luckin33 Privacy Policy

luckin33 ("we", "us", "our", "the Platform") operates the online gaming platform accessible at luckin33.win. We are committed to protecting the privacy and personal data of all individuals who use the luckin33 platform, including registered players, prospective players who browse the site, and individuals who contact our support team.

This Privacy Policy ("Policy") describes the categories of personal data luckin33 collects, the purposes for which that data is processed, the legal bases that apply to each processing activity, how long we retain data, and the rights available to you as a data subject.

By registering for a luckin33 account, using the Platform, or providing personal data to us in any form, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree, you should refrain from using the luckin33 Platform.

This Policy should be read alongside the luckin33 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on the specific subject of personal data, this Privacy Policy shall prevail.

Registration Data. When you create a luckin33 account, we collect your registered phone number, chosen password (stored in hashed form — never in plain text), and any additional registration fields completed at sign-up. This data is necessary to create and maintain your account.

Identity Verification Data. Where luckin33 is required to verify your identity for regulatory compliance, anti-money laundering (AML) purposes, or to process a withdrawal above a threshold amount, we may collect: full legal name, date of birth, nationality, government-issued identification number, and a copy of a valid identification document such as a national identity card or passport.

Financial Data. We collect data relating to transactions conducted on the Platform, including deposit amounts, deposit timestamps, payment method types (e.g. Touch n Go eWallet, Boost, Maybank), transaction reference numbers, and withdrawal requests. We do not store full payment card numbers or e-wallet PINs.

Gaming Activity Data. We maintain records of your gaming activity on luckin33, including games played, bet amounts, game outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

Technical Data. When you access luckin33, our servers automatically collect certain technical data, including your IP address, browser type and version, device type, operating system, screen resolution, and the referring URL. This data is used for security monitoring, fraud prevention, and platform performance analysis.

Communications Data. If you contact luckin33 support via live chat, the content of those conversations, including any personal information you voluntarily provide, is retained to facilitate support, resolve disputes, and improve service quality.

luckin33 collects personal data through the following means:

• Directly from you: when you register an account, complete identity verification, make deposits or withdrawals, claim promotions, or contact customer support;
• Automatically through the Platform: via server logs, session tracking, and cookies placed on your device when you browse luckin33.win;
• From payment providers: when processing deposits and withdrawals, payment service providers such as Touch n Go eWallet, Boost, GrabPay, Maybank, and CIMB may share transaction confirmation data with luckin33 for reconciliation purposes;
• From identity verification partners: where third-party document verification services are used to validate government-issued identification, those services may return verification results and document metadata to luckin33.

luckin33 uses the personal data we collect for the following purposes:

• Account Management: to create, maintain, and secure your luckin33 account, including authenticating your identity when you use luckin33 Login;
• Transaction Processing: to process deposits, credit winnings to your wallet, and action withdrawal requests via your chosen payment method;
• Regulatory Compliance: to meet our AML, Know Your Customer (KYC), and responsible gaming obligations under applicable gaming authority requirements;
• Fraud Prevention & Security: to detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, and other prohibited conduct as described in our Terms & Conditions;
• Customer Support: to respond to your enquiries, resolve disputes, and maintain a record of support interactions;
• Responsible Gaming: to monitor gaming patterns that may indicate problem gambling behaviour and to apply responsible gaming tools or restrictions where appropriate;
• Platform Improvement: to analyse aggregate usage data in order to improve platform performance, game selection, and the overall player experience;
• Promotional Communications: where you have not opted out, to send you relevant offers, promotions, and platform updates via your registered contact details.

Each personal data processing activity conducted by luckin33 rests on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the agreement between you and luckin33, including account creation, transaction processing, and delivering the games and services you have requested;
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including AML legislation, gaming authority regulations, and financial record-keeping obligations;
• Legitimate Interests: Processing carried out in pursuit of luckin33's legitimate business interests, such as fraud detection, security monitoring, platform improvement, and responsible gaming monitoring, where those interests are not overridden by your data protection rights;
• Consent: Processing based on your freely given, specific, and informed consent, primarily in the context of direct marketing communications. You may withdraw consent at any time by contacting luckin33 support.

luckin33 may share your personal data with third parties only in the following limited circumstances:

