lucky999 Platform Privacy Notice

This page describes what we collect when you use lucky999 and how we keep that data protected. When you register for an account, deposit funds, or place wagers, you share personal information with us. We treat that information as sensitive and apply standard security practices to prevent unauthorized access, misuse, or disclosure.

Our privacy approach centres on transparency and minimal collection. We collect only the information necessary to verify your identity, process your payments, comply with anti-money-laundering regulations, and operate our platform fairly. We do not sell your data to third parties. We do not use your gaming history for marketing purposes without your consent. Your control over your information extends to requesting deletion (subject to legal retention obligations) and understanding exactly how we process your data.

This notice applies to all lucky999 members across supported jurisdictions. Our services are available only where local law permits. You are responsible for verifying that your use of lucky999 complies with your jurisdiction's applicable law.

What Data We Collect on lucky999

We collect information in four categories. First, registration data: your legal name, date of birth, phone number, and email address. We require this information to create your account and contact you about account matters. Second, identity verification data: government-issued ID documents (national ID card, driver's license, or passport). We collect these to verify your identity and comply with KYC (Know Your Customer) regulations required in your jurisdiction.

Third, transaction data: all deposits, withdrawals, and wagers you place on lucky999. We record the date, time, amount, and game or market associated with each transaction. We also record your account balance, promotional credits, and tier status. We retain transaction data for a minimum of three years for accounting and regulatory purposes. Fourth, device and access data: your IP address, browser type, device identifier, and approximate location based on IP geolocation. We collect this to detect fraudulent access attempts and enforce our terms.

We do not collect biometric data, video surveillance of your play sessions, or audio recordings. We do not monitor your conversations outside our platform. We do not track your browsing behaviour on other websites. We do not purchase data about you from third-party data brokers.

How We Use Your Data on lucky999

We use your registration and identity data to verify your account, process your deposits and withdrawals, and comply with anti-money-laundering regulations required in your jurisdiction. During account creation, we verify your email by sending you a code; you confirm receipt to prove email ownership. During identity verification, we compare your uploaded ID document against your registration name and date of birth; if information matches, we mark your account verified.

We use your transaction data to calculate your account balance, determine your tier status, calculate weekly cashback, and settle game outcomes. We use this data to detect abuse—for example, if we identify multiple accounts operated by the same person, we may suspend all linked accounts. We use your device and access data to detect and prevent fraud, enforce our terms against prohibited activities, and protect platform security.

We do not use your data to send unsolicited marketing messages without your prior consent. We do not use your gaming history to profile your behaviour or predict your future play patterns for internal marketing purposes. We do not share your data with third-party advertisers or data brokers. Our use of your data is strictly operational—enabling your account to function and protecting our platform from abuse.

Payment Processing and Third-Party Processors

When you deposit or withdraw funds, your transaction flows through payment processors connected to DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank partners (mobile banking, local payment, online payment, e-wallet). We do not store your payment credentials—card numbers, wallet passwords, or bank account details. Instead, we generate a unique reference code and share it with your chosen payment method; you complete the transaction in your wallet or bank app.

Payment processors collect and process payment data according to their own privacy policies. We do not control how payment processors use your data. However, these processors are subject to payment-card industry standards and banking regulations that require them to protect your financial information. We recommend reviewing the privacy policies of your chosen payment method to understand their data practices.

We do not see your full payment details. Our system records that you initiated a deposit via mobile banking or a withdrawal to local payment, but we do not receive your account credentials or full transaction details. Payment processors maintain their own security standards separate from our platform.

Data Retention and Your Rights on lucky999

We retain your registration and contact information for the lifetime of your account plus seven years after closure for regulatory compliance. We retain your identity documents (KTP, passport scans) for a minimum of seven years per anti-money-laundering regulations. We retain transaction data for a minimum of three years for accounting purposes. Device and access logs are retained for 90 days unless a dispute or investigation requires longer retention.

