Official Documents

Privacy Policy luck7 —
Our Commitment to Protecting Your Data

At luck7, your privacy is not merely a legal obligation — it is the foundation of the trust we build together with you. This document clearly explains how we collect, use and protect the personal information of every member.

Last Updated: 1 January 2026

256-bit SSL Encryption

All data transmitted between your device and luck7 servers is protected with industry-standard 256-bit SSL encryption.

Data Not Sold

Luck7 has never and will never sell your personal data to any third party for commercial purposes.

Full Control in Your Hands

You have the right to access, correct or request deletion of your personal data at any time.

Full PDPA Compliance

All luck7 data management practices are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).


This Privacy Policy describes luck7's personal data management practices. By using our platform, you agree to the collection and use of information as described in this document. Please read it carefully.

01 Introduction

Luck7 values the privacy of every member who uses our platform. As an online entertainment platform operating in Malaysia, we understand that your trust is our most valuable asset — and that trust begins with transparency about how we handle your personal data.

This Privacy Policy was drafted to comply with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data management. It applies to all users who access or use luck7 services, including website visitors, registered members and any party that interacts with our platform in any manner.

We believe that clear, easy-to-understand information is better than lengthy, complex legal documents. That is why we have written this Privacy Policy in plain language that is accessible to all Malaysian users, without sacrificing legal accuracy.

Our Core Principles: Your data is collected only for legitimate purposes, stored securely, and will not be used for any other purpose without your consent.

02 Personal Data We Collect

Luck7 only collects data that is strictly necessary to provide our services safely and efficiently. The following are the categories of data we collect:

Identity Information

Full name, identity card number, date of birth, gender, and identity document images for the KYC verification process.

Contact Information

Email address, mobile phone number and residential address used for account communications and transaction verification.

Financial Information

Bank account numbers, digital wallet details (Touch 'n Go, GrabPay, DuitNow), and records of all deposit and withdrawal transactions.

Platform Activity Data

Game records, betting history, login activity, session duration, and interactions with luck7 platform features.

Device Technical Data

IP address, browser type, operating system, device model and general geolocation data for security and verification purposes.

Support Communications

Records of conversations with the customer support team, complaints, feedback, and any written communications through the platform.

We do not collect sensitive information such as medical records, religious beliefs or political views. All data collected is limited to what is genuinely necessary for the platform's operations.

03 How We Use Your Data

The personal data we collect is used exclusively for the following purposes only:

  • Identity verification and KYC: Verify your eligibility as a member, including age verification and jurisdictional checks.
  • Account management: Create, maintain, and secure your luck7 account.
  • Transaction processing: Process deposits, withdrawals, and bonus payments securely and accurately.
  • Fraud prevention: Detect and prevent suspicious activity, money laundering, and platform abuse.
  • Service communications: Send transaction notifications, account updates, and important security information.
  • Legal compliance: Meet reporting and record-keeping obligations required by relevant authorities.
  • Platform improvement: Analyze usage patterns to improve the overall player experience.
  • Responsible gaming: Monitoring playing habits to identify players who need responsible gaming support.
We only send you marketing communications if you have given explicit consent during registration or through your account settings. You may withdraw this consent at any time.

04 Data Storage and Security

Luck7 uses a multi-layered security infrastructure to ensure your data is always protected from unauthorised access, breaches, or misuse.

  • All data is stored on servers protected with AES-256 encryption and accessed only by authorised personnel.
  • Communications between your device and the luck7 platform are protected with TLS 1.3 protocol up to date.
  • A 24/7 threat monitoring system is active to detect any suspicious access attempts.
  • Account passwords are stored in hashed form using the bcrypt algorithm — we ourselves cannot view your password.
  • Data backups are performed regularly to separate data centers to ensure service continuity.

Your personal data will be retained for as long as your account is active, or as long as necessary to fulfil the stated purposes. After account closure, certain data may be retained for an additional period to meet legal and regulatory requirements — typically not exceeding seven (7) years.

While we take all reasonable precautions, no digital security system can guarantee 100% protection. You are also responsible for keeping your own account password secure.

