Privacy Policy — hari2lucky

hari2lucky ("we", "us", "our", or "the Platform") operates the online casino and sports betting platform accessible at https://hari2lucky.cam (the "Site"). This Privacy Policy (the "Policy") describes how we collect, use, disclose, store, and safeguard the personal data of individuals ("you", "your", or "Player") who access or register on the Platform.

hari2lucky is committed to protecting the privacy of all users in accordance with applicable international data protection standards. This Policy applies to all data processing activities associated with the Site, including account registration, identity verification (KYC), payment processing, gaming activity, customer support interactions, and marketing communications where consent has been obtained.

By accessing the Site, creating a player account, or submitting any personal data tohari2lucky, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this Policy. If you do not agree with any part of this Policy, you should refrain from using the Platform and contact us to close your account.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference into the overall framework governing your use of hari2lucky.

For the purposes of this Policy, the following definitions apply:

hari2lucky collects the following categories of personal data in the course of operating the Platform:

We do not collect or store full payment card numbers, CVV codes, or online banking login credentials. Payment transactions are facilitated through verified third-party Malaysian payment processors including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong.

hari2lucky collects personal data through the following channels:

• Direct Submission: Data you provide when completing the registration form, submitting KYC documents, contacting support, completing responsible gambling assessments, or opting into promotions.
• Automated Technical Collection: Data generated automatically when you access the Site, including IP address, device identifiers, browser type, session duration, and page interaction data collected via cookies and server logs.
• Payment Processing Channels: Transaction reference data returned by payment processors when you make a deposit or withdrawal via a supported Malaysian payment method.
• Third-Party Service Providers: Where applicable, data from identity verification services, fraud prevention platforms, or analytics providers engaged by hari2lucky under data processing agreements.
• Gaming System Logs: Game play events, bet placements, and outcomes generated by the platform's gaming infrastructure during your active sessions.

hari2lucky processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your player account, including authentication and account recovery.
• KYC & Age Verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity in compliance with anti-money laundering (AML) obligations.
• Payment Processing: Facilitating deposits and withdrawals in MYR through your preferred Malaysian payment channel.
• Gaming Operations: Delivering and recording gaming and sports betting services, settling bets, and maintaining game history logs.
• Responsible Gambling Compliance: Monitoring gaming patterns to identify and support players who may be experiencing gambling-related harm, administering self-exclusion and limit tools.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, and unauthorised account access.
• Customer Support: Responding to enquiries, resolving disputes, and processing complaints submitted via live chat or email.
• Legal & Regulatory Compliance: Meeting obligations under applicable gaming licensing conditions, AML regulations, and data retention requirements.
• Marketing Communications (with consent): Sending promotional emails, bonus notifications, or platform updates where you have expressly opted in to receive such communications.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, usability, and game selection.

hari2lucky processes personal data under the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML screening, and gaming licence conditions.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gambling monitoring, and service improvement — where our legitimate operational interests are not overridden by your data protection rights.
• Consent: Marketing communications and non-essential cookies are processed only where you have provided explicit, informed, and freely given consent. You may withdraw consent at any time.

hari2lucky does not sell, rent, or trade your personal data. We share your data only with the following categories of recipients, strictly on a need-to-know basis and subject to data processing agreements:

• Payment Processors: Malaysian payment infrastructure providers (such as DuitNow, FPX operators, e-wallet providers) who require transaction data to process deposits and withdrawals.
• Identity Verification Services: Third-party KYC and age verification providers engaged to verify the identity and age of players in compliance with licensing conditions.
• Fraud Prevention Networks: Industry fraud-sharing databases and AML screening providers used to detect and prevent financial crime.
• Gaming Technology Providers: Certified game providers and sports data feed suppliers whose services power the Platform — bound by confidentiality and data protection agreements.
• Cloud & IT Infrastructure Providers: Hosting, database, and communications technology providers engaged under data processing agreements with appropriate security standards.
• Regulatory and Law Enforcement Authorities: Where we are required to disclose information by applicable law, court order, regulatory request, or to prevent serious harm.
• Professional Advisors: Legal, compliance, and audit advisors engaged by hari2lucky — bound by professional confidentiality obligations.

