lucky99a Privacy Policy for Malaysian Players

Introduction

This Privacy Policy is issued by lucky99a and applies to all persons who visit the lucky99a website or use its account, payment, gaming or responsible gambling services. References to "you" or "your" mean the player or visitor whose data is processed. References to "we", "us", "our" or thebrand" mean lucky99a and its appointed data processors.

lucky99a is an English-language gambling information platform designed primarily for adults in Malaysia, including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya and Shah Alam. This policy explains how personal data is handled with reference to applicable privacy and data protection standards.

By continuing to access or use lucky99a, you acknowledge that you have read, understood and accepted this Privacy Policy together with the Terms & Conditions and Responsible Gambling requirements. If you do not accept this policy, please stop using lucky99a.

Definitions

For the purposes of this lucky99a Privacy Policy:

• Personal Data means any information relating to an identified or identifiable individual.
• Processing means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
• Controller means the party that determines the purposes and means of processing personal data.
• Processor means a party that processes personal data on behalf of the controller.
• Cookies means small data files placed on a device to support site functionality, session management, analytics or fraud prevention.
• KYC means know-your-customer checks covering identity, age, residential address, payment ownership and source of funds.
• Third Party means an entity other than lucky99a and the player, to whom data may be disclosed under this policy.

Data Collection

lucky99a may collect the following categories of personal data:

You must ensure that any personal data you provide to lucky99a is accurate and current. Providing false, incomplete or another person's data may result in account suspension or adverse effects on payment processing.

Data Processing

lucky99a processes personal data for the following purposes:

• Account Administration: Creating, verifying, updating and securing registered player accounts.
• Age and Identity Verification: Confirming that access is limited to players aged 21 and above and meeting applicable identity requirements.
• Payment Processing: Facilitating MYR deposits and withdrawals via permitted channels such as DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch'n Go eWallet, Boost, GrabPay and supported cryptocurrencies.
• Security and Fraud Prevention: Detecting, investigating and preventing unauthorised access, duplicate accounts, money laundering and other prohibited conduct.
• Legal and Regulatory Compliance: Satisfying obligations under anti-money laundering, responsible gambling, tax and data protection frameworks.
• Player Support: Responding to account, payment, promotion, responsible gambling and technical enquiries.
• Product Improvement: Analysing aggregated and anonymised usage data to improve lucky99a platform functionality and content.
• Responsible Gambling Monitoring: Identifying indicators of disordered gambling and activating player protection measures where appropriate.

Data Sharing

lucky99a does not sell, rent or trade personal data to unrelated third parties. Data may be disclosed in the following circumstances:

• Payment and Banking Providers: Financial institutions, FPX operators, eWallet services and cryptocurrency network processors that need transactional data to complete a deposit or withdrawal.
• Identity and KYC Verification Services: Third-party verification providers assisting with age, address and document checks.
• Technology and Hosting Partners: Infrastructure, security and platform service providers operating under contractual data protection obligations.
• Legal and Regulatory Authorities: Law enforcement, financial intelligence units or regulatory bodies in Malaysia or elsewhere where disclosure is legally required or authorised.
• Responsible Gambling and Anti-fraud Networks: Participant data may be exchanged with approved self-exclusion registries or fraud prevention schemes where required by applicable operating conditions.

Each third party receiving lucky99a player data is required to handle it in accordance with applicable privacy standards and only for the purpose for which it was disclosed.

Data Retention

lucky99a retains personal data only for as long as necessary for the original purpose, plus any additional period required by legal, financial, anti-money laundering or gambling compliance obligations. Account records, transaction histories, KYC documents and responsible gambling communications may be retained for a minimum of five years after account closure or the last active transaction, depending on applicable rules.

Aggregated and anonymised data that no longer identifies any individual may be retained indefinitely for statistical or product improvement purposes. When personal data is no longer required and no retention obligation applies, lucky99a will securely delete or irreversibly anonymise it.

Cookies and Tracking Technologies

lucky99a uses cookies and similar technologies to support platform operation. Cookies may be strictly necessary, functional or analytical.

• Strictly Necessary Cookies: Support login sessions, load balancing, security token management and core site functionality. These cannot be disabled without breaking platform access.
• Functional Cookies: Remember language preferences, display settings and authenticated session states.
• Analytical Cookies: Collect aggregated, anonymised information about how visitors interact with lucky99a, which pages are visited and how long sessions last. These support internal improvement decisions.
• Fraud and Security Cookies: Assist in detecting suspicious access patterns, duplicate sessions and automated bot activity.

Most browsers allow cookie management through settings. Blocking strictly necessary cookies will affect your ability to use lucky99a. Blocking functional or analytical cookies will affect personalisation and reporting accuracy but should not prevent basic access. Lucky99a does not use advertising or tracking cookies for third-party behavioural advertising.

Data Security

lucky99a implements technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, disclosure, alteration or destruction. These include encrypted data transmission, access controls restricted by role and purpose, audit logging, system monitoring and security testing.

However, no digital system is entirely free from risk. You are responsible for maintaining the confidentiality of your own lucky99a credentials, one-time verification codes and payment authentication details. You must not share these with another person, including family members. If you suspect a security incident involving your lucky99a account, contact support promptly and secure any linked payment methods.

Minors and Age Restriction

lucky99a is intended solely for adults aged 21 and above. Lucky99a does not knowingly collect, process or retain personal data from persons under 21 years of age. If we become aware that personal data has been received from a person who is under the minimum age, that data will be deleted and access terminated.

Adults who are responsible for minors in their household should take measures to prevent underage access to lucky99a, including enabling device parental controls and ensuring account credentials are not accessible to minors.

User Rights

Subject to applicable law and lucky99a's legal obligations, registered players may exercise the following rights regarding their personal data:

To exercise any of the above rights, contact lucky99a support using the email address provided in Section 13 of this policy. Lucky99a may require identity confirmation before processing a data rights request.

Cross-border Data Transfers

lucky99a may use service providers whose infrastructure is located outside Malaysia. Personal data transferred outside the originating jurisdiction will be subject to contractual data protection obligations or equivalent safeguards consistent with applicable standards.

Where data is transferred for payment processing via channels such as DuitNow, FPX, international card networks, Boost or GrabPay, the relevant provider's own privacy framework will also apply to the transaction data processed by that provider.

Policy Changes

lucky99a may update this Privacy Policy to reflect changes in legal requirements, technology practices, new services or responsible gambling obligations. The effective date shown at the top of this page will be updated when a revised version applies.

For material changes that significantly affect how personal data is handled, lucky99a will communicate the update through the platform where reasonably practicable. Continued use of lucky99a after an updated policy becomes effective constitutes acceptance where permitted by law.