Official Policies Updated: 1 January 2026

Privacy Policy Lucy555 – Malaysian User Data Protection

At lucy555, your privacy is not just a legal obligation — it is a core value we uphold in every decision we make. This policy clearly explains how we handle your personal data.

Compliant with Malaysia's PDPA
256-bit SSL Encryption
No Sale of Data to Third Parties

Our Commitment To Your Privacy

Six data protection principles at the core of every lucy555 platform operation.

Military-Grade Data Encryption

All data transmitted between your device and lucy555 servers is protected by 256-bit SSL encryption. Stored data is further encrypted using AES-256, the same standard used by leading financial institutions.

No Sale of Data to Third Parties

Lucy555 has never and will never sell, rent or disclose your personal data to any third party for marketing or commercial purposes without your explicit consent.

Fully Compliant with Malaysia's PDPA

The lucy555 privacy policy is designed and implemented in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Your rights as a data subject are fully protected and respected.

Data Control in Your Hands

You have the full right to access, correct, transfer, or request deletion of your personal data at any time. This process can be initiated directly through your account settings.

Secure & Minimal Data Storage

We only retain data that is strictly necessary for platform operations. Data that is no longer needed is deleted according to a pre-defined retention schedule and is never kept longer than required.

Full Control Over Communications

You may withdraw consent to receive any marketing communications at any time through your account notification settings or by contacting our support team.

This Privacy Policy is effective from 1 January 2026 and constitutes a legally binding agreement between you and lucy555 regarding the collection and processing of personal data. By using our platform, you confirm that you have read and understood this policy.

1Introduction & Scope of This Policy

Lucy555 is committed to protecting the privacy of every user on our platform to the highest standard. We understand that in today's digital world, the decision to entrust your personal data to a platform is not something to be taken lightly. That is why we take this responsibility with the utmost seriousness.

This Privacy Policy details the types of personal data we collect, the purposes for collection, how we store and protect it, who may have access to it, and what your rights are as the data owner.

This policy applies to all lucy555 platform users, including website visitors without an account, registered members, promotion participants, and users of our Android and iOS mobile apps.

2Types of Personal Data We Collect

2.1 Data You Provide Directly

When you register an account, use our services, or contact our support, you may provide the following data:

Data Type Example Primary Purpose
Identity Data Full name, date of birth, IC number / passport number Identity verification (KYC), legal compliance
Contact Data Email address, phone number Account communications, customer support
Financial Data Bank account details, e-wallet information Processing of deposits and withdrawals
KYC Data Document photos, verification selfie AML compliance, identity verification
Communication Data Live chat records, support emails Quality assurance, complaint resolution

2.2 Data Collected Automatically

When you use our platform, our systems automatically record certain technical information required to ensure the platform operates properly and securely:

  • IP address and general location information (not precise GPS location)
  • Device type, operating system and browser version
  • Pages visited, session duration and navigation patterns
  • Game session logs (time, game type, wagering amounts)
  • Technical performance data and app error reports

Lucy555 mobile app does not collect your precise GPS location data, contact lists, private messages, or any other data from your phone that is unrelated to the casino app's functionality.

3How We Use Your Personal Data

The personal data we collect is used for the following purposes, and only for these purposes:

  • Service Provision: Manages your account, processes deposits and withdrawals, and provides access to games.
  • Identity Verification & KYC: Meets legal compliance requirements relating to user identity verification.
  • Platform Security: Detects and prevents fraud, money laundering and other illegal activities.
  • Service Improvement: Analyses usage patterns to improve the user experience and platform reliability.
  • Service Communications: Sends important information about your account, changes to terms and security notices.
  • Customer Support: Helps resolve any enquiries, complaints or technical issues you report.
  • Legal Compliance: Fulfils reporting obligations to authorities in accordance with applicable law.

We do not use your data to make automated decisions that could have a material impact on your rights or interests without human intervention.

4Legal Basis for Data Processing

The processing of your personal data by lucy555 is carried out on one or more legal bases as set out under Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Consent: You provided explicit consent during account registration.
  • Contract: Processing is necessary to perform the agreement between you and lucy555.
  • Legal Obligation: Processing is necessary to comply with a legal obligation applicable to us.
  • Legitimate Interest: Processing is necessary for our legitimate interests, such as fraud prevention and platform security, provided those interests do not override your rights and freedoms.

5Data Sharing With Third Parties

Lucy555 does not sell, rent or trade your personal data. However, in the following limited circumstances, we may share your data with third parties who are bound by strict confidentiality agreements:

5.1 Trusted Service Providers

We work with third-party service providers that help us operate the platform, including game providers (such as Evolution Gaming and Pragmatic Play), payment processors, cloud service providers and identity verification companies. All these providers are bound by data processing agreements that require them to protect your data to the same standards we uphold.

