Luky 777 Privacy Policy – How We Protect Your Information

When you register and use Luky 777, various types of information come to us. This can be divided into two categories — what you provide directly, and what is collected automatically as you use the platform.

What you provide directly:

• Name, date of birth, and mobile number — collected at registration.
• Your bKash, Nagad, or Rocket mobile number — collected at the time of payment.
• National ID information — collected during identity verification, where applicable.
• Messages and information provided when contacting support.

Automatically collected information:

• IP address and device type (mobile or desktop).
• Basic stats such as which games you've played and how long you've played them.
• Date and time of login and logout.
• Cookies & session data — collected via your browser.

This information is collected solely to keep the platform running properly, secure your account, and improve our services — for no other purpose.

Luky 777 uses collected data only for specific, defined purposes. Each purpose is clearly outlined below:

Your information will only be used for marketing purposes with your separate consent. You can opt out of marketing communications at any time from your account settings.

Luky 777 never sells your personal information to advertising companies, data brokers, or any other third parties. However, limited sharing may be necessary in certain circumstances:

• Payment Processor: Only the minimum information required to complete a transaction is shared with bKash or Nagad — strictly for payment processing purposes.
• Game Provider: Your session ID may be used to run games — but never your identity or payment details.
• Legal obligations: Information may be disclosed when required by a court order or a lawful request from a law enforcement authority.
• Security investigations: Data may be shared with regulatory authorities in connection with fraud or anti-money laundering investigations.

Payment information is the most sensitive data we handle, and Luky 777 treats it with the utmost care. When you deposit via bKash or Nagad, your PIN or password never reaches Luky 777's servers — the transaction is processed directly through that payment provider's encrypted system.

Your payment account number (mobile number) is stored on our servers in encrypted form — it cannot be read directly. No staff member or third party has access to this information.

• All payment transactions are secured with TLS 1.3 protocol.
• Payment numbers are displayed in masked format in your account (e.g., 01***8765).
• Suspicious transactions are automatically flagged and reviewed.
• Payment data undergoes regular third-party security audits.

Luky 777 uses cookies on its website. Cookies are small data files stored in your browser that help the platform remember your preferences and improve your experience. We use four types of cookies:

You can change your cookie preferences at any time through your browser settings. Please note that disabling essential cookies may affect your ability to stay logged in.

As a member of Luky 777, you have several rights regarding your data. These are based on internationally recognised data protection standards (GDPR-inspired):

To exercise these rights support@luky777.my— email us with "Data Request" in the subject line for faster processing.

Luky 777 does not retain any data longer than necessary. Retention periods vary depending on the type of information:

• Account information: Retained for as long as your account is active.
• Transaction history: Generally up to 5 years, as required by law.
• Support messages: Up to 2 years — retained for dispute resolution purposes.
• Log files (IP address, etc.): Automatically deleted after 90 days.
• Cookie data: Session cookies are deleted when you close your browser; preference cookies last up to 1 year.

After an account is closed and the applicable legal retention period has expired, Luky 777 permanently and irreversibly deletes all associated data.

Luky 777 strictly does not serve anyone under the age of 18. Date of birth is verified at registration, and proof of age may be requested if there is any doubt.

If a parent believes their child has accidentally created an account, please contact us immediately support@luky777.myOnce verified, the account will be closed and all data permanently deleted.

Luky 777 may update this Privacy Policy when necessary. For any significant changes, members will be notified at their registered email address at least 14 days in advance.

• Check the "Last Updated" date at the top of the page to know when changes were last made.
• Continued use of the platform after any changes indicates your acceptance of the updated policy.
• If you object to any changes, you may close your account — no penalties apply.

If you have any questions, complaints, or requests regarding your data, please get in touch with us:

• Email: support@luky777.my
• Live Chat: Available on the platform 24/7
• Response time: 24 hours for general enquiries, up to 30 days for data requests

Including "Privacy Request" in your email subject line will route your message to the right team faster and speed up the process. We take every request seriously.