Privacy Policy lucky33 —
Your Data, Our Responsibility

1 Introduction

Lucky33 ("we", "Platform") values the privacy of every player. This Privacy Policy clearly explains the types of personal information we collect when you use the lucky33 platform, how it is used, where it is stored, and your rights as the owner of that data.

This document applies to all players who register, browse, or use any services offered under the lucky33 brand — including the website, mobile app, and any related communication channels.

By using the lucky33 platform, you agree to the data protection practices outlined in this Privacy Policy. If you do not agree with any part of this policy, please stop using our platform and contact us for assistance with the account closure process if needed.

2 Personal Information We Collect

Lucky33 collects personal information in several different situations. Generally, the data we collect can be grouped into three main categories:

Information you provide directly:

• Full name, date of birth, and identification card number (for KYC).
• Email address, phone number, and residential address.
• Bank account or eWallet details for deposit and withdrawal purposes.
• Identity verification documents such as MyKad or passport.
• Any information you share when dealing with customer support.

Automatically collected information:

• IP address, device type, and operating system.
• Web browser information including version and language settings.
• Platform activity data such as games played, session duration, and wagering records.
• Cookie data and similar tracking technologies (see Section 7).
• Access logs and financial transaction records.

Information from third-party sources:

• Identity verification information from trusted third-party KYC providers.
• Blacklist screening data from fraud prevention agencies.
• Payment method information from licensed payment processors.

3 How We Use Your Data

The personal data we collect is used for the following purposes:

• Service provision: Create and manage your account, process deposits and withdrawals, and enable access to games.
• Identity verification (KYC): Verify your identity in accordance with compliance requirements and prevent fraud and money laundering.
• Platform security: Detect and prevent fraudulent activity, misuse, or unauthorised access to your account.
• Service communications: Send transaction notifications, account updates, and important security information.
• Customer support: Resolve complaints, enquiries, and provide technical support.
• Marketing (with consent): Send promotions, bonuses, and special offers to players who have consented to receive marketing communications.
• Platform improvement: Analyse usage patterns to improve the user experience and platform performance.
• Regulatory compliance: Fulfil relevant legal and regulatory obligations.

4 Data Processing Basis

Lucky33 processes your personal data on the following lawful bases:

5 Data Storage & Security

The security of your personal data is lucky33's top priority. Here are the security measures we have implemented:

• 256-bit SSL encryption for all data transmitted between your device and lucky33's servers.
• Encrypted data storage in databases protected with strict access controls.
• Role-based access control — only staff who require access to perform specific tasks may view player data.
• Continuous security monitoring to detect and respond to any security threats promptly.
• Regular data backups to keep your data safe even in the event of a technical failure.
• Periodic security audits by independent parties to identify and address any vulnerabilities.

Data retention periods vary by data type and legal requirements:

• Active account data: For as long as the account remains active.
• Financial transaction records: Minimum 7 years (in accordance with Malaysian legal requirements).
• Platform activity logs: 2 years from the date of activity.
• KYC Records: Minimum 5 years after account closure.
• Customer support data: 3 years from the last interaction.

6 Data Sharing & Disclosure

Lucky33 does not sell players' personal data to any third party for marketing or commercial purposes. Your data may only be shared in the following limited situations:

• Service providers: Licensed payment processors, KYC providers, cloud server services, and analytics providers operating on our behalf and bound by strict confidentiality agreements.
• Regulatory authority: When required by law, court order, or a lawful request from a law enforcement agency.
• Fraud prevention: Sharing required information with industry fraud prevention agencies to protect players and platform integrity.
• Business transfer: In the event of a merger, acquisition, or transfer of business assets — players will be notified in advance.

7 Cookies & Tracking Technology

Lucky33 uses cookies and similar tracking technologies to enhance the user experience, analyze platform traffic, and deliver more relevant content.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Performance Cookies: Collect statistical data on how players use the platform for improvement purposes.
• Functional Cookies: Save your preferences such as language and settings for a smoother experience.
• Analytics Cookies: Helps us understand usage patterns in aggregate (cannot identify individual players).

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect platform functionality.

8 Your Rights as a Player

As a lucky33 player, you have the following rights regarding your personal data. To exercise any of these rights, contact our privacy team via customer support.

9 International Data Transfer

Some of your personal data may be stored or processed on servers located outside Malaysia, including data centres in the Asia Pacific region. In all cases, lucky33 ensures that any international data transfers are carried out with adequate safeguards through data processing agreements and appropriate technical protection measures.

10 Children's Data

The lucky33 platform is exclusively for individuals aged 18 years and above. lucky33 does not intentionally collect personal data from children under the age of 18. If we discover that data belonging to a person under 18 has been collected, we will take immediate steps to delete that data and close the account in question.

If you believe a child has registered an account at lucky33, please contact us immediately through the customer support channels.

11 Privacy Policy Amendments

Lucky33 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements, or changes in the services we offer.

When material amendments are made, we will notify players via a prominent notice on the platform and/or by registered email. The latest version of the Privacy Policy is always available on this page. The "Updated" date at the top of this document indicates when the most recent amendment was made.

12 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how lucky33 handles your personal data, please contact us via:

• Live Chat: Available directly on the lucky33 platform, 24 hours a day, 7 days a week.
• Privacy Email: [email protected]
• General Support Email: [email protected]

We are committed to responding to all privacy-related inquiries within 5 business days. For more complex complaints, the resolution period may be longer, but we will ensure you are kept informed of your complaint status at all times.