LuckySpin Privacy Policy – Malaysian Player Data Protection

This Privacy Policy is published by LuckySpin ("we", "Platform") and applies to all players who register for or use LuckySpin's services through our website or mobile application at luckyspin.express.

LuckySpin offers a wide range of online entertainment services to Malaysian players — including slots, live casino, baccarat, table games, progressive jackpots, Sports Betting on the Malaysia Super League, EPL, BWF badminton, and esports. In providing these services, we need to collect and process certain personal information from you.

This Policy clearly sets out: the types of data we collect, why we collect it, how we use it, who can access it, how long we retain it, and what rights you have over that data. We are committed to managing all such information with full integrity and in accordance with applicable Malaysian law.

LuckySpin collects information from you through several means — information you provide directly, information generated as you use the platform, and information from legitimate third-party sources. Below are full details of the types of data we collect:

We do not collect unnecessary information or data beyond the scope described above. If you do not provide the required information during registration (such as your full name and phone number), we may be unable to provide certain LuckySpin services to you.

LuckySpin uses your personal data only for legitimate and transparent purposes. Below is a full explanation of how we use each type of data we collect:

• Member identity verification and eligibility confirmation – We use your name, date of birth, and identification documents to verify that you meet the minimum age requirement of 18 years and any other eligibility criteria required to use the LuckySpin platform.
• Deposit and withdrawal processing – Your payment method details (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX via Maybank2u or CIMB Clicks) are used solely to process your financial transactions securely and accurately.
• Platform service provision – Your game data and activity history allow us to accurately display your betting records, account balance, and personal statistics within your LuckySpin account.
• Fraud prevention and security – Technical information such as IP addresses and device data is used to detect and prevent unauthorised access, bonus abuse, and other suspicious activity that could compromise the security of your account.
• Customer Support – Your communication records allow the LuckySpin support team to better understand your issues and provide more effective, consistent assistance.
• Legal compliance – Certain data is required to fulfill the legal and regulatory obligations applicable to LuckySpin's operations, including anti-money laundering (AML) and know your customer (KYC) requirements.
• Platform Upgrade – Aggregated usage data (not individual personal data) helps us understand how players use the platform and make relevant improvements for a better gaming experience.
• Marketing communications – If you have agreed to receive marketing communications, we will send you information about LuckySpin promotions, bonuses, and updates that may be of interest to you. You can unsubscribe at any time.

LuckySpin does not use your data for any purpose beyond those stated above without first obtaining your consent.

LuckySpin does not sell, rent, or trade your personal information to third parties for commercial purposes under any circumstances. However, there are specific situations where we may need to share your data with the parties listed below, and only for clearly defined, limited purposes:

• Payment processors – Transaction information is shared with your chosen payment provider (such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX) solely to process your deposits and withdrawals.
• Game software providers – Anonymous player identifiers (not your full name) are shared with game providers to enable gameplay and track jackpot wins.
• Legal authorities – Where required by a court order, directive from Malaysian authorities, or applicable law, LuckySpin will disclose the necessary information to the relevant authorities. We will notify you of any such disclosure unless we are prohibited from doing so by law.
• Technical service providers – Technical infrastructure service providers (such as server hosting and cybersecurity services) that help operate the LuckySpin platform may have limited access to certain data in the course of their work. All such providers are bound by strict confidentiality agreements.

Protecting your personal information is a priority we never compromise on. LuckySpin implements multiple layers of technical and procedural security measures to ensure your data remains protected at all times:

• SSL 256-bit Encryption – All data transmitted between your browser or app and LuckySpin's servers is encrypted using 256-bit SSL/TLS protocol — the same encryption standard used by leading financial institutions in Malaysia.
• Stored data encryption – Sensitive information such as payment details is stored in databases encrypted with the latest encryption algorithms. LuckySpin staff cannot view this data in its original form.
• Multi-layered access controls – Only staff who genuinely require access to specific data to carry out their duties are permitted to do so. All access to data systems is logged and regularly monitored.
• Continuous security monitoring – LuckySpin's systems are monitored 24 hours a day to detect any suspicious activity, intrusion attempts, or unauthorised access.
• Regular security testing – LuckySpin conducts regular penetration testing and security vulnerability assessments by independent cybersecurity experts to ensure our systems remain up to date against the latest threats.
• Secure data backup – Your data is regularly backed up to a separate, secure location to ensure service continuity and data recovery in the event of any unexpected technical incident.

While we take all reasonable steps to protect your data, no online system can be guaranteed 100% secure against every threat. You are also responsible for keeping your LuckySpin account password secure and not sharing it with anyone.

LuckySpin retains your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable Malaysian law. The following is a general guide to retention periods for the various types of data we hold:

• Active account data – For as long as your account remains active on LuckySpin, we retain all personal information and game data associated with that account.
• After account closure – Following account closure (whether at your request or for other reasons), LuckySpin retains financial transaction records and account activity for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• Support communication data – Customer support conversation records are retained for 2 years for reference and service quality improvement purposes.
• Technical data & logs – Technical logs such as IP address records and login session data are retained for 12 months for security and investigation purposes where necessary.
• Marketing data – If you have opted out of marketing communications, we retain a record of your preference to ensure we do not send you unwanted communications in the future.

Once the designated retention period has ended and there is no legal requirement to retain the data further, LuckySpin will securely and irreversibly delete or anonymise your data.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and LuckySpin's privacy commitments, you have the following rights regarding your personal data:

LuckySpin uses cookies and similar tracking technologies to enhance your gaming experience on our platform. Cookies are small text files stored in your web browser when you visit our website.

We use several types of cookies for different purposes:

• Essential Cookies – Required for core LuckySpin platform functions such as maintaining your login session and remembering your game preferences. Without these cookies, the platform will not function properly and they cannot be disabled.
• Performance Cookies – Collects information on how you use the LuckySpin platform (pages visited, time spent, errors encountered) to help us improve platform performance and usability. This information is collected in aggregate and does not identify you personally.
• Functional Cookies – Remembering your preferences such as language, display settings, and game preferences to deliver a more personalised experience each time you return to LuckySpin.
• Analytics Cookies – Helps us understand overall usage patterns so we can make better decisions about platform development, content, and promotions relevant to Malaysian players.

You can manage and delete cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality of the LuckySpin platform and your gaming experience.

In the course of operating the LuckySpin platform, your personal data may be transferred to and stored on servers that could be located outside Malaysia. Any such transfer is carried out with adequate safeguards to ensure your data remains protected at a level equivalent to that provided in Malaysia.

LuckySpin ensures that all cross-border data transfers are made only to parties that:

• Located in a country with an adequate level of data protection, or
• Have signed a binding data processing agreement with protection standards equivalent to Malaysia's PDPA, or
• Subject to internationally recognised protection mechanisms that ensure the continuous security of your data

If you would like to learn more about the safeguards we use for cross-border data transfers, please contact us at support@luckyspin.express.

LuckySpin reserves the right to modify this Privacy Policy from time to time to reflect changes in our data practices, updates to applicable law, or developments in the services we offer to Malaysian players.

When we make significant changes to this policy, we will:

• Displaying a clear notice on the LuckySpin homepage for at least 14 days before any changes take effect
• Sending email notifications to all active registered members
• Updating the "Last Updated" date displayed at the top of this page

Your continued use of the LuckySpin platform after any changes take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or how LuckySpin handles your personal data, please do not hesitate to contact us. Our team is ready to assist and always prioritises the privacy concerns of our players.