Your Privacy at 567luk — Our Commitment

Overview & Scope

This Privacy Policy applies to all personal data processed by 567luk in connection with the 567luk platform accessible at 567luk.app, including all associated games, cashier services, customer support interactions, promotional communications, and mobile or web application sessions. It applies to all registered Players, prospective Players who browse the Platform without registering, and any individual who contacts 567luk through live chat, email, or WhatsApp.

567luk is committed to handling personal data with integrity and in compliance with internationally recognised data protection principles, including those enshrined in the General Data Protection Regulation (GDPR) as a benchmark standard. While the GDPR is a European regulation, 567luk applies its core principles — lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and accountability — to all players regardless of geography, including our primary audience of Indonesian players.

By creating an account on 567luk or continuing to use the Platform following notification of a policy update, you acknowledge that you have read, understood, and consented to the data practices described in this Privacy Policy. If you do not agree to these practices, you must cease using the Platform and contact our support team to close your account.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, IP address, device identifiers, financial account details, and gameplay transaction history.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means 567luk, the entity that determines the purposes and means by which Personal Data is processed.
• "Data Processor" means any third party that processes Personal Data on behalf of 567luk under a documented data processing agreement.
• "Player" or "you" means any individual who accesses or uses the Platform, whether registered or as an unregistered visitor.
• "Platform" means the 567luk website at 567luk.app and all associated services, applications, and features.
• "KYC" means Know Your Customer — the identity and age verification process required before withdrawal processing and at other compliance checkpoints.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of your Personal Data for a stated purpose.

Data We Collect

567luk collects Personal Data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from authorised third-party sources such as payment processors and KYC verification partners. The categories of data we collect are as follows:

When you create a 567luk account, we collect your full legal name, date of birth, email address, username, and password (stored in irreversibly hashed form). This data is required to create and maintain your account.

To comply with anti-money-laundering obligations and our responsible gaming commitments, we collect copies of government-issued photo identification — such as an Indonesian National Identity Card (KTP), passport, or driving licence — and proof of payment method ownership. These documents are processed securely and retained only for as long as legally required.

We record details of all deposits, withdrawals, and wagers associated with your account. This includes transaction amounts in Indonesian Rupiah (IDR), timestamps, payment method references (e.g., the last four digits of a bank account number or an e-wallet identifier such as OVO, DANA, GoPay, ShopeePay, or LinkAja), transaction status, and associated bank names (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP). We do not store full bank account numbers or card numbers in our primary databases.

We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, session duration, and pages visited. This data is used for security monitoring, fraud detection, and Platform performance optimisation.

When you contact 567luk through live chat, email, or WhatsApp, we retain records of those communications, including their content, timestamps, and resolution outcomes. This enables us to maintain continuity of service and resolve disputes accurately.

567luk uses cookies and similar tracking technologies to enhance your Platform experience. See Section 7 for full details on our cookie practices and how to manage your cookie preferences.

Legal Basis for Processing

567luk processes your Personal Data only where a valid legal basis exists. We rely on the following bases depending on the nature of the processing activity:

• Contractual Necessity: Processing required to provide the services you have requested, including operating your account, processing deposits and withdrawals, and delivering game outcomes.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, record-keeping obligations, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing conducted for our legitimate business interests, including fraud detection and prevention, Platform security, improving our services, and conducting internal analytics — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for purposes such as sending you promotional offers and marketing communications, where we have obtained your explicit prior consent. You may withdraw this consent at any time by contacting our support team or using the unsubscribe link in any marketing email.

How We Use Your Data

567luk uses the Personal Data we collect for the following specific purposes:

• Creating and maintaining your Player account, including authentication and session management;
• Processing deposits and withdrawals through your chosen payment method (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported channels);
• Verifying your identity and age in accordance with our KYC procedures and responsible gaming obligations — in particular, confirming that you are 21 years of age or older;
• Detecting, investigating, and preventing fraudulent transactions, money laundering, collusion, bonus abuse, and other prohibited activities;
• Personalising your Platform experience, including recommending games and promotions relevant to your activity history;
• Communicating with you regarding your account, including transactional notifications, security alerts, and responses to support requests;
• Sending you promotional offers and bonus notifications where you have consented to receive marketing communications;
• Analysing aggregate usage patterns to improve Platform performance, user experience, and game offerings;
• Complying with applicable legal and regulatory obligations, including responding to lawful government or law enforcement requests;
• Administering and enforcing our Terms & Conditions and resolving any disputes that arise under them.

Data Sharing & Third Parties

567luk does not sell, rent, or trade your Personal Data to third-party marketing organisations. We share data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

To deliver our game library, 567luk shares session identifiers and wagering data with licensed game studios including Pragmatic Play, Evolution Gaming, PG Soft (Pocket Games Soft), Spribe, NetEnt, and Microgaming. These providers act as Data Processors under written agreements that prohibit them from using player data for any purpose other than game delivery and RNG audit compliance.

