Privacy Policy

luckyd999 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at https://luckyd999.cam. In providing our services to registered players across Malaysia — including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations — we necessarily collect and process certain personal data.

This Privacy Policy sets out, in clear and structured terms, how luckyd999 collects, uses, stores, protects, and in certain circumstances discloses the personal data of players and website visitors. We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles.

By registering an account on luckyd999, accessing the platform, or submitting any personal information to us, you acknowledge that you have read and understood this Privacy Policy in full and consent to the data practices described herein. If you do not agree to this Policy, you must not use the luckyd999 platform.

This Policy applies to all personal data processed in connection with your use of luckyd999's services and should be read alongside our Terms & Conditions and Responsible Gambling policy.

The following terms carry the meanings assigned to them in this section throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person — an individual who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, contact details, or one or more factors specific to their identity.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, alteration, retrieval, transmission, or deletion.
• "Data Controller" means luckyd999, the entity that determines the purposes and means of the Processing of Personal Data.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of luckyd999 under a data processing agreement.
• "Player" / "User" means any individual who has registered a luckyd999 account or visits the luckyd999 platform.
• "KYC" means Know Your Customer — the identity verification process used to confirm a player's identity and age, as required before withdrawal processing or at the platform's reasonable discretion.
• "Cookies" means small text files placed on a User's device when they visit the luckyd999 website, used for session management, security, and analytical purposes.
• "AML" means Anti-Money Laundering — regulatory obligations that require luckyd999 to monitor, detect, and report certain suspicious financial activity.
• "Sensitive Data" means a subset of Personal Data requiring heightened protection, including government-issued identification numbers and financial account details.

luckyd999 collects several categories of personal data depending on the nature of your interaction with the platform. The following table summarises the principal categories of data we process:

We collect only the personal data that is necessary for the specific purpose for which it is collected. We do not collect personal data beyond what is reasonably required for the operational, legal, and security functions described in this Policy.

luckyd999 collects personal data through the following primary channels:

• Direct Submission: Data you provide when you register an account, complete KYC verification, make a deposit, request a withdrawal, contact customer support, or participate in promotions.
• Automated Collection: Technical and device data collected automatically when you access the luckyd999 platform, including IP address, session data, browser information, and cookie data.
• Payment Processing Partners: Transaction data received from Supported Payment Method providers — including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank — in the course of processing deposits and withdrawals.
• Identity Verification Services: Data received from third-party KYC and identity verification service providers engaged to assist in confirming player identity and age, as required by our AML and fraud prevention obligations.
• Fraud Detection Systems: Behavioural and device fingerprinting data processed by fraud detection tools to identify and prevent account compromise, bonus abuse, and other prohibited conduct.

luckyd999 processes your personal data for the following purposes:

1. Account Management: To create, maintain, and administer your luckyd999 player account, including verifying your identity and age, managing login credentials, and communicating important account-related updates.
2. Service Delivery: To provide access to casino games, sports betting markets (including Liga Super Malaysia, EPL, and international football), live dealer tables, and all other platform features and content.
3. Payment Processing: To facilitate deposits and withdrawals via Supported Payment Methods and to reconcile transaction records in MYR and supported cryptocurrencies.
4. KYC and AML Compliance: To verify player identities, conduct age verification (confirming players are 21 years of age or older), and monitor for suspicious financial activity in accordance with applicable anti-money laundering obligations.
5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account compromise, and violations of our Terms & Conditions — including the use of automated systems, multiple accounts, and bonus abuse.
6. Responsible Gambling: To identify and respond to potential signs of problem gambling behaviour, including monitoring deposit patterns and session activity to enable timely intervention where appropriate, and to administer self-exclusion and deposit limit requests.
7. Customer Support: To respond to enquiries, resolve disputes, process complaints, and provide assistance through live chat and email support channels.
8. Marketing Communications: To send promotional offers, bonus notifications, and relevant platform updates — but only where you have provided your explicit consent or where it is otherwise permitted by applicable law. You may opt out of marketing communications at any time.
9. Platform Improvement: To analyse aggregated usage data to improve platform performance, user experience, game offering, and payment processing efficiency.
10. Legal Obligations: To comply with applicable laws and regulatory requirements, respond to lawful requests from regulatory or law enforcement authorities, and enforce our legal rights where necessary.

