365lucky Privacy Policy – Your Data Fully Protected

365lucky ("we", "Platform" or "365lucky") is committed to protecting the privacy of every player who uses our services. This Privacy Policy explains in detail how we manage your personal information from the moment you register until you stop using our platform.

This policy applies to all information you provide to us directly as well as information we collect automatically while you browse and use the 365lucky platform, including the official website at 365lucky.onl and our mobile app.

As a platform serving users in Malaysia, we comply with applicable data protection requirements and implement appropriate technical and organizational measures to ensure the security of your personal information at all times.

We collect various types of information to ensure the platform runs smoothly and your gaming experience remains seamless and secure. The categories of data we collect are as follows:

We only collect data that is genuinely necessary for the stated purposes. We do not collect sensitive information such as biometric data, medical records or religious beliefs unless required by law.

Every piece of data we collect is used for a legitimate and specific purpose. We do not use your data for any purpose not stated here without obtaining your consent first:

• Account Management: Enabling you to register, log in, and securely manage your 365lucky account.
• Transaction Processing: Processing deposits and fund withdrawals quickly and accurately into the correct account.
• KYC & AML Compliance: Verifying player identity and fulfilling anti-money laundering legal requirements.
• Platform Security: Detecting and preventing fraudulent activity, collusion, and system abuse.
• Customer Support: Enabling our support team to assist you more efficiently whenever an issue needs to be resolved.
• Service Improvement: Analyzing usage patterns to improve the interface, performance, and overall gaming experience.
• Marketing Communications: Sending you promotional information, bonuses, and exclusive offers — only if you have consented to receive them.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offering appropriate assistance.

365lucky does not share your personal information with third parties except in the following situations required for legitimate platform operations:

• Payment Processing Providers: Required transaction information is shared with approved payment gateway providers to process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Game Software Providers: Minimum required game data is shared with licensed game providers to enable access to our extensive game catalogue.
• Identity Verification Services: KYC information is shared with licensed identity verification providers to meet legal compliance requirements.
• Legal Authorities: We will disclose required information to law enforcement or regulatory bodies when mandated by a court order or applicable law.

In the event of a business merger, acquisition or asset sale, player data may be transferred as part of that process. You will be notified in advance should such a situation arise and will have the option to close your account if you do not agree.

365lucky uses cookies and similar tracking technologies to enhance platform functionality and understand how players interact with our website. The following are the types of cookies we use:

• Essential Cookies: Required for the platform to function properly — including login session management, security and basic user preferences. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymized data on how players use our platform to help us identify and resolve performance issues.
• Functional Cookies: Saving your preferences such as language, currency, and display settings so you do not need to reconfigure them each time.
• Analytics Cookies: Helping us understand which pages are most popular and how players navigate the platform so we can continually improve the user experience.

You can control or disable cookies through your web browser settings. However, disabling essential cookies may affect certain functions of the 365lucky platform, including the ability to remain logged in.

We continually invest in security infrastructure to ensure your personal and financial data remains protected at all times. Key security measures we practise include:

• Full Data Encryption: All data is transmitted using TLS 1.3 protocol with 256-bit SSL encryption, ensuring no third party can intercept your information in transit.
• Two-Factor Authentication (2FA): An additional security layer is available for player accounts to prevent unauthorized access even if your password is compromised.
• 24/7 Monitoring: Automated monitoring systems operate around the clock to detect any suspicious activity or intrusion attempts in real time.
• Internal Access Controls: 365lucky staff may only access player data based on their job requirements, with every access logged and audited on a regular basis.
• Regular Security Testing: We conduct regular penetration testing and security audits to identify and address system vulnerabilities before they can be exploited.

As a 365lucky platform user, you have the following rights regarding your personal data. We are committed to processing every request within a reasonable timeframe:

To exercise any of the rights above, please contact the 365lucky customer support team via live chat on the platform. We will verify your identity before processing any request to keep your account secure.

365lucky retains your personal data for as long as your account is active or as long as necessary to provide services to you. Once an account is closed, we may need to retain certain data to fulfil applicable legal and regulatory obligations.

In general, data retention periods are as follows:

• Financial Transaction Records: Retained for a minimum of seven years from the transaction date to meet financial compliance and anti-money laundering requirements.
• KYC Information: Retained for a minimum of five years after account closure or the end of the business relationship.
• Game Log Data: Retained for three years for dispute resolution and internal audit purposes.
• Support Communication Logs: Retained for two years for quality control purposes and reference in the event of subsequent disputes.
• Anonymous Analytics Data: May be retained for a longer period as it cannot be re-identified to a specific individual.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with the data deletion procedures established by our information security team.

365lucky reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, technology used, legal requirements or other operational reasons. The date of the last update will always be displayed at the top of this document.

For significant changes, we will provide appropriate notice via your registered email or through in-platform notifications before the changes take effect. This gives you sufficient time to review the changes and make an informed decision.

Continued use of the 365lucky platform after any Privacy Policy changes are published constitutes acceptance of the updated terms. If you disagree with any changes, you have the right to close your account and request data deletion in accordance with the procedure outlined in Section 7.

For any enquiries regarding our privacy policy or how we handle your personal data, please visit our FAQ or contact the 365lucky support team, available to assist you 24 hours a day, 7 days a week.