Privacy Policy

Clause 01

Introduction

This Privacy Policy ("Policy") describes how luckyd333 ("the Platform", "we", "us", "our"), operating the website located at luckyd333.cam, handles personal data relating to individuals ("User", "you", "your") who visit, browse, register on or otherwise interact with the Platform.

luckyd333 is an English-language online casino and sports entertainment platform primarily serving adult users across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya and Shah Alam. We are committed to handling personal data with transparency, proportionality and appropriate security controls.

By accessing the Platform or creating an account, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gambling guidelines. If you disagree with any part of this Policy, you must stop using the Platform immediately.

Clause 02

Definitions

In this Policy the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living natural person, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, disclosure and deletion.
• "Data Controller" means luckyd333, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of luckyd333 in accordance with documented instructions.
• "KYC" means Know Your Customer verification, encompassing identity, age and address confirmation procedures required before processing certain financial transactions.
• "Cookies" means small text files placed on your device by the Platform to support functionality, analytics and session management.

Clause 03

Data We Collect

luckyd333 may collect the following categories of Personal Data:

3.1 Identity and Registration Data

• Full legal name and date of birth
• Government-issued identification number (e.g., MyKad number or passport number)
• Nationality and country of residence
• Profile username and account password (stored in hashed form)

3.2 Contact Data

• Email address
• Telephone number
• Residential or correspondence address

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts in MYR
• Payment method identifiers (e.g., bank account reference, eWallet token) as provided by the relevant payment processor
• Source-of-funds information where required for KYC or anti-money-laundering compliance

3.4 Technical and Device Data

• Internet Protocol (IP) address and approximate geolocation derived therefrom
• Browser type, version and operating system
• Device identifiers and screen resolution
• Session timestamps, login and logout events

3.5 Behavioural and Usage Data

• Pages viewed, navigation paths and time spent on Platform areas
• Game titles accessed, wagering history and session durations
• Search queries made within the Platform
• Responsible gambling preferences and limit settings selected by the User

3.6 Communications Data

• Correspondence submitted through support channels, including chat transcripts and email exchanges
• Survey or feedback responses where voluntarily provided

Clause 04

How Data Is Collected

Personal Data is collected through the following channels:

• Registration forms: Data provided directly by the User when creating or updating an account.
• KYC document submission: Identity documents uploaded in connection with age or identity verification.
• Payment processors: Transaction references received from third-party processors such as FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay and Malaysian banking channels including Maybank, CIMB, Public Bank and Hong Leong.
• Automated technical means: Server logs, cookies and similar tracking technologies that record device and session information during Platform use.
• Support interactions: Information volunteered during live chat, email or other support communications.

Clause 05

Data Processing

luckyd333 processes Personal Data for the following purposes:

• Account creation and management: Registering, maintaining and securing User accounts, including password resets and session authentication.
• Identity and age verification: Confirming that Users meet the minimum age requirement of 21 years and satisfying applicable KYC obligations.
• Transaction processing: Facilitating deposits and withdrawal requests in MYR, communicating with payment processors and maintaining accurate financial records.
• Fraud prevention and security: Detecting unauthorised access attempts, duplicate accounts, money laundering patterns and other prohibited conduct.
• Responsible gambling monitoring: Identifying usage patterns that may indicate problem gambling behaviour and applying appropriate interventions where necessary.
• Platform improvement: Analysing aggregated behavioural data to understand how Users navigate the Platform and where the experience can be made clearer or more accessible.
• Legal and regulatory compliance: Retaining records to satisfy anti-money-laundering obligations, responding to lawful authority requests and defending legal claims.
• Customer support: Responding to queries, resolving disputes and processing responsible gambling requests such as self-exclusion.

Clause 06

Legal Bases for Processing

Processing activities carried out by luckyd333 are conducted on one or more of the following bases:

• Contractual necessity: Processing required to perform the agreement between luckyd333 and the User, including account operation and transaction execution.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering legislation and lawful authority requests.
• Legitimate interests: Processing necessary for the pursuit of legitimate interests such as fraud prevention, security monitoring, responsible gambling oversight and Platform performance analysis, where such interests are not overridden by the User's fundamental rights.
• Consent: Where luckyd333 relies on consent for a specific processing activity (for example, optional marketing communications), you will be clearly informed and given the opportunity to withdraw that consent at any time.

