Rujukan Laman

How We Handle Your Personal Data

At lucky4d, your personal data belongs to you — and we take the responsibility of protecting it seriously.

Data collected only for platform operationYour rights to access and delete dataTouch 'n Go, GrabPay, Boost dan FPX transaction privacyNo data sold to third partiesContact us to update your data
lucky4d How We Handle Your Personal Data
PRIVACY CONTACT CHANNELS

Reach Us About Your Data

If you want to access, correct, or request deletion of your personal data held by lucky4d, our dedicated privacy team is reachable through three direct channels. We aim to acknowledge every data request within 48 hours and resolve it fully within 14 working days. Your request will be treated with the same confidentiality we apply to your account data itself.

Team online

Privacy Email

Send a written data request to our privacy team via email. Include your registered account email and the specific data action you are requesting — access, correction, or deletion. We acknowledge requests within 48 hours and process them within 14 working days.

Live Chat Support

Our live chat agents are available around the clock and can raise a formal data request on your behalf during the conversation. They will log your request and issue a reference number so you can track its progress through to resolution.

In-Account Support Ticket

Log in to your lucky4d account and submit a support ticket tagged as a privacy request. This is the fastest way to verify your identity automatically, which speeds up processing and ensures your data is handled only by authorised team members.

HOW WE PROTECT YOUR DATA

Data Handling, Security and Your Rights

We apply a layered approach to data security — from encryption in transit and at rest, to strict internal access controls that limit who on our team can view your account details.

Data Collection Scope

We collect only what is needed to operate your account: identity details for verification, contact details for communication, and transaction references for payment reconciliation. We do not collect browsing habits outside our own platform or sell your data to advertisers.

Cookie Usage

We use session cookies to keep you logged in and functional cookies to remember your language and display preferences. Analytics cookies help us understand how sections of the platform are used so we can improve them. You can manage cookie preferences in your browser settings at any time.

Account Security Practices

Your password is stored as a one-way hash — our team cannot read it. We support two-factor authentication on your account and log every login attempt with the device identifier and timestamp, giving you a verifiable activity trail you can review at any time.

Data Retention Periods

Account data is retained for as long as your account remains active plus the period required by applicable law. Transaction records, including those related to Touch 'n Go, GrabPay, Boost dan FPX, are kept for the minimum period required for financial compliance and then securely deleted.

Your Access and Correction Rights

You may request a full copy of the personal data we hold about you, ask us to correct any inaccuracies, or ask us to delete data we no longer need to retain by law. Submit your request through any of the support channels listed on this page and we will respond within 14 working days.

Third-Party Data Sharing

We share data with third parties only where strictly necessary: payment processors to clear your Touch 'n Go, GrabPay, Boost dan FPX, and FPX transactions, and identity-verification providers to meet compliance requirements. We do not sell, rent, or trade your personal data to any marketing or advertising platforms.

Your Privacy Policy Questions

Here are the questions we receive most often about how lucky4d handles personal data, along with direct answers drawn from our current policy practices. If your question is not covered here, reach us through the contact channels listed above.

We collect your name, date of birth, email address, phone number, and identity document details during account creation. Once your account is active, we also log device identifiers and session timestamps for security purposes. Payment method references, such as those generated by Touch 'n Go or FPX, are stored for transaction reconciliation only.

No. We never store your bank PIN, card number, or e-wallet password. When you complete a deposit via GrabPay, Boost, or FPX, the transaction is handled entirely by the payment provider. We receive only a transaction reference number to confirm the deposit reached your account.

After account closure, we retain identity and transaction records for the minimum period required by applicable law, typically for financial audit and anti-fraud compliance. Once that retention period ends, your data is securely deleted from our active systems. You may request confirmation of deletion through our privacy email.

Yes. Submit a data access request through live chat, our in-account ticket system, or via privacy email. Include your registered email address and specify that you are requesting a full data copy. We will compile and deliver it to your registered email within 14 working days of verifying your identity.

Access to personal data is restricted to team members who need it to perform a specific task — account verification agents, fraud review staff, and our payment reconciliation team. All internal access is logged and audited. No one outside these roles has routine access to your account details.

We use session, functional, and analytics cookies. Session cookies are essential for keeping you logged in. Functional cookies remember your display preferences. Analytics cookies show us which parts of the platform are used most. You can disable non-essential cookies in your browser settings without losing access to your account.

Send your correction or deletion request to our privacy team via the in-account support ticket tagged as a privacy request, by live chat, or by email. State the specific data you want corrected or deleted. We will confirm receipt within 48 hours and complete the action within 14 working days, subject to any legal retention requirements.