lucky99a Privacy Policy

Lucky99a is committed to protecting the privacy and personal data of its Members. We collect personal data to the minimum extent necessary to provide our services, comply with applicable licensing and regulatory requirements, and maintain the security and integrity of the lucky99a platform. We do not sell your personal data to third parties for marketing or advertising purposes.

This Policy should be read alongside the lucky99a Terms & Conditions and Responsible Gaming Policy. By using the lucky99a platform, you consent to the data practices described in this Policy.

Lucky99a collects the following categories of personal data from Members and visitors:

Lucky99a does not intentionally collect sensitive personal data (such as health, race, religion, or political affiliation) unless required for responsible gaming compliance purposes, for example where a Member discloses a gambling addiction as part of a self-exclusion request.

The majority of data lucky99a holds about you is provided directly by you during the registration process, KYC verification, deposit and withdrawal requests, and communications with our support team.

When you visit lucky99a.org, certain technical data is collected automatically through cookies, server logs, and similar technologies. This includes your IP address, device fingerprint, browser characteristics, and navigation behaviour within the platform. See Section 9 (Cookies & Tracking) for more detail.

When you make a deposit or withdrawal via Touch 'n Go eWallet, DuitNow, FPX, or other payment methods, our payment processing partners may share transaction confirmation data with lucky99a. Lucky99a does not receive or store full bank account credentials or complete card numbers.

For KYC and identity verification purposes, lucky99a may use third-party verification service providers to validate the authenticity of identity documents you submit. These providers process your data strictly for verification purposes under contractual data processing agreements.

Lucky99a uses your personal data for the following purposes:

• Account management: Creating and maintaining your lucky99a account, authenticating your login sessions, and managing account security.
• Service delivery: Processing deposits and withdrawals, settling bets and game outcomes, crediting bonuses, and providing access to all lucky99a platform features.
• Identity and age verification: Confirming that you meet the 21+ age requirement and verifying your identity in accordance with our international gaming licence obligations.
• Regulatory compliance: Meeting Anti-Money Laundering (AML) reporting obligations, Know Your Customer (KYC) requirements, and other regulatory duties imposed by our gaming licence.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, duplicate accounts, and other prohibited conduct.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions.
• Platform improvement: Analysing aggregate usage patterns to improve the lucky99a platform experience. This analysis uses anonymised or pseudonymised data where possible.
• Responsible gaming: Monitoring for signs of problem gambling behaviour and applying self-imposed limits or platform-initiated interventions where appropriate.
• Direct communications: Sending you transactional communications (deposit confirmations, withdrawal notifications, security alerts) and, with your consent, promotional communications about lucky99a offers.

Lucky99a processes your personal data on the following legal bases:

• Contract performance: Processing necessary to deliver the lucky99a services you have registered for — account management, gameplay, payment processing.
• Legal obligation: Processing required to comply with AML, KYC, age verification, and other regulatory requirements imposed by lucky99a's gaming licence.
• Legitimate interests: Fraud prevention, platform security, abuse detection, and aggregate analytics — where our interests do not override your privacy rights.
• Consent: Marketing communications and non-essential cookie placement — where we rely on your explicit, freely given consent, which you may withdraw at any time.

Lucky99a does not sell your personal data. We may share your data with the following categories of third parties, strictly to the extent necessary for the stated purpose:

• Payment processors: To facilitate deposit and withdrawal transactions (e.g., Touch 'n Go, DuitNow, FPX infrastructure providers, USDT TRC20 network).
• Identity verification providers: To validate identity documents during KYC, under binding data processing agreements.
• Game software providers: Game providers (e.g., Pragmatic Play, PG Soft, Evolution Gaming) may receive pseudonymised session data to render game content and calculate outcomes. These providers do not receive your full identity data.
• Regulatory authorities: Lucky99a will disclose personal data to competent regulatory or law enforcement authorities when legally required to do so, including pursuant to AML reporting obligations.
• IT and infrastructure providers: Cloud hosting, security monitoring, and technical service providers who process data under contractual obligations to maintain confidentiality.

All third-party data processors engaged by lucky99a are contractually required to process your data only in accordance with lucky99a's instructions and applicable data protection standards. Lucky99a does not transfer your personal data to countries without adequate data protection safeguards without implementing appropriate protective measures.

Lucky99a retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory requirements. As a general guide:

• Account data: Retained for the duration of your active account and for a minimum of five years following account closure, in accordance with gaming licence and AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of six years from the date of transaction.
• KYC documents: Retained for a minimum of five years following the end of your customer relationship with lucky99a.
• Support communications: Retained for two years following resolution of the relevant support interaction.
• Marketing consent records: Retained for as long as consent is active and for a reasonable period thereafter as proof of consent.

On expiry of the applicable retention period, lucky99a will securely delete or anonymise your personal data.

Lucky99a applies industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS (Transport Layer Security) encryption on all pages and communications.
• Encrypted storage of sensitive account data at rest.
• Strict role-based access controls limiting which lucky99a staff can access Member data.
• Regular security assessments and penetration testing.
• Segregation of player funds from operational accounts.

While lucky99a maintains robust security measures, no online platform can guarantee absolute security against all threats. You are responsible for maintaining the confidentiality of your lucky99a login credentials. If you suspect your account has been compromised, contact lucky99a support immediately via live chat.

Lucky99a uses cookies and similar tracking technologies to operate the platform and improve your experience. Cookies are small data files stored on your device by your browser. Lucky99a uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function — including authentication session cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking platform functionality.
• Functional cookies: Remember your preferences such as language settings and responsible gaming limit configurations.
• Analytics cookies: Collect anonymised data about how Members use the lucky99a platform to help us identify and fix issues and improve the overall experience. Used on an opt-in basis.
• Marketing cookies: Track visit sources and campaign effectiveness for the lucky99a platform. Used only with your explicit consent.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the lucky99a platform. Lucky99a does not use third-party advertising network cookies.

Subject to applicable law and regulatory obligations, you have the following rights in relation to your personal data held by lucky99a:

• Right of access: You may request a copy of the personal data lucky99a holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to lucky99a's legal retention obligations (such as AML record-keeping requirements).
• Right to restriction: You may request that lucky99a restricts the processing of your data in certain circumstances.
• Right to data portability: You may request a copy of your data in a structured, machine-readable format in certain circumstances.
• Right to withdraw consent: Where lucky99a relies on your consent to process data (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on legitimate interests in certain circumstances.

To exercise any of these rights, contact lucky99a at [email protected] (plain text — not a clickable link) or via live chat. Lucky99a will respond to verified requests within 30 days. We may need to verify your identity before processing a data rights request.

Lucky99a does not knowingly collect personal data from persons under the age of 21. The lucky99a platform is strictly for adults aged 21 and above. If lucky99a discovers that personal data has been collected from a person under the age of 21, that data will be deleted promptly and the associated account will be closed. If you believe a minor has registered on lucky99a, please notify us immediately at [email protected].

Lucky99a may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. When material changes are made, lucky99a will notify registered Members via email or in-platform notification. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of lucky99a following notification of an update constitutes acceptance of the revised Policy.

If you have questions, concerns, or complaints about this Privacy Policy or lucky99a's data practices, please contact us:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 from the lucky99a platform

Please include your registered username and a clear description of your query. Lucky99a aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days. If you are not satisfied with lucky99a's response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.