Official Data Protection Documents

Privacy Policy lucky99 – Our Commitment to User Data Protection

Lucky99 is fully committed to protecting the privacy and security of every user's data. This document transparently explains how we collect, use, and protect your personal information.


Last updated: January 1, 2026

Our Commitment: lucky99 has never sold users' personal data to any third party for commercial purposes. Your privacy is our responsibility, and we take it very seriously.

1. Introduction

Lucky99 ("we", "our platform") operates the lucky99.si website and the lucky99 mobile app as an online entertainment platform. In delivering these services, we collect and process certain personal data from users. This Privacy Policy is designed to transparently explain the data management practices we apply.

This document applies to all users who access or use lucky99 services, whether via desktop browser, mobile device, or the official lucky99 app. By registering or using our services, you confirm that you have read and understood this Privacy Policy.

This Privacy Policy is to be read together with Terms and Conditions lucky99. In the event of any conflict between the two documents regarding privacy matters, this Privacy Policy shall prevail.

Lucky99 is committed to processing your data only for purposes that are lawful, necessary, and proportionate. We do not collect data beyond our platform's operational needs and always provide full transparency to users about how their data is used.

2. Personal Data We Collect

Lucky99 collects data from you in several ways — directly when you register and use our services, and automatically through industry-standard tracking technologies.

2.1 Data You Provide Directly

  • Registration information: full name, date of birth, email address, phone number, and your chosen username.
  • Identity verification documents (KYC): a copy of your national ID, driver's license, or passport, along with a selfie photo for verification purposes.
  • Financial information: bank account or digital wallet details (GoPay, OVO, DANA, ShopeePay) that you register for deposit and withdrawal purposes.
  • Communications: conversation history with the lucky99 customer support team via live chat or email.

2.2 Automatically Collected Data

  • Platform usage data: game history, login frequency, session duration, game preferences, and full transaction history.
  • Technical data: IP address, device type, operating system, browser type and version, and unique device identifiers.
  • Location data: general location based on IP address for compliance with applicable jurisdictional regulations.
  • Cookie data: information stored via cookies and similar technologies to enhance the user experience and platform analytics.
Data Categories Specific Examples Collection Method
Identity Full name, date of birth, national ID Registration Form & KYC
Contact Email, phone number Registration form
Finance Bank accounts, digital wallets Payment method settings
Technical IP address, device, browser Automatically upon access
Transactions Deposit history, withdrawals, bets Automatically from platform activity
Cookie Session preferences, analytics Cookie & tracking technology

3. Purpose of Data Use

Every piece of data lucky99 collects is used for specific and legitimate purposes. Below is a full breakdown of how your data is used:

  • Account registration and management: Creating, validating, and maintaining your user account on the lucky99 platform.
  • Identity verification (KYC): Meeting regulatory obligations that require us to verify user identity before processing withdrawals.
  • Transaction processing: Processing deposits, withdrawals, and other financial transactions securely and accurately.
  • Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, or platform abuse.
  • Customer support: Providing effective technical support and complaint resolution to users.
  • Experience personalization: Tailoring content, game recommendations, and promotions based on your preferences and usage history.
  • Service communications: Sending important notifications about your account, service changes, or security information.
  • Regulatory compliance: Fulfilling legal obligations and reporting requirements to the relevant authorities.
  • Analytics and product improvement: Understanding platform usage patterns to continuously improve lucky99 service quality.

4. Legal Basis for Data Processing

Lucky99 processes your personal data only on one of the following legal bases:

  • Consent: You have given explicit consent, for example to receive promotional communications from lucky99.
  • Contract performance: Processing is necessary to fulfill lucky99's contractual obligations to you as a registered user.
  • Legal obligation: Processing is necessary to meet applicable regulatory requirements, including KYC verification and anti-money laundering reporting.
  • Legitimate interests: Processing is carried out for lucky99's legitimate business interests, such as platform security and fraud prevention, provided it does not override your rights and interests.

5. Sharing Data with Third Parties

Lucky99 does not sell, rent, or trade your personal data to third parties for commercial purposes in any form. However, in operating the platform, we share data with the following parties under limited and controlled conditions:

  • Payment service providers: Banks and digital wallet providers (GoPay, OVO, DANA, ShopeePay) receive the information necessary to process your financial transactions.
  • Identity verification service providers: Third-party KYC partners that help validate user identity documents in accordance with industry standards.
  • Cloud infrastructure providers: Hosting and cloud computing services that store and process lucky99 platform data to the highest security standards.
  • Analytics providers: Analytics tools that help us understand platform usage patterns in an aggregated and anonymous manner.
  • Legal authority: lucky99 will disclose data to the relevant authorities when required by law or a valid court order.

All lucky99 third-party partners are bound by strict data confidentiality agreements and are only permitted to use your data in accordance with specific instructions from lucky99.