Clause 07

Data Sharing

luckyd333 does not sell Personal Data to third parties. Personal Data may be shared in the following limited circumstances:

• Payment processors and banking partners: Transaction reference data is shared with payment processors solely to execute deposits and withdrawals. These processors operate under their own privacy frameworks.
• Identity verification providers: KYC document data may be transmitted to regulated identity verification services to satisfy age and identity checks.
• Technology service providers: Technical infrastructure partners (hosting, analytics, security monitoring) may access Personal Data to the extent strictly necessary to perform contracted services on behalf of luckyd333.
• Regulatory and law enforcement authorities: luckyd333 will disclose Personal Data where required to do so by a lawful authority instruction, court order or applicable legal obligation.
• Business transfers: In the event of a merger, acquisition or transfer of luckyd333's business, Personal Data may be transferred to the acquiring entity, which will be required to observe the standards established in this Policy.

Clause 08

Retention Periods

Personal Data is retained only for as long as necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law. General retention guidelines applied by luckyd333 are as follows:

• Account data: Retained for the duration of the active account relationship and for a reasonable period following account closure to support dispute resolution and legal compliance.
• Financial records: Transaction histories are retained for the period required by applicable financial regulations, typically a minimum of five years from the date of the relevant transaction.
• KYC documents: Retained for the period mandated by anti-money-laundering obligations from the date of the last transaction or account closure, whichever is later.
• Support communications: Retained for a reasonable period following resolution to support quality assurance and dispute management.
• Responsible gambling records: Self-exclusion requests and limit settings are retained to prevent inadvertent re-registration and to ensure continuity of protective measures.

Clause 09

Data Security

luckyd333 implements a range of technical and organisational measures designed to protect Personal Data against unauthorised access, accidental loss, alteration or disclosure. These include:

• Encrypted connections (TLS/SSL) for all data transmitted between the User's device and the Platform servers.
• Hashed storage of account passwords; plaintext passwords are never stored or transmitted.
• Access controls limiting staff access to Personal Data on a strict need-to-know basis.
• Regular review of security procedures and prompt remediation of identified vulnerabilities.

Notwithstanding these measures, no method of electronic transmission or storage is fully secure. luckyd333 cannot guarantee absolute security. Users are responsible for maintaining the confidentiality of their own account credentials and must notify luckyd333 support immediately if they suspect unauthorised access to their account.

Clause 10

Cookies

luckyd333 uses cookies and similar tracking technologies to support essential Platform functionality, maintain session state, collect aggregate analytics and improve the overall user experience.

10.1 Essential Cookies

These cookies are strictly necessary for the Platform to operate and cannot be disabled without disrupting core functions such as login authentication, session management and security checks.

10.2 Analytics Cookies

Analytics cookies collect anonymised data about how Users navigate the Platform, including pages visited, time on page and click-through paths. This data is used in aggregate to improve Platform structure and content clarity.

10.3 Functional Cookies

Functional cookies remember user preferences such as language setting, display options and responsible gambling limit confirmations across sessions.

You may adjust your browser settings to refuse or delete cookies at any time. Note that disabling essential cookies may impair Platform functionality, including the ability to remain logged in during a session.

Clause 11

User Rights

Subject to applicable law, registered Users have the following rights in relation to their Personal Data. All requests should be submitted in writing to luckyd333 support and will be handled within a reasonable timeframe.

Clause 12

Minors

luckyd333 is exclusively intended for adults aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you have reason to believe that a minor has registered on the Platform, please notify luckyd333 support immediately so that appropriate action can be taken. For further information on age verification and responsible gambling tools, please review our Responsible Gambling page.

Clause 13

Policy Changes

luckyd333 reserves the right to update or revise this Privacy Policy at any time. Material changes will be communicated to registered Users through the Platform or via the registered email address where reasonably practicable. The date displayed in the "Last reviewed" notice at the top of this document will be updated to reflect the most recent version.

Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with the revised terms, you should stop using the Platform and contact support to request account closure.

Clause 14

Contact Us

For any questions, concerns or requests arising from this Privacy Policy — including the exercise of your data rights — please contact the luckyd333 data team in writing. Include your registered username, a description of your query and any supporting information.

Website email: [email protected]

luckyd333 aims to acknowledge privacy-related requests within a reasonable period and to respond substantively in a timely manner. Response times may be extended during periods of high demand or where identity verification is required before an action can be taken.