Lucky7 Privacy Policy – Malaysian Member Data Protection

1. Introduction

Lucky7 cares about the privacy of every individual who uses our platform. This Privacy Policy explains in detail how we — as the data controller — manage the personal information you provide when registering, using our services or simply browsing the lucky7 website.

This document covers all services provided by lucky7, including the main website at lucky7.sx, the lucky7 mobile app for iOS and Android, and all customer support channels including Live Chat and support email.

By registering a lucky7 account or continuing to use our platform after the effective date of this Privacy Policy, you confirm that you have read, understood and agreed to all the terms stated herein. If you do not agree, please discontinue use of the platform and contact us to close your account.

2. Data We Collect

Lucky7 collects several categories of information depending on how you interact with our platform:

a) Information You Provide Directly:

• Full name, date of birth and identification number (MyKad) at registration.
• Email address and phone number for account communications.
• Residential address for KYC verification purposes.
• Payment method details such as bank account numbers or e-wallet credentials used.
• Identity verification documents such as a copy of your MyKad or passport for the KYC process.

b) Automatically Collected Information:

• IP address, browser type and operating system of your device.
• Server log data including pages visited, time of visit and actions taken.
• Cookie data and similar tracking technologies (see Section 8).
• General location data based on your IP address.

c) Transaction Information:

• Deposit and withdrawal history, including amounts, dates, and payment methods.
• Game records, wagering history, and overall platform activity.
• Bonus and promotion usage history.

3. How We Use Your Data

Lucky7 uses the data collected for the following purposes, all of which are necessary to operate the platform effectively:

• Account Management: Creating and maintaining your account, processing registration, login and KYC verification.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions accurately and securely.
• Service Communications: Sending important notifications regarding your account, transactions, policy changes and relevant promotions.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access and suspicious activity.
• Legal Compliance: Meeting reporting and compliance requirements with relevant authorities as required by law.
• Platform Improvement: Analysing usage patterns in aggregate to improve the user experience and performance of the lucky7 platform.
• Customer Support: Helping resolve queries, complaints and requests submitted to our support team.
• Responsible Gambling: Monitoring gameplay patterns to identify members who may need assistance and providing appropriate self-control tools.

Lucky7 does not use your data to make fully automated decisions that significantly affect you without human intervention, except in the context of fraud detection where immediate action is necessary to protect the integrity of the platform.

4. Legal Basis for Data Processing

Lucky7 processes your personal data on valid legal grounds, including:

• Contract Performance: Processing necessary to carry out the service agreement between you and lucky7, including account management and transaction processing.
• Legal Obligation: Processing necessary to comply with applicable legal obligations, including KYC requirements and anti-money laundering reporting.
• Legitimate Interest: Processing for platform security, fraud prevention and service improvement purposes that does not affect your fundamental rights.
• Consent: For optional marketing communications such as promotional offers and newsletters, which you may withdraw at any time from your account settings.

5. Data Storage & Security

Lucky7 implements robust technical and organisational security measures to protect your personal data:

• 256-bit SSL encryption for all data transmissions between your device and our servers.
• Passwords are stored using one-way hashing algorithms that cannot be decrypted.
• Role-based access control ensuring staff can only access the data necessary for their duties.
• Continuous 24/7 security monitoring with automated intrusion detection systems.
• Regular data backups with recovery procedures that are periodically tested.
• Regular security assessments and penetration testing conducted by independent third parties.

Retention Period: lucky7 retains your personal data for as long as your account is active and for the period required by law after account closure — typically 5 years for transaction records for audit and compliance purposes. Data that is no longer needed will be securely deleted or anonymised.

While we take all reasonable precautions, no security system is completely foolproof. You are also responsible for keeping your account password confidential and not sharing your login credentials with anyone.

6. Data Sharing with Third Parties

Lucky7 does not sell your personal data. However, we may share necessary information with the following categories of third parties under limited circumstances:

• Payment Providers: Required transaction information is shared with payment processors such as banks and e-wallet operators to complete your deposits and withdrawals.
• KYC Verification Providers: Identity documents are shared with accredited third-party verification services to complete the KYC process quickly and securely.
• Game Providers: Basic account information is shared with the game providers that power the lucky7 platform to enable access to their games.
• Legal Authorities: lucky7 will disclose the required data to authorities when mandated by court order or applicable law.
• Analytics Services: Anonymised and aggregated usage data may be shared with analytics platforms to help us understand and improve the user experience.

All third parties that receive your data are required to protect it to standards equivalent to this Privacy Policy and are not permitted to use it for any purpose other than those specified.

7. Cross-Border Data Transfers

As an online platform, lucky7 may store or process your data on servers located outside Malaysia. In such cases, we ensure that:

• All cross-border data transfers are carried out with adequate contractual safeguards, including Standard Contractual Clauses or equivalent protection mechanisms.
• Data recipients in other countries are subject to data protection obligations no less stringent than those guaranteed under this Privacy Policy.
• We continually review our data transfer arrangements to ensure they remain compliant with the latest developments in data protection law.

8. Use of Cookies and Tracking Technologies

Lucky7 uses cookies and similar tracking technologies to enhance your experience on our platform. There are several types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, game sessions and security. These cookies cannot be disabled as the platform will not function correctly without them.
• Performance Cookies: Collecting information about how you use the platform — most visited pages, time spent and any errors encountered — to help us improve our service.
• Functional Cookies: Saving your preferences such as language, display settings and game preferences so you do not need to reconfigure them each time you login.
• Marketing Cookies: Used to display relevant promotions and offers to you based on your activity on the platform. You may opt out of these cookies through your browser settings.

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of the lucky7 platform.

9. Your Rights as a lucky7 Member

As a lucky7 member, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct any inaccurate or incomplete data.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data — however, we may need to retain certain records to fulfil our legal obligations.
• Right to Restrict Processing: You may request that we restrict how we use your data in certain circumstances.
• Right to Object: You may object to the processing of your data for specific purposes such as direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.

To exercise any of the above rights, contact the lucky7 customer support team via Live Chat or support email. We will process your request within 30 business days.

10. Children's Privacy

Lucky7 is a platform restricted to individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe someone under 18 has registered an account on lucky7, please contact us immediately. We will take prompt action to close the account and delete all associated data.

Lucky7 employs various mechanisms including date-of-birth verification at registration and KYC checks to prevent minors from accessing our platform.

11. Links to Other Sites

The lucky7 platform may contain links to third-party websites, such as game provider sites or payment partner sites. This Privacy Policy applies solely to the lucky7 platform and does not cover the privacy practices of those other websites.

Lucky7 is not responsible for the content or privacy practices of third-party websites. We recommend reading the privacy policy of each site you visit separately.

12. Privacy Policy Amendments

Lucky7 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements or service improvements. When we make significant changes:

• You will be notified via your registered email or in-platform notification at least 7 days before changes take effect.
• The "Updated" date at the top of this document will reflect the date of the most recent amendment.
• For highly material changes, we may request your renewed consent before you continue using the platform.

Your continued use of the lucky7 platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact the lucky7 team via:

• Live Chat: Available 24/7 directly from the lucky7 platform for immediate assistance.
• Email: [email protected] — we aim to respond to all enquiries within 24 business hours.
• FAQ Page: Visit FAQ page us for answers to the most frequently asked questions.

For data protection rights requests, please clearly state the type of request and include the account information required for identity verification before we can process it.