myluck88 Privacy Policy

This Privacy Policy ("Policy") is published by the operator of the myluck88 platform ("myluck88", "we", "us", "the Operator") and applies to all personal data collected from or about individuals ("you", "Player", "User") who access or use the services available at myluck88.co and any associated subdomains, applications, or digital services (collectively, the "Platform").

myluck88 takes data privacy seriously. This Policy is designed to be transparent about our data practices and to help you understand exactly what personal information we hold about you, the purposes for which we use it, and the choices you have in relation to it. We operate in compliance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA") and applicable international data protection standards.

This Policy should be read alongside the myluck88 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

For the purposes of applicable data protection legislation, the data controller responsible for your personal data is the Operator of the myluck88 platform. The Operator determines the purposes and means of processing personal data collected through the Platform.

All data protection enquiries, subject access requests, and consent withdrawal requests should be directed to our Data Protection contact as detailed in Section 14 of this Policy. The Operator is committed to responding to all legitimate data requests within the timeframes required by applicable law.

myluck88 collects personal data through various interactions with the Platform, including account registration, identity verification, financial transactions, gameplay activity, and communications with our support team. The categories of data collected include:

We do not collect sensitive personal data (such as health information or racial origin) unless specifically required by applicable law or gaming regulatory requirements, and only with your explicit consent where required.

myluck88 uses the personal data it collects for the following purposes:

• Account Management: To create, verify, maintain, and administer your player account, including KYC identity verification and age verification in compliance with our 21+ policy.
• Service Delivery: To process deposits, withdrawals, bets, and game sessions, and to provide you with access to all Platform features you are entitled to use.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover attempts, and other prohibited conduct on the Platform.
• Legal & Regulatory Compliance: To meet our obligations under the PDPA, applicable anti-money laundering legislation, gaming regulatory requirements, and any other legal obligations applicable to the Operator.
• Responsible Gaming: To monitor gameplay activity for indicators of problem gambling, to administer self-exclusion and deposit limit requests, and to fulfil our responsible gaming obligations to players.
• Customer Support: To respond to your enquiries, resolve account issues, and provide technical assistance through our support channels.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the functionality, performance, and content of the Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may withdraw marketing consent at any time through your account settings.

Under applicable data protection law, myluck88 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions agreement between you and the Operator — including account setup, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC verification, AML obligations, age verification, and gaming regulatory reporting requirements.
• Legitimate Interests: Processing necessary for fraud prevention, security monitoring, platform improvement, and responsible gaming activity monitoring, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and certain cookie-based tracking activities, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

myluck88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data in the following circumstances:

• Service Providers: With carefully selected third-party providers who assist in operating the Platform, including payment processors (including Touch n Go, Boost, and banking partners), game software providers, KYC verification services, fraud prevention providers, and IT infrastructure providers. These parties are contractually bound to process your data only as instructed by the Operator and in compliance with applicable data protection law.
• Gaming Regulatory Authorities: We may be required to disclose player data to applicable gaming regulatory authorities as part of licence compliance or investigation requirements.
• Law Enforcement: Where we are legally required or have a good-faith belief that disclosure is necessary to comply with a legal obligation, court order, or governmental request, or to protect the rights, property, or safety of the Operator, our players, or the public.
• Anti-Money Laundering Reporting: Where we are required to make suspicious activity reports to the relevant financial intelligence unit under applicable AML legislation.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of the Operator's business, player data may be transferred as part of the transaction, subject to the same privacy protections described in this Policy.

In all cases of data sharing, the Operator takes reasonable steps to ensure that recipients of personal data provide an adequate level of protection in accordance with applicable law.

The myluck88 Platform uses cookies and similar tracking technologies to enhance your user experience, maintain session state, and support Platform analytics. The types of cookies used include:

• Essential Cookies: Required for the Platform to function correctly, including maintaining your logged-in session and security features. These cookies cannot be disabled without materially impairing Platform functionality.
• Analytics Cookies: Used to collect aggregate, anonymised data about how players interact with the Platform, for the purpose of improving Platform performance and user experience.
• Preference Cookies: Used to remember your settings and preferences, such as language settings and display preferences.
• Marketing Cookies: Used only where you have provided consent, to deliver relevant promotional content and measure the effectiveness of our marketing activities.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of some Platform features. Detailed cookie settings are available through the Platform's cookie management tool where applicable.

myluck88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, and for such additional periods as may be required by applicable law or regulatory obligation. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account relationship with the Operator, and for a minimum of 5 years following account closure, in compliance with applicable AML record-keeping requirements.
• Transaction and Betting Records: Retained for a minimum of 5 years following the date of each transaction, as required by gaming regulatory and AML obligations.
• Support Communications: Retained for up to 3 years from the date of the communication, unless a longer period is required for an ongoing dispute or legal proceeding.
• Technical and Usage Data: Retained in aggregated, anonymised form for analytical purposes for up to 2 years.
• Self-Exclusion Records: Retained indefinitely to prevent re-registration by excluded players, in compliance with responsible gaming requirements.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.

myluck88 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Secure, encrypted storage of account credentials using industry-standard one-way hashing;
• Role-based access controls limiting internal access to personal data to those with a legitimate operational need;
• Regular security assessments and penetration testing of Platform infrastructure;
• Incident response procedures for detecting, reporting, and managing data breaches in accordance with applicable legal notification obligations.

While the Operator takes all reasonable steps to protect your personal data, no transmission over the internet or electronic storage system is entirely secure. You are responsible for maintaining the security of your account credentials. If you suspect unauthorised access to your account, please contact our support team immediately.

Subject to applicable law and certain limitations, you have the following rights in relation to your personal data held by myluck88:

• Right of Access: You may request a copy of the personal data the Operator holds about you.
• Right of Correction: You may request the correction of inaccurate or incomplete personal data.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to Request Cessation: In certain circumstances, you may request that the Operator cease processing your personal data where processing is causing or is likely to cause unwarranted damage or distress.

Please note that certain rights may be limited where we are required to retain or process data for legal compliance, regulatory, or fraud prevention purposes. To exercise any of these rights, please contact us as described in Section 14.

The myluck88 Platform is strictly for persons aged 21 years and above. The Operator does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration and KYC process. If the Operator becomes aware that personal data has been collected from an individual below the minimum age requirement, the associated account will be immediately closed and the data deleted or processed in accordance with applicable regulatory requirements.

If you have reason to believe that a minor has registered on the myluck88 Platform, please contact our support team immediately.

The Operator's service providers and technology partners may be located in jurisdictions outside Malaysia. Where personal data is transferred to recipients in third countries, the Operator takes appropriate steps to ensure that such transfers are conducted in accordance with applicable data protection requirements, including the use of contractual safeguards where required. By using the Platform, you acknowledge and consent to the transfer of your personal data as described in this section.

The Operator reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or operational requirements. Material changes will be communicated to active account holders by email to the registered address or through a prominent notice on the Platform prior to the effective date of the change. The updated Policy will display the revised "Last Updated" date at the top of the document. Your continued use of the Platform following notification of a material change constitutes your acceptance of the updated Policy.

For all data protection enquiries, subject access requests, consent withdrawal requests, or complaints regarding the handling of your personal data by myluck88, please contact our team through the following channel:

Data Protection Email: [email protected]

Live Chat: Available 24/7 through your logged-in account on the Platform.

The Operator will acknowledge all written data requests within 3 business days and endeavour to respond substantively within 21 days, in accordance with the timeframes prescribed under the PDPA. Where a request is complex or involves a large volume of data, we will notify you of any extension to this timeframe.

If you are not satisfied with the Operator's response to a data protection complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority under applicable Malaysian law.