Lucky365 is committed to protecting the personal data of every player on our platform. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and what your rights are as a Lucky365 user.
Lucky365 (referred to herein as "Lucky365", "we", "us", or "our") operates the online casino and sports betting platform accessible at https://lucky365.cam and any associated subdomains (the "Platform"). Lucky365 acts as the data controller in respect of the personal data of its registered players ("Players" or "you").
This Privacy Policy (the "Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by Lucky365. Please read this Policy carefully to understand our practices regarding your personal data and how we will treat it.
This Policy should be read alongside our Terms & Conditions, which govern your use of the Lucky365 Platform. By registering an account and using our services, you acknowledge that you have read and understood this Policy.
Lucky365 is committed to compliance with applicable international data protection standards. While Malaysia's Personal Data Protection Act 2010 (PDPA) technically applies to commercial entities processing personal data of individuals in Malaysia in connection with commercial transactions, Lucky365 has adopted data processing practices that are consistent with internationally recognised privacy principles, including those reflected in the PDPA and the General Data Protection Regulation (GDPR) frameworks.
In this Policy, the following terms have the meanings set out below:
| Term | Definition |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, date of birth, residential address, email address, phone number, payment information, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and erasure. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this case, Lucky365. |
| "Data Processor" | A third party that processes personal data on behalf of Lucky365 pursuant to a written data processing agreement. |
| "KYC Data" | Identity and age verification documents collected from Players as part of the Know Your Customer compliance process, including government-issued identification, proof of address, and payment verification documents. |
| "Cookies" | Small text files stored on a Player's device by the Platform, used to maintain session state, recall preferences, and support analytics functions. |
| "Services" | All gaming products, betting markets, promotions, payment processing, and customer support provided through the Lucky365 Platform. |
When you register a Lucky365 Account, we collect the following personal data:
Before processing any withdrawal, Lucky365 is required to verify your identity. KYC data collected may include:
Lucky365 processes transactional data necessary to facilitate deposits and withdrawals, including:
Lucky365 does not store full card numbers or payment credentials directly. All payment processing is handled by certified third-party payment gateways operating under applicable payment security standards.
We collect data relating to your use of the Platform, including:
When you access the Platform, our systems automatically collect certain technical data, including:
Lucky365 collects personal data through the following means:
Lucky365 processes your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your Lucky365 Account, including processing login, account updates, and password resets. |
| Age & Identity Verification | Verifying that you are at least 21 years of age and that the identity details you have provided are accurate, in compliance with responsible gambling and AML obligations. |
| Payment Processing | Processing deposits and withdrawals via Malaysian payment methods (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, cryptocurrency) and maintaining accurate financial records. |
| Service Delivery | Providing access to casino games, sports betting markets, live dealer tables, promotions, VIP rewards, and customer support. |
| Legal & Regulatory Compliance | Complying with obligations under our international gaming licence, applicable AML regulations, and fraud prevention requirements. |
| Responsible Gambling | Monitoring gaming behaviour to identify potential problem gambling indicators and applying responsible gambling tools (deposit limits, self-exclusion) where appropriate. |
| Security & Fraud Prevention | Detecting, investigating, and preventing fraudulent activity, account breaches, multi-accounting, and bonus abuse on the Platform. |
| Communications | Sending account-related notifications, security alerts, and — where you have opted in — promotional communications about Lucky365 offers and new features. |
| Platform Improvement | Analysing aggregated, anonymised usage data to improve the functionality, content, and user experience of the Lucky365 Platform. |
Lucky365 processes your personal data on the following legal bases:
Lucky365 shares your personal data with third-party service providers strictly as necessary to deliver our Services. All such providers are bound by written data processing agreements and are prohibited from using your data for any purpose other than the specific service they provide to Lucky365. Categories of service providers include:
Lucky365 may disclose your personal data where required or permitted by law, including in response to a valid court order, regulatory request, or law enforcement inquiry from a competent authority in the jurisdiction in which Lucky365 operates. Lucky365 will endeavour to notify affected Players of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the assets of Lucky365, your personal data may be transferred to the successor entity, subject to the same or equivalent privacy protections as set out in this Policy. You will be notified of any such transfer via the email address registered on your Account.
Lucky365 operates internationally, and your personal data may be transferred to and processed in countries other than Malaysia, including the jurisdiction in which our international gaming licence is issued. Where such transfers occur, Lucky365 ensures that appropriate safeguards are in place — including contractual protections equivalent to internationally recognised data transfer standards — to protect your personal data in transit and at its destination.
