Privacy Policy luccky88 — Personal Data Protection for Malaysian Players

luccky88 ("we", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy explains in detail how we collect, process, store and protect your personal information when you use the website, mobile app and all services provided by luccky88.

This policy applies to all registered members, website visitors and mobile app users of luccky88 who are domiciled in Malaysia. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

By registering a luccky88 account or using our services, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please discontinue use of our platform.

Luccky88 collects your personal information through various methods throughout your use of our platform. The following are the categories of data we collect:

We only collect data that is strictly necessary to provide the services you request and to comply with applicable legal requirements. We do not collect categories of sensitive data unrelated to service delivery.

The personal information we collect is used solely for the following purposes:

• Account management — registering and maintaining your member account, including KYC identity verification.
• Service provisioning — enabling you to access all games, make deposits, and withdraw wins.
• Payment processing — processing all financial transactions securely through your chosen payment method.
• Security & fraud prevention — detecting and preventing fraudulent activity, money laundering, and unauthorised access.
• Responsible gaming — monitoring gameplay patterns to identify responsible gaming assistance needs.
• Service communications — sending important notifications related to your account, security, and platform updates.
• Platform improvements — analysing usage data (anonymously) to improve the user experience.
• Legal compliance — fulfilling PDPA requirements, KYC/AML regulations, and directives from relevant authorities.
• Customer Support — resolving complaints, enquiries, and technical support requests.

luccky88 does not sell or disclose your personal data to third parties for advertising purposes. However, in the course of platform operations, we may share limited information with the following parties on a need-to-know basis only:

• Payment providers — DuitNow, FPX, Touch 'n Go, GrabPay, and other payment partners to process your transactions. They are bound by strict confidentiality agreements.
• Licensed game providers — Pragmatic Play, PG Soft, JILI, and others for game verification and progressive jackpot management purposes.
• Technology service providers — cloud infrastructure and security services supporting platform operations, subject to data protection agreements.
• Law enforcement authority — if required by law, court order, or to prevent financial crimes such as money laundering.
• Independent auditing body — for RNG verification and game fairness compliance purposes only, with no disclosure of players' personal data.

Every third party we work with is bound by strict data confidentiality agreements and audited regularly to ensure compliance with our data protection standards.

We take the security of your data very seriously. luccky88 implements multiple layers of technical and organisational security to protect your personal information from unauthorised access, use, disclosure, alteration or destruction.

• 256-bit SSL Encryption — all communications between your device and luccky88 servers are protected by military-grade encryption.
• Encryption of data at rest — sensitive information such as passwords and financial details is encrypted in our database using the latest hashing algorithms.
• Two-factor authentication (2FA) — available for all accounts as an additional security layer that you can enable in your account settings.
• Real-time security monitoring — AI system monitors account activity 24/7 to detect suspicious patterns or unauthorised access.
• Internal access controls — luccky88 staff may only access your data as required by their respective roles, with strict audit logs in place.
• Regular Security Testing — penetration testing and security audits conducted regularly by independent security firms.
• Incident response plan — comprehensive data breach response procedures to minimise the impact of any incident.

Luccky88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser.

• Essential Cookies — required for core platform functions such as login, session management, and security. These cannot be disabled.
• Preference Cookies — storing your settings and preferences such as language, display theme, and game configuration.
• Analytics Cookies — collecting anonymous usage data to help us understand how players use the platform for improvement purposes.
• Security Cookies — helping detect suspicious activity and protecting your account from unauthorised access attempts.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. luccky88 does not use third-party cookies for advertising purposes that track you across other websites.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data that we hold:

Luccky88 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by Malaysian law.

• Active account data — retained for as long as your account remains active and in use.
• Closed account data — retained for 7 years after account closure to meet anti-money laundering (AML) and tax compliance requirements.
• Financial transaction records — retained for 7 years as required by Malaysian financial regulations.
• KYC records — retained for the duration of the active account plus 5 years after closure.
• Communication logs — retained for 3 years for dispute resolution purposes.
• Usage data / analytics — retained for 2 years in anonymised form for platform improvement.

Once the retention period expires, your data will be securely deleted or permanently anonymised. The deletion process uses methods that ensure data cannot be recovered.

Luccky88 strictly prohibits users under the age of 18 from registering or using any of our services. We do not knowingly collect personal data from children or minors under the age of 18.

Our KYC verification process is designed to ensure all members meet the minimum age requirement. If we find that an underage user has registered or provided us with information without our knowledge, the account will be closed immediately and all related data will be deleted.

Luccky88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new technologies, or updated legal requirements. When we make significant changes, we will notify you via:

• In-app notifications on the luccky88 mobile app.
• Prominent notice on our website upon your next login.
• Email to the address registered in your account.

The effective date of the latest version is always displayed at the top of this document. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

For any questions, concerns, or requests regarding your privacy and personal data at luccky88, please contact our Data Protection Officer via: