Luckin33 Privacy Policy – How We Protect the Personal Data of Malaysian Members

Luckin33 is an online casino and digital entertainment platform fully committed to protecting the privacy of its members. We understand that when you register an account and play on luckin33, you are entrusting us with sensitive personal information — including your name, phone number, financial details, and activity records on the platform.

That trust is something we take very seriously. This Privacy Policy is written to give you a clear and complete picture of what happens to your data — from the moment it is collected, how it is used, who it may be shared with (and under what circumstances), and how you can control or request deletion of your data at any time.

This policy applies to all data collected through the luckin33 platform, including the website at luckin33.best, mobile applications, email and SMS communications, and interactions with our customer support team. It applies to all users in Malaysia and users from any other jurisdiction accessing the luckin33 platform.

Luckin33 collects only the data genuinely necessary to provide our members with a secure, fair, and quality service. The data we collect can be grouped into the following categories:

Luckin33 does not collect sensitive data such as medical information, religious beliefs, or political views. Any biometric data that may be collected during the identity verification (KYC) process — such as a facial image for verification — is used solely for that purpose and is not retained in our primary database once verification is complete.

Data is collected through several channels as you interact with the luckin33 platform:

• → Account Registration: When you register a luckin33 account, you provide basic information such as your username, phone number or email address, and password. This information is stored to verify your identity when you log in.
• → Identity Verification (KYC): When you go through the KYC process — required before withdrawals exceed a certain limit — you will provide identity documents such as your national ID or passport, and possibly a facial image for verification.
• → Financial Transactions: Every time you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX online banking, or submit a withdrawal request, your transaction details are automatically recorded.
• → Gaming Activity: The luckin33 platform records all gaming activity — slots played, bet amounts, winnings, free spins usage, and bonus usage — for account administration, dispute resolution, and regulatory compliance purposes.
• → Automatic Technical Data: luckin33's servers automatically log your IP address, device type, operating system, web browser, and access time each time you use the platform. This data is used for security purposes and to improve platform performance.
• → Support Interactions: When you contact the luckin33 support team via live chat or email, records of those communications are retained for reference and service improvement purposes.

Luckin33 uses the data we collect solely for the legitimate, stated purposes below. We do not use your data for any other purpose without obtaining your consent first:

• ✓ Account Management: To create, verify, and maintain your account with luckin33, including the login process, KYC, and password recovery.
• ✓ Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, DuitNow, and other Malaysian payment methods, as well as to process withdrawal requests to your Malaysian bank account.
• ✓ Gaming Services Provision: To allow you to access and play all games on the luckin33 platform, including slots, Live Casino, table games, lottery, and Sports Betting.
• ✓ Bonus & Promotion Administration: To process bonus claims, track wagering requirement progress, and ensure luckin33 promotions are awarded only to eligible members.
• ✓ Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, bonus abuse, and other unlawful conduct on the luckin33 platform.
• ✓ Customer Support: To help resolve queries, complaints, and disputes submitted through luckin33 support channels.
• ✓ Responsible Gaming: To monitor gaming patterns and identify members who may need responsible gaming support, in line with luckin33's commitment to member wellbeing.
• ✓ Service Communications: To send important account notifications, transaction updates, changes to terms, and security information via SMS or email.
• ✓ Legal Compliance: To comply with applicable legal requirements, regulatory obligations, and court orders governing luckin33's operations.

Luckin33 does not sell, rent, or distribute members' personal data to third parties for marketing or commercial purposes. However, there are limited situations in which we are required to share your data with third parties necessary for the operation of the platform:

• → Payment Providers: Transaction information required for payment processing is shared with payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and Malaysian banks via FPX to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• → Game Providers: Minimum technical information required to give you access to games is shared with licensed game providers such as Pragmatic Play, PG Soft, Evolution Gaming, and others. These providers do not receive your financial or identity details.
• → Technical Service Providers: Luckin33 works with cloud infrastructure and security service providers who may process your data as part of delivering their services. All such providers are selected based on strict security standards and are bound by appropriate data processing agreements.
• → Regulatory Authority: luckin33 may be required to disclose certain data to licence holders or regulatory authorities as part of our obligations under our operating licence.
• ! Legal Authorities: Luckin33 will disclose data when required by a valid court order, legitimate legal investigation, or binding legal obligation — following an internal legal review confirming that disclosure is genuinely required.

Luckin33 continuously invests in the latest data security infrastructure and practices. Data protection is not just a policy on paper — it is a system that our internal and external cybersecurity teams actively design, test, and update.

