Rujukan Laman

How we handle your information at 7lucky

We collect the details you provide when you open your account — your email, password, and payment method — to verify identity and process withdrawals via Touch 'n…

Account verification dataPayment history recordsSession cookies and device IDsRegional access logsSupport conversation threads
Browse The Lobby Read FAQ
7lucky How we handle your information at 7lucky
PRIVACY REQUESTS

How to view, correct, or delete your information

You can ask to see the data we hold, update an incorrect email or payment detail, or request full deletion of your closed account. All three options start with a message to our privacy team — response time is usually one business day for viewing and corrections, up to five days for deletion because we verify the request and check for pending transactions before we remove records.

Team online

Request a data copy

Send an email from your registered address with the subject line 'Data Access Request' and your account username. We will reply with a PDF listing your registration date, linked payment methods, transaction history, and stored cookies. The export omits your hashed password for security but includes every other field we maintain.

Correct account details

Log in and visit the account-settings page to update your email or add a new payment method yourself. If you need to change a detail locked by verification, such as a misspelled legal name, contact support with proof of identity and we will unlock that field for editing within one business day.

Delete your account and data

Close your account under settings, then email our privacy team to request permanent deletion. We confirm there are no pending withdrawals, remove all identifiable records after the mandatory financial retention period expires, and send a final confirmation email. Anonymized aggregates may remain in our analytics database for platform improvement.

DATA HANDLING DETAIL

The systems and rules we use to protect your information

Every password is hashed with bcrypt before storage so even our database administrators cannot reverse it.

Password hashing and salt

Passwords are converted to a fixed-length hash using bcrypt with a unique salt per user, then stored in that hashed form. We never log or transmit the plain text, and the hashing algorithm is one-way, meaning we cannot retrieve your original password even if asked — password resets generate a temporary link instead.

Payment tokenization

When you select Touch 'n Go, GrabPay, Boost or FPX the payment gateway issues a token that represents your linked account. We store that token and use it to initiate future deposits or withdrawals; your full bank details remain with the gateway and are never written to our database, reducing exposure if a breach occurs.

Session and device tracking

We issue a session cookie when you log in and record your device fingerprint (browser type, screen resolution, time zone) to detect account sharing or automated access. The cookie expires after twelve hours of no activity or when you log out; the fingerprint is checked at each login, and a new device triggers an alert email.

Data retention schedule

Active accounts keep your registration info, transaction logs, and support threads indefinitely while you remain a member. Once you close the account we hold financial records for the period required by anti-money-laundering rules in the jurisdiction where you registered, then anonymize the dataset by removing email, IP addresses, and device IDs, leaving only aggregated statistics.

Third-party processors

Payment gateways, email delivery services, and our live-chat vendor process data on our behalf under contracts that prohibit them from using your information for their own purposes. Each processor is selected for compliance with data-protection standards in the regions we serve, and we audit their security annually.

Changes to this policy

We update this privacy policy when we add a payment method, change retention rules, or launch in a new region. Material changes are announced by email thirty days before they take effect, and the revised policy is posted at this URL with a new effective date at the top; continued use of your account after that date means you accept the updated terms.

Common questions about your data at 7lucky

We ask for an email address, a password you create, and your chosen payment method — Touch 'n Go, GrabPay, Boost or FPX. We also log your IP address, device type, and the timestamp of registration to prevent duplicate accounts and meet verification requirements where our service is available under local law.

Active-account transaction logs are retained indefinitely while you remain a member so you can review past deposits and withdrawals in your account dashboard. After you close the account we hold financial records for the period mandated by anti-money-laundering rules, then anonymize them by stripping out email and IP addresses.

Yes. Send an email from your registered address with the subject line 'Data Access Request' and your username. We reply within one business day with a PDF export listing your registration date, linked payment methods, transaction history, session cookies, device fingerprints, and any support tickets you opened. Your hashed password is excluded for security.

We share data only with service providers who help us run the platform — payment gateways that process Touch 'n Go, GrabPay, Boost and FPX transactions, email delivery for account alerts, and our live-chat vendor. Each is bound by contract not to use your information for their own marketing, and we do not sell lists to third parties.

We use a session cookie to keep you logged in and a preferences cookie to remember your game filters and language choice. Both expire when you close the browser or after twelve hours of inactivity. You can block cookies in your browser settings, but this will log you out after every page and reset your saved preferences.

Close your account under the settings menu, then email our privacy team with the subject 'Account Deletion Request.' We verify there are no pending withdrawals, honor the mandatory financial retention period, then permanently remove your email, device IDs, IP logs, and support threads. Anonymized transaction totals may remain in aggregated platform statistics.

We post the updated policy at this URL and send an email to your registered address thirty days before the new version takes effect. Material changes — such as adding a data processor or changing retention rules — are highlighted in the email. Continued use of your account after the effective date means you accept the revised terms.

Related Pages

7lucky Malaysia Joker King The Warriors 7lucky Casino Andar Bahar