Hari2Lucky Privacy Policy – Personal Data Protection for Malaysian Members

1 Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") is published by hari2lucky ("we", "Platform") and applies to all users of the website https://hari2lucky.ws and its related services. This Policy explains how hari2lucky handles your personal data from the moment you first access the platform until your account is closed.

Hari2lucky is committed to protecting members' personal data in accordance with the Personal Data Protection Act 2010 (PDPA Malaysia), the primary Malaysian law governing the processing of personal data in commercial transactions. We take a privacy-by-design approach — meaning data protection is built into our systems from the ground up, not bolted on as an afterthought.

This Policy is intended to ensure you have a full understanding of: what data we collect, why we need it, how it is used, who it may be shared with, how it is protected, and what your rights are regarding that data. Transparency is a core value at hari2lucky, and this Policy reflects our commitment to that value.

2 Types of Information We Collect

Hari2lucky collects various types of personal data depending on how you interact with our platform. Below are the main categories of data we collect:

2.1 Personal Identification Data

• Full name as shown on your Malaysian MyKad or passport
• National identity number (MyKad) or passport number
• Date of birth and gender
• Current residential address in Malaysia
• Malaysian mobile phone number
• Active email address

2.2 Financial & Transaction Data

• Malaysian bank account number or e-wallet account (Touch 'n Go, GrabPay, Boost, ShopeePay)
• Deposit and withdrawal history in MYR
• Transaction records via DuitNow and FPX (Maybank2u, CIMB Clicks)
• Hari2lucky deposit limits and account balance

2.3 Platform Usage Data

• Game history (slots, baccarat, blackjack, sports, live casino)
• Betting patterns and game preferences
• Access time, session duration, and usage frequency
• Device used (phone model, operating system, browser)

2.4 Technical Data

• IP address and approximate location based on IP
• Cookie data and related tracking technologies
• Error logs and technical diagnostic reports

3 How We Collect Your Data

Hari2lucky collects your personal data through three main channels:

• Directly from you — information you provide during the account registration process, KYC (identity verification) forms, first deposit, withdrawal requests, and interactions with customer support.
• Automatically during use — technical and usage data collected automatically via cookies, login sessions, and other tracking technologies while you use the hari2lucky platform.
• From trusted third parties — in certain cases, we may receive data from payment providers (to verify transactions), identity verification service providers, or trusted business partners, solely for legitimate platform operational purposes.

We do not purchase or obtain your personal data from sources unrelated to hari2lucky's operations. All data collection we carry out is for legitimate purposes and in accordance with PDPA 2010.

4 How We Use Your Personal Data

The personal data we collect is used for the following purposes, all of which are necessary for the safe and effective operation of the hari2lucky platform:

5 Sharing of Data with Third Parties

Hari2lucky does not sell, rent, or transfer your personal data to third parties for marketing purposes without your explicit consent. That said, in the course of operating the platform, we may share your data with the following parties under limited circumstances:

• Payment Providers — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX-supported banks (Maybank, CIMB, and others) to process deposits and withdrawals in MYR. This sharing is necessary and limited to the information required to complete each transaction.
• Game Providers — game providers such as Evolution, Pragmatic Play, and others may receive the minimum data necessary to deliver Live Casino, slots, and table game services.
• IT Service Providers — companies providing hosting, cybersecurity, and analytics services that help us operate the hari2lucky platform securely.
• Malaysian Authorities — we will disclose personal data to Malaysian government authorities where required by law, court order, or for the purposes of financial crime prevention.

All third parties that receive data from hari2lucky are bound by strict confidentiality agreements and are not permitted to use that data for any purpose other than those specified.

6 Data Storage & Security

Hari2Lucky invests in enterprise-grade security infrastructure to ensure your personal data is protected at all times. Key security measures we employ include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and hari2lucky's servers
• Passwords are stored using one-way hashing (bcrypt) — we have no ability to view your password
• Network segmentation and multi-layered firewall protection for core data servers
• Round-the-clock security monitoring with an intrusion detection system (IDS)
• Regular security audits by independent cybersecurity firms
• Role-based access control (RBAC) — hari2lucky staff can only access data required for their specific responsibilities
• Regularly scheduled encrypted data backups to multiple locations

Data Retention Period

We retain your personal data for as long as your account remains active on hari2lucky. Following account closure, we may retain certain data for the following additional periods in accordance with Malaysian legal requirements:

• Financial transaction data: Minimum 7 years (anti-money laundering compliance)
• Identity verification data (KYC): Minimum 5 years after account closure
• Customer support communication logs: 3 years
• Technical data and logs: 12 months

7 Cookies & Tracking Technologies

The hari2lucky platform uses cookies and similar tracking technologies to enhance your experience, maintain your login session, and analyse platform usage. We use several types of cookies:

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect your ability to log in and use the hari2lucky platform.

8 Your Rights as a hari2lucky Member

As a hari2lucky member and in accordance with Malaysia's PDPA 2010, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact us at support@hari2lucky.ws with the subject line "Personal Data Rights Request". We will process your request within 30 business days. Identity verification may be required before the request is actioned.

9 Protection of Children's Data

The hari2lucky platform is strictly for adults aged 18 and above. We do not knowingly collect, process, or store personal data of individuals under the age of 18. This is a firm commitment by hari2lucky that will not be compromised under any circumstances.

Should we discover that personal data belonging to a minor has been collected inadvertently, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect their child has registered on hari2lucky are encouraged to contact us promptly at support@hari2lucky.ws.

10 Links to Third-Party Sites

The hari2lucky platform may contain links to third-party websites or services in certain contexts. The hari2lucky Privacy Policy applies only to the hari2lucky platform itself and does not cover the privacy practices of any other websites you may visit through those links.

We are not responsible for the content, privacy practices, or security of third-party websites. We encourage you to read the privacy policy of every website you visit, especially before providing any personal information.

11 Amendments to This Privacy Policy

Hari2lucky reserves the right to amend this Privacy Policy from time to time to reflect changes in law, technology, or our operational practices. When significant amendments are made, we will notify you via:

• Prominent notifications displayed on the hari2lucky platform
• Email to the address registered to your account
• Update the "Last Updated" date at the top of this page

Your continued use of the hari2lucky platform after any amendments to this Privacy Policy take effect will be considered your acceptance of the revised version. We encourage you to review this page periodically to stay informed of how we handle your data.

12 Contact the hari2lucky Data Protection Officer

If you have any questions, concerns, or complaints about how hari2lucky handles your personal data, or if you wish to exercise any of your privacy rights, please contact the hari2lucky Data Protection Officer (DPO) through any of the following channels:

You also have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your privacy rights have been violated and we have been unable to resolve the matter to your satisfaction.