Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by luck555 ("we", "us", "our", "the Platform") and applies to all personal data collected through the luck555 website at https://luck555.cam, its subdomains, associated mobile interfaces, and any communications we send to registered players or prospective users.

luck555 operates as an online casino and sports betting platform serving players in Malaysia and other permitted jurisdictions. In the course of providing our services — which include slot games, live dealer casino, sports betting, lottery products, and payment processing via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and card networks — we necessarily collect and process personal data about our players.

We are committed to processing personal data lawfully, fairly, and transparently, and to implementing appropriate technical and organisational safeguards to protect that data against loss, unauthorised access, and misuse. This Policy sets out in plain terms how we fulfil those commitments.

By creating a luck555 Account, making a deposit, or otherwise using the Platform, you confirm that you have read this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, identification number, payment details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means luck555, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of luck555 in accordance with our documented instructions.
• "Player" / "User" / "you" means any registered account holder or visitor to the luck555 Platform.
• "KYC Data" means identity verification documents and information collected as part of our Know Your Customer process, including government-issued ID, proof of address, and source of funds documentation.
• "Cookies" means small data files stored on your browser or device by the luck555 Platform for functional, analytical, and security purposes.
• "Sensitive Data" means Personal Data requiring heightened protection, including financial data, identity documents, and any data relating to health conditions disclosed in connection with responsible gambling self-exclusion requests.

3. Data We Collect

luck555 collects the following categories of Personal Data from players and platform visitors:

3.1 Account Registration Data

• Full legal name
• Date of birth (used for mandatory age verification — players must be 21 or above)
• Email address and contact telephone number
• Country and city of residence
• Preferred currency (Malaysian Ringgit, MYR)
• Username and encrypted password hash

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (Malaysian MyKad, passport, or equivalent)
• Proof of residential address (utility bill, bank statement dated within 3 months)
• Proof of payment method ownership
• Source of funds documentation where required by our compliance programme

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and methods (FPX, DuitNow, Touch 'n Go, Boost, GrabPay, bank transfer, card)
• Bank account details or e-wallet identifiers associated with your transactions
• Account balance history and transaction logs
• Bonus and promotion redemption records

3.4 Gameplay & Behavioural Data

• Game history, bet amounts, wagering patterns, and results
• Sports betting market selections and stake amounts
• Session durations, login timestamps, and frequency of platform use
• Responsible gambling tool usage (deposit limits set, self-exclusion requests)

3.5 Technical & Device Data

• IP address and approximate geolocation derived therefrom
• Browser type, version, and operating system
• Device type (mobile, tablet, desktop) and device identifiers
• Referring URLs and pages visited within the Platform
• Cookie and session token data

3.6 Communications Data

• Content of support chat transcripts and email correspondence with our team
• Feedback and survey responses submitted voluntarily
• Preferences for marketing communications (where consent is given)

4. How Data Is Collected

We collect Personal Data through the following channels:

• Directly from you — when you register an Account, complete KYC verification, make deposits or withdrawals, contact Support, or respond to surveys.
• Automatically — through Cookies, server logs, and analytics tools as you interact with the Platform.
• From payment processors — transaction confirmations and payment status updates from FPX, DuitNow, and other payment service providers.
• From identity verification partners — document authentication results from third-party KYC service providers where applicable.
• From fraud prevention and compliance tools — IP reputation data, device fingerprinting results, and third-party identity screening databases where required by our AML programme.

5. Data Processing & Purpose

luck555 processes your Personal Data for the following specific purposes:

Purpose	Data Categories Used	Legal Basis
Account creation and management	Registration data, KYC data	Contract performance
Age verification (21+ requirement)	Date of birth, KYC documents	Legal obligation
Processing deposits and withdrawals	Financial & transaction data	Contract performance
Anti-money laundering compliance	KYC data, transaction data	Legal obligation
Fraud detection and prevention	Technical data, transaction data	Legitimate interest
Delivering gaming services and fair play	Gameplay & behavioural data	Contract performance
Responsible gambling tools and monitoring	Gameplay data, account data	Legal obligation / Legitimate interest
Customer support and dispute resolution	Communications data, account data	Contract performance / Legal obligation
Platform analytics and improvement	Technical & device data	Legitimate interest
Promotional communications (opt-in only)	Registration data, preferences	Consent

6. Legal Basis for Processing

luck555 relies on the following legal bases to process your Personal Data, depending on the specific purpose and the nature of the data involved:

• Contract Performance: Processing that is necessary to perform our contractual obligations to you as a registered Player — including account management, payment processing, and delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable legal requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) regulations, age verification mandates (21+), and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interest: Processing necessary for purposes that are in our legitimate business interests, where those interests are not overridden by your privacy rights — including fraud prevention, platform security, and improving our services through analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw consent for marketing at any time by contacting Support or adjusting your Account notification preferences.

7. Data Sharing & Disclosure

luck555 does not sell or rent your Personal Data to third parties. We may share Personal Data with the following categories of recipients in the circumstances described below:

7.1 Payment Service Providers

Personal and financial data is shared with payment processors — including FPX network operators, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and card networks — as strictly necessary to process your deposits and withdrawals. These providers operate under their own privacy frameworks and regulatory obligations.

