appropriate to the sensitivity of the personal data we hold. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the lucky55 Platform.
• Industry-standard password hashing using bcrypt or equivalent algorithms — your password is never stored in plain text.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Multi-factor authentication requirements for administrative access to data systems.
• Regular security audits and penetration testing of Platform infrastructure.
• Automated monitoring and anomaly detection to identify suspicious account activity or potential data breaches in real time.

Despite these measures, no data transmission over the internet or electronic storage system is entirely secure. lucky55 cannot guarantee absolute security but is committed to promptly investigating and notifying affected users of any confirmed data breach in accordance with applicable legal obligations.

10. Your Data Rights

Subject to applicable Malaysian data protection law and our regulatory obligations, you have the following rights with respect to your personal data held by lucky55:

• Right of access: you may request a copy of the personal data lucky55 holds about you.
• Right to correction: you may request that inaccurate or incomplete personal data be corrected. Basic account details such as email address and contact number can be updated directly within your lucky55 account settings.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing: you may request that lucky55 restricts the processing of your data in certain circumstances, such as where you contest the accuracy of the data.
• Right to withdraw consent: where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via your account settings without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to data portability: you may request a copy of certain personal data you have provided to lucky55 in a structured, machine-readable format.

To exercise any of these rights, please contact the lucky55 Data Protection team. We will respond to verified requests within thirty (30) days. Note that some rights may be limited where lucky55 has a legitimate interest or legal obligation to retain the data.

11. Children's Privacy

lucky55 does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly restricted to adults aged 21 and above. If lucky55 discovers that personal data has been collected from a user who is under 21, that account will be immediately closed, all data will be securely deleted, and any funds deposited will be returned to the source payment method.

If you believe that a person under 21 has accessed or registered on lucky55, please contact our support team immediately.

12. Third-Party Links

The lucky55 Platform may contain references to third-party services such as game providers. While lucky55 takes care to work only with reputable third parties, we are not responsible for the privacy practices of external organisations. This Privacy Policy applies solely to data processing carried out by lucky55 in connection with the Platform at https://lucky55.lat.

13. Changes to This Privacy Policy

lucky55 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Material changes will be communicated to registered users via email to the address on file or through a prominent notice on the Platform at least seven (7) days before taking effect.

Your continued use of lucky55 following notification of a revised Privacy Policy constitutes acceptance of those changes. The "Last updated" date at the top of this page reflects the most recent revision.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data lucky55 holds about you, please contact us via:

• Live chat: available 24/7 from any page of the lucky55 Platform.
• Email: [email protected] — please note this is a plain text address provided for correspondence reference only; it is not a clickable link.

We aim to acknowledge all privacy-related enquiries within two (2) business days and to resolve substantive requests within thirty (30) days of receipt.