Privacy Policy luck7 – Your Data, Our Responsibility

1. Introduction

Luck7 ("we", "Platform" or "luck7.bar") is committed to protecting the privacy of all members and users who use our services. This Privacy Policy explains in detail how we collect, process, store and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering an account or using any luck7 service, you agree that your personal data will be processed as described in this Privacy Policy. If you do not agree with any part of this policy, we recommend contacting our support team before continuing to use the platform.

This Privacy Policy applies to all luck7 services, including the official website, mobile app (Android & iOS), and all our official communication channels. We review and update this policy from time to time to ensure it reflects current practices and complies with applicable legal changes.

2. Types of Personal Data We Collect

Luck7 only collects data that is strictly necessary to provide you with a safe, seamless and quality service. The following are the categories of data we collect:

3. How We Use Your Data

Every piece of data we collect is used for a legitimate and clearly defined purpose. luck7 uses your personal data for the following:

• Account Management: Creating, verifying, and maintaining your member account, including password recovery and profile information updates.
• Transaction Processing: Processing all deposits, withdrawals, and other financial transactions securely and accurately.
• Identity Verification (KYC): Verifying member identity to comply with regulatory requirements and prevent fraud and money laundering.
• Platform Security: Detecting and preventing fraudulent activity, unauthorized access, and other security threats to your account.
• Customer Support: Processing your inquiries, complaints, and assistance requests more effectively.
• Service Communications: Sending transaction notifications, security updates, and important information related to your account.
• Promotions & Marketing: With your consent, to send bonus offers, promotions, and the latest campaign information (withdrawable at any time).
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and provide appropriate assistance.
• Legal Compliance: Complying with applicable legal obligations, regulatory requirements, and court orders.
• Service Improvement: Analyzing usage data (in anonymized format) to improve the functionality and user experience of the luck7 platform.

Luck7 will not use your data for any purpose other than those stated above without obtaining your consent first.

4. Data Sharing & Disclosure

Luck7 does not sell or disclose your personal data to third parties for marketing or commercial purposes. However, under certain limited circumstances, we may share your data with the following parties:

• Payment Service Providers: Payment gateways and banks that process your financial transactions require the necessary information to complete payments securely.
• Identity Verification Providers: Accredited third-party KYC services assist us in verifying member identities in accordance with regulatory requirements.
• Regulatory Authority: When required by law or upon a formal request from a legitimate authority, we will disclose the necessary information.
• Technical Service Providers: Companies that provide the IT infrastructure, cloud hosting and cybersecurity services required for platform operations.
• Auditors & Legal Advisors: In circumstances requiring internal investigation or a legitimate legal process.

All third parties we engage are bound by strict confidentiality agreements and are only permitted to use your data for specifically agreed purposes.

5. Personal Data Security

Luck7 invests seriously in security infrastructure to ensure your personal data is always protected. The key security measures we employ include:

• 256-bit SSL encryption for all data transmitted over the network.
• Data-at-rest encryption for sensitive information stored in our database.
• Two-factor authentication (2FA) for stronger account protection.
• 24/7 security monitoring with an automated intrusion detection system.
• Regular security audits conducted by independent, certified third parties.
• Role-based access control (RBAC) ensuring only authorized personnel can access sensitive data.
• A comprehensive incident response procedure to address any security breaches promptly.

While we take all reasonable precautions, no security system is entirely perfect. You are also responsible for keeping your luck7 account password and login credentials secure. Do not share your password with anyone and always log out of your account when using a shared device.

6. Cookies & Tracking Technologies

Luck7 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
• Performance Cookies: Helping us understand how users interact with the platform for continuous improvement purposes.
• Functional Cookies: Saving your preferences such as language, theme, and other settings for a more personalized experience.
• Analytics Cookies: Collecting usage data in anonymized format to help us understand usage trends and improve our services.

You can manage your cookie settings through your web browser preferences at any time. Disabling certain cookies may affect the functionality of some luck7 platform features.

7. Your Rights as a Data Subject

As a luck7 member, you have certain rights regarding your personal data under Malaysia's PDPA. luck7 fully respects and facilitates the exercise of these rights:

To exercise any of the above rights, please contact the luck7 customer support team via email or in-app live chat. We will process your request within 14 business days.

8. Data Retention Period

Luck7 retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by law. General data retention guidelines are as follows:

• Active Account Data: For as long as your account remains active on the luck7 platform.
• Post-Account Closure Data: Minimum 5 years after account closure to comply with legal and regulatory compliance requirements.
• Financial Transaction Records: Minimum 7 years in line with Malaysia's financial legal requirements.
• KYC Documents: Throughout your active membership period and a minimum of 5 years after account closure.
• Security Logs: Retained for 12 months for security investigation and fraud detection purposes.
• Communication Data: Customer support logs are retained for 3 years for reference and service improvement purposes.

Once the defined retention period has expired, your personal data will be securely deleted or anonymised in accordance with established procedures.

9. Changes to This Privacy Policy

Luck7 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements or service improvements. When any significant changes are made, we will:

• Displaying a clear notice on the luck7.bar homepage for a minimum of 30 days.
• Sending email notifications to all registered members informing them of the changes.
• Updating the "Last Updated" date at the top of this page.

Continued use of the luck7 platform after the effective date of any changes will be considered your acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account by contacting our customer support.

10. Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, the luck7 data protection team is ready to assist.