Privacy Policy Lucky99a –
Protection of Your Personal Data

1 Information We Collect

Lucky99a collects various types of information from members and platform visitors for legitimate and transparent purposes. We only collect information that is genuinely necessary to provide you with a high-quality service.

1.1 Information You Provide Directly

• Account Information: Full name, date of birth, email address, phone number, and password during the account registration process.
• Identity Verification Documents (KYC): A copy of your identity card, passport, or other valid identification document when requested for verification purposes.
• Financial Information: Bank account number, account holder name, and payment method details you use for deposits and withdrawals.
• Proof of Address Information: Bank statements, utility bills, or other documents verifying your residential address when required for the KYC process.

1.2 Information Collected Automatically

• Your IP address, device type, operating system, and web browser.
• Game session data including games played, session duration, total wagers, and transaction history.
• Approximate location data based on your IP address.
• Platform activity logs, including pages visited and actions taken within your account.

2 How We Use Your Data

Every piece of information collected by lucky99a is used for clear and legitimate purposes. We will not use your data for unrelated purposes without your prior consent.

Lucky99a has never sold your personal data to third parties for marketing purposes. This is our absolute commitment to every member.

3 Information Sharing

Lucky99a only shares your personal information in limited circumstances and for legitimate purposes. We do not share your data broadly or without controls.

3.1 Third-Party Service Providers

We work with trusted service providers who help us operate the platform, process payments, and deliver support services. All providers are bound by strict data confidentiality agreements and may only use your data for specified purposes:

• Payment Processors: Transaction information is shared with registered and trusted payment service providers to securely process your deposits and withdrawals.
• Game Software Providers: Game session data required to run games properly is shared with our licensed game software providers.
• Identity Verification Services: KYC documents may be shared with recognised identity verification service providers for verification purposes only.
• Analytics Services: Anonymised usage data is used to improve the platform experience. No personally identifiable information is shared for this purpose.

3.2 Disclosure to Authorities

Lucky99a will disclose personal information to authorities when required by law, including in response to official requests from law enforcement agencies, courts, or relevant regulatory bodies.

4 Data Storage & Security

Protecting your personal data is lucky99a's highest priority. We continuously invest in security infrastructure to keep your information safe at all times.

4.1 Technical Security Measures

• 256-bit SSL Encryption: All data transmitted between your device and lucky99a servers is protected by industry-grade SSL encryption.
• Encrypted Password Storage: Your password is never stored in plain text. We use irreversible cryptographic hashing methods.
• Firewall & Intrusion Detection System: lucky99a's servers are protected by multiple firewall layers and a real-time cyber threat monitoring system.
• Two-Factor Authentication (2FA): 2FA is available on all accounts for an added layer of security beyond your password.
• Regular Security Audits: The lucky99a platform undergoes regular penetration testing and independent security audits.

4.2 Data Retention Period

Lucky99a retains your personal information for as long as your account is active or as long as necessary to fulfil the purposes stated in this policy. When data is no longer needed, it will be securely deleted or anonymised:

• Active account data: Retained for the duration of the active account.
• Transaction records: Minimum 7 years in accordance with Malaysian legal requirements.
• KYC documents: Retained for 5 years after account closure.
• Activity logs: 12 months after the session ends.

5 Cookies & Tracking Technologies

Lucky99a uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

5.1 Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how players use the platform so we can continually improve the user experience.
• Functional Cookies: Saves your preferences such as language, display settings, and game preferences so you don't need to reset them every time you log in.
• Analytics Cookies: Collects aggregated and anonymised data on usage patterns for service improvement purposes.

5.2 Managing Cookie Preferences

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. We recommend keeping essential cookies enabled for the best experience.

6 Your Rights as a lucky99a Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and lucky99a's internal policies, you have the following rights regarding your personal data. lucky99a is committed to respecting and facilitating the exercise of these rights.

7 Disclosure to Third Parties

Lucky99a does not share your personal information with third parties except in the following strictly defined and controlled circumstances:

• Service providers who assist with platform operations (payment processors, game software providers) and are bound by data protection agreements.
• Regulatory authorities, law enforcement agencies, or courts when required by Malaysian law or a valid court order.
• Parties that acquire or merge with lucky99a in the event of a business restructuring, subject to member notification and equivalent data protection standards.
• Analytics service providers that use aggregated and anonymised data solely for platform improvement purposes.

8 Cross-Border Data Transfers

In some cases, your personal data may be processed or stored outside Malaysia, particularly by international game software providers or cloud infrastructure we use. lucky99a ensures that any such data transfers are carried out with adequate protections in place.

• All international data transfers are subject to data transfer agreements that comply with Malaysia's PDPA requirements.
• We exclusively use cloud and infrastructure providers holding internationally recognised security certifications such as ISO 27001.
• Sensitive data such as KYC documents and financial information is processed using end-to-end encryption during transmission.

9 Child Protection

Lucky99a strictly prohibits the use of our platform by individuals under 18 years of age. We do not knowingly collect or process personal information from minors.

• If we determine that information has been collected from an underage individual, the account in question will be closed immediately and the associated data will be deleted.
• The lucky99a registration process is designed to prevent access by underage individuals, including through date-of-birth verification and KYC procedures.
• Parents or guardians who suspect their child has registered on our platform are urged to contact our support team immediately.

10 Privacy Policy Amendments

Lucky99a reserves the right to update this Privacy Policy at any time to reflect changes in legislation, industry best practices, or how we operate.

• Any material amendments will be communicated to members via email or in-platform notification at least 14 days before taking effect.
• Continued use of the lucky99a platform after the effective date of any amendments constitutes your acceptance of the updated policy.
• Previous versions of this policy are kept in our archive and can be requested through our support team.
• The date of the latest amendment will always be displayed at the top of this page for your reference.

11 Contact Our Privacy Officer

If you have any questions, concerns, or wish to exercise your privacy rights, please contact the lucky99a Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24/7 on the lucky99a platform — the fastest way to get an immediate response.
• Privacy Email: [email protected] — for written inquiries or official requests related to personal data.
• Response Time: All privacy-related requests will be responded to within 14 working days.

For more information about your rights under Malaysia's PDPA, you may visit the official website of the Department of Personal Data Protection Malaysia. For responsible gaming concerns, please visit our Responsible Gaming page.