Last updated: 1 January 2026 | Applies to all lucky365 account holders and site visitors
lucky365 applies 256-bit SSL encryption to all data in transit and uses AES-256 encryption for data at rest. Your personal and financial information is stored on secured servers with restricted access, protected to a standard equivalent to regulated financial institutions.
lucky365 does not sell, rent, or trade your personal information to third parties for their independent marketing purposes. Data shared with service providers is limited to what is strictly necessary for the delivery of platform services and is governed by binding data processing agreements.
lucky365 recognises and upholds your data subject rights — including the right to access, correct, and request deletion of your personal data. Requests are handled within 30 days via the contact details provided in this Privacy Policy.
lucky365 collects only the personal data necessary for account management, identity verification, payment processing, regulatory compliance, and service improvement. We do not collect data that serves no lawful purpose relevant to the operation of the lucky365 platform.
lucky365 uses cookies for session management, fraud prevention, and platform analytics. We do not use cookies to build advertising profiles or to track your activity across unrelated third-party websites. Cookie categories and their purposes are detailed in Section 6 of this Policy.
lucky365 processes personal data in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and the data protection requirements imposed under its international gaming authority licence. Where laws conflict, the stricter standard applies.
Your Privacy Matters: This Privacy Policy ("Policy") describes how lucky365 ("the Company", "we", "us", "our") collects, processes, stores, and shares personal data when you use the lucky365 website at lucky365.lat and related services. By registering an account or using lucky365, you acknowledge that you have read and understood this Policy. Please read it carefully before using our platform.
1.1 lucky365 is committed to protecting the privacy and security of all personal data entrusted to us by players and site visitors. This Policy sets out our practices with respect to the collection, use, disclosure, and protection of personal information in connection with the lucky365 platform.
1.2 This Policy applies to all data subjects whose personal data is processed by lucky365, including registered account holders, prospective registrants, and general visitors to lucky365.lat. It applies regardless of how you access the platform — via desktop browser, mobile browser, or any other device.
1.3 This Policy should be read alongside the lucky365 Terms & Conditions, which govern the overall relationship between you and lucky365. Where this Policy and the Terms & Conditions address data processing matters and conflict, this Policy shall prevail.
2.1 For the purposes of applicable data protection legislation, including Malaysia's Personal Data Protection Act 2010 (PDPA), lucky365 is the data controller responsible for personal data collected through the lucky365 platform.
2.2 lucky365 operates under an international gaming authority licence. Our data processing obligations extend to those imposed under the regulatory framework governing that licence, in addition to the PDPA and any other applicable national legislation.
2.3 Questions regarding this Policy or lucky365's data processing practices may be directed to our Data Protection team via the contact details in Section 15 of this Policy.
lucky365 collects personal data through the following means: directly from you during registration and account use; automatically through your use of the platform; and from third parties such as payment processors and identity verification services. The categories of data collected include:
3.1 Registration Data: Full legal name; date of birth; residential address (including city, state, postcode); email address; contact number; username; and password (stored in hashed form only — we do not store plaintext passwords).
3.2 Identity Verification (KYC) Data: Government-issued photo identification (e.g., MyKad, passport); proof of residential address documents; selfie photographs for liveness verification where required; and payment method verification documents. KYC data is processed to comply with our anti-money laundering (AML) obligations and regulatory licence requirements.
3.3 Financial Data: Deposit and withdrawal transaction records; payment method identifiers (e.g., last four digits of bank account, e-wallet identifiers); transaction amounts and timestamps; and currency (MYR). Full financial account numbers are not stored by lucky365 — payment processing is handled by our certified payment service providers.
3.4 Gaming Activity Data: Betting history, game session records, wagering amounts, outcomes, bonus usage, and responsible gaming tool settings (e.g., deposit limits, session timers, self-exclusion status).
3.5 Technical Data: IP address; device type and operating system; browser type and version; session timestamps; pages visited; referral source; and geolocation (country-level, derived from IP address).
3.6 Communications Data: Records of correspondence with lucky365 customer support, including live chat transcripts, support ticket records, and email communications.
lucky365 processes personal data for the following purposes:
5.1 Contractual Necessity: The majority of data processing by lucky365 is necessary for the performance of the contract between you and lucky365 — specifically, the provision of online betting, casino, and gaming services as described in the Terms & Conditions.
5.2 Legal Obligation: Processing for KYC, AML compliance, age verification, responsible gaming obligations, and regulatory reporting is carried out pursuant to legal and regulatory obligations binding on lucky365.
5.3 Legitimate Interests: Processing for fraud prevention, platform security, and aggregate analytics is carried out on the basis of lucky365's legitimate interests in operating a secure, compliant, and commercially viable platform, provided such interests are not overridden by your data protection rights.
