Lucky55 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Members

Lucky55 is a digital entertainment platform providing online gaming services to Malaysian players. We understand that your personal data is sensitive and valuable — and we take our responsibility to protect it seriously.

This Privacy Policy applies to all information collected by Lucky55 through the lucky55-app.com website, including during the registration process, platform usage, financial transactions, customer support communications, and all other interactions with Lucky55's services.

This Policy does not apply to third-party websites that may link to or from the Lucky55 platform. Lucky55 is not responsible for the privacy practices of any such external websites.

Lucky55 only collects data that is necessary to provide a safe, fair, and fully functional service. Below are the categories of data we collect and the purposes they serve:

Lucky55 does not collect sensitive data such as your medical information, religious beliefs, or political views. We also do not knowingly collect data from anyone under the age of 18 — if you believe a minor has registered on Lucky55, please notify us immediately.

Lucky55 uses collected data solely for legitimate and transparent purposes. Below are the primary ways your data is used in Lucky55's operations:

• Account Management: To create, verify, and maintain your Lucky55 account, including identity verification, password recovery, and security management.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks), and to handle your withdrawal of winnings securely and promptly.
• Customer Support: To understand and resolve issues you report, including betting disputes, technical problems, and account enquiries.
• Security & Fraud Prevention: To detect suspicious activity, prevent unauthorised access, and protect the integrity of the Lucky55 platform.
• Responsible Gaming: To monitor gaming patterns that may indicate signs of problem gambling and to reach out to members who may need support.
• Legal Compliance: To fulfil reporting obligations to the relevant authorities in accordance with applicable Malaysian legal requirements.
• Product Improvement: To understand how members use the Lucky55 platform and make meaningful improvements based on real usage patterns.
• Marketing Communications (with consent): To send you promotional information, bonus offers, and Lucky55 news, where you have opted in to receive such communications.

Lucky55 does not sell members' personal data to any third party. However, in the course of operating the platform, we share certain data with the following parties under limited and controlled circumstances:

• Payment Processing Providers: Required transaction information is shared with payment service providers such as Touch 'n Go, GrabPay, and FPX providers to process your deposits and withdrawals. They are bound by strict confidentiality agreements.
• Game Providers: Minimum technical data (such as session IDs) is shared with game software providers including PG Soft, Pragmatic Play, and Microgaming to ensure games function correctly. They do not receive your personally identifiable information.
• IT Service Providers: Hosting companies, cybersecurity firms, and technical infrastructure providers that support Lucky55 operations are granted only the minimum access to data necessary to carry out their specific responsibilities.
• Relevant Authorities: Lucky55 will disclose personal data to Malaysian authorities (police, regulatory bodies, courts) when required by law, court order, or a valid official investigation.

All third parties working with Lucky55 are required to sign data protection agreements that bind them to privacy standards at least equivalent to those in this Privacy Policy. Lucky55 conducts regular reviews of third-party compliance.

Lucky55 uses cookies and similar tracking technologies to enhance the user experience and maintain platform security. The following types of cookies are used on Lucky55:

• Essential Cookies: Required for core platform functions such as staying logged in during a session and remembering your language preference. Disabling these cookies will affect platform functionality.
• Analytics Cookies: Helps Lucky55 understand how members use the platform — including the most visited pages, time spent, and navigation patterns. This data is used in aggregate form without identifying any individual.
• Security Cookies: Used to detect and prevent unauthorised access, cyberattacks, and fraudulent activity. These cookies store session information that allows Lucky55 to verify that each request originates from your authenticated device.
• Preference Cookies: Saves your preferences — such as game display settings and interface configurations — to deliver a more personalised experience in future sessions.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect your ability to use certain Lucky55 features properly, including the login process and game navigation.

Lucky55 retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required under Malaysian law:

• Active Account Data: Retained for the duration your Lucky55 account remains active and for a reasonable period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial and anti-money laundering legal requirements.
• Betting History: Retained for 5 years for dispute resolution and compliance purposes.
• Support Communication Records: Retained for 3 years from the date of last communication.
• Security Logs: Retained for 2 years to support security incident investigations if required.

When data is no longer needed, Lucky55 will securely delete or anonymise it using methods that meet industry standards for irreversible data destruction.

As a Lucky55 member who is a Malaysian citizen or resident, you have the following rights under the Personal Data Protection Act 2010 (PDPA):

• Right of Access: You have the right to request a copy of the personal data Lucky55 holds about you. Requests will be processed within 21 days of receipt.
• Right to Correction: If the data we hold is inaccurate or incomplete, you have the right to request a correction. Lucky55 will update the record within 14 business days.
• Right to Withdraw Consent: You may withdraw consent for specific uses of your data (such as marketing communications) at any time, without affecting the validity of any processing carried out prior to that withdrawal.
• Right to Object: You may object to the use of your data for specific purposes, particularly direct marketing.
• Right to Complain: If you believe Lucky55 has violated your privacy rights, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights above, please contact the Lucky55 support team by email at support@lucky55-app.com with the subject line "Privacy Rights Request", along with your account number and the type of request. Lucky55 will acknowledge receipt within 2 business days.

Lucky55 implements multiple layers of security to protect members' personal data from unauthorised access, disclosure, alteration, or destruction:

• Data Encryption in Transit: All communications between your browser and Lucky55 are encrypted using TLS 1.3 with AES-256 encryption.
• Stored Data Encryption: Sensitive data such as financial information and identification numbers are encrypted within Lucky55's databases.
• Internal Access Controls: The "least privilege" principle is applied — each Lucky55 staff member can only access the data required for their specific role.
• Two-Factor Authentication (2FA): Lucky55 encourages members to enable 2FA on their accounts for an additional layer of security.
• Continuous Monitoring: Lucky55's security systems monitor platform activity around the clock to detect and respond to threats in real time.
• Regular Security Testing: Lucky55 conducts regular security audits and penetration testing to identify and address vulnerabilities before they can be exploited.

While Lucky55 takes all reasonable measures to protect your data, no digital security system can be guaranteed to be 100% breach-proof. In the event of a serious data breach affecting your personal data, Lucky55 will notify you and the relevant authorities within the timeframe stipulated by Malaysian law.

Lucky55 may update this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or the technologies we use. Members will be notified of any material changes via in-platform notifications or email at least 14 days before they take effect.

The latest version of this Privacy Policy is always available on this page (lucky55-app.com/privacy-policy). The "Updated" date at the top indicates when the most recent changes were made. Your continued use of Lucky55 after any changes take effect constitutes acceptance of the updated terms.

If you have any questions, concerns, or requests regarding your privacy and personal data at Lucky55, please reach out to us:

• Email: support@lucky55-app.com (with the subject line "Privacy Enquiry")
• Live Chat: Available on the Lucky55 platform, 24 hours a day, 7 days a week
• Target Response Time: Under 2 business days for privacy enquiries