The protection layers we use to secure your data at luckin33 include:

• ✓ Data Encryption in Transit: All communications between your device and luckin33's servers are protected with 256-bit SSL/TLS encryption — meaning your data cannot be read by anyone who might intercept your network traffic.
• ✓ Encryption of Stored Data: All sensitive data stored in luckin33's databases — including identity information, financial records, and passwords (in hashed form) — is protected with AES-256 encryption.
• ✓ Role-Based Access Control: luckin33 staff may only access the data required to carry out their specific duties. Internal access controls ensure that no individual can access all data at once.
• ✓ Two-Factor Authentication (2FA): All access to luckin33's internal systems containing member data requires two-factor authentication. This prevents unauthorised access even in the event that staff credentials are compromised.
• ✓ Continuous Threat Monitoring: luckin33's security systems monitor for abnormal activity 24 hours a day, 7 days a week. Any suspicious activity immediately triggers an alert to our security team.
• ✓ Regular Penetration Testing: Certified independent cybersecurity firms conduct regular penetration testing on the luckin33 platform to identify and close vulnerabilities before they can be exploited.
• ✓ Secure Data Backup: luckin33 member data is regularly backed up to a secure, separate location, with those backups themselves protected by full encryption.

While luckin33 takes all reasonable steps to protect your data, no security system can be guaranteed 100% safe from every cyber threat. We encourage you to take your own protective measures as well — such as using a strong and unique password, enabling 2FA on your luckin33 account, and never sharing your login credentials with anyone.

Luckin33 does not retain your personal data longer than necessary for the purposes set out in this Privacy Policy, or to fulfil applicable legal obligations.

• → Active Account Data: For as long as your account remains active with luckin33, we retain all data necessary for the operation of that account.
• → After Account Closure: Upon account closure, luckin33 retains the minimum data necessary for legal compliance purposes for the period prescribed by applicable law — typically between 5 and 7 years for financial records.
• → Transaction Records: Financial transaction records are retained for 7 years in accordance with applicable accounting legislation and financial compliance requirements.
• → Security Logs: Technical security logs are retained for 90 days for the purpose of security incident investigations.
• → Support Communication Records: Records of interactions with the luckin33 support team are retained for 3 years for reference and service improvement purposes.

Once the retention period expires, or upon receipt of a valid request from you, data will be securely deleted using methods that ensure it cannot be recovered by any party.

Luckin33 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how members use our platform. Cookies are small text files stored on your device when you visit the luckin33 platform.

• ✓ Session Cookies (Required): These cookies are necessary for the luckin33 platform to function properly — including maintaining your login session, saving your game preferences, and ensuring session security. Without them, the platform cannot operate.
• ✓ Preference Cookies: Saves your preferences such as display language and personal settings so you do not need to reconfigure them each time you visit the luckin33 platform.
• → Analytics Cookies: Used to understand how members navigate the luckin33 platform — which pages are visited most, how long sessions typically last, and so on. This data is used to improve our platform and contains no personally identifiable information.
• → Security Cookies: Helps detect suspicious activity and protect your account from unauthorised access attempts.

You can manage or delete cookies through your web browser settings. However, disabling or blocking required cookies may affect the functionality of the luckin33 platform. Luckin33 does not use third-party tracking technologies for targeted advertising purposes.

Luckin33 recognises and respects your rights in relation to your personal data. Below are the rights you hold as a luckin33 member and how you can exercise them:

The luckin33 platform is strictly for adults aged 18 and above. luckin33 does not knowingly or intentionally collect, store, or process personal data from individuals under the age of 18.

If luckin33 discovers or is made aware that data has been collected from an individual under the age of 18 without proper verification, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered an account with luckin33 are encouraged to contact us promptly at support@luckin33.best so that corrective action can be taken without delay.

Luckin33 is an internationally operating platform, and in some circumstances your personal data may be stored or processed on servers located outside Malaysia — for example, for data backup purposes or through the use of international cloud infrastructure.

Where cross-border data transfers occur, luckin33 ensures that protections equivalent to or greater than those in this Privacy Policy are applied to your data at all times. This is achieved through:

• ✓ Use of cloud infrastructure providers that comply with internationally recognised data protection standards.
• ✓ Data Processing Agreements that legally bind all third-party providers to comply with the data protection standards set by luckin33.
• ✓ Data is encrypted prior to transfer to ensure it remains protected in transit across international borders.

Luckin33 reserves the right to update or amend this Privacy Policy at any time. Significant changes will be communicated to you via your registered email or in-platform notification at least 14 days before taking effect.

The latest version of luckin33's Privacy Policy is always available on this page, with the last updated date clearly displayed. We encourage you to review this page from time to time. Continued use of the luckin33 platform after any changes take effect will be considered acceptance of the updated policy.

If you have any questions, concerns, or complaints about how luckin33 handles your personal data, or if you wish to exercise any of the rights outlined in this Privacy Policy, please reach out to us through the following channels:

• ✓ Privacy Email: support@luckin33.best — Please mark the email subject with "[Data Privacy]" to ensure it is directed to the relevant team promptly.
• ✓ Live Chat: Available on the luckin33 platform, 24 hours a day, 7 days a week. Select the "Privacy & Data" category when starting a chat session.
• ✓ Response Time: luckin33 is committed to responding to all privacy-related enquiries within 5 business days of receipt.