Privacy Policy 555lucky — Malaysian Player Data Protection

This Privacy Policy explains how 555lucky ("we", "Platform", or "555lucky") collects, uses, stores, protects and discloses your personal information when you use the 555lucky.best website, the 555lucky mobile app, or any services offered under the 555lucky brand.

By registering an account or using the 555lucky platform, you acknowledge that you have read and understood this Privacy Policy and agree to the way we process your personal data as described herein. If you do not agree with any part of this policy, please discontinue your use of the 555lucky platform.

As a platform serving Malaysian players, 555lucky is committed to complying with all applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA). We regard the trust you place in us by sharing your personal information as a responsibility we take seriously every day.

2.1 Data You Provide Directly

When you register for or use a 555lucky account, you provide us with the following information:

2.2 Automatically Collected Data

When you use the 555lucky platform, our systems automatically record the following technical information for security and service improvement purposes:

• IP address — for public location detection, fraud prevention and access control
• Device information — device type, operating system, browser version
• Activity log data — login dates and times, pages visited, in-account actions
• Session data — session duration, general usage patterns
• Betting data — a record of all betting activity for account management and compliance purposes

2.3 Data from Third-Party Sources

In certain circumstances, 555lucky may receive information about you from trusted third-party sources, including identity verification service providers we engage for the KYC process, and payment providers such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX to verify financial transactions.

555lucky uses the personal data collected for legitimate and limited purposes. The following is a complete list of the ways your data may be used:

• Account management — creating, managing and maintaining your 555lucky account, including processing deposits via DuitNow, TnG eWallet, GrabPay, Boost, ShopeePay and FPX, as well as processing winnings withdrawals
• Identity verification — carrying out KYC processes to comply with legal requirements and prevent fraud, money laundering and use of the platform by underage individuals
• Service communications — sending important account notices, security alerts, transaction confirmations, and 555lucky service updates
• Customer support — resolving queries, complaints and assistance requests you submit to the 555lucky support team
• Security and fraud prevention — monitoring account activity to detect suspicious patterns, prevent unauthorised access and protect platform integrity
• Legal compliance — fulfilling compliance obligations under applicable laws, including Malaysia's PDPA and financial reporting requirements
• Service improvement — analysing aggregated, anonymised usage patterns to improve the functionality, performance and user experience of the 555lucky platform
• Marketing communications — sending information about relevant 555lucky promotions, bonuses and offers, subject to your communication preferences (you may opt out of marketing communications at any time)

555lucky does not sell or rent your personal data to any third party. However, in the course of operating the platform, we may share your data with a limited set of third-party categories as outlined below, strictly for the stated purposes:

4.1 Required Service Providers

• Payment providers — DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX and banking institutions to process your financial transactions
• Identity verification provider — licensed third-party KYC services used to verify your identity in accordance with compliance requirements
• Technical infrastructure provider — cloud servers and data storage services that support the operation of the 555lucky platform, all subject to strict data security agreements
• Game software providers — live casino and virtual sports game developers who require minimal transaction data to ensure game integrity

4.2 Disclosures Required by Law

555lucky may disclose your personal data to government authorities or law enforcement bodies when we are required to do so by a court order, legal writ, or a valid request from a competent authority. In such situations, we will disclose only the minimum information necessary and will endeavour to notify you in advance where permitted by law.

4.3 Business Transfers

In the event that 555lucky is involved in any merger, acquisition, or transfer of business assets, player personal data may be transferred as part of those business assets. Players will be notified in advance, and the receiving party will be required to uphold a level of privacy protection equal to or greater than that set out in this policy.

