Privacy Policy

1. Introduction and Data Controller Identity

This Privacy Policy ("Policy") is issued by luky555 ("we", "us", "our", "luky555") and applies to all personal data processed in connection with the luky555 platform accessible at luky555.net and any associated mobile browser interfaces, subdomains, and related services.

luky555 is the data controller in respect of your personal data — that is, we determine the purposes and means by which your personal data is processed. We are committed to handling your personal data lawfully, fairly, and transparently, in accordance with applicable data protection principles and international gaming authority regulatory requirements.

By registering an account on luky555 and using our services, you acknowledge that you have read this Policy and understand how your personal data will be processed. If you do not agree with this Policy, you should not use the luky555 platform.

2. Personal Data We Collect

luky555 collects personal data in the following categories. The specific data collected depends on how you interact with the platform:

2.1 Registration and Identity Data

• Full legal name as it appears on your identity document;
• Date of birth (used to verify the 21+ age requirement);
• Residential address;
• Nationality and identity document number (MyKad, passport, or equivalent);
• Email address and mobile phone number.

2.2 Financial and Transaction Data

• FPX bank account details (bank name, masked account number);
• e-Wallet account identifiers (Touch 'n Go, Boost, GrabPay) — masked references only;
• Deposit amounts, withdrawal amounts, transaction timestamps, and reference numbers;
• Wallet balance history and bonus credit records.

2.3 Gaming Activity Data

• Bet history across Sportsbook, Slots, and luky555 Casino;
• Game session durations, win/loss records, and stake amounts;
• VIP Points accumulated and tier progression;
• Responsible gaming tool activations (deposit limits, session reminders, self-exclusion requests).

2.4 Technical and Device Data

• IP address at time of login and session;
• Device type, operating system, and browser version;
• Session timestamps and duration;
• Geolocation data (country-level, derived from IP address).

2.5 Communications Data

• Records of Live Chat, email, and Telegram support interactions;
• Complaint and dispute correspondence;
• Promotional communication preferences and opt-out records.

Data Category	Collection Method	Required?
Identity Data	Registration form; KYC verification	Mandatory
Financial Data	Payment processor; deposit/withdrawal requests	Mandatory
Gaming Activity	Platform systems (automated)	Mandatory
Technical/Device Data	Server logs; browser signals (automated)	Mandatory
Communications Data	Support interactions (user-initiated)	When applicable

3. How We Use Your Personal Data

luky555 uses your personal data for the following purposes:

• Account Administration: To create, maintain, and manage your luky555 account, verify your identity, and authenticate your login sessions;
• Transaction Processing: To process MYR deposits via FPX, Touch 'n Go eWallet, Boost, and GrabPay; to process withdrawal requests to your registered payment method; and to maintain accurate wallet records;
• Regulatory Compliance: To comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any reporting obligations imposed by our licensing authority. This includes retaining transaction records and reporting suspicious activity where required;
• Age Verification: To verify that you are at least 21 years of age before granting access to real-money gaming features on the luky555 platform;
• Responsible Gaming: To monitor gaming activity patterns, administer deposit limits and self-exclusion tools you have requested, and where required, proactively identify indicators of problem gambling in accordance with our responsible gaming obligations;
• Customer Support: To respond to your support queries, process complaints, and maintain records of interactions;
• Fraud Prevention and Security: To detect and prevent fraudulent activity, unauthorised account access, bonus abuse, and collusion;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — where you have opted in to receive such communications. You may opt out at any time by contacting support;
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving luky555 features, performance, and user experience.

4. Legal Basis for Processing

luky555 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform our contract with you — i.e., to operate your luky555 account, process transactions, and deliver gaming services;
• Legal Obligation: Processing required to comply with AML regulations, KYC obligations, and licensing authority requirements;
• Legitimate Interests: Processing for fraud prevention, security monitoring, and platform analytics — where our legitimate interests do not override your data protection rights;
• Consent: Processing for direct marketing communications — where you have given explicit consent, which you may withdraw at any time.

