Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by Luck365 ("the Company", "we", "us", "our"), the operator of the online sports betting and casino platform at luck365.cam and all associated subdomains and mobile applications ("Platform"). It describes how Luck365 collects, processes, stores, and protects the personal data of individuals ("Players", "Users", "you") who access or use the Platform.

Luck365 is committed to handling personal data responsibly and in compliance with applicable data protection legislation. This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between Luck365 and its players, and our Responsible Gambling guidelines.

By registering for an account on Luck365 or by continuing to use the Platform after the publication date of this Policy, you acknowledge that you have read and understood its contents. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact us to request account closure.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

3. Data We Collect

Luck365 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

Luck365 does not collect special categories of sensitive personal data (such as health information, racial or ethnic origin, or political opinions) except where explicitly required to fulfil responsible gambling obligations — for example, recording a self-exclusion request.

4. How We Collect Your Data

4.1 Direct Collection

The majority of personal data held by Luck365 is provided directly by you during the registration process, when updating your account profile, when contacting customer support, or when completing KYC verification. You choose what information to provide; however, certain information (such as your legal name, date of birth, and email address) is mandatory for account creation.

4.2 Automated Collection

When you access or use the Luck365 Platform, certain technical and usage data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser type, and patterns of platform use. For more detail on cookies specifically, see Section 10.

4.3 Third-Party Sources

Luck365 may receive personal data about you from third-party sources in limited circumstances, including from:

• KYC and identity verification service providers engaged to confirm the validity of documents you submit;
• Payment processors and financial institutions (including DuitNow, FPX, Maybank, CIMB, and Public Bank) in connection with transaction processing and fraud prevention;
• Fraud and responsible gambling databases, where Luck365 participates in cross-operator self-exclusion schemes.

5. Data Processing & Use

Luck365 processes your personal data for the following purposes:

5.1 Account Management

To create, verify, maintain, and where necessary close your player account, including verifying your identity and age (21+ requirement) as part of the KYC process.

5.2 Transaction Processing

To process deposits and withdrawals via supported Malaysian payment methods (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank), including currency verification and fraud checks in MYR.

5.3 Platform Operation & Improvement

To operate, maintain, and improve the technical performance of the Platform, personalise your experience, and develop new features based on aggregated usage analytics.

5.4 Regulatory Compliance

To fulfil legal obligations including anti-money laundering (AML) checks, Know Your Customer (KYC) verification, tax reporting where applicable, and responding to lawful requests from regulatory authorities.

5.5 Responsible Gambling

To monitor account activity for indicators of problem gambling, to apply and enforce deposit limits, loss limits, session controls, cooling-off periods, and self-exclusion restrictions requested by players or imposed by Luck365.

5.6 Customer Support

To respond to enquiries submitted via live chat, WhatsApp, or email, and to maintain records of support interactions for quality assurance and dispute resolution purposes.

5.7 Marketing & Promotions

To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive marketing communications. You may opt out of marketing at any time through your account settings or by contacting support. Opting out does not affect service-related communications.

5.8 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity, collusion, multi-accounting, and other breaches of our Terms & Conditions. This includes sharing flagged account data with payment fraud networks where legally permitted.

6. Legal Basis for Processing

Luck365 relies on the following legal bases for processing personal data:

• Contractual necessity — processing required to fulfil our obligations under the Terms & Conditions you accepted at registration, including account operation and payment processing.
• Legal obligation — processing required to comply with applicable laws and regulations, including AML requirements, KYC obligations, and responses to regulatory enquiries.
• Legitimate interests — processing for purposes such as fraud prevention, platform security, customer support quality assurance, and internal analytics, where those interests are not overridden by your data protection rights.
• Consent — processing for purposes such as marketing communications and optional platform personalisation features, where you have given specific, informed consent. Consent may be withdrawn at any time without affecting processing carried out prior to withdrawal.

7. Data Sharing & Disclosure

Luck365 does not sell your personal data to third parties. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection agreements:

7.1 Payment Service Providers

Transaction data is shared with payment processors facilitating deposits and withdrawals on the Platform, including operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, and participating Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong Bank), as required to complete your requested transactions.

7.2 Identity Verification Providers

Documents submitted for KYC verification are processed by contracted third-party verification services. These providers act as data processors under written agreements and are prohibited from using your data for any purpose other than verification on behalf of Luck365.

