lucky55 Privacy Policy

1. Introduction

lucky55 ("lucky55", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access or use the lucky55 platform at lucky55.vu (the "Platform") and any associated services, including online casino games, live dealer tables, slot machines, and sports betting (collectively, the "Services").

This Privacy Policy ("Policy") describes how lucky55 collects, processes, stores, and discloses personal information in connection with your use of the Services. It applies to all registered account holders, visitors to the Platform, and any other individuals whose personal data lucky55 processes in connection with the Services.

This Policy is incorporated by reference into the lucky55 Terms & Conditions. By registering an account or otherwise using the Services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Data Controller

For the purposes of applicable data protection legislation, lucky55 is the data controller in respect of personal data collected through the Platform and Services. lucky55 determines the purposes and means of processing personal data described in this Policy.

Where lucky55 engages third-party service providers to process personal data on its behalf, those providers act as data processors and are bound by contractual data processing agreements that restrict their use of personal data to the purposes for which it was shared.

3. Personal Data We Collect

lucky55 collects personal data in several ways: directly from you when you register an account or interact with the Services, automatically when you browse the Platform, and from third-party sources where applicable. The categories of personal data we collect include:

• Identity data: Full legal name, date of birth, gender, nationality, and government-issued identification documents (e.g., MyKad, passport) collected during account registration and Know Your Customer ("KYC") verification.
• Contact data: Email address, mobile phone number, and correspondence address.
• Account data: Username, password (stored in hashed, non-reversible form), account preferences, and communication settings.
• Financial data: Payment method details (e.g., Touch 'n Go eWallet account reference, bank account details for FPX transactions), transaction history, deposit and withdrawal records, and wallet balances. lucky55 does not store full card numbers or full payment credentials.
• Gaming data: Bet history, game session logs, win/loss records, bonus utilisation, and responsible gaming settings.
• Technical data: IP address, device identifiers, browser type and version, operating system, referring URLs, and approximate geolocation data derived from IP address.
• Usage data: Pages visited, features used, navigation patterns, session duration, and interaction logs.
• Communications data: Records of communications between you and lucky55 support, including live chat transcripts and email correspondence.

4. How We Use Your Personal Data

lucky55 uses your personal data for the following purposes:

• Account administration: To create, maintain, and manage your lucky55 account, including processing registration, verifying your identity, and managing account security.
• Service delivery: To provide access to the games, live casino, sportsbook, and all other Services available on the lucky55 platform.
• Payment processing: To process deposits, withdrawals, and refunds, and to detect and prevent fraudulent financial activity.
• Regulatory compliance: To comply with applicable laws and regulations, including anti-money laundering ("AML") obligations, Know Your Customer ("KYC") requirements, and responsible gaming regulations. This includes verifying your age (21+ only) and identity.
• Responsible gaming: To monitor gaming activity for signs of problem gambling behaviour and to facilitate responsible gaming tools such as deposit limits, self-exclusion, and cooling-off periods.
• Customer support: To respond to your queries, complaints, and requests via live chat, email, or any other communication channel.
• Security: To detect, investigate, and prevent fraud, abuse, and security incidents affecting the lucky55 platform or its players.
• Platform improvement: To analyse usage patterns, conduct A/B testing, and improve the performance, features, and user experience of the lucky55 platform.
• Marketing communications: Where you have provided consent or where we have a legitimate interest, to send you promotional materials, bonus offers, and news about lucky55 Services. You may opt out of marketing communications at any time via your account settings or by contacting support.

5. Legal Bases for Processing

lucky55 processes personal data under the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between lucky55 and you as a registered player — including account creation, game access, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including AML legislation, KYC obligations, tax reporting requirements, and responsible gaming regulations.
• Legitimate interests: Processing for purposes that are in lucky55's legitimate business interests, provided those interests are not overridden by your rights and interests — including fraud prevention, platform security, and analytics.
• Consent: Processing for purposes where you have given explicit consent, including certain marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Cookies & Tracking Technologies

The lucky55 platform uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the Platform, remember your preferences, analyse usage, and support our security measures. The categories of cookies we use include:

• Strictly necessary cookies: Required for core Platform functionality including session management, authentication, and security. These cannot be disabled without preventing access to the Services.
• Functional cookies: Used to remember your preferences and settings, such as preferred language and display options.
• Analytics cookies: Used to collect aggregate, anonymised data about how visitors use the Platform, helping lucky55 improve performance and user experience.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the lucky55 platform.