5. Data Sharing and Disclosure

luky555 does not sell your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment Service Providers: We share transaction data with FPX network operators and e-wallet providers (Touch 'n Go, Boost, GrabPay) as necessary to process deposits and withdrawals. These providers act as data processors and are bound by their own data protection obligations;
• Identity Verification Services: We may share identity data with third-party KYC verification providers for the purpose of document authentication;
• Gaming Software Providers: Certain game session data is shared with our game studios (e.g., Pragmatic Play, PG Soft) to the extent necessary to facilitate gameplay and audit game outcomes;
• Regulatory and Law Enforcement Authorities: We disclose personal data to our licensing authority, financial regulators, or law enforcement agencies where required by law or where we are legally compelled to do so;
• Fraud Prevention Networks: We may share data with industry anti-fraud consortiums to identify and prevent cross-platform fraud, collusion, and money laundering.

All third-party data processors engaged by luky555 are subject to contractual data processing agreements that require them to process personal data only for specified purposes and to maintain appropriate security standards.

6. Cookies and Tracking Technologies

The luky555 platform uses cookies and similar tracking technologies to support platform functionality and improve user experience. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for platform operation — session management, login authentication, and security token validation. These cannot be disabled without affecting platform functionality;
• Functional Cookies: Remember your preferences such as language settings, display preferences, and "Remember Me" login state;
• Analytics Cookies: Collect anonymised data on page visits, session durations, and feature usage to support platform performance analysis. No personally identifiable information is included in analytics data transmitted externally;
• Session Security Cookies: Short-lived tokens used to protect your luky555 session against cross-site request forgery (CSRF) and session hijacking attacks.

You may manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to log in and use the luky555 platform.

7. Data Retention

luky555 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with AML record-keeping requirements;
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by applicable financial record-keeping obligations;
• Gaming Activity Data: Retained for the duration of your account and for 2 years following account closure, or longer where required for dispute resolution or regulatory purposes;
• Support Communications: Retained for 2 years from the date of the final communication in a support thread;
• Technical/Device Logs: Retained for up to 12 months, subject to security and fraud investigation requirements.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

8. Data Security

luky555 implements technical and organisational security measures appropriate to the risk profile of personal data processed on the platform. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the luky555 platform;
• Encrypted storage of sensitive personal data, including identity documents and financial account references;
• Access controls limiting personal data access to authorised luky555 personnel on a need-to-know basis;
• Regular security audits and penetration testing of the luky555 platform infrastructure;
• Multi-factor authentication for administrative access to data systems.

Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a personal data breach that poses a risk to your rights and freedoms, luky555 will notify you and relevant regulatory authorities in accordance with applicable breach notification obligations.

9. Your Data Protection Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by luky555:

• Right of Access: You may request a copy of the personal data we hold about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations — note that AML and regulatory record-keeping requirements may prevent full erasure during mandatory retention periods;
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances;
• Right to Data Portability: You may request a machine-readable export of personal data you have provided to us;
• Right to Object: You may object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact luky555 at [email protected]. We will respond to requests within 30 days. In complex cases, this period may be extended by a further 60 days with prior notice.

10. Minors and Age Restriction

The luky555 platform is strictly restricted to persons aged 21 years and above. luky555 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under the minimum age, we will immediately suspend the associated account, delete the personal data, and take appropriate action in accordance with our regulatory obligations. Parents or guardians who believe a minor may have registered on luky555 are urged to contact [email protected] immediately.

11. Changes to This Privacy Policy

luky555 reserves the right to update this Privacy Policy at any time. Material changes — particularly those affecting how we process personal data or your rights — will be communicated to registered users via the email address on file at least 7 days before the updated Policy takes effect. The "Last updated" date at the top of this Policy will reflect the date of the most recent revision. Your continued use of the luky555 platform after the effective date of any update constitutes acceptance of the revised Policy.

12. Contact and Data Subject Requests

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by luky555, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available daily 09:00 – 02:00 MYT (GMT+8) via the luky555 platform
• Telegram: Contact details available in the platform support section

For responsible gaming concerns, including self-exclusion requests, please also refer to our Responsible Gaming page.