7.2 Identity Verification & KYC Partners

Where we use third-party identity verification services to fulfil our KYC obligations, relevant Personal Data (such as identity document images) may be transmitted to those providers. Such providers act as Data Processors under contractual obligations consistent with this Policy.

7.3 Regulatory and Law Enforcement Authorities

We may disclose Personal Data to regulatory bodies, law enforcement agencies, or other government authorities where required to do so by applicable law, court order, or in connection with the investigation of suspected fraud, money laundering, or other unlawful activity. Such disclosures will be made without prior notice to the affected Player where legally required.

7.4 Technology and Infrastructure Providers

We engage third-party service providers for cloud hosting, cybersecurity, platform analytics, and customer support tooling. These providers access Personal Data only to the extent necessary to provide their contracted services and are bound by appropriate data processing agreements.

7.5 Game Content Providers

Certain game providers integrated into the luck555 Platform may receive technical session data necessary to deliver their games. No payment or identity data is shared with game providers beyond what is required for session authentication.

8. Data Retention

luck555 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations.

• Active Account Data: Retained for the full duration of the Account relationship plus a minimum of 5 years following Account closure, in accordance with AML record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of submission, or longer if required by applicable AML regulations.
• Transaction Records: Retained for a minimum of 5 years following each transaction, consistent with financial record-keeping obligations.
• Support Communications: Retained for up to 3 years from the date of the communication, for dispute resolution and service quality purposes.
• Marketing Consent Records: Retained for as long as you remain opted-in, plus a reasonable period to evidence compliance with consent obligations.
• Technical Log Data: Typically retained for up to 12 months for security monitoring and fraud detection purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents re-identification.

9. Data Security

luck555 employs a multi-layered security architecture to protect Personal Data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers
• Encryption at rest for sensitive data including payment credentials and identity documents
• Two-factor authentication (2FA) available for all Player Accounts
• Role-based access controls limiting internal access to Personal Data to authorised personnel with a documented need
• Regular security audits and penetration testing by independent security professionals
• Intrusion detection systems and continuous monitoring of network traffic for anomalies
• Secure password storage using industry-standard hashing algorithms — luck555 staff cannot view your plaintext password

Notwithstanding the above, no internet transmission or electronic storage method is entirely secure. We cannot guarantee absolute security and encourage you to protect your Account credentials diligently. Report any suspected unauthorised access to [email protected] immediately.

10. Cookies & Tracking Technologies

luck555 uses Cookies and similar tracking technologies to operate the Platform, improve your user experience, and analyse usage patterns. The types of Cookies we use are as follows:

Cookie Type	Purpose	Duration
Strictly Necessary	Enable core platform functionality — session management, authentication, security tokens. Cannot be disabled without breaking the Platform.	Session / up to 30 days
Functional	Remember your language preferences, game display settings, and Account personalisation choices.	Up to 1 year
Analytical	Collect aggregated usage statistics to help us understand how players navigate the Platform and identify areas for improvement.	Up to 2 years
Security	Detect and prevent fraudulent sessions, bot activity, and suspicious login patterns.	Session / up to 30 days

You may control Cookie settings through your browser preferences. Please note that disabling strictly necessary Cookies may impair or prevent access to certain Platform features. We do not use third-party advertising Cookies or share Cookie data with external advertising networks.

11. Your Rights

Subject to applicable law and the verification of your identity, you hold the following rights in relation to your Personal Data held by luck555:

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected. For changes to core Account information (e.g., name, date of birth), supporting documentation may be required.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations (particularly AML and KYC requirements that mandate data retention for a minimum period).
• Right to Restriction of Processing: You may request that we restrict processing of your Personal Data in certain circumstances, for example while the accuracy of the data is contested.
• Right to Data Portability: Where processing is based on consent or contract performance and carried out by automated means, you may request a structured, machine-readable copy of your Personal Data.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing communications, at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our Support team via live chat or by email at [email protected]. We aim to acknowledge rights requests within 5 business days and to fulfil them within 30 days, subject to complexity and any applicable legal limitations.

12. Minors & Age Verification

luck555 is strictly intended for players aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered Accounts.

If we become aware that Personal Data has been collected from a person under the minimum age requirement, we will immediately suspend the relevant Account, delete the associated Personal Data where legally permissible, and return any deposited funds to the originating payment method. Any winnings accrued on an underage Account will be forfeited.

13. International Data Transfers

luck555 operates through infrastructure that may involve the transfer of Personal Data to servers or service providers located outside Malaysia. Where such transfers occur, we implement appropriate safeguards to ensure that the transferred data continues to receive a level of protection consistent with this Policy, including:

• Contractual data processing agreements with receiving parties
• Transfer only to jurisdictions offering an adequate level of data protection
• Technical safeguards including encryption of data in transit

By using the luck555 Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Malaysia. We will not transfer your data to any recipient that has not agreed to process it in accordance with the standards set out in this Policy.

14. Policy Amendments

luck555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated to registered Players via email notification or a prominent notice displayed on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your Personal Data, please contact the luck555 Data & Privacy team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the Platform — the fastest resolution channel for account-related privacy queries.
• Email: [email protected] (plain text — not a clickable link)

We aim to acknowledge all privacy-related correspondence within 5 business days and to respond substantively within 30 calendar days. For complex requests involving data erasure or portability, we may require identity verification before processing your request.