Privacy Policy Luck365 –
Data Security Malaysian Players

Luck365 ("we", "Platform") is committed to protecting the privacy of every user who registers and uses our services. This Privacy Policy explains in detail how we collect, store, use, and protect your personal data.

This policy applies to all users of the Luck365 platform — whether via the luck365.fun website, the Android and iOS mobile app, or any other channel provided by Luck365. By using our platform, you agree to the data protection practices described in this document.

We believe transparency is the foundation of trust. That's why we've written this policy in plain language — so you know exactly what happens with your personal data, rather than simply accepting lengthy "terms and conditions" without understanding them.

Luck365 collects your personal data through various means — directly when you register and use the platform, and automatically through technologies used in our platform's operations.

Luck365 uses collected personal data only for legitimate, stated purposes. We do not use your data for any purpose beyond what is stated without first obtaining your consent.

• Account Management: Create and manage user accounts, process registrations, and verify identities.
• Transaction Processing: Securely process deposits, withdrawals, and all financial transactions.
• Customer Support: Respond to enquiries, resolve issues, and provide necessary support.
• Platform Security: Detect and prevent fraud, money laundering, and suspicious activity.
• Legal Compliance: Meet applicable legal reporting and compliance obligations.
• Service Improvement: Analyse usage patterns to improve the user experience on the platform.
• Platform Communications: Send account notifications, important updates, and promotional information you have opted in to receive.

Luck365 does not sell, rent, or trade your personal data to third parties for their commercial gain. Full stop. This is our absolute commitment to players.

However, there are limited situations where we need to share data with certain parties for platform operations:

• Payment Providers: Transaction information required to process your deposits and withdrawals through licensed payment gateways.
• Game Software Providers: Game data required for game operations from certified providers such as Pragmatic Play, PG Soft, and others.
• KYC Verification Services: Identity information required to verify a player's identity through a licensed KYC provider.
• Legal Authority: When required by law, court order, or a legitimate regulatory authority.

All third parties we work with are bound by strict data protection agreements and are only permitted to use your data for specified purposes.

Luck365 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

Here are some of the key security layers we employ:

• 256-Bit SSL Encryption: All data communications between your device and our servers are fully encrypted using HTTPS protocol.
• Secure Servers: Data is stored in data centres secured with strict physical access controls, 24/7 monitoring systems, and data redundancy.
• Internal Access Controls: Only Luck365 staff who require access to specific data for their role are permitted to do so — a minimum access privilege principle.
• Regular Security Audits: Our systems undergo regular penetration testing and independent security audits.
• Two-Factor Authentication: Additional protection for player accounts and internal system access.

Luck365 uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and understand how players use our services.

• Essential Cookies: Required for core platform operations such as login, session security, and essential functions. Cannot be disabled.
• Preference Cookies: Save your preferences such as language, theme, and display settings.
• Analytics Cookies: Help us understand usage patterns to improve the platform. Data is collected in aggregate and does not identify individuals.
• Security Cookies: Detect suspicious activity, repeated login attempts, and abnormal behaviour to protect your account.

You can manage cookie settings through your web browser settings. However, disabling certain cookies may affect platform functionality.

As a luck365 player, you have recognised rights regarding your personal data. We respect and facilitate the exercise of these rights:

The luck365 platform is an adults-only service for users aged 18 and above. We do not knowingly collect or store personal data from individuals under the age of 18.

If we find that we have collected data from a child without proper age verification, we will immediately delete that data and close the associated account. Our KYC process is specifically designed to prevent registration by underage individuals.

Luck365 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. The latest update date is always displayed at the top of this document.

For material amendments — meaning changes that significantly affect how we use your data — we will notify you via:

• Email notifications sent to your registered email address.
• Prominent notifications within the Luck365 platform.
• In-app push notifications on mobile.

Continued use of the platform after the effective date of any amendment constitutes acceptance of the updated policy. If you disagree with the changes, you have the right to close your account and withdraw all legitimate funds.

For any enquiries, requests, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the luck365 Data Protection Officer (DPO) through the following channels:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 within the luck365 platform

We are committed to responding to all privacy-related enquiries within a reasonable timeframe. For data rights requests such as access, correction, or deletion, we aim to respond within 30 business days.