• Payment Service Providers: transaction data is shared with payment partners (Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, and USDT TRC20 processors) solely as necessary to process your deposits and withdrawals;
• Game Studio Partners: certain gameplay data may be shared with licenced game studios and live dealer platform operators to facilitate game delivery, RNG certification, and dispute resolution;
• Identity Verification Services: where applicable, identification documents may be shared with certified third-party KYC verification providers operating under confidentiality obligations;
• Regulatory Authorities: luckin33 may be required to disclose player data to gaming regulatory authorities, financial intelligence units, or law enforcement agencies pursuant to applicable legal obligations or valid legal process;
• Corporate Transactions: in the event of a merger, acquisition, or sale of assets involving luckin33, player data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom luckin33 shares personal data are required to maintain the confidentiality of that data and to use it only for the specific purposes for which it was shared.

luckin33.win uses cookies and similar tracking technologies to enhance your browsing experience, maintain session state, support security functions, and analyse aggregate traffic patterns. The following categories of cookies are used:

• Essential Cookies: Required for the Platform to function correctly. These include session cookies that maintain your luckin33 Login state and security tokens. These cannot be disabled without impairing Platform functionality.
• Performance Cookies: Used to collect anonymous information about how visitors use the Platform, such as which pages are visited most frequently and whether error messages are encountered. This data is used in aggregate form to improve platform performance.
• Preference Cookies: Used to remember your Platform settings and preferences, such as language selection or display preferences, so that they are retained between sessions.

Most web browsers allow you to manage cookie preferences through browser settings. Blocking essential cookies may impair your ability to log in and use the luckin33 platform. Blocking performance and preference cookies will not affect your ability to play but may affect your browsing experience.

luckin33 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active Accounts: Personal data associated with active luckin33 accounts is retained for the duration of the account relationship and for a period of five (5) years following account closure, in accordance with standard AML and gaming regulatory record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years from the transaction date for regulatory and audit purposes.
• Support Communications: Live chat and written support records are retained for a period of three (3) years from the date of the interaction.
• Technical Logs: Server and access logs are retained for a maximum of twelve (12) months unless an active security investigation requires longer retention.

Following the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to any individual player.

luckin33 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. These include:

• All pages on luckin33.win, including the luckin33 Login page, are served exclusively over HTTPS with SSL/TLS encryption;
• Passwords are stored using one-way cryptographic hashing — luckin33 does not store passwords in recoverable plain-text form;
• Access to personal data held by luckin33 is restricted on a need-to-know basis through role-based access controls;
• Financial transaction data is handled through PCI-compliant payment processing channels;
• Security monitoring is conducted continuously to detect anomalous access patterns or potential data breaches.

While luckin33 takes reasonable precautions to protect your personal data, no transmission over the internet or data storage system is entirely immune from security risk. Players are encouraged to contribute to account security by using a strong, unique password and logging out of shared devices after each session.

As a data subject, you have the following rights in relation to personal data held by luckin33:

• Right of Access: You may request confirmation of whether luckin33 holds personal data about you and, if so, a copy of that data along with information about how it is processed;
• Right to Rectification: You may request correction of personal data that is inaccurate or incomplete;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations;
• Right to Restrict Processing: You may request that luckin33 limit the processing of your personal data in certain circumstances, for example while a correction request is being assessed;
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a copy of your personal data in a structured, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. We will cease direct marketing promptly upon receipt of an objection;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact luckin33 customer support via live chat or email at [email protected]. We will respond to data rights requests within thirty (30) calendar days. Complex requests may require an extended response period, in which case you will be notified of the revised timeline.

luckin33 is strictly an adult platform. Individuals under the age of 21 are prohibited from registering, accessing, or using any part of the luckin33 Platform. luckin33 does not knowingly collect personal data from persons under 21 years of age.

If luckin33 becomes aware that personal data has been collected from a person under 21, the relevant account will be suspended immediately, any deposited funds will be returned to their source, and the data will be deleted in accordance with our data retention procedures. If you have reason to believe that a minor is using a luckin33 account, please notify us immediately via live chat or at [email protected].

luckin33 may process or store personal data on servers or through service providers located outside Malaysia. Where such international transfers occur, luckin33 takes steps to ensure that your personal data is afforded a level of protection equivalent to that required under applicable data protection law.

Transfers to service providers in other jurisdictions are governed by contractual data protection obligations. By using the luckin33 Platform, you consent to the transfer of your personal data to servers and processors in other jurisdictions where such transfers are necessary for the delivery of the Platform's services.

luckin33 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated to registered players via the contact details held on their account or via a notice published on the Platform.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the luckin33 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data luckin33 holds about you, please contact us through the following channels:

• Live Chat: Available 24/7 directly from the luckin33 Platform — the fastest way to reach our support team;
• Email: [email protected] — please allow up to two (2) business days for a written response to email enquiries.

luckin33 takes all data privacy enquiries seriously and will respond substantively to all valid requests within the timeframes stated in this Policy.