Complying with the Personal Data Protection Act 2010 (PDPA)

Luck 555 Privacy Policy – Malaysia Personal Data Protection

Luck 555 respects the privacy of every member. This document transparently explains how we collect, use, store, and protect your personal data — as well as your rights as a user of our platform.

Updated: 1 January 2026 Reading time: ~10 minutes Applicable in Malaysia
Our Privacy Commitment
  • Data is not sold to third parties
  • 256-bit SSL encryption across all data
  • Complying with Malaysia's PDPA 2010
  • Right to access & correct your data guaranteed
  • Delete data upon request

Luck 555 Data Protection Principles

Six core principles that form the foundation of how we handle your personal data.

PDPA
Data Security

All personal data is stored on servers protected by 256-bit SSL encryption. Access to data is restricted to authorised personnel only and is continuously monitored.

Not Sold

Luck 555 does not sell, rent, or share your personal data with any third party for marketing purposes without your explicit consent.

User Rights

You have the right to access, correct, or request the deletion of your personal data at any time by contacting our privacy team.

Data Minimisation

We only collect data that is strictly necessary to deliver our services. No excess data is collected without a clear and legitimate purpose.

Retention Period

Personal data is retained only for as long as necessary for its specified purpose or as required by Malaysian law. Data that is no longer needed will be securely deleted.

Breach Notification

Should any data breach or leak affect your account, Luck 555 will notify you within 72 hours of confirming the incident.

Introduction & Scope of the Privacy Policy

Welcome to the Luck 555 Privacy Policy. We, Luck 555 ("Platform", "we"), operate an online casino gaming platform for users in Malaysia. This Privacy Policy sets out transparently how we manage your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia.

By registering an account with Luck 555 or using any of our services, you agree that your personal data will be processed as described in this Privacy Policy. We deeply value the trust you place in us, and we take this responsibility seriously.

Important Note: This Privacy Policy forms part of Luck 555's Terms & Conditions and should be read together with them. Continued use of our platform following any policy amendment constitutes acceptance of the updated terms.

This policy covers all data collected when you visit the Luck 555 website, register an account, make deposits or withdrawals, play any games, contact customer support, or use any other feature we offer.

Types of Personal Data We Collect

Luck 555 collects various types of personal data based on platform operational requirements and legal compliance. The following are the categories of data we collect:

2.1 Identity Information

  • Full name as shown on your MyKad or passport
  • Identity card number (MyKad) or passport number
  • Date of birth and gender
  • Malaysian residential address
  • Nationality

2.2 Contact Data

  • Mobile phone number (for OTP verification)
  • Email address
  • Your chosen username

2.3 Financial Data

  • Relevant bank account details (bank name, account number, account holder name)
  • Phone number linked to your e-wallet (TNG, GrabPay, Boost, ShopeePay)
  • Deposit and withdrawal transaction history in Malaysian Ringgit (RM)
  • Betting and winnings records

2.4 Technical & Usage Data

  • IP address and network information
  • Device type, operating system, and web browser
  • Cookie data and session identifiers
  • Activity logs within the platform (games played, login/logout times)
  • Location data (state/city in Malaysia based on IP)
Data CategoryExampleRequirement
Identity InformationName, MyKad, addressMandatory (KYC/AML)
Contact DataPhone number, emailMandatory (account verification)
Financial DataBank account, MYR transaction historyMandatory (payment processing)
Technical DataIP, device logsAutomatic (security)
Optional DataLanguage, notificationsOptional (personalisation)

How We Collect Data

Your personal data is collected through several different methods during your use of the Luck 555 platform:

3.1 Directly from You

This is the primary method of data collection. You provide data directly when you:

  • Completing the account registration form
  • Completing the identity verification (KYC) process
  • Making deposits via DuitNow, Touch 'n Go eWallet, FPX (Maybank2u, CIMB Clicks), GrabPay, Boost, or ShopeePay
  • Completing a withdrawal request form
  • Contacting our customer support team
  • Completing surveys or feedback forms

3.2 Automatically

Some data is collected automatically when you use our platform, including server log data, cookie information, session data, and device information. This data is necessary to keep the platform running smoothly and securely.

3.3 From Trusted Third Parties

In certain circumstances, we may receive data from trusted third parties such as identity verification service providers, approved payment processors, and fraud prevention agencies.

Luck 555 does not purchase data lists from any data brokers. All data we collect is provided directly by you or generated through your use of our platform.

Purposes for Using Personal Data

Luck 555 uses your personal data for the following lawful purposes:

  • Account Management: Creating, verifying, and maintaining your account; processing login requests and password resets.
  • Payment Processing: Processing all deposits and withdrawals in Malaysian Ringgit (RM) via approved methods, quickly and securely.
  • KYC/AML Compliance: Verifying your identity to meet the legal requirements of Anti-Money Laundering and counter-terrorism financing laws.
  • Fraud Detection: Monitoring account activity to identify and prevent fraud, bonus abuse, multiple accounts, and other security threats.
  • Customer Support: Providing assistance and resolving any queries or complaints you submit to our team.
  • Service Communications: Sending important notifications related to your account, transactions, security, and policy updates.
  • Marketing (with consent): Sending promotional offers, bonus updates, and game-related content that may interest you — only if you have opted in to receive them.
  • Platform Improvement: Analysing usage patterns to improve the design, features, and performance of the Luck 555 platform.
  • Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and activating appropriate protection tools.

Data Minimisation Principle: Luck 555 only uses data that is necessary for the stated purposes. We do not process your data for any other purpose without obtaining fresh consent from you.

