Lucky Seven takes every member's privacy seriously. This page clearly explains what data we collect, how it is used, who it is shared with, and what your rights are as the data owner.
This Privacy Policy describes the privacy practices of Lucky Seven (luckyseven.ws). By registering and using our platform, you agree to the collection and use of information as described in this policy. Please read it carefully before proceeding with registration.
Lucky Seven is a live casino and online Sports Betting platform operating for users in Malaysia. We operate live baccarat tables, poker, roulette, virtual sports, cricket, football, e-sports, and a wide range of online slots. In providing these services, Lucky Seven collects and processes personal data from our members.
We are fully committed to protecting every member's privacy in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia. This Privacy Policy is written in clear, straightforward language — not confusing legal jargon — because we believe you have the right to know exactly what happens to your personal information.
Lucky Seven has never and will never sell, rent, or trade members' personal data to third parties for marketing purposes. Your data is collected solely to enable us to provide you with the best and most secure service possible.
If you have any privacy-related questions not addressed in this policy, please contact Lucky Seven's Data Protection Officer at privacy@luckyseven.ws. We will respond within 2 business days.
Lucky Seven collects various types of personal data depending on how you use our platform. The data collected falls into several main categories:
Lucky Seven never directly collect credit/debit card numbers. If you receive any request for card details via email or chat claiming to be from Lucky Seven, please report it to us immediately as this may be a phishing attempt.
Lucky Seven uses collected personal data only for legitimate and necessary purposes. Below is a complete list of how your data is used:
| Purpose of Use | Data Types Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact, account | Contract performance |
| Processing deposits & withdrawals in MYR | Financial, transactions | Contract performance |
| Identity verification (KYC) | Identity, documents | Legal obligation |
| Fraud prevention & anti-money laundering | Transaction, technical, activity | Legal obligations & legitimate interests |
| Customer support in Bahasa Malaysia | Support relationships and interactions | Contract performance |
| Personalising your gaming experience | Activity, gaming patterns | Legitimate interest |
| Promotional & bonus communications (with consent) | Contacts, preferences | Consent |
| Responsible gambling compliance | Activity, betting patterns | Legal obligations & legitimate interests |
| Analytics & platform improvement | Technical, activity (anonymised) | Legitimate interest |
Lucky Seven does not use your personal data for any purpose other than those listed above. Should we wish to use your data for a new purpose not covered by this policy, we will obtain your consent beforehand.
Lucky Seven does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, there are limited circumstances where data may be shared:
All Lucky Seven third-party service providers are bound by data processing agreements requiring them to handle Malaysian member data to the same standard — or a stricter one — than the PDPA 2010.
Lucky Seven continually invests in security infrastructure to protect members' personal data from unauthorised access, alteration, disclosure, or loss. The security measures we employ include:
While Lucky Seven takes all reasonable steps to protect your data, no security system is 100% impenetrable. In the event of a data breach affecting your personal information, Lucky Seven will notify you within 72 hours in accordance with PDPA requirements.
You are also responsible for maintaining the security of your own account. Do not share your password, avoid logging in from unsecured public devices, and always log out after each session. Lucky Seven will not be held liable for any losses resulting from security negligence on your part.
Lucky Seven uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:
You can manage your cookie settings through your browser settings at any time. However, disabling essential cookies may affect the functionality of the Lucky Seven platform. For guidance on managing cookies in major browsers (Chrome, Safari, Firefox), please refer to the relevant browser's help documentation.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Lucky Seven:
To exercise any of the above rights, please submit a written request to privacy@luckyseven.ws by stating the type of request, your account number, and the required identity verification information. Lucky Seven will process your request within 14 business days.
Some data deletion requests may not be fully fulfilled if the data in question is required to meet legal obligations (e.g., financial transaction records required for audit purposes for 7 years under Malaysian law).
Lucky Seven retains your personal data only for as long as necessary for the purposes stated in this policy or to comply with legal obligations. The following are general retention period guidelines:
| Data Category | Retention Period | Reason |
|---|---|---|
| Active account data (name, email, phone) | Throughout active account + 2 years | Contract performance |
| Financial transaction records in MYR | 7 years from the transaction date | Malaysian financial audit requirements |
| KYC documents (MyKad, bank statements) | 5 years after account closure | AML/regulatory compliance requirements |
| Customer support chat logs | 3 years | Dispute resolution & quality improvement |
| Technical data & server logs | 13 months | Security & fraud detection |
| Analytics data (anonymised) | 3 years | Platform improvements |
Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to any specific individual.
The Lucky Seven platform may contain links to other websites or services operated by third parties. Lucky Seven's Privacy Policy applies solely to our own platform (luckyseven.ws) and does not cover any external websites you access through links on our platform.
Lucky Seven is not responsible for the privacy practices or content of any third-party websites. We recommend reading the privacy policy of each site you visit separately.
Payment gateways such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, and CIMB Clicks have their own privacy policies separate from Lucky Seven. Please review their respective privacy policies for information on how they handle your transaction data.
Lucky Seven reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service developments. Any material amendments will be communicated to you via:
Non-material amendments (such as spelling corrections or language clarifications) may be made without notice. Your continued use of the Lucky Seven platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.
We recommend reviewing this page periodically to stay informed on how Lucky Seven protects your personal information.
If you have any questions, concerns, or requests regarding this Privacy Policy or how Lucky Seven handles your personal data, please contact our Data Protection Officer through the following channels:
For data rights requests (access, correction, deletion), please include your Lucky Seven account number and a copy of your identity verification document in your request email. This is required to protect your privacy — we need to verify your identity before disclosing or amending any data.
Six privacy principles that set Lucky Seven apart from other platforms
Also read other important documents relating to your rights at Lucky Seven
You now know how Lucky Seven safeguards your privacy and personal data. We are fully compliant with PDPA 2010, use 256-bit SSL encryption, and never sell your data to anyone.
Join 250,000+ members who trust Lucky Seven for a safe, fair live casino and Sports Betting experience — all in MYR.
PDPA 2010 Compliant | 256-bit SSL | No Data Sales | Responsible Gambling