6. Data Security and Protection

Lucky99 implements a range of technical and organizational security measures to protect your personal data from unauthorized access, loss, alteration, or accidental disclosure:

  • 256-bit SSL/TLS Encryption: All data transmitted between your device and lucky99 servers is encrypted using banking-grade security protocols.
  • Stored data encryption: Sensitive data stored in the lucky99 database is separately encrypted using strong encryption algorithms.
  • Role-based access control: Only staff with legitimate operational needs may access user data, and every access is recorded in the audit log system.
  • Two-factor authentication (2FA): Available to all user accounts and mandatory for lucky99 staff internal system access.
  • 24-hour security monitoring: An intrusion detection system and active security team monitor suspicious activity around the clock.
  • Regular security testing: lucky99 conducts regular penetration testing and security audits to identify and address potential security vulnerabilities.

Security Incidents: In the event of a data security breach that may harm you, lucky99 is committed to notifying affected users within 72 hours of the incident being detected, in line with industry best practices.

7. Data Retention and Deletion

Lucky99 retains your personal data for as long as your account is active and for a defined period after account closure, in accordance with applicable legal and operational obligations.

  • Active account data: Retained for the lifetime of the active account and updated periodically based on the latest information provided by the user.
  • Transaction history: Retained for a minimum of 5 years after each transaction for financial audit purposes and anti-money laundering compliance.
  • KYC documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with international gambling industry regulatory standards.
  • Communication data: Conversation history with customer support is retained for 2 years for training and dispute resolution purposes.
  • After account deletion: Data that is no longer needed will be securely deleted from lucky99's systems within 90 days of an approved deletion request.

8. Your Rights Over Personal Data

As a lucky99 user, you have a number of rights regarding the personal data we manage. lucky99 is committed to facilitating the exercise of these rights easily and without unnecessary barriers:

Lucky99 uses cookies and similar technologies to enhance the user experience on our platform. Cookies are small files stored on your device when you visit the lucky99 site.

Types of cookies we use:

  • Essential cookies: Required for basic platform functionality, such as maintaining login sessions and security preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies: Collecting anonymous information about how visitors use the platform to help us improve the overall user experience.
  • Functional cookies: Remembering your preferences such as language, display settings, and favorite games to deliver a more personalized experience.
  • Analytics cookies: Helping us understand navigation patterns and feature usage across the platform in aggregate. This data is used for lucky99 product development.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect some lucky99 platform features.

10. Privacy Policy Changes

Lucky99 may update this Privacy Policy from time to time to reflect changes in data management practices, regulatory updates, or platform service improvements. Any significant changes will be communicated through:

  • Email notifications sent to the address registered on your account.
  • In-platform notification upon your next login.
  • Update of the "Last updated" date at the top of this document.

Continued use of lucky99 services after the effective date of any changes constitutes acceptance of the updated policy. If you do not agree to the changes, please close your account before the effective date.

11. Contact Us Regarding Privacy

If you have questions, concerns, or wish to exercise your privacy rights, lucky99 provides several communication channels:

  • Live Chat: Our support team is available 24 hours a day and can be reached directly via the live chat feature on the lucky99 platform.
  • Email: Send your privacy inquiries to [email protected] (displayed as plain text, not a clickable link).

The lucky99 privacy team aims to respond within 72 hours to all incoming personal data requests. For data deletion or full data access requests, the process may take up to 30 days depending on the complexity of the request.

Full Control Over Personal Data You at lucky99

Lucky99 respects every user's right to control their personal data. The following rights are available for you to exercise at any time.

Right to Data Access

You have the right to request a complete copy of the personal data lucky99 holds about your account, along with information on how it is used.

Right to Data Correction

If your data is inaccurate or no longer relevant, you may request lucky99 to update or correct that information.

Right to Data Deletion

You may request the deletion of your personal data, subject to legal obligations that require us to retain certain data.

Right to Restriction of Processing

Under certain conditions, you have the right to request that lucky99 restrict the processing of your data while a dispute is being resolved.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another service.

Right to Object

You may object to the processing of your data carried out on the basis of lucky99's legitimate interests, including for direct marketing purposes.

Data Protection Standards lucky99 That Exceeds Expectations

256-bit End-to-End Encryption

Every byte of data transmitted between your device and lucky99 servers is protected by 256-bit SSL encryption — the same standard used by international banking systems and unbreakable with currently available technology.

Encrypted Data Storage

Sensitive data stored in the lucky99 database — including financial information and identity documents — is separately encrypted. Even unauthorized internal access cannot read the data in any usable form.

Minimal Access with Audit Trail

A strict "least privilege" principle is enforced — only staff with a legitimate operational need may access user data. Every access is logged in an immutable audit system.

Real-Time Threat Monitoring

Lucky99's security system operates 24 hours a day, detecting anomalous access patterns, intrusion attempts, and suspicious activity. Security incident response is triggered automatically within seconds upon detecting a threat.

International Standards Compliance

Lucky99 follows international data protection best practices across all data management operations, ensuring a consistently high privacy standard for all users.

No Data Selling

Lucky99 has never and will never sell, rent, or trade users' personal data to any third party for advertising, profiling, or any other commercial purpose.

Policy lucky99 Others

Your Data Is Safe at lucky99 — Start Playing with Peace of Mind

Data privacy and security are not empty promises at lucky99 — they are the foundation of every service we build. Join us and experience the difference for yourself.

By registering, you agree to Privacy Policy and Terms and Conditions lucky99.

Bahasa Indonesia