Lucky365 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law or our international gaming licence obligations. The following general retention periods apply:
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
Lucky365 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, disclosure, or destruction. These measures include:
Cookies are small text files that are placed on your device when you visit the Lucky365 Platform. They enable the Platform to recognise your device on subsequent visits, maintain your session state while you are logged in, and recall your preferences.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for logging in, maintaining your session, and processing transactions. Cannot be disabled without breaking core Platform functionality. | Session |
| Functional | Remembers your language preferences, display settings, and last visited game categories to provide a personalised experience. | 30 days |
| Analytics | Collects anonymised data on how Players navigate the Platform, which pages are most visited, and where users encounter errors — used to improve usability. | 12 months |
| Security | Used to detect and prevent fraudulent login attempts, multiple account creation, and other security threats. | Session |
You may manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Lucky365 Platform, including logging in and processing transactions. Your cookie preferences can also be updated via the cookie consent banner displayed on your first visit to the Platform.
Subject to applicable law and the conditions of our international gaming licence, you have the following rights in relation to the personal data Lucky365 holds about you:
To exercise any of these rights, please contact our support team via live chat or by emailing the address displayed in the Contact Us section below. We may be required to verify your identity before acting on a request.
The Lucky365 Platform is intended exclusively for persons aged 21 years and above. Lucky365 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person below the minimum age, we will take immediate steps to delete that data and close the associated Account.
If you are a parent or guardian and believe that a person under the age of 21 has registered an Account with Lucky365 or provided personal data to us, please contact our support team immediately via live chat.
Lucky365 reserves the right to update or revise this Privacy Policy at any time. Any material changes to this Policy will be notified to registered Players via the email address associated with their Account and/or by a prominent notice on the Platform. The updated Policy will take effect from the date it is published.
We encourage all Players to review this Policy periodically. Continued use of the Lucky365 Platform following the publication of any amendment constitutes acceptance of the revised Policy. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by Lucky365, please contact our Data Privacy team through any of the following means:
Preferred method: Live chat on the Lucky365 Platform — available 24/7 in English, operating on Malaysian Standard Time (UTC+8). This is the fastest way to receive a response and is the recommended channel for urgent matters.
Email: Our support email address is provided below as plain text only. Please do not use your browser's "mailto" function — contact us through live chat for the fastest response:
Lucky365 aims to acknowledge all privacy-related enquiries within 2 business days and to resolve substantive requests within 30 calendar days. Where a request is particularly complex or where a significant number of requests have been received, this period may be extended by a further 30 days, in which case you will be informed of the extension.
Privacy is not just a legal checkbox at Lucky365 — it is a genuine commitment to every Malaysian player who trusts us with their personal information.
Lucky365 never sells, rents, or trades your personal data to third-party advertisers or data brokers. Your information stays within our controlled processing environment.
All data transmitted between your device and Lucky365 is protected by bank-grade 256-bit SSL/TLS encryption, regardless of whether you are accessing from Kuala Lumpur, Penang, or anywhere in Malaysia.
You have the right to request a copy of all personal data we hold about you. Contact our support team via live chat to submit an access request — we respond within 30 days.
If any personal data we hold is inaccurate or outdated, you can request a correction directly through your account settings or by contacting our support team.
Subject to legal retention obligations (such as AML record-keeping), you may request the deletion of your personal data. We will confirm the scope of any erasure we can lawfully perform.
You can withdraw consent for marketing communications at any time by contacting our support team. Your gameplay and account data will continue to be processed as necessary for service delivery.
Six principles guide how Lucky365 handles personal data — applied consistently across every player interaction on the Platform.
We collect only the data that is necessary for a specific, clearly defined purpose. We do not collect data "just in case" — every data point has a documented reason.
Lucky365 processes the minimum amount of personal data required to deliver its Services, meet legal obligations, and maintain platform security. No excess data collection.
We take reasonable steps to ensure that the personal data we hold is accurate and kept up to date. Players can update their profile information at any time through Account settings.
Personal data is retained only for as long as legally necessary or required by our gaming licence. Data that is no longer needed is securely deleted or anonymised.
Appropriate technical and organisational security measures are maintained at all times — including SSL encryption, access controls, 2FA support, and regular security testing.
This Privacy Policy is written in clear English and kept current. Lucky365 notifies players of material changes via their registered email address before any amendments take effect.
Your privacy is protected. Your data is secure. Your rights are respected. Now that you understand exactly how Lucky365 handles your personal information, you can enjoy your favourite games and sports betting knowing we have your back. Open to players aged 21 and above only.
For questions about your data, contact our support team via live chat — available 24/7 on Malaysian Standard Time. See our Responsible Gambling page for additional player protection tools.