Your Privacy at luky72

Introduction

This Privacy Policy applies to the luky72 Platform accessible at luky72.net, including all associated subdomains, mobile-optimized pages, and any related services operated by luky72 (collectively, "the Platform"). It governs the collection, use, storage, disclosure, and protection of personal data provided by or collected from individuals who access or use the Platform ("you", "the Player").

By registering an account on the luky72 Platform, you acknowledge that you have read this Privacy Policy in full and that you consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Privacy Policy, you must not use the Platform.

This Privacy Policy should be read alongside the luky72 Terms & Conditions, which together form the complete agreement governing your use of the Platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail unless the matter is exclusively one of data protection, in which case this Privacy Policy shall prevail.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person — directly or in combination with other information available to luky72.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means luky72, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of luky72 under a written data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity and age verification process required before withdrawal privileges are activated on a Player Account.
• "Cookies" means small text files placed on your device by the Platform to store session and preference information as described in Section 10.

Data We Collect

luky72 collects Personal Data across the following categories. We collect only the minimum data necessary to deliver the services you request and to comply with our legal and regulatory obligations:

How We Collect Data

luky72 collects your Personal Data through the following channels:

4.1 Directly From You

The majority of Personal Data we hold about you is data you provide directly — when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact our support team, or update your account preferences.

4.2 Automatically Through Technology

When you access the Platform, our servers and analytics tools automatically collect certain Technical & Device Data (see the table in Section 3). This includes your IP address, device identifiers, and session data. This collection occurs regardless of whether you are logged in to your Account.

4.3 From Payment Processors

When you initiate a deposit or withdrawal via a local Indonesian bank (BCA, BRI, BNI, or Mandiri) or an e-wallet (OVO, DANA, GoPay, or ShopeePay), our payment processing partners may share transaction confirmation data with us, including the originating account reference and transaction timestamp. We do not receive or store your full bank account password or full card number.

4.4 From Third-Party Verification Providers

luky72 uses third-party KYC verification service providers to validate the identity documents you submit. These providers may return a structured verification result to us — typically a pass/fail status plus a confidence score — alongside a reference to the document type and issue country. The raw document image is retained by the KYC provider in accordance with their own data retention policy, which luky72 has reviewed and confirmed meets our standards prior to engagement.

4.5 From Cookies and Tracking Technologies

As described in Section 10, luky72 uses first-party cookies and, in limited contexts, third-party analytics pixels to understand how Players use the Platform and to detect fraudulent access patterns. You may manage your cookie preferences at any time through your browser settings.

Purpose of Processing

luky72 processes your Personal Data for the following specific purposes:

1. Account Creation and Management — to register your Account, authenticate your login sessions, and maintain accurate account records.
2. Age and Identity Verification — to confirm that you are at least 21 years of age and to verify your identity in compliance with our KYC obligations. luky72 operates a strict 21+ policy; we will not knowingly process data belonging to persons under 21.
3. Payment Processing — to process deposits and withdrawals in Indonesian Rupiah (IDR) through your nominated local bank account or e-wallet, and to maintain complete transaction records.
4. Anti-Money-Laundering (AML) and Fraud Prevention — to monitor transactions and gaming activity for patterns consistent with money laundering, identity fraud, multi-accounting, or other prohibited conduct, and to report suspicious activity to the relevant authorities where required by our licensing obligations.
5. Responsible Gaming — to monitor gaming behavior for signs of problem gambling, to enforce self-exclusion and cooling-off periods you activate through your Account dashboard, and to contact you proactively where our monitoring identifies a potentially harmful pattern.
6. Customer Support — to respond to your queries, resolve disputes, and maintain a record of support interactions for quality assurance purposes.
7. Platform Security — to detect, investigate, and prevent unauthorized access to your Account, and to protect the Platform from bots, scrapers, and other malicious automated actors.
8. Marketing and Promotions — to send you promotional communications, bonus offers, and personalized recommendations, where you have opted in to receive such communications. You may withdraw your marketing consent at any time by updating your Account preferences or contacting support.
9. Legal Compliance — to comply with obligations imposed by our international gaming license, applicable data protection laws, anti-money-laundering regulations, and any valid legal order issued by a court of competent jurisdiction.
10. Platform Improvement — to analyze aggregated usage patterns and technical performance data in order to improve the quality, speed, and reliability of the Platform for all Players.

Legal Basis for Processing

luky72 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity — processing required to perform the contract between you and luky72 (i.e., to operate your Account, accept bets, process payments, and deliver the services you have requested).
• Legal Obligation — processing required to comply with applicable law, including KYC identity verification, AML transaction monitoring, and retention of financial records.
• Legitimate Interests — processing necessary for the legitimate business interests of luky72, including fraud prevention, platform security, responsible gaming monitoring, and analytics, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit, freely withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Data Sharing & Third Parties

luky72 does not sell, rent, or trade your Personal Data to any third party for their independent marketing purposes. We share Personal Data only in the limited circumstances described below, and only to the minimum extent necessary:

7.1 Payment Processors

We share the transaction data necessary to execute your deposit or withdrawal instructions with our partnered Indonesian payment gateways and banking intermediaries. These processors act under strict contractual obligations and are permitted to use your data solely to execute the payment transaction.

7.2 KYC Verification Providers

We share your identity document images and registration data with accredited third-party KYC verification providers for the purpose of performing identity checks. These providers are contractually prohibited from using your data for any purpose other than the verification service.

7.3 Game Software Providers

When you play games powered by third-party studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft — certain session data (including your Player ID, bet amounts, and game outcomes) is transmitted to those providers' gaming servers for the purpose of delivering and fairly resolving the game. These providers operate under our platform licensing agreement and are not permitted to use your data independently.