Any third party engaged by hari2lucky to process personal data on our behalf is bound by a data processing agreement that restricts them from using your data for any purpose other than delivering the contracted service.

hari2lucky retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including any retention periods required by applicable law or regulatory obligations.

• Active Account Data: Retained for the duration of the player account relationship and for a period of up to five (5) years following account closure.
• KYC and Identity Verification Records: Retained for a minimum of five (5) years from the date of verification or account closure, as required under AML regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction in accordance with applicable financial record-keeping obligations.
• Gaming History Logs: Retained for up to three (3) years for operational purposes, responsible gambling monitoring, and dispute resolution.
• Support Communications: Retained for up to two (2) years from the date of the last interaction, or longer where an open complaint or legal matter is pending.
• Marketing Consent Records: Retained for the duration of consent, plus a reasonable period thereafter as evidence of consent having been obtained.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or archived in a non-retrievable format, unless a longer retention period is required by law.

hari2lucky implements appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest within our database infrastructure;
• Role-based access controls restricting data access to authorised personnel on a strict need-to-know basis;
• Two-factor authentication (2FA) requirements for player accounts and internal administrative access;
• Regular security audits, penetration testing, and vulnerability assessments of the platform infrastructure;
• Incident response procedures to detect, contain, and notify affected parties of any confirmed data breach in a timely manner.

While hari2lucky employs industry-standard security practices, no electronic system is entirely immune from risk. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

hari2lucky uses cookies and similar tracking technologies on the Site. A cookie is a small text file stored on your device that enables the Site to function correctly, remember your preferences, and measure usage patterns.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Site to operate — including login session management, security tokens, and load balancing. These cannot be disabled without affecting core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method display, and responsible gambling tool configurations.
• Analytics Cookies: Collect aggregated, anonymised usage data to help us understand how players navigate the platform and identify areas for improvement.
• Marketing Cookies (Consent-Only): Used to measure the effectiveness of marketing campaigns where you have opted in. These cookies are not placed without your explicit consent.

You may manage your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may impair the functionality of the platform. Consent to non-essential cookies can be withdrawn at any time without affecting your account status.

Subject to applicable law and any overiding legal or regulatory obligations, you hold the following rights with respect to your personal data held by hari2lucky:

To exercise any of these rights, submit a written request to [email protected]. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. Identity verification may be required before we action any data rights request to prevent unauthorised access to another person's data.

hari2lucky is strictly an adult gaming platform. Our services are not directed at or intended for individuals under the age of 21 years. We do not knowingly collect personal data from persons under the age of 21.

If hari2lucky becomes aware that personal data has been submitted by a player who is under 21 years of age, we will immediately suspend the relevant account, forfeit any associated funds in accordance with our Terms & Conditions, and delete all personal data associated with that registration in accordance with our data retention procedures and applicable law.

If you have reason to believe that a minor has registered on hari2lucky, please notify us immediately at [email protected] so that we may investigate and take appropriate action.

hari2lucky operates an internationally licensed platform. Where personal data is transferred outside Malaysia to third-party service providers or infrastructure located in other jurisdictions, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable international data protection law.

Safeguards employed for international transfers include contractual data protection clauses with Data Processors, equivalent data protection standards imposed as a condition of engagement, and — where applicable — transfers only to jurisdictions that maintain adequate data protection frameworks.

Where technically feasible, data processing for Malaysian players is hosted on infrastructure located in or proximate to the Asia-Pacific region to minimise unnecessary cross-border transfer.

hari2lucky reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or change how data is shared — we will notify registered players by email and via a prominent notice on the Site at least seven (7) days prior to the changes taking effect.

The most current version of this Policy is always available at https://hari2lucky.cam/privacy-policy. The "Last Updated" date at the top of this document reflects the most recent revision. Your continued use of the Platform after any amendment constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the wayhari2lucky handles your personal data, please contact our Data Protection team through the following channel:

Email: [email protected] (plain text only — not a clickable link)
Subject Line: Please use "Privacy Policy Enquiry" or "Data Rights Request" as the email subject for faster routing.
Response Time: We aim to acknowledge all privacy-related correspondence within 5 business days and to provide a substantive response within 30 calendar days.

For general support, account issues, and responsible gambling requests, our live chat is available daily from 8:00 AM to 2 MYT, and our full support details are on theFAQ page.