To facilitate deposits and withdrawals, we share the minimum necessary financial data with payment processing partners operating the bank transfer and e-wallet infrastructure that connects 567luk to BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja. These processors are contractually bound to handle your data securely and in compliance with applicable financial regulations.

567luk engages specialist third-party KYC and anti-fraud providers to verify player identities and screen transactions against sanctions and PEP (Politically Exposed Persons) lists. Document copies submitted for KYC verification are processed by these partners under strict confidentiality agreements.

567luk may disclose Personal Data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, or where we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of 567luk, our players, or the public.

In the event of a merger, acquisition, restructuring, or sale of all or part of 567luk's business, Personal Data held by 567luk may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any material change to how your data is processed within 30 days of the transfer completing.

Cookies & Tracking Technologies

567luk uses cookies and similar technologies (local storage, session storage, pixel tags) to operate the Platform, remember your preferences, maintain your authenticated session, and gather anonymised analytics. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential to the functioning of the Platform. These enable secure login sessions, cashier operations, and game loading. They cannot be disabled without breaking core Platform features.
• Performance & Analytics Cookies: Used to collect anonymised data about how players interact with the Platform — which pages are visited most, how long sessions last, and where errors occur. This data informs Platform improvements. No personally identifiable information is included in analytics reports.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and display options to provide a more personalised experience on return visits.
• Marketing Cookies: Used only where you have consented to receive personalised promotional content. These cookies help 567luk understand which promotions are most relevant to your activity profile so we can serve appropriate bonus offers.

You can manage or withdraw your consent to non-essential cookies at any time through the cookie settings panel accessible from the footer of the Platform. Please note that disabling certain cookies may affect the functionality of parts of the Platform.

Data Retention

567luk retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised aggregate data may be retained indefinitely for statistical purposes.

Security Measures

567luk implements a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, disclosure, or destruction. Our security measures include, but are not limited to:

• Transport Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 (256-bit SSL). The padlock icon in your browser confirms this connection is active.
• Password Hashing: Account passwords are stored using industry-standard one-way cryptographic hashing algorithms. Even 567luk staff cannot read your password in plain text.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Staff members with access to player records are subject to background checks, confidentiality agreements, and regular security training.
• Intrusion Detection: Our infrastructure is continuously monitored by automated intrusion detection and anomaly alerting systems. Any suspicious activity triggers an immediate security review.
• Penetration Testing: 567luk engages independent security professionals to conduct regular penetration tests of our Platform and infrastructure. Identified vulnerabilities are remediated on a priority basis.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA from their Account security settings to add an additional layer of protection against unauthorised logins.

Your Rights

Subject to applicable law and certain conditions, you have the following rights with respect to the Personal Data 567luk holds about you. To exercise any of these rights, contact our Data Protection team at [email protected] — we will respond within 30 days of receiving a complete request.

Minors

567luk applies mandatory age verification as part of its KYC process to screen out underage players. If we discover — or have reasonable grounds to believe — that a Player is under 21 years of age, we will immediately suspend the account, void any wagers placed, return any net deposits to the original payment source, and permanently delete the player's Personal Data except where retention is required by law to evidence the breach and our remedial actions.

If you are a parent or guardian and believe that a minor in your care has registered on the Platform, please contact us immediately at [email protected] so that we can take swift action.

International Data Transfers

567luk's Platform serves players in Indonesia and may involve the transfer of Personal Data to servers, service providers, or third-party processors located outside Indonesia. When Personal Data is transferred internationally, 567luk ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to the standards described in this Privacy Policy. These safeguards include:

• Data processing agreements incorporating internationally recognised standard contractual clauses;
• Transfers only to processors operating in jurisdictions that maintain adequate data protection standards;
• Technical and organisational security measures that apply uniformly regardless of where data is processed.

You may request details of the specific safeguards applied to any international transfer of your Personal Data by contacting our support team.

Policy Amendments

567luk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes, we will notify registered Players by email and via an in-Platform notification at least seven (7) days before the updated policy takes effect. The "Last Updated" date at the top of this page will always reflect when the most recent revision was published.

We encourage you to review this Privacy Policy periodically so you remain informed about how 567luk protects your data. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised policy. If you disagree with an update, you have the right to close your account before the changes take effect.

Contact

For any questions, concerns, or requests relating to this Privacy Policy or the Personal Data 567luk holds about you, please contact our Data Protection team through any of the following channels. We are committed to responding to all privacy-related enquiries within 30 days:

• Live Chat: Available 24/7 directly on the Platform — the fastest method for urgent privacy requests.
• Email: [email protected] — please include "Privacy Request" in the subject line along with your registered username.
• WhatsApp: +62 811-567-5670 — displayed for reference as plain text only.

When submitting a request to exercise your data rights, please provide your registered email address and username so we can verify your identity before processing the request. 567luk will not action data rights requests from unverified individuals to protect the security of all player accounts.