7.3 Hosting & Infrastructure Providers

Personal data is stored on servers operated by contracted infrastructure providers. These providers act as data processors and do not have access to your data beyond what is technically necessary for storage and availability.

7.4 Legal & Regulatory Authorities

Luck365 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or where we reasonably believe that disclosure is necessary to protect the rights, property, or safety of Luck365, its players, or the public.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of Luck365's business, personal data held about players may be transferred to the acquiring entity, subject to the same data protection obligations described in this Policy.

8. Data Retention

Luck365 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified individual.

9. Data Security

Luck365 implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and Luck365 servers;
• Encryption at rest for sensitive personal data stored in Luck365 databases, including financial data and verification documents;
• Access controls limiting internal access to personal data to employees and contractors who require it to perform their job functions;
• Two-factor authentication (2FA) available to all player accounts and mandatory for internal administrator access;
• Regular security audits and penetration testing conducted by independent third-party security firms;
• Incident response procedures to detect, contain, and report data security incidents in a timely manner.

Notwithstanding these measures, no method of data transmission or storage over the internet is completely secure. Luck365 cannot guarantee the absolute security of personal data but commits to implementing reasonable and appropriate safeguards at all times. You are responsible for maintaining the security of your own account credentials.

10. Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the Luck365 Platform. They allow the Platform to recognise your device, remember your preferences, and collect usage analytics. Similar technologies include web beacons, pixels, and local storage objects.

10.2 Categories of Cookies We Use

• Strictly necessary cookies — required for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies — remember your preferences (e.g., language, display settings) to improve your experience on subsequent visits.
• Analytics cookies — collect anonymised data about how players use the Platform, helping us identify areas for improvement. Luck365 uses self-hosted analytics tools; data is not shared with third-party advertising networks.
• Security cookies — assist in fraud detection and prevention by identifying unusual access patterns.

10.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain Platform features. Luck365 does not currently respond to Do Not Track browser signals.

11. User Rights

As a player whose personal data is processed by Luck365, you have the following rights in relation to that data. Requests may be submitted to our data protection team using the contact details in Section 16.

Luck365 will respond to verified data rights requests within 30 calendar days of receipt. Complex or multiple requests may require up to 60 days, in which case we will notify you of the extended timeline.

12. Minors & Age Verification

The Luck365 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data from persons under the age of 21.

Age verification is a mandatory step in the account registration and KYC process. Accounts found to belong to individuals under 21 will be immediately suspended, any winnings forfeited, and the original deposit returned to the payment method used, subject to verification.

13. Third-Party Services & Links

The Luck365 Platform may reference or integrate third-party services, including payment gateways operated by Malaysian financial institutions (Maybank, CIMB, Public Bank, Hong Leong Bank) and e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay). When you interact with these third-party services, their own privacy policies and data handling practices apply. Luck365 is not responsible for the privacy practices of third-party service providers beyond the scope of the data processing agreements we hold with them.

Live casino games streamed on the Platform are operated by third-party studio providers. While Luck365 shares only the minimum necessary data with studio providers to facilitate gameplay (such as account identifiers and bet values), players should be aware that these providers operate under their own regulatory frameworks and privacy obligations.

14. International Data Transfers

Luck365 primarily processes player data within the Southeast Asian region. In certain circumstances, personal data may be transferred to and processed in countries outside Malaysia, including where infrastructure providers or KYC verification partners maintain processing facilities.

Where personal data is transferred internationally, Luck365 ensures that appropriate safeguards are in place, including contractual clauses requiring data processors to maintain data protection standards equivalent to those described in this Policy. Transfers to third-party processors are governed by written data processing agreements in all cases.

15. Policy Amendments

Luck365 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. When material changes are made, we will notify registered players by email and/or by displaying a prominent notice on the Platform for a period of at least 14 days prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this document. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Continued use of the Platform following the publication of a revised Policy constitutes acceptance of the changes.

16. Contact & Data Protection Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how Luck365 handles your personal data, please contact our data protection team using the following details. All enquiries are handled in English, Bahasa Melayu, and Mandarin.

For additional information about your account, your rights as a player, or our responsible gambling tools, please also refer to our FAQ and Responsible Gambling pages.