Lucky888 Privacy Policy – Protection of Your Personal Data

01 Information We Collect

Lucky888 collects your personal information in various ways when you use our platform. The information we collect falls into several main categories:

Account Registration Information:

• Full name, date of birth, and gender.
• Email address, phone number, and account password (stored in encrypted form).
• Current residential address including state and postcode.
• Your preferred username on the lucky888 platform.

Identity Verification (KYC) Information:

• A copy of your MyKad, passport, or other valid identity document.
• Supporting documents such as bank statements or utility bills for address verification.
• A selfie or additional documents if required by our KYC team.

Financial Transaction Information:

• Bank account number, bank name, and registered e-wallet details.
• Deposit and withdrawal records, including amounts, dates, and payment methods.
• Complete betting and wins records for audit and tax reporting purposes.

Technical & Usage Information:

• IP address, device type, operating system, and web browser version.
• General geolocation data (country/city) based on your IP address.
• Login activity logs, session times, and platform usage patterns.

02 Data Collection & Usage Purpose

Every piece of information we collect has a clear and lawful purpose. lucky888 uses your personal data for the following purposes:

Lucky888 will not use your data for any purpose other than those stated above without obtaining your consent first. If you do not wish to receive marketing communications, you may withdraw your consent at any time through your account settings.

03 Sharing Information with Third Parties

Lucky888 upholds strict data confidentiality principles. We does not sell or rent your personal data to any party for commercial purposes. However, there are limited situations in which we need to share your information:

• Payment Providers: Required transaction details are shared with approved payment processors such as banking gateways and e-wallet providers to facilitate successful deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Game Providers: Minimum account information required is shared with licensed game providers to enable you to access their games through the lucky888 platform.
• Regulatory Authority: lucky888 will comply with lawful requests from competent authorities, including anti-money laundering agencies, tax authorities, and relevant gambling regulatory bodies.
• Independent Audit: Appointed audit firms may require limited access to transaction records for compliance and certification purposes. All auditors are bound by confidentiality agreements.

04 Data Security Measures

Protecting your personal and financial data is lucky888's highest priority. We implement the following layers of security to ensure your information is always protected:

• 256-bit SSL/TLS Encryption: All communications between your browser and the lucky888 servers are protected with military-grade encryption, ensuring data cannot be intercepted by any party during transit.
• Hashed Password Storage: Your account password is never stored in plain text. We use a robust one-way hashing algorithm, meaning Lucky888 itself cannot read your password.
• Two-Factor Authentication (2FA): lucky888 offers two-factor authentication for player accounts to add an extra layer of protection against unauthorised access.
• Continuous Threat Monitoring: Our security systems monitor suspicious activity, unusual login attempts, and abnormal transaction patterns in real time.
• Internal Access Control: Only authorised Lucky888 staff with a legitimate business need are permitted to access player personal data. All access is logged and regularly audited.
• Regular Penetration Testing: lucky888 conducts regular security penetration testing through independent cybersecurity firms to identify and patch any vulnerabilities before they can be exploited.

05 Cookie Usage & Tracking Technologies

Lucky888 uses cookies and similar technologies to enhance the user experience and ensure smooth platform functionality. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as maintaining your login session, processing transactions, and ensuring security features work correctly. They cannot be disabled without affecting platform functionality.
• Performance Cookies: Used to collect information on how players use our platform, such as the most frequently visited pages. This data is collected in aggregate and anonymised form to help us improve the platform.
• Functional Cookies: Enables the platform to remember your preferences such as selected language, currency format, and display settings to deliver a more personalised experience.

Lucky888 does not use third-party tracking cookies for targeted advertising or selling your usage data to advertising networks. You may manage your cookie settings through your web browser at any time, although this may affect certain platform functions.

06 Your Rights as a Player

Lucky888 recognises and respects your rights regarding your personal data. You have the following rights, which you may exercise at any time:

• Right of Access: You have the right to obtain a copy of all personal data we hold about you in a readable format.
• Right to Rectification: If any of your personal data is inaccurate or outdated, you may request a correction at any time through your account settings or our customer support.
• Right to Erasure: You may request that your personal data be deleted under certain circumstances, except where Lucky888 is legally required to retain such records.
• Right to Restriction of Processing: You may request that we restrict how we process your data in certain situations, such as while a dispute is being investigated.
• Right to Object: You may object to the use of your data for direct marketing purposes at any time and your request will be honoured.
• Right to Data Portability: You may request that your data be provided in a structured format that can be transferred to another service provider.

07 Data Retention & Deletion Period

Lucky888 retains your personal data only for as long as necessary to fulfil the purpose of collection or any related legal obligations. The following are our data retention guidelines:

• Active Account Data: Retained for the duration of your active account plus the period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction occurs, in line with applicable financial and tax legal requirements.
• KYC Documents: Retained for the duration of the active account and a minimum of 5 years after account closure to meet anti-money laundering compliance requirements.
• Communication Logs: Customer support and communication records are retained for 3 years for service quality and dispute resolution purposes.
• Technical Data: System logs and technical usage data are retained for 12 months before being automatically deleted or anonymised.

When the retention period expires or you request deletion (and there are no legal barriers), your data will be permanently deleted or anonymised from our systems.

08 International Data Transfers

As lucky888 operates as an international online platform, your data may in certain circumstances be processed on servers located outside Malaysia. lucky888 ensures that any international data transfers are carried out with adequate safeguards:

• All cross-border data transfers are subject to strict contractual protections and security standards equivalent to or higher than domestic safeguards.
• Lucky888 only uses cloud service and infrastructure providers that are certified compliant with international security standards such as ISO 27001.
• Sensitive financial data is processed in accordance with PCI-DSS standards to ensure the security of payment card information and financial transactions.

09 Third-Party Links & Services

The lucky888 platform may contain links to third-party websites or services such as game providers and payment platforms. This Privacy Policy applies only to the lucky888 platform and does not cover the privacy practices of those third parties.

Lucky888 recommends that you read the privacy policy of every third-party service you use, especially payment providers and e-wallets. lucky888 is not responsible for the privacy practices or content of third-party websites.

All game providers partnering with lucky888 are selected based on their strong compliance track record, including holding valid licences and adhering to the data protection standards set by their respective regulatory bodies.

10 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Lucky888 handles your personal data, our team is ready to assist you:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the lucky888 platform.
• Email: [email protected] — we aim to respond within 24–48 hours.
• For formal privacy complaints: Please include "Privacy Complaint" in your email subject line and our privacy team will handle your case with high priority.

Lucky888 reserves the right to amend this Privacy Policy from time to time. Any material changes will be communicated to players via registered email or in-platform notifications. Continued use of the lucky888 platform after any amendments constitutes acceptance of the updated policy.