555lucky continuously invests in its security infrastructure to ensure that Malaysian players' personal data is protected to the highest standard. The technical and organisational security measures we implement include:

• 256-bit SSL Encryption — all data communications between your device and 555lucky's servers are encrypted using the latest TLS/SSL protocols
• Two-Factor Authentication (2FA) — an additional layer of security to protect your account from unauthorised access even in the event your password is compromised
• 24/7 security monitoring — our security team continuously monitors the platform's infrastructure to detect and respond to any threats
• Data segregation — sensitive financial data is stored separately from general profile data with strict access controls
• Internal access controls — only 555lucky staff with a legitimate operational need are granted access to players' personal data, and all such access is logged and monitored
• Regular security testing — the 555lucky platform undergoes regular penetration testing and security audits conducted by independent cybersecurity experts
• Secure data backups — data is regularly backed up to secure, encrypted locations to ensure data recovery in the event of an emergency

555lucky uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device by your web browser when you visit 555lucky.best.

6.1 Types of Cookies Used

• Essential Cookies — required for core platform functions such as login, session management and security. These cookies cannot be disabled without affecting the functionality of your 555lucky account
• Performance Cookies — collecting anonymised usage data to help us understand how players use the platform and identify areas for improvement
• Functional Cookies — remembering your preferences and settings such as preferred language, odds display preferences and other account settings to deliver a more personalised experience
• Session Cookie — automatically deleted when you close your browser; used to maintain your login session while browsing the 555lucky platform

6.2 Managing Your Cookie Preferences

You can manage and delete cookies through your web browser settings. Most modern browsers allow you to view stored cookies, delete individual or all cookies, and block cookies from specific sites. Please note that disabling essential cookies may affect the functionality of your 555lucky account.

As a 555lucky player based in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA) and 555lucky's privacy policy:

8.1 Data Retention Period

555lucky retains your personal data for as long as necessary to fulfil the purposes for which it was collected as described in this policy, or as required by applicable law. General retention period guidelines:

• Active account data: retained for as long as your account remains active with 555lucky
• Closed account data: retained for a minimum of 5 years after account closure for legal compliance and audit purposes
• Financial transaction records: retained for a minimum of 7 years in accordance with Malaysian accounting legal requirements
• Security logs: retained for 1–2 years for security investigation purposes if required
• Customer support communications: retained for 3 years from the date of the last interaction

8.2 International Data Transfers

In certain circumstances, your personal data may be processed or stored on servers located outside Malaysia by cloud infrastructure providers we engage. In all such cases, 555lucky ensures that any such data transfers are carried out with adequate safeguards and in compliance with Malaysia's PDPA requirements, including through appropriate data processing agreements with those third-party providers.

555lucky takes the privacy and safety of individuals under the age of 18 very seriously. The 555lucky platform is not designed for, and does not accept registrations from, individuals under the age of 18.

We do not knowingly collect personal data from children or minors. Should we discover that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the relevant account.

If you believe your child or someone under the age of 18 has registered an account with 555lucky without appropriate consent, please contact us immediately at support@555lucky.best so we can take prompt and appropriate action.

The 555lucky platform may contain links to or integrations with third-party services such as payment providers (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX) and Live Casino game providers. When you click on those links or use those third-party services, the relevant provider's own privacy policy will apply in place of this 555lucky Privacy Policy.

555lucky is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to read the privacy policy of any third-party service provider you use in connection with your 555lucky account.

555lucky reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or technological developments. The "Last Updated" date at the top of this page will be revised whenever changes are made.

For significant changes that affect how we use your data or your rights, 555lucky will notify you via an in-account notice or by email to your registered address before the changes take effect. You will be given reasonable time to review the changes before they come into force.

Continued use of the 555lucky platform after any updates to this Privacy Policy are published will be considered your acceptance of the revised policy. If you disagree with the changes made, please stop using the platform and contact us to close your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or how 555lucky handles your personal data, please contact us through the following channels:

• Privacy Email: support@555lucky.best (subject: "PRIVACY ENQUIRY")
• Live Chat: available 24/7 via the 555lucky platform in Bahasa Malaysia
• Response Time: we are committed to responding to all privacy-related enquiries within 5 business days

For official requests relating to your personal data rights — including access, correction, deletion, or portability — please send an email with the subject line "PRIVACY RIGHTS REQUEST" and include your 555lucky account number along with a description of your request. We will verify your identity before processing any such request.

555lucky is committed to resolving all privacy concerns internally in the first instance. However, if you feel our response is unsatisfactory, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant data protection authority.