Privacy Policy hari2lucky — Your Personal Data Protection

1 Privacy Policy Introduction & Scope

Welcome to the hari2lucky Privacy Policy. This document explains in detail how hari2lucky ("we", "Platform", "company") collects, uses, stores, discloses, and protects your personal data when you use our platform — whether through the hari2lucky.win website or our mobile app available for Android and iOS.

User privacy is more than a legal obligation for hari2lucky — it is a core value we have upheld since day one of the platform's operation. We understand that your trust in us is our most valuable asset, and we take every necessary step to ensure your personal data always remains in safe hands.

This Privacy Policy applies to all users of the hari2lucky platform, including unregistered visitors, registered members, VIP members, and all individuals who interact with any hari2lucky service in any capacity. By continuing to use our platform, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy.

2 Personal Data We Collect

Hari2lucky collects various types of personal data to ensure our services run smoothly, securely, and meet the needs of every user. The following are the categories of data we collect:

2.1 Personal Identification Data

• Full name as stated on official identification card
• Identification card number (MyKad) or passport number
• Date of birth and gender
• Current residential address
• Active mobile phone number
• A valid and active email address

2.2 Financial & Transaction Data

• Bank account number and registered bank name
• Deposit and withdrawal history
• In-platform transaction records including wagering and wins
• Registered digital wallet information

2.3 Technical & Usage Data

• IP address and IP-based geographic location
• Device type, operating system, and browser version
• Login history and in-platform activity
• Gaming session data including games played and session duration
• Cookie data and related tracking technologies

Below is a summary of the data types, purposes of collection, and the relevant legal basis:

3 How We Collect Personal Data

Hari2lucky collects users' personal data through several key identified channels:

3.1 Directly From You

• Account registration — information you provide when filling in the registration form
• KYC Verification — supporting documents you upload for identity verification purposes
• Customer support interactions — information you share via Live Chat, email, or WhatsApp
• Profile update — changes to your information that you make yourself in your account settings
• Feedback & Surveys — feedback and suggestions you voluntarily provide

3.2 Automatically

• Platform activity logs — every action on the platform is automatically logged for security and audit purposes
• Browser Cookies — your session information and preferences are stored via cookies to enhance user experience
• Device data — your device's technical information is automatically collected when you access the platform

4 Purpose of Personal Data Use

The personal data we collect is used solely for legitimate purposes relevant to the operation of the hari2lucky platform. We do not use your data for any other purpose without first obtaining your additional consent.

• Account management — creating, verifying, and securely managing your user account
• Transaction processing — processing deposits, withdrawals, and all financial transactions on the platform
• Identity verification (KYC) — ensuring compliance with anti-money laundering and fraud prevention legal requirements
• Customer Support — responding to queries, resolving complaints, and providing technical assistance to users
• Platform Security — detecting and preventing fraudulent activity, multi-account usage, and other security threats
• Responsible gaming — monitoring gaming patterns to identify users who may need responsible gaming support
• Service Communications — sending important notifications related to your account, transactions, and policy updates
• Platform improvements — analysing usage data to improve features, performance, and user experience
• Legal compliance — fulfilling reporting requirements to relevant authorities when required by law

Where you have given your consent, we may also use your data to send you promotional information, exclusive offers, and the latest updates related to the hari2lucky platform. You may withdraw this consent at any time by contacting our support team.

5 Data Sharing & Disclosure

Hari2lucky takes a highly cautious approach to sharing users' personal data. We do not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where we may need to share your information with certain parties:

5.1 Trusted Service Providers

Hari2lucky works with trusted third-party service providers to help operate the platform, including payment processing providers, identity verification services, and technical infrastructure providers. All such providers are bound by strict confidentiality agreements and may only use your data for the purposes specified.

5.2 Legal Requirements

Hari2lucky may disclose users' personal data to government authorities or law enforcement agencies when required by applicable Malaysian law, a valid court order, or to comply with an official investigation conducted by a competent authority.

5.3 Security Protection

In cases where there is a serious threat to the safety of other users or the hari2lucky platform, we may share relevant information with the parties responsible for addressing that threat.