5.4 Consent: Processing for direct marketing communications is conducted on the basis of your consent, given at registration or subsequently via account settings. Consent is freely given, specific, and may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.
6.1 lucky365 uses cookies and similar tracking technologies (including web beacons and local storage) to operate and improve the platform. The following categories of cookies are used:
6.2 lucky365 does not use third-party advertising cookies or behavioural tracking cookies that track your activity across unrelated external websites.
6.3 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the lucky365 platform.
7.1 lucky365 does not sell personal data. We share personal data only in the following circumstances:
7.2 All third-party service providers who process personal data on behalf of lucky365 are required to enter into data processing agreements that impose PDPA-equivalent data protection standards.
8.1 Due to the international nature of online gaming infrastructure, personal data processed by lucky365 may be transferred to and stored in countries outside Malaysia. Where such transfers occur, lucky365 ensures that appropriate safeguards are in place, including contractual protections equivalent to the standard required under the Malaysian PDPA.
8.2 By using lucky365, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia where lucky365's data processing infrastructure or service providers are located, subject to the safeguards described in this section.
9.1 lucky365 retains personal data for as long as is necessary for the purposes described in this Policy, including for the performance of the contract with you, compliance with legal obligations, and resolution of disputes.
9.2 Account data is retained for the duration of your lucky365 account and for a minimum period of 5 years following account closure, in compliance with AML and gaming regulatory record-keeping requirements.
9.3 KYC documentation is retained for a minimum of 5 years from the date of the most recent relevant transaction or account closure, whichever is later, in accordance with applicable AML legislation.
9.4 Gaming activity and financial transaction records are retained for a minimum of 5 years for regulatory compliance and dispute resolution purposes.
9.5 Following the expiry of the applicable retention period, personal data is securely deleted or anonymised.
Under the Malaysian Personal Data Protection Act 2010 (PDPA) and, where applicable, equivalent international data protection frameworks, you have the following rights in respect of your personal data processed by lucky365:
Note on Data Deletion: Due to AML, KYC, and gaming regulatory requirements, lucky365 may be unable to delete certain categories of personal data prior to the expiry of mandatory retention periods, even upon request. We will advise you of this at the time of any deletion request and delete all data not subject to mandatory retention.
To exercise any of the above rights, please contact the lucky365 Data Protection team at the address provided in Section 15. Requests will be acknowledged within 3 business days and resolved within 30 days.
11.1 lucky365 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
11.2 Notwithstanding the above, no data transmission over the internet or method of electronic storage is 100% secure. While lucky365 takes all reasonable and industry-standard precautions, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, lucky365 will notify affected players and relevant regulatory authorities as required by applicable law.
12.1 lucky365 services are strictly for persons aged 21 and above. lucky365 does not knowingly collect personal data from persons under 21 years of age. All registration attempts are subject to age verification, and any account found to be operated by a person under 21 will be immediately closed with any associated data deleted, subject to mandatory regulatory retention requirements.
12.2 If you believe a minor has registered an account or provided personal data to lucky365, please contact us immediately at the address in Section 15 so that appropriate action can be taken without delay.
13.1 The lucky365 platform may contain links to third-party websites, including payment providers, game suppliers, and regulatory bodies. This Privacy Policy applies only to the lucky365 platform at lucky365.lat. lucky365 has no control over the privacy practices of third-party websites and is not responsible for their content or data practices.
13.2 We encourage you to review the privacy policies of any third-party websites you visit via links from the lucky365 platform before providing personal data to those sites.
14.1 lucky365 reserves the right to amend this Privacy Policy at any time to reflect changes in law, regulatory requirements, or our data processing practices. Material changes will be communicated to registered players via the email address on file or through an in-platform notification, with at least 7 days' notice prior to the amended Policy taking effect.
14.2 The current version of this Policy is always available at lucky365.lat/privacy-policy. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of lucky365 following notification of changes constitutes acceptance of the updated Policy.
15.1 For all privacy-related enquiries, data subject rights requests, or concerns regarding lucky365's data processing practices, please contact the lucky365 Data Protection team:
lucky365 Data Protection
Email: [email protected]
Subject line: Privacy / Data Protection Request
Response time: Within 3 business days for acknowledgement; up to 30 days for full resolution.
15.2 If you are not satisfied with lucky365's response to a privacy concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
Now that you know how lucky365 protects your data, explore the platform with confidence. Sports betting, live casino, and slots — all in MYR, for Malaysian players. 21+ only.
By using lucky365 you confirm acceptance of our Privacy Policy and Terms & Conditions. 21+ only.