Data Sharing & Disclosure

Luck 555 does not sell your personal data to any third party. However, we may share your personal data in the following circumstances:

5.1 Trusted Service Providers

We share data with third-party service providers who help us operate the platform, including:

  • Payment processors (DuitNow, TNG, FPX, GrabPay, Boost, ShopeePay) — to process your MYR transactions
  • KYC and identity verification service providers
  • Hosting infrastructure and cybersecurity service providers
  • Email and communications service providers

All these service providers are bound by strict data protection agreements and are only permitted to use your data for purposes specified by Luck 555.

5.2 Legal Compliance

Luck 555 may disclose your personal data to the relevant authorities when required by Malaysian law, including court orders, enforcement directives, or official investigations related to anti-money laundering.

5.3 Business Transfer

In the event of any merger, acquisition, or transfer of business assets, users' personal data may be transferred as part of those business assets. You will be notified in advance before any such transfer takes place.

Data Security Measures

Luck 555 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, misuse, loss, or destruction:

Encryption

All data in transit and at rest is protected with industry-standard 256-bit SSL/TLS encryption.

Access Control

Only authorised personnel have access to sensitive data. Access is monitored and audited on a regular basis.

24/7 Monitoring

A round-the-clock cyber threat monitoring system is in place to detect and block suspicious activity.

Data Backup

Data is backed up regularly to separate locations to ensure service continuity and disaster recovery.

While we take all reasonable measures, no data transmission over the internet can be guaranteed to be 100% secure. You are also responsible for keeping your account password safe.

Cookies & Tracking Technologies

The Luck 555 platform uses cookies and similar tracking technologies to enhance the user experience and analyse platform traffic. The following are the types of cookies we use:

7.1 Essential Cookies (Mandatory)

These cookies are required for the platform's core functions, such as login authentication, session security, and transaction processing. The platform cannot operate without them and they cannot be disabled.

7.2 Analytics Cookies

We use analytics cookies to understand how users interact with the platform — which pages are most visited, how long users stay, and where they exit. This data is used to improve the overall user experience.

7.3 Preference Cookies

These cookies store your preferences such as display language, notification settings, and favourite game selections so you don't have to reconfigure them each time you log in.

7.4 Managing Cookie Preferences

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect platform functionality. Analytics and preference cookies can be disabled without impacting core functions.

Data Storage & Transfer

8.1 Storage Location

Your personal data is stored on servers located in Malaysia and/or in countries with equivalent or higher data protection standards. Luck 555 ensures that any cross-border data transfers are carried out with adequate safeguards in place.

8.2 Retention Period

Luck 555 retains your personal data for the following periods:

  • Active account data: For the duration of your active account
  • Financial transaction records: Minimum 7 years (Malaysian legal requirement)
  • Activity logs: 2 years from the date of activity
  • KYC Records: 5 years after account closure
  • Support correspondence: 3 years from the ticket closing date

Once the specified retention period has elapsed, data will be securely deleted or anonymised in accordance with industry-standard methods.

Your Rights Under PDPA 2010

As a Luck 555 platform user residing in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA):

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 30 business days. We reserve the right to charge a reasonable fee for providing copies of data. Submit your request to privacy@luck555.app.

If you find that the personal data we hold is inaccurate, incomplete, or outdated, you have the right to request a correction. You can update certain information directly in your account profile settings. For corrections to more sensitive data (such as your name or IC number), please contact our support team.

You may request the deletion of your personal data when it is no longer needed for its original purpose. However, we may need to retain certain data to fulfil legal obligations (such as financial records required to be kept for 7 years under Malaysian law) or to resolve any outstanding claims.

You have the right to object to the processing of your personal data for direct marketing purposes at any time. To withdraw your marketing consent, click the "unsubscribe" link in any marketing email or update your notification preferences in your account settings. Withdrawal of consent does not affect the validity of any processing carried out prior to the withdrawal.

You have the right to receive the personal data you have provided to us in a machine-readable format (such as CSV or JSON) for the purpose of transferring it to another service provider. Such requests will be processed within 14 business days.

How to Submit a Request: To exercise any of the above rights, send a written request to privacy@luck555.app including your full name, IC number, and details of your request. We will verify your identity before processing any request.

Protection of Children's Data

The Luck 555 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from children or minors under the age of 18.

If we discover that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate action to delete that data and close the associated account.

If you are a parent or guardian and have reason to believe that your child under the age of 18 has registered an account on Luck 555, please contact us immediately at support@luck555.app so that we may take the appropriate action.

Privacy Policy Amendments

Luck 555 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technological developments, or new legal requirements. When we make material changes, we will:

  • Updating the "Last Updated" date at the top of this document
  • Displaying a clear notice on the main page of our platform
  • Sending email notifications to all registered members (for significant changes)

Continued use of the Luck 555 platform after changes are published will be considered acceptance of the updated Privacy Policy. We recommend that you review this page periodically to ensure you stay informed of our latest policy.

Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to reach us through the following channels:

Privacy Officer Email
privacy@luck555.app
Customer Support (General)
support@luck555.app · Live Chat 24/7
Response Time
Privacy requests are processed within 30 business days

Complaints to the Authorities: If you are dissatisfied with how we have handled your privacy request, you have the right to file a complaint with the Department of Personal Data Protection (JPDP) Malaysia.

Your Data Is Safe with Luck 555

Join over 300,000 members who play with confidence, knowing their data is always protected. Register for free today.

256-bit SSL Compliant with PDPA 2010 Data not sold
Bahasa Melayu