5.2 Legal Requirements & Authorities

We may disclose your data to government authorities or law enforcement bodies when required to do so by law, court order or valid legal process. This includes reporting required under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.

In the event of any unplanned data exposure resulting from a security breach, lucy555 is committed to notifying affected users within 72 hours after we become aware of the incident, in line with international best practices.

6Data Security Measures

The security of your personal data is the highest priority at lucy555. We implement multiple layers of technical and organisational protection to keep your data safe:

  • Encryption in transit: All data transmitted between your browser/app and our servers is protected by TLS 1.3 and 256-bit SSL encryption.
  • Encryption at rest: Data stored in our databases is encrypted using AES-256.
  • Access control: Only staff who require access to specific data for their work purposes are permitted to do so, based on the principle of least privilege.
  • Penetration testing: Our platform undergoes regular security testing by independent security experts.
  • 24/7 Monitoring: Our threat detection system operates around the clock to identify any suspicious activity.
  • Two-factor authentication: 2FA is available for all user accounts as an additional security layer.

7Data Retention Period

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Our general data retention guidelines are as follows:

  • Active account data: Retained for as long as your account is active, plus 5 years after account closure (AML legal requirement).
  • Financial transaction records: Retained for 7 years in accordance with Malaysia's financial legal requirements.
  • KYC Documents: Retained for 5 years after the business relationship ends.
  • Support communication logs: Retained for 2 years for quality assurance purposes.
  • Analytics data: Anonymised usage data may be retained longer for statistical purposes.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered.

8Cookies & Tracking Technologies

The lucy555 platform uses cookies and similar technologies to ensure the platform functions correctly and to deliver a better user experience. The types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
  • User Preference Cookies: Saves preferences such as language, theme and game settings to streamline your experience on future visits.
  • Analytics Cookies: Helps us understand how users interact with the platform for improvement purposes. This data is collected in aggregate and anonymised form.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect platform functionality.

9Your Rights as a Data Subject

Under Malaysia's PDPA and international best practices, you have the following rights regarding your personal data held by lucy555. All requests can be submitted through your account settings or by contacting our privacy team.

10Cross-Border Data Transfers

In operating our platform, your personal data may be processed or stored on servers located outside Malaysia. This occurs primarily when we use international cloud service providers or global game providers.

Every such data transfer is carried out with adequate protection safeguards in place, including data processing agreements that require the receiving party to uphold data protection standards equivalent to or higher than Malaysia's PDPA requirements.

We ensure that any cross-border data transfers are carried out only to countries or entities that provide an adequate level of data protection, and are always subject to strict contractual safeguards.

11Changes to This Privacy Policy

Lucy555 reserves the right to update this Privacy Policy from time to time to reflect changes in how we handle data, changes in applicable law, or improvements to our data protection practices.

Any material changes will be communicated to you via an in-platform notification or email to your registered address at least 7 days before the changes take effect. The "Updated" date at the top of this page always reflects the latest version of this policy.

We encourage you to review this Privacy Policy periodically. Your continued use of the lucy555 platform after any changes take effect will be considered your acceptance of the latest version of this policy.

12How to Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights as a data subject, or have concerns about how we handle your personal data, please contact us through the following channels:

Privacy Email
[email protected] – Dedicated to privacy enquiries and data rights.
Live Chat Support
Accessible 24/7 directly within the lucy555 platform. Response time under 3 minutes.
FAQ Centre
Review FAQ page for quick answers to common questions about privacy and your account.

We aim to respond to all privacy-related enquiries within 15 working days from the date of receipt. For more complex requests, we will keep you informed of progress within that period.

Effective: 1 January 2026 | Version: 3.1 | Compliant with: Malaysia PDPA 2010

Rights You as the User

Under Malaysia's PDPA, you have six key rights regarding your personal data, all of which lucy555 fully respects.

Right of Access

You have the right to receive a copy of the personal data we hold about you. Data access requests are processed within 15 working days.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data through your account profile settings.

Right to Erasure

You may request deletion of your personal data under certain circumstances, subject to applicable legal retention obligations.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time, without needing to provide a reason.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

Right to Withdraw Consent

You may withdraw your consent to data processing at any time without affecting the validity of processing carried out before the withdrawal.

To exercise any of the rights above, contact our privacy team at [email protected] or via live chat on the platform. We aim to process all requests within 15 business days and will not charge any fee for reasonable requests.

Your Data is Safe With Lucy555

With 256-bit SSL encryption, Malaysia PDPA compliance, and our unwavering commitment to privacy, you can play with peace of mind on the lucy555 platform. Register today and enjoy a safe, trusted online casino experience.

SSL 256-bit
No Data Sales
PDPA Compliant
24/7 Support

Terms and conditions apply. Play responsibly. 18+ only.

Bahasa Melayu