You have the right to request access to all personal data we hold about you. You may request a download of your data in portable format. You may request correction of inaccurate information. You may request deletion of your data (subject to legal retention obligations); for example, we cannot delete your KYC documents if they must be retained under law, but we can anonymize other data upon request.

To exercise these rights, contact our support team through your account or via email. We will verify your identity and process your request within 14 business days. If your request conflicts with legal obligations (e.g., you request deletion of KYC documents during an anti-money-laundering hold period), we will explain the legal basis for retention and provide a timeline for when deletion can occur.

Access Right

You may request a complete copy of all personal data we hold about you in portable format.

Correction Right

You may request correction of inaccurate registration or account information we hold.

Deletion Right

You may request deletion of your data, subject to legal retention obligations (e.g., KYC documents may be retained 7 years).

Portability Right

You may request your data in a standard format suitable for transfer to another service provider.

Cookies and Tracking Technologies

We use cookies on our platform to maintain your login session, remember your preferences, and track anonymous usage patterns to improve our interface. A cookie is a small file your browser stores; when you return to lucky999, your browser sends the cookie back to us, allowing us to recognize your session without requiring you to log in repeatedly.

Essential cookies are necessary for the platform to function—they maintain your logged-in status and prevent you from being logged out unexpectedly. We use these cookies without requesting additional consent because they are required for basic platform operation. Analytics cookies track anonymous data about how users navigate our site—which pages are visited most, how long users stay, what browsers they use. This data helps us improve our interface, but it does not identify you personally.

We do not use tracking cookies to follow your behaviour across other websites. We do not permit third-party advertisers to place tracking cookies on our platform. If you wish to disable cookies, you may do so through your browser settings; however, disabling essential cookies may prevent the platform from functioning normally.

Data Security and Encryption on lucky999

We employ standard security practices to protect your data. All communication between your browser and our servers uses SSL encryption (HTTPS), indicated by the padlock icon in your browser's address bar. This encryption prevents third parties from intercepting your login credentials or transaction details during transmission. Your registration data, identity documents, and transaction history are stored in encrypted databases accessible only to authorized staff.

We do not store payment credentials on our servers. We implement access controls restricting database access to necessary personnel only. We conduct periodic security assessments to identify and remediate vulnerabilities. However, no security measure is perfect; if you believe your account has been compromised, contact support immediately to change your password and review your account activity.

Your password should be strong (uppercase, lowercase, numbers, symbols) and unique to lucky999. We do not share passwords via email; we will never ask for your password through support channels. If you forget your password, use the "Password Reset" function to generate a reset code sent to your registered email address.

Data Localization and Jurisdictional Considerations

Our servers may be located outside your jurisdiction. Data transferred internationally is protected by encryption during transit. We comply with data-protection regulations in the jurisdictions where we operate. If you are accessing lucky999 from Jakarta, Surabaya, Bandung, Medan, or Semarang, you acknowledge that your data may be processed and stored in data centres outside Indonesia.

By using lucky999, you consent to this international data transfer. If you do not consent, you should not use our platform. We maintain the same security and privacy standards across all jurisdictions; international processing does not reduce the protection applied to your information.

Your Contact Rights and Policy Updates

If you have questions about this privacy notice or wish to exercise your rights (access, correction, deletion), contact our support team through your lucky999 account or visit our FAQ page for additional guidance. We will respond to privacy inquiries within 14 business days. For disputes about our privacy practices, you may escalate to our compliance team through the Terms & Conditions dispute-resolution process.

We may update this privacy notice periodically as our practices evolve or legal requirements change. We will notify you of material changes via email at least 14 days before they take effect. Continued use of your account after the update date constitutes acceptance of the updated notice. If you do not accept updated terms, you may close your account before the change takes effect.

Our commitment to protecting your privacy is fundamental to how we operate lucky999. We collect only necessary data, use it only for legitimate operational purposes, and apply industry-standard security practices to prevent misuse or unauthorized disclosure. By understanding this notice, you gain clarity on how your information flows through our platform and what rights you retain over that information.