Lucky7 Privacy Policy — Our Commitment to Protecting Your Personal Information

Introduction

Lucky7 is committed to protecting the privacy of every member who uses our online casino platform. This Privacy Policy outlines our practices regarding the collection, use, storage, and protection of your personal data when you use Lucky7's services on lucky7.lc and our mobile app.

This document is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. We update this policy from time to time to reflect changes in our practices or legal requirements — the latest update date is stated at the top of this page.

Lucky7 acts as the data controller for the personal information you provide to us. This means we are responsible for ensuring your data is handled in a secure, lawful, and transparent manner.

Data We Collect

Lucky7 only collects data that is strictly necessary to provide our services safely and effectively. The following are the categories of data we collect:

Personal Identification Data

• Full name as shown on your identity card or passport.
• Date of birth to verify that you meet the minimum age requirement of 18 years.
• Identity card number (MyKad) or passport number.
• Current residential address.
• Active mobile phone number.
• The email address used to register your account.

Financial Data

• Bank account or e-wallet details for deposit and withdrawal purposes.
• Records of deposit and withdrawal transaction history on the platform.
• Information related to source of funds as required for KYC compliance.

Platform Usage Data

• Game activity records including game type, wagering, and results.
• Login history including date, time, and IP address.
• Device and web browser information used to access the platform.
• Customer support interaction data, including live chat records.

How We Use Your Data

Lucky7 uses your personal data solely for the following purposes:

Lucky7 will not use your data for any purpose other than those stated above without first obtaining your consent.

Data Sharing

Lucky7 deeply respects your privacy and does not sell your personal data to any party. However, in certain circumstances, we may need to share your information with the following parties:

Trusted Service Providers

Lucky7 works with trusted third-party service providers to operate our platform, including payment processors, cloud service providers, identity verification companies, and analytics providers. All third parties are required to comply with strict data protection standards and may only use your data for purposes specified in their service agreements with Lucky7.

Legal and Regulatory Requirements

Lucky7 will disclose your personal data to the authorities where required by Malaysian law, court order, or lawful regulatory directive. This includes disclosure to the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or other relevant enforcement agencies.

Business Transfer

In the event of a company merger, acquisition, or asset sale, member personal data may be transferred as part of that transaction. In such circumstances, the receiving party will be required to honour this privacy policy or notify you of any material changes.

Data Security

Lucky7 continually invests in security infrastructure to protect your personal data. The technical and organisational security measures we employ include:

• Data Encryption: All sensitive data is encrypted using AES-256 encryption at rest and SSL/TLS 1.3 in transit. This ensures your data remains unreadable even in the event of a breach.
• Strict Access Controls: Only authorised Lucky7 staff have access to your personal data, and every access is logged in an audit trail that is reviewed on a regular basis.
• 24/7 Monitoring: Our threat detection system continuously monitors platform traffic and activity to identify and block any unauthorised access attempts.
• Regular Penetration Testing: Lucky7 conducts regular security testing by independent security experts to identify and address any vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): We offer an additional layer of security through 2FA, which can be enabled in your account settings to protect your login.
• Incident Response Procedure: Lucky7 has established incident response procedures in place. In the event of a data breach that affects your rights, we will notify you and the relevant authorities within the timeframe required by law.

While we take reasonable measures to protect your data, no system can be guaranteed 100% secure against all threats. We encourage you to use a strong password and never share your login credentials with anyone.

Cookies & Tracking Technologies

Lucky7 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform operations such as login session verification and security. These cookies cannot be disabled as they are necessary for the platform to function properly.
• User Preference Cookies: Saving your preferences such as language, display settings, and game preferences so you do not need to reset them each time you log in.
• Analytics Cookies: Helping us understand how members use our platform so we can continuously improve it. Analytics data is collected in aggregate form and cannot be used to identify you individually.
• Security Cookies: Used to detect suspicious login activity and protect your account from unauthorised access attempts.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some parts of the Lucky7 platform. For more information on managing cookies, refer to your browser's help documentation.

Your Rights

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by lucky7:

To exercise any of the above rights, please contact the lucky7 customer support team via live chat on our platform. We will respond to your request within 21 calendar days as stipulated by Malaysia's PDPA.

Data Retention

Lucky7 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law in Malaysia.

• Active Account Data: Retained for the duration your account remains active and for a reasonable period thereafter for the purpose of resolving any outstanding disputes.
• Financial Transaction Records: Retained for a minimum of 7 years in compliance with Malaysia's financial and tax legal requirements.
• KYC Records: Retained for a minimum of 5 years following the termination of the business relationship, in line with the Anti-Money Laundering Act 2001 requirements.
• Support Communication Logs: Retained for 2 years for reference and dispute resolution purposes.
• Analytics Data: Stored in aggregate form without personal identifiers for an extended period for platform improvement purposes.

Once the retention period expires, your personal data will be securely deleted or anonymised from all our systems using industry-recognised methods.

Children's Privacy

The lucky7 platform is strictly reserved for individuals aged 18 and above. We do not intentionally collect or process personal data from any individual under the age of 18.

Should we discover that we have collected data from an individual under the age of 18, we will take immediate steps to delete that data and close the relevant account. If you believe we may have collected data from a minor, please contact our support team immediately.

Privacy Policy Changes

Lucky7 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons.

When we make material changes to this policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the Lucky7 platform before the changes take effect.
• Sending notifications to registered members via email or in-platform notifications for changes deemed highly material.

We encourage you to review this Privacy Policy page regularly to stay informed about how we protect your information. Your continued use of the Lucky7 platform after changes are published constitutes your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how Lucky7 handles your personal data, please do not hesitate to reach us through the following channels:

• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the lucky7 platform — the fastest way to get an immediate response.
• Email: [email protected] — for written enquiries requiring a detailed response within 3 business days.
• Help Centre: Visit the FAQ us for instant answers to frequently asked questions about privacy and data security.

For formal complaints regarding personal data protection that cannot be resolved by lucky7, you may also contact the Department of Personal Data Protection Malaysia (JPDP) through their official channels.