luckyd999 processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and luckyd999 — i.e., providing account services, processing payments, and enabling participation in games and betting markets.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC identity verification, AML monitoring, and the retention of financial records for the prescribed statutory period.
• Legitimate Interests: Processing carried out for luckyd999's legitimate business interests, including fraud prevention, security monitoring, responsible gambling compliance, platform improvement, and customer support quality assurance — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit, freely given consent — primarily in relation to direct marketing communications and certain non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

luckyd999 does not sell, rent, or trade your personal data. We share your personal data only where necessary and only with the categories of recipients described below:

• Payment Service Providers: We share transaction-related data with Supported Payment Method providers — including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank — solely to facilitate the processing of deposits and withdrawals.
• KYC and Identity Verification Providers: We engage specialist third-party identity and age verification services to assist in completing KYC processes. These providers receive only the data necessary to conduct the verification and are bound by strict data processing agreements.
• Game and Platform Technology Providers: Third-party game developers and platform infrastructure providers may receive limited technical data necessary to deliver their services within the luckyd999 platform.
• Fraud Detection and Security Providers: Security and fraud prevention technology providers receive device and behavioural data necessary to identify and prevent fraudulent or abusive activity.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to regulatory bodies, law enforcement agencies, or other competent authorities where we are required to do so by applicable law, court order, or regulatory directive. Such disclosures are made only to the extent legally required and are logged accordingly.
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by luckyd999 may receive personal data to the extent necessary for the provision of their professional services, subject to applicable confidentiality obligations.

All third-party Data Processors engaged by luckyd999 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with luckyd999's documented instructions.

luckyd999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Accounts: Personal data associated with an active player account is retained for the full duration of the account's active status and for a minimum of five (5) years following account closure, in accordance with applicable AML record-keeping requirements.
• Financial Transaction Records: Records of deposits, withdrawals, and betting transactions denominated in MYR or cryptocurrency are retained for a minimum of seven (7) years from the date of the transaction, in accordance with financial record-keeping obligations.
• KYC and Identity Documents: Identity verification documents submitted during the KYC process are retained for a minimum of five (5) years following account closure or the last transaction date, whichever is later.
• Support Communications: Customer support correspondence is retained for a minimum of two (2) years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Records of marketing consent and opt-out status are retained for the duration of the consent's relevance and for a period thereafter sufficient to demonstrate compliance.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with industry-standard data disposal procedures.

luckyd999 implements a multi-layered security framework to protect your personal data against unauthorised access, loss, disclosure, or destruction. Our security measures include but are not limited to:

• Encryption in Transit: All data transmitted between your device and the luckyd999 platform is encrypted using 256-bit SSL/TLS encryption, consistent with the security standards employed by leading Malaysian financial institutions.
• Encryption at Rest: Sensitive personal data and financial information stored within luckyd999's systems is encrypted at rest using industry-standard cryptographic algorithms.
• Access Controls: Access to personal data within luckyd999's internal systems is restricted on a strict need-to-know basis. Staff access is governed by role-based access controls, and all access events are logged and subject to audit.
• Password Security: Player account passwords are stored using one-way cryptographic hashing. luckyd999 does not store plaintext passwords and cannot retrieve your password in its original form.
• Fraud Monitoring: Continuous automated monitoring for suspicious account activity, including anomalous login patterns, unusual transaction behaviour, and device fingerprint anomalies.
• Security Testing: luckyd999's platform infrastructure undergoes periodic security assessments to identify and remediate potential vulnerabilities.

luckyd999 uses cookies and similar tracking technologies on its platform for the purposes described below. A cookie is a small text file stored on your device by your web browser when you visit a website.

• Essential Cookies: Required for the basic functionality of the luckyd999 platform, including maintaining your logged-in session, processing game rounds, and enabling secure payments. These cookies cannot be disabled without impairing core platform functionality.
• Security Cookies: Used to support fraud detection, account security monitoring, and the protection of player sessions against hijacking or replay attacks.
• Analytical Cookies: Used to collect aggregated, anonymised data about how players interact with the platform — including page views, navigation patterns, and feature usage — to enable luckyd999 to improve the platform experience.
• Preference Cookies: Used to remember your settings and preferences — such as language and display preferences — so that they are preserved across sessions.
• Marketing Cookies: Used, where you have provided consent, to deliver relevant promotional content and to measure the effectiveness of luckyd999's marketing activities.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will affect the functionality of the luckyd999 platform. Detailed cookie management instructions are available in the help documentation of all major browsers.

