Lucky 99 Privacy Policy – Personal Data Protection for Malaysian Players

In this Privacy Policy, the following terms carry the meanings as defined below:

• "Personal Data" refers to any information that can be used to identify you as an individual, whether directly or indirectly, including your name, identification number, address, phone number, email address and financial information.
• "Processing" refers to any operation performed on Personal Data, including collection, storage, use, disclosure, transfer and deletion.
• "Member" or "You" refers to any individual who has registered for or used the Lucky 99 platform.
• "Lucky 99", "We" or "Platform" refers to the entity that operates lucky99-app.net and all its services.

This Privacy Policy applies to all personal data collected through the Lucky 99 website, mobile application (if applicable), email communications, customer support interactions, and any other channels we use to engage with Members.

Lucky 99 collects various types of personal data depending on how you interact with our platform. The table below summarises the categories of data we collect:

We may also collect personal data that you voluntarily provide through survey forms, referral programmes or social media interactions related to Lucky 99.

Lucky 99 uses the personal data collected for the following purposes, all within the context of providing online sports betting and casino services in Malaysia:

• Account Management: Creating and maintaining your Lucky 99 account, processing registration, verifying identity and managing your profile.
• Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and withdrawals to your registered account.
• Platform Security: Detecting and preventing fraud, money laundering, bot usage, duplicate account registration and other suspicious activity.
• Service Communications: Sending important notices regarding your account, changes to terms, suspicious activity and platform updates.
• Customer Support: Processes enquiries, complaints and support requests submitted to the Lucky 99 support team.
• Marketing & Promotions: Sending relevant promotional offers, bonuses and new game information — subject to your marketing communications preferences.
• Analytics & Improvement: Analyses usage patterns to improve the player experience on the Lucky 99 platform.
• Legal Compliance: To fulfil Malaysia's legal compliance obligations, including anti-money laundering (AML) requirements and customer fund enhancement (KYC).

Lucky 99 does not sell, lease or trade your personal data to any third party for their own marketing purposes. However, in the course of operating our business lawfully and securely, we may share data in the following limited circumstances:

• Payment Service Providers: Information required to process transactions is shared with approved payment processors such as TNG, GrabPay, DuitNow and FPX providers, under strict confidentiality agreements.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, and other partners may receive non-personally identifiable game statistical data for the purpose of game integrity verification.
• Identity Verification Services: Third-party KYC providers who assist us in verifying Member identities for legal compliance purposes.
• Legal Authorities: Law enforcement bodies, courts, or Malaysian government agencies where required by a valid legal order.
• Fraud Prevention: Sharing necessary information with relevant parties to investigate or prevent fraud, money laundering or other financial crimes.

Lucky 99 continually invests in security infrastructure to protect Members' personal data against unauthorised access, loss, alteration or disclosure. Key security measures we employ include:

• 256-Bit SSL Encryption: All communications between your browser and Lucky 99's servers are encrypted using 256-bit TLS/SSL protocol — the same technology used by leading financial institutions worldwide.
• Financial Data Segregation: Member funds are held in accounts fully segregated from the company's operational funds.
• Two-Factor Authentication (2FA): 2FA options via SMS or authenticator app are available for all Lucky 99 accounts.
• 24/7 Monitoring: Automated monitoring systems operate around the clock to detect unusual activity or unauthorised access attempts.
• Internal Access Controls: Access to Members' personal data within the Lucky 99 organisation is restricted to staff who require it, based on the principle of least privilege.
• Regular Security Audits: Penetration testing and security audits are carried out periodically by independent third parties.

Lucky 99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session and processing transactions securely. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymised information about how you use the platform to help us identify areas for improvement.
• Functional Cookies: Saves your preferences such as language settings and favourite games to deliver a more personalised experience.
• Analytics Cookies: Used to analyse platform traffic patterns and usage for product improvement purposes.

You can manage or delete cookies through your web browser settings. Please note, however, that disabling essential cookies may affect the functionality of the Lucky 99 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Lucky 99:

To exercise any of the above rights, please contact Lucky 99 by email at support@lucky99-app.net. We will respond within 14 business days and resolve your request within the timeframe prescribed by the PDPA.

Lucky 99 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by Malaysian law. The following are our general data retention guidelines:

• Active Account Data: Retained for as long as your Lucky 99 account remains active and in use.
• Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysia's tax and AML compliance requirements.
• KYC Records & Identity Verification: Retained for 5 years from the account closure date or the date of the last transaction, whichever is later.
• Platform Activity Log: Retained for 2 years for security and dispute resolution purposes.
• Support Communications: Retained for 3 years from the date of interaction.
• Marketing Data: Retained until you withdraw consent or request deletion.

Upon expiry of the retention period, your personal data will be securely deleted or anonymised so that it can no longer identify you as an individual.

The Lucky 99 platform is intended exclusively for users aged 18 years and above only. We do not knowingly collect personal data from individuals under the age of 18.

Should we discover that personal data of a child has been collected without our knowledge, we will immediately take the following steps:

• Suspending the associated account immediately.
• Delete all collected personal data.
• Refunds any deposits made to the original payment method.
• Reporting incidents to relevant authorities where required.

Lucky 99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data collection practices, new legal requirements, or platform improvements. All amendments take effect upon publication on the website unless a different date is specified.

For material and significant amendments, Lucky 99 will notify Members via:

• A prominent notice on the platform's main page upon login.
• Email to the address registered to your account.
• Update the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically. Your continued use of the Lucky 99 platform after any amendments are published constitutes your acceptance of the updated policy.

Lucky 99 takes all privacy and data protection complaints seriously. If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact us:

We are committed to resolving all privacy complaints within 30 business days. If you are not satisfied with how we have handled your complaint, you have the right to escalate it to the Department of Personal Data Protection Malaysia (JPDP) or the relevant enforcement authority.