Privacy Policy 777lukcy — Personal Data Protection for Malaysian Players

This Privacy Policy is published by 777lukcy ("we", "Company" or "Platform") and applies to all users who access or register an account on the 777lukcy.win website, 777lukcy mobile app, or any related services we offer.

We understand that entrusting personal information to any online platform is a big decision. That's why we wrote this policy in plain language — not filled with confusing legal jargon — so you truly know what happens with your data before making any decisions.

This policy explains: what data we collect, why we need it, how it is used, with whom it is shared (if any), and what your rights are regarding that data. All of this is done in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

777lukcy collects data in three main categories depending on your interaction with our platform:

We use the data collected solely for legitimate and stated purposes. Below are the main purposes for using your data:

• Account Management: Creating and maintaining your account, verifying identity, processing withdrawal and deposit requests
• Service Delivery: Enabling you to access all 777lukcy platform games and features smoothly
• Security & Anti-Fraud: Detecting suspicious activity, preventing money laundering, monitoring unauthorized login attempts
• Service Communications: Sending important account notices, security updates and transaction confirmations
• Marketing (with consent): Sending relevant promotional information, bonuses and exclusive offers — you can unsubscribe anytime
• Legal Compliance: Meeting legal obligations including reporting to relevant authorities if required
• Responsible Gaming: Identifying concerning play patterns and offering appropriate support tools

We will not use your data for any other purposes not stated here without obtaining your new consent first.

777lukcy does not sell, rent or trade your personal data to anyone. However, there are limited situations where we need to share your data:

• Payment Service Provider: To process deposits and withdrawals, we share necessary information with approved payment gateway providers — all subject to strict confidentiality agreements
• KYC Verification Provider: Third-party identity verification service providers help us verify your documents securely and quickly
• Legal Authorities: We are required to share data when we receive valid court orders or official requests from law enforcement agencies
• Audit & Compliance: Independent auditors conducting security and compliance audits of the platform may access limited data under confidentiality obligations

Like most websites, 777lukcy uses cookies and similar tracking technologies to enhance your experience. Here are the types of cookies we use:

• Essential Cookies: Required for basic platform functions such as staying logged in, session security and navigation. Cannot be disabled
• Performance Cookies: Collecting anonymous usage statistics to help us understand how players use the platform and make improvements
• Functional Cookies: Storing your preferences such as language, game settings and display theme so you don't have to reset them each time
• Security Cookies: Detecting unusual login attempts and helping our fraud detection system function properly

You can manage cookies through your web browser settings. However, disabling essential cookies may affect certain functions of the 777lukcy platform. Our mobile app uses device identifiers similar to cookies for the same purposes.

777lukcy invests seriously in security infrastructure to protect your data from unauthorized access, loss, alteration or disclosure. The security measures we implement include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols
• Data encryption at rest on servers using AES-256 standard
• Role-based access control (RBAC) — only authorized staff with job requirements can access specific data
• 24/7 security monitoring with automated intrusion detection system
• Penetration testing and periodic security audits by independent experts
• Documented incident response procedures to address any data breaches promptly
• Periodic data backups to secure and separate locations

We do not keep your personal data longer than necessary. Data retention periods depend on the type of data and its purpose:

• Active Account Data: Stored as long as your account remains active on the 777lukcy platform
• KYC Data: Stored for 7 years after account closure in accordance with Anti-Money Laundering (AML) compliance requirements
• Financial Transaction Records: Stored for 7 years from the transaction date, in line with accounting and legal requirements
• Security Logs: Stored for 12 months for investigation purposes in case of security incidents
• Marketing Data: Deleted within 30 days after you unsubscribe from marketing communications

After the specified retention period expires, your data will be securely deleted or fully anonymised so that it can no longer be linked to your identity.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our own policies, you have the following rights regarding your personal data that we hold:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can ask us to correct inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data in certain circumstances (subject to legal compliance obligations)
• Right to Object to Marketing: You can stop receiving marketing communications at any time via account settings or by emailing us
• Right to Data Portability: You can request a copy of your data in machine-readable format
• Right to Restrict Processing: In certain circumstances, you can ask us to restrict how we process your data

To exercise any of the above rights, submit a written request to 777lukcy customer support. We will process your request within 14 working days. Identity verification may be required before we can execute your request.

The 777lukcy platform is exclusively for adult users aged 18 years and above. We do not knowingly collect, store or process personal data of individuals under 18 years of age.

If we discover that data of someone under 18 years of age has been collected inadvertently, we will take immediate steps to delete that data and close the account. Parents or guardians who believe their child has registered on our platform should contact us immediately at [email protected] for necessary action.

777lukcy may update this Privacy Policy from time to time to reflect changes in our practices, new technologies or updated legal requirements. When material changes are made, we will notify you via:

• Clear notice on 777lukcy.win homepage
• Pop-up notice on next login to the platform
• Email to all registered members for material changes

The "Updated" date at the top of this document will always show the latest version. We encourage you to review this policy periodically. Continued use of the 777lukcy platform after amendments are published is considered acceptance of the amended policy.

If you have any questions, concerns or requests related to this Privacy Policy or how we handle your personal data, you can contact our privacy team via:

• Email: [email protected] (we aim to respond within 24 hours)
• Live Chat: Available 24/7 within the 777lukcy platform after login
• In-Platform Support: The "Contact Us" section in your account settings

For requests related to user rights such as data access, correction or deletion, please clearly state the type of request and include your account number to facilitate identity verification and processing of your request.