As a data subject whose personal data is processed by luckyd999, you hold the following rights in relation to your personal data. These rights may be exercised by submitting a request to luckyd999's customer support team as described in Section 15 of this Policy:

• Right of Access: You have the right to request confirmation of whether luckyd999 holds personal data about you, and to receive a copy of that personal data together with information about how it is processed.
• Right to Rectification: You have the right to request the correction of any personal data that is inaccurate or incomplete. Where technically feasible and not contrary to our legal obligations, luckyd999 will correct the relevant data promptly.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where there is no overriding legitimate basis for continued processing. Note that certain data must be retained by luckyd999 in accordance with its legal and regulatory obligations and cannot be deleted on request.
• Right to Restriction of Processing: You may request that luckyd999 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where processing is unlawful but you prefer restriction to deletion.
• Right to Data Portability: Where technically feasible, you have the right to receive the personal data you have provided to luckyd999 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data on the basis of legitimate interests, and to object to direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

luckyd999 will respond to all valid data rights requests within thirty (30) days of receipt. Where a request is complex or numerous, the response period may be extended by a further sixty (60) days, and you will be notified accordingly.

luckyd999 is strictly an adult platform. We do not knowingly collect, process, or retain personal data from individuals under 21 years of age. All players must be at least 21 years old at the time of account registration and at all times during which they access and use the platform.

luckyd999 employs the following measures to prevent access by minors:

• Age confirmation is required at the point of registration. Players must confirm they are 21 years of age or older before completing the registration process.
• KYC verification, which includes documentary evidence of date of birth, is required before withdrawal requests are processed.
• luckyd999 reserves the right to request proof of age at any point during a player's use of the platform. Accounts where age eligibility cannot be confirmed will be suspended pending verification.
• Any account found to belong to an individual under 21 years of age will be immediately closed, all winnings will be voided, and deposited funds (less any applicable deductions for platform abuse) will be returned to the source payment method.

If you believe a minor has registered or is using a luckyd999 account, please contact our support team immediately at [email protected] so that we can investigate and act promptly.

In the course of providing its services, luckyd999 may transfer personal data to third-party service providers located outside of Malaysia — for example, in connection with cloud infrastructure, KYC verification, fraud detection, or game technology services.

Where personal data is transferred internationally, luckyd999 ensures that appropriate safeguards are in place to maintain the protection of your data in accordance with applicable data protection standards. These safeguards may include:

• Contractual data processing agreements incorporating standard data protection clauses with recipient organisations.
• Transfer to jurisdictions that provide an adequate level of data protection as recognised under applicable law.
• Technical and organisational measures ensuring that data transferred internationally remains subject to access controls and security standards equivalent to those applied within luckyd999's primary operating environment.

Players may request further information about the safeguards applicable to any specific international data transfer by contacting luckyd999's support team.

luckyd999 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect developments in data protection law, changes in our data processing practices, new service features, or revised payment method integrations.

Where material changes are made to this Policy, luckyd999 will notify registered players via the email address associated with their account, or by displaying a prominent notice on the luckyd999 platform. The date of the most recent revision is indicated at the top of this page.

Your continued use of the luckyd999 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to any amended terms, you must cease using the platform and submit an account closure request.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the luckyd999 support team through the following channels:

• Live Chat: Available 24/7 directly within the luckyd999 platform. Live chat is the fastest channel for urgent data or account security concerns.
• Email: [email protected] — responses within 2 business hours during peak operating periods. For formal data rights requests, please use the subject line "Data Rights Request" and include your registered account username.

All privacy-related enquiries and formal data rights requests are handled by luckyd999's designated data compliance team. We are committed to acknowledging all requests promptly and responding in full within the statutory timeframes described in Section 11 of this Policy.

For account-related enquiries not concerning data rights, please refer to our FAQ page or contact general customer support via live chat. For information about self-exclusion, deposit limits, and responsible gambling tools, please visit our Responsible Gambling page.