7.4 Regulatory and Law Enforcement Authorities

luky72 may disclose Personal Data to regulatory bodies or law enforcement authorities where required to do so by a valid legal order, court judgment, or statutory obligation arising from our international gaming license. We will notify you of any such disclosure to the extent permitted by applicable law.

7.5 Corporate Transactions

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of luky72's assets, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

Data Retention

luky72 retains your Personal Data for as long as your Account remains active and for a defined period following Account closure, in accordance with our legal and regulatory obligations:

• Active Account Data — retained for the full duration of your Account's active status.
• Financial and Transaction Records — retained for a minimum of five (5) years following the date of the transaction, in compliance with international AML record-keeping standards.
• KYC Documents — retained for a minimum of five (5) years following Account closure or the last verification event, whichever is later.
• Support Communications — retained for three (3) years from the date of the interaction, to support dispute resolution and quality assurance.
• Marketing Data — retained until you withdraw your marketing consent, at which point it is deleted within 30 days.
• Technical and Device Logs — retained for twelve (12) months from collection, unless retained longer as part of an active security investigation.

Following expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymized so that it can no longer be associated with you as an individual.

Security Measures

luky72 implements a layered set of technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction:

• 256-Bit SSL/TLS Encryption — all data transmitted between your device and the luky72 Platform is encrypted in transit using industry-standard TLS 1.2 or higher protocols.
• Encrypted Data Storage — sensitive data fields including KYC document references and payment account identifiers are encrypted at rest using AES-256 encryption in our server infrastructure.
• Access Controls — access to Personal Data within luky72's internal systems is restricted on a strict need-to-know basis, controlled through role-based access permissions and audit logging.
• Two-Factor Authentication (2FA) — Players are strongly encouraged to enable 2FA on their Accounts. luky72 internal staff with access to Player data are required to use 2FA on all internal systems.
• Penetration Testing — the luky72 Platform undergoes regular third-party penetration testing to identify and remediate security vulnerabilities.
• Data Breach Response — in the event of a confirmed Personal Data breach that poses a risk to affected individuals, luky72 will notify affected Players and the relevant supervisory authority within the timeframes required by applicable law.

Cookies & Tracking Technologies

The luky72 Platform uses cookies and similar tracking technologies for the purposes described below. You may manage your preferences through your browser settings; however, disabling certain essential cookies may affect the functionality of your Account.

10.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They maintain your login session, remember your language and display preferences, and support security features such as CSRF protection. These cookies cannot be disabled without affecting core Platform functionality.

10.2 Analytics Cookies

luky72 uses first-party analytics tools to understand how Players navigate the Platform — which pages are visited most often, where users drop off during the registration flow, and how quickly pages load across different devices. This data is aggregated and anonymized before analysis. We do not use third-party behavioral advertising networks.

10.3 Security and Fraud Detection Cookies

Certain cookies and browser fingerprinting techniques are used to identify unusual access patterns that may indicate account takeover attempts, bot activity, or multi-accounting. This processing is based on luky72's legitimate interest in maintaining Platform security.

10.4 Managing Cookies

You may configure your browser to refuse all cookies or to alert you when a cookie is being set. Commonly used browsers — including Google Chrome, Mozilla Firefox, Microsoft Edge, and Safari — all provide cookie management settings in their privacy or security options. Note that clearing cookies will end your current login session.

Your Rights

Subject to applicable data protection law and our legal retention obligations, you have the following rights with respect to your Personal Data held by luky72:

• Right of Access — you may request a copy of the Personal Data luky72 holds about you at any time. We will respond within 30 days of receiving a valid request.
• Right to Rectification — if any Personal Data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to Erasure — you may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (e.g., we are required to retain financial and KYC records for at least 5 years regardless of an erasure request).
• Right to Restriction of Processing — you may request that we restrict processing of your Personal Data in certain circumstances, such as where you contest its accuracy or object to our legitimate interest basis.
• Right to Data Portability — you may request that we provide your Personal Data in a structured, commonly used, machine-readable format, where processing is based on your consent or on contractual necessity.
• Right to Object — you may object to processing based on our legitimate interests, including profiling for responsible gaming monitoring purposes. luky72 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent — where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our support team via live chat or email at support at luky72.net. We may need to verify your identity before processing your request. We will respond to all valid requests within 30 calendar days.

Minors

If luky72 discovers that Personal Data has been collected from a person under 21 years of age — whether through a misrepresentation at registration or otherwise — we will immediately close the associated Account, void all balances, and permanently delete the relevant Personal Data from our systems, except to the extent that retention is required by law for the investigation of the minor's access and any associated fraud.

If you believe a minor has registered an account on the luky72 Platform, please notify us immediately at support at luky72.net. We take all such reports seriously and will investigate and act on them within 24 hours of receipt.

Changes to This Privacy Policy

luky72 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date displayed at the top of this page.
• Send an email notification to the address registered to your Account, providing a summary of the key changes and a link to the updated Policy.
• Display a prominent notice on the Platform for a period of at least 14 days following publication of the updated Policy.

Your continued use of the Platform following notification of material changes to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should close your Account and cease using the Platform before the effective date of the updated Policy.

For minor, non-material changes — such as corrections of typographical errors or clarifications that do not alter the substance of our data processing practices — luky72 may update this Privacy Policy without sending individual notification. We recommend reviewing this page periodically to stay informed of our current practices.

Contact & Data Inquiries

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data by luky72, please contact us through the following channels:

When submitting a data subject rights request by email, please include your registered Account username and the email address associated with your Account so that we can verify your identity and locate your records efficiently. luky72 will not process data subject requests received without sufficient identifying information.