Hari2lucky Privacy Policy – Malaysia User Data Protection

Hari2lucky ("we", "Platform") is committed to protecting the privacy of every user who accesses and uses our services. This Privacy Policy transparently explains how we handle your personal information — from how it is collected and the purposes for which it is used, to your rights as a user to control that data.

We understand that your trust is our most valuable asset. That is why hari2lucky takes privacy seriously. Every decision regarding data handling is made with the interests and safety of our members as the priority, especially users across Malaysia.

This Privacy Policy applies to all hari2lucky services including the official website, mobile app, live chat, email, and all other communication channels operated by our platform. By using any hari2lucky service, you agree to the terms set out in this Privacy Policy.

Hari2lucky collects various types of information to enable us to provide quality, secure, and personalized services for every member. Below is a summary of the types of information we collect:

We only collect information that is genuinely necessary for the stated purposes. Data minimisation is core to hari2lucky's approach to privacy — if information is not needed, we do not ask for it.

The information we collect is used responsibly and only for legitimate purposes. hari2lucky will not use your data beyond the scope stated below without first obtaining your consent.

• Account management: Creating, verifying, and securely maintaining your member account on the hari2lucky platform.
• Transaction processing: Processing deposits, withdrawals, and all financial activities quickly, accurately, and securely.
• Identity verification (KYC): Meeting legal compliance requirements including age verification, identity verification, and anti-money laundering (AML) prevention.
• Platform Security: Detecting and preventing fraud, unauthorised access, and suspicious activity that could compromise your account security.
• Customer support: Providing effective and responsive technical support and customer service.
• Personalised experience: Tailoring game recommendations, promotions, and platform content based on your preferences and gameplay habits.
• Responsible gambling: Monitoring gameplay patterns to identify early warning signs of problem gambling and provide appropriate support.
• Marketing communications: Sending promotional information, exclusive offers, and platform updates — only to members who have agreed to receive such communications.
• Legal compliance: Fulfilling the legal and regulatory obligations applicable to hari2lucky platform operations.

Hari2lucky does not sell, rent, or disclose your personal information to third parties for commercial marketing purposes. However, there are limited situations where we need to share your information with certain parties to allow the platform to operate safely and comply with the law.

The parties who may receive your information under limited circumstances are as follows:

• Payment service providers: Payment processors, banks, and digital wallet providers that help us handle deposit and withdrawal transactions securely. They are bound by strict confidentiality agreements.
• Game software providers: Licensed game providers that supply game content on the hari2lucky platform, requiring minimal session data to ensure games function correctly.
• KYC & AML services: Licensed and trusted third-party identity verification providers, used solely to fulfil legal compliance requirements.
• Legal authority: Government agencies, law enforcement bodies, or courts when we are legally required to disclose certain information.
• Technology infrastructure services: Cloud and cybersecurity service providers that help us maintain the platform infrastructure to the highest security standards.

All third parties involved in processing hari2lucky user data are required to comply with data protection standards equal to or higher than those we uphold ourselves. Contractually binding data processing agreements are a mandatory requirement for all data-sharing partnerships.

The security of your personal information is an absolute priority for hari2lucky. We continuously invest in the latest security infrastructure to ensure your data is always protected from cyber threats, unauthorised access, and data breaches.

Active security measures we employ:

• 256-bit SSL encryption: All data transmitted between your device and hari2lucky servers is encrypted using 256-bit SSL technology — the highest encryption standard used by global financial institutions.
• Two-factor authentication (2FA): An additional security layer that requires identity verification through your device each time you log in from a new device or unrecognised location.
• Real-time activity monitoring: An automated monitoring system that detects suspicious activity, unauthorized login attempts, and unusual transaction patterns in real time.
• Hashed password storage: Member passwords are not stored in plain text — all passwords go through a cryptographic hashing process with salt before being stored.
• Data segregation: Sensitive financial data is stored separately from general profile data with strict multi-layered access controls.
• Periodic security audits: Independent security assessments are conducted regularly by certified third-party cybersecurity experts.

Hari2lucky uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and understand how members interact with our services. Cookies are small text files stored on your device while you browse the hari2lucky platform.

Types of cookies we use:

• Essential cookies (required): Required for basic platform functions such as login authentication, session management, and security. Without these cookies, the platform cannot function properly.
• Performance cookies: Collecting statistical information on how users interact with the platform — such as most-visited pages and response times — to help us improve platform performance.
• Functional cookies: Remembering your preferences such as language, region, and display settings to deliver a more personalised experience.
• Analytics cookies: Helping us understand platform usage patterns in aggregate and anonymised form to inform our product development decisions.

You can manage or disable cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality and security of your hari2lucky account. We recommend keeping essential and functional cookies active for the best experience.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and hari2lucky's internal policies, you have the following rights regarding your personal information. We are committed to respecting and facilitating the exercise of these rights.

To exercise any of the above rights, please contact the hari2lucky data protection team via email at [email protected]. We will process your request within 30 working days from the date of receipt of the completed request.

Hari2lucky does not retain your personal information longer than necessary for the purposes stated in this Privacy Policy, or beyond the period required by applicable laws and regulations.

Our general data retention period guidelines are as follows:

• Active account data: Stored for the duration of the active account and for a period of 7 years after account closure for legal compliance and financial audit purposes.
• Financial transaction records: Stored for a minimum of 7 years in accordance with Malaysian financial legal requirements and revenue agency obligations.
• KYC data and identity verification documents: Stored for the duration of the active account and 5 years after account closure or until all disputes are resolved.
• Customer support communication logs: Stored for 3 years for quality control, training, and dispute resolution purposes.
• Technical data and system logs: Stored for 12 months and used for security purposes and technical troubleshooting.

When the retention period expires and there is no legal requirement for further retention, your data will be securely deleted or anonymised using industry-standard data destruction procedures.

Hari2lucky reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or platform service improvements. Each updated version of the Privacy Policy will be published on this page with a clear effective date.

When we make significant changes to this Privacy Policy, we will notify you through:

• A notice prominently displayed on the hari2lucky platform homepage.
• Notification emails sent to your registered email address.
• A pop-up notice displayed upon the next login after changes take effect.

Continued use of the hari2lucky platform after a change notice has been issued constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed of how we protect your personal information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, the hari2lucky data protection team is ready to assist you wholeheartedly.

• Data Protection Email: [email protected] (response within 24–48 business hours)
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the hari2lucky platform.
• Official Telegram: Through official hari2lucky channels as displayed on the platform.