6 Data Security Measures

Hari2lucky continuously invests in the latest security infrastructure to ensure the personal and financial data of all users is always protected to the highest standard. The following are the security layers we have implemented:

• 256-bit SSL Encryption — all data transmitted between your device and hari2lucky's servers is encrypted using 256-bit SSL technology, the same standard as leading banks in Malaysia
• Data-at-rest encryption — sensitive data stored in our databases is also encrypted for layered protection
• Role-based access control — strict access controls ensure that only authorised personnel can access user data relevant to their responsibilities
• 24/7 threat monitoring — an automated monitoring system operates around the clock to detect and respond to any security threats in real time
• Regular security audits — the hari2lucky platform undergoes regular penetration testing and security audits by independent security experts
• Two-factor authentication (2FA) — users are encouraged to enable 2FA for an additional layer of account security
• Automatic data backup — user data is automatically backed up to a separate secure location to prevent data loss due to unforeseen events

7 Cookies & Tracking Technologies

Hari2lucky uses cookies and similar tracking technologies to enhance user experience, analyse platform performance, and maintain the security of user sessions. The following are the types of cookies we use:

7.1 Essential Cookies

These cookies are required for the platform's core functions and cannot be disabled. They include login session cookies, security cookies to prevent fraud, and language preference cookies. Without these cookies, the hari2lucky platform cannot function properly.

7.2 Performance & Analytics Cookies

These cookies help us understand how users interact with the hari2lucky platform — which pages are visited most often, how long users spend on each page, and where users encounter difficulties. This information helps us continuously improve the platform.

7.3 Functional Cookies

These cookies remember your preferences — such as display theme, preferred text size, and other settings — so you don't have to reconfigure them each time you use our platform.

You can manage and control cookies through your web browser settings. Please note that disabling certain cookies may affect specific features within the hari2lucky platform.

8 Your Rights as a User

As a hari2lucky platform user, you have the following rights regarding your personal data, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

• Right of Access — you have the right to request a copy of the personal data that hari2lucky holds about you
• Right to Rectification — you have the right to request the correction of inaccurate or outdated personal data
• Right to Erasure — in certain circumstances, you have the right to request the deletion of your personal data from our systems
• Right to Restrict Processing — you have the right to request that we restrict the processing of your personal data in certain circumstances
• Right to Object — you have the right to object to the processing of your personal data for direct marketing purposes
• Right to Withdraw Consent — you may withdraw consent previously given at any time, without affecting the validity of prior processing

To exercise any of the above rights, please contact the hari2lucky data protection team by email at [email protected] or via Live Chat on the platform. We will process your request within 14 business days. In complex cases, this period may be extended to up to 30 days with prior notice to you.

9 Data Retention Period

Hari2lucky retains users' personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

• Active account data — retained for the duration your account is active and for 7 years after account closure for legal compliance purposes
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements
• Customer support communication logs — retained for 3 years for reference and dispute resolution purposes
• Technical data and activity logs — retained for 12 months before being automatically deleted
• KYC Documents — retained for 7 years after the date of verification or account closure, whichever is later

When your personal data is no longer needed and there is no legal obligation to retain it, hari2lucky will securely delete or anonymise that data using industry-approved methods.

10 Third-Party Links & Services

The hari2lucky platform may contain integrations with third-party services such as payment providers, game providers, and communication tools. When you use these third-party services through our platform, the respective provider's privacy policy also applies to the data you share with them.

Hari2lucky is not responsible for the privacy practices or content of any third-party services. We encourage you to read the privacy policy of each third-party provider you interact with through the hari2lucky platform.

All third-party providers working with hari2lucky go through a rigorous selection process and are required to meet data protection standards equivalent to our own. Contractual agreements with each provider include explicit data protection clauses to safeguard the interests of hari2lucky users.

11 Changes to the Privacy Policy

Hari2lucky reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, technology, or new legal requirements. When significant changes are made, we will notify you via:

• In-platform notifications on hari2lucky (website and app)
• Email to the address registered in your account
• Prominent notice on our website's home page

The "Last Updated" date at the top of this document will always reflect the date of the current Privacy Policy. Your continued use of the hari2lucky platform after the effective date of any changes will be considered your acceptance of the updated Privacy Policy.

12 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how hari2lucky handles your personal data, don't hesitate to reach out to us. The hari2lucky Data Protection Team is always here to help.

• Data Protection Email: [email protected]
• Live Chat: Available 24/7 via the hari2lucky platform
• Target Response Time: 14 working days for privacy-related inquiries

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the provisions of the Personal Data Protection Act 2010.