7. Data Sharing & Disclosure

lucky55 does not sell your personal data. We may share personal data in the following circumstances:

• Service providers: With trusted third-party vendors who process data on our behalf under contract — including payment processors (e.g., for Touch 'n Go eWallet, FPX, Boost, DuitNow transactions), identity verification providers, fraud detection services, and hosting infrastructure providers.
• Regulatory authorities: With government agencies, regulators, law enforcement, or courts as required by applicable law or in response to valid legal process, including AML reporting obligations.
• Fraud prevention: With industry bodies and partner platforms where necessary to detect, prevent, or investigate suspected fraud, money laundering, or other illegal activity.
• Business transfers: In connection with a merger, acquisition, restructuring, or sale of assets, where personal data may be transferred to a successor entity subject to equivalent privacy protections.

In all cases, data sharing is subject to appropriate contractual safeguards and is limited to the minimum data necessary for the relevant purpose.

8. International Data Transfers

lucky55 may transfer your personal data to recipients located outside Malaysia, including to third-party service providers operating in other jurisdictions. Where such transfers occur, lucky55 implements appropriate safeguards to ensure that your personal data continues to be protected to a standard consistent with applicable data protection law, including the use of standard contractual clauses, data processing agreements, and adequacy assessments where relevant.

9. Data Retention

lucky55 retains personal data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law. In practice:

• Account and identity data is retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and KYC regulatory requirements.
• Financial transaction records are retained for a minimum of seven (7) years to meet applicable financial reporting and regulatory obligations.
• Gaming session logs and bet history are retained for a minimum of three (3) years from the date of each session.
• Support communications are retained for up to three (3) years from the date of the relevant interaction.
• Marketing consent records are retained until consent is withdrawn, plus a reasonable additional period for record-keeping purposes.

Upon expiry of the applicable retention period, lucky55 will securely delete or anonymise your personal data unless retention is required for legitimate business or legal reasons.

10. Your Data Protection Rights

Subject to applicable law and certain legal exceptions, you have the following rights in respect of your personal data held by lucky55:

• Right of access: The right to request a copy of the personal data lucky55 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to legal retention obligations.
• Right to restriction: The right to request that lucky55 restrict the processing of your personal data in certain circumstances.
• Right to data portability: The right to receive your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity.
• Right to object: The right to object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting prior lawful processing.

To exercise any of the above rights, please contact the lucky55 support team via live chat or at [email protected]. lucky55 will respond to all verified requests within 30 days of receipt.

11. Security Measures

lucky55 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the lucky55 platform — the same standard used by major Malaysian banking applications including Maybank2u and CIMB Clicks.
• Encryption at rest for all sensitive personal and financial data stored in lucky55's systems.
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need.
• Regular security audits and penetration testing of the lucky55 platform infrastructure.
• Two-factor authentication available to all lucky55 account holders as an additional layer of login security.

Despite these measures, no system is entirely immune to security threats. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, lucky55 will notify affected players without undue delay in accordance with applicable law.

12. Minors

The lucky55 platform is strictly intended for persons aged 21 years and above. lucky55 does not knowingly collect personal data from individuals under the age of 21. Account registration requires confirmation of age, and lucky55 conducts age verification as part of its KYC procedures.

If lucky55 becomes aware that personal data has been collected from a minor without appropriate parental consent or in violation of applicable age restrictions, that data will be deleted promptly and the relevant account closed. If you believe a minor has registered on the lucky55 platform, please contact support immediately at [email protected].

13. Updates to This Policy

lucky55 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or our data processing practices. In the event of material changes, lucky55 will provide reasonable advance notice to registered players via on-platform notification or email to the registered address on file.

Continued use of the lucky55 platform following notification of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with an updated Policy, you should close your lucky55 account and cease use of the Services.

14. Contact & Data Enquiries

For questions, requests, or complaints relating to this Privacy Policy or the processing of your personal data by lucky55, please contact the lucky55 Data Support Team:

• Live Chat: Available 24/7 via the chat widget on lucky55.vu — fastest route for urgent data queries.
• Email: [email protected] — for formal data subject requests and complaints. Please include your lucky55 username, the nature of your request, and any relevant supporting information.

lucky55 commits to acknowledging all formal data protection requests within 5 business days and to responding in full within 30 calendar days. Where requests are complex or numerous, this period may be extended by a further 30 days with appropriate notification.