05 Data Sharing with Third Parties

Luck7 does not sell, rent, or trade your personal data to any third party. However, there are limited situations where we may need to share certain information:

  • Payment providers: Transaction information that needs to be shared with banks, Touch 'n Go, GrabPay, and other payment providers to process your deposits and withdrawals.
  • Technology service providers: Companies that help us operate the platform — including cloud hosting, cybersecurity and technical support — are bound by strict confidentiality agreements.
  • Regulatory authorities: When required by law, court order or a legitimate request from a law enforcement agency.
  • Fraud prevention: Limited information sharing with industry bodies to prevent fraud and money laundering across platforms.

In all of the above cases, only the minimum necessary information will be shared, and all third parties are bound by confidentiality obligations as stringent as our own internal standards.

06 Cookies and Tracking Technologies

Luck7 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored on your device when you visit our website.

You can manage or delete cookies at any time through your browser settings. Please note that deleting essential cookies may affect the core functionality of the luck7 platform.

07 Your Rights as a Data Subject

Under Malaysia's PDPA and luck7's internal policies, you have the following rights regarding your personal data:

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Request correction of any inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your data, subject to applicable legal requirements.

Right to Restriction

Request restriction of your data processing in certain legally permitted situations.

Right to Portability

Receive your data in a structured, machine-readable format for portability.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

To exercise any of the rights above, please contact our privacy team via live chat on the platform or by email at [email protected]. We will process your request within 30 business days.

Certain rights may be limited in specific situations — for example, we may be unable to delete data required to fulfil legal obligations. In such cases, we will clearly explain the reasons to you.

08 Child Data Protection

The luck7 platform is exclusively for individuals aged 18 and above. We do not intentionally collect or process personal data from children under the age of 18.

If we discover that personal data of an individual under the age of 18 has been inadvertently collected, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who find that their child has registered on our platform are requested to contact our support team immediately.

If you suspect that a minor is using the luck7 platform, please contact us immediately at [email protected] so we can take swift action.

09 Third-Party Links and Services

The luck7 platform may contain links to third-party websites or services in certain contexts. This Privacy Policy applies solely to the luck7 platform and does not cover the privacy practices of any third party.

Luck7 is not responsible for the content, privacy policies, or security practices of any third-party websites or services. We encourage you to read the privacy policy of each platform you visit separately.

Third-party payment providers integrated with luck7 — such as local banks, Touch 'n Go, and GrabPay — have their own privacy policies governing how they handle your transaction data on their end.

10 Amendments to This Privacy Policy

Luck7 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements.

Any material amendments will be communicated to all registered members via in-platform notifications and/or email at least 7 days before those amendments take effect. For minor changes that do not affect your fundamental rights, we will update the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically. Continued use of the luck7 platform after the effective date of any amendments constitutes your acceptance of the updated policy.

11 Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, luck7's Data Protection Officer (DPO) team is ready to assist you.

  • Email: [email protected]
  • Live Chat: Available 24/7 via the luck7 platform
  • Response Time: Within 3 business days for general enquiries; 30 days for formal data rights requests

If you are not satisfied with our response, you also have the right to lodge a complaint with the Malaysian Personal Data Protection Department or the relevant regulatory authority.


A Platform That Respects Your Privacy

We don't just comply with the law — we go a step further to ensure your data is truly secure and your privacy is fully respected.

Minimum Data Processing

Luck7 only collects data that is strictly necessary. No excessive information is requested, and every data field we collect has a clear and legitimate justification.

Multi-Layered Security

256-bit SSL encryption, two-factor authentication (2FA), real-time threat monitoring, and strict access controls ensure your data is protected at every level.

Full Transparency

We tell you exactly what data is collected, why it is collected and how it is used. No hidden agenda, no misleading fine print.

Malaysia PDPA Compliance

All luck7 data management practices are designed to fully comply with Malaysia's Personal Data Protection Act 2010 and international regulatory standards.

Control in Your Hands

Through your account settings, you can manage marketing preferences, update personal information, and submit data management requests quickly without long wait times.

Dedicated Privacy Team

Luck7 has a dedicated Data Protection Officer (DPO) to handle all privacy-related enquiries and requests promptly and professionally.


Join luck7 — The Platform That Protects Your Data and Privacy

With high-standard data protection, transparent terms and 24/7 customer support, luck7 is the platform of choice for Malaysian players who value trust as highly as entertainment.

PDPA-Protected Data 256-bit SSL Encryption Licensed Platform
Bahasa Melayu