My lucky888 Privacy Policy – Malaysia Player Data Protection

My Lucky888 ("we", "the platform") is committed to protecting the privacy of all users on our platform. This Privacy Policy applies to all services offered through the website mylucky888.ws, the mobile platform, and all official My Lucky888 communication channels.

This policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing personal data processing in Malaysia. my lucky888 takes this responsibility seriously and applies data protection standards that go beyond the minimum legal requirements.

By registering an account, using our services, or interacting with the my lucky888 platform in any way, you confirm that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

My lucky888 only collects data that is necessary to provide the services you request. We do not collect excessive or irrelevant data. The following are the categories of data we collect:

2.1 Account Registration Data

• Full name as per identity card or passport
• Date of birth (for age verification — minimum 18 years old)
• An active Malaysian mobile number
• A valid and active email address
• Your chosen username

2.2 Identity Verification Data (KYC)

• Copy of identity card (MyKad) or passport
• Proof of address (utility bill or bank statement not older than 3 months)
• Selfie or photo with identification document (if required)

2.3 Financial & Transaction Data

• EWallet account information (Touch 'n Go, GrabPay, Boost, ShopeePay) — registered phone number only
• DuitNow account ID for withdrawals
• Records of all deposits and withdrawals
• Betting and game history

2.4 Technical & Usage Data

• IP address and network information
• Device type, operating system, and web browser
• Log data — pages visited, session time and duration
• Cookie and similar tracking technology information

My lucky888 uses your personal data for legitimate and limited purposes only. We will not use your data for any other purpose without your prior consent. The purposes for which data is used are as follows:

• Account Management: Creating, verifying, and managing your my lucky888 account
• Identity & Age Verification: Ensuring all players meet the minimum age requirement of 18 years
• Transaction Processing: Processing your deposits and withdrawals securely and accurately
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, and platform abuse
• Legal Compliance: Fulfilling the legal and regulatory obligations applicable to My Lucky888's operations
• Product Improvement: Analysing usage patterns to improve the gaming experience and user interface
• Marketing Communications: Sending promotional information, bonuses, and new offers — only to players who have given their consent
• Responsible Gaming: Identifying at-risk gaming patterns and reaching out to players who may need support

My Lucky888 does not sell or rent your personal data to any third party for their own marketing purposes. However, in the limited circumstances described below, we may share your data with trusted third parties:

• Payment Service Providers: The payment gateways we use to process transactions (Touch 'n Go, GrabPay, DuitNow, and others) receive only the information required to process your payment
• Game Software Providers: Slots, Live Casino, and other game providers receive non-identifiable game session IDs for technical purposes
• Analytics Companies: We use analytics tools to understand platform usage patterns in an aggregated and anonymised manner
• Legal Authorities: We will disclose data when required by a valid court order, regulatory body, or Malaysian law enforcement authority
• Fraud Prevention: We may share information with other platforms in the industry to detect and prevent fraud involving multiple platforms

In all cases where data is shared with third parties, my lucky888 ensures that those parties uphold data protection standards comparable to our own and use the data only for the specified purposes.

My lucky888 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

• Transit Encryption: All communications between your browser/app and My Lucky888's servers are encrypted using TLS 1.3 with 256-bit SSL certificates
• Storage Encryption: Sensitive data such as identity and financial information is encrypted at rest using AES-256
• Access Controls: A role-based access control system ensures that only authorised personnel can access player data
• Two-Factor Authentication: All internal access to player data systems requires two-factor authentication
• Continuous Monitoring: Threat detection systems operate around the clock to identify suspicious activity
• Security Audits: Regular security audits are conducted by independent third parties to identify and address vulnerabilities
• Staff Training: All my lucky888 staff receive regular data protection training

While we take all reasonable precautions, no security system can be guaranteed 100% secure. In the event of a security breach involving your personal data, My Lucky888 will notify you within 72 hours of the breach being detected, in line with industry best practices.

My lucky888 uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage, and deliver more relevant content. The following are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may affect your ability to log in or use certain features on the my lucky888 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and My Lucky888's internal policies, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the My Lucky888 team via email at support@mylucky888.ws or via 24/7 Live Chat. We may require identity verification before processing your request to ensure the security of your data.

My Lucky888 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy or as required by law. The following are our data retention guidelines:

• Active Account Data: Retained for the duration your account is active and for7 years after account closure
• Financial & Transaction Records: Retained for 7 years in accordance with accounting legislation and AML (Anti-Money Laundering) compliance requirements
• Customer Support Communication Records: Retained for 3 years from the date of last interaction
• Technical Log Data: Retained for 90 days for security and troubleshooting purposes
• Marketing Data: Retained until you withdraw consent or close your account

Upon expiry of the relevant retention period, data will be securely deleted or anonymised so that it can no longer be linked to any individual.

In the course of its operations, My Lucky888 may transfer your personal data to other countries — for example, when using international cloud servers or engaging with global game software providers. Any such data transfers are carried out in compliance with the requirements of Malaysia's PDPA.

My lucky888 ensures that all international data transfers are protected by:

• Binding data processing agreements with equivalent data protection requirements
• Consistent technical security standards regardless of processing location
• Data protection impact assessment before any new transfer is approved

The My Lucky888 platform may contain links to third-party websites such as payment providers and game suppliers. This Privacy Policy applies solely to the My Lucky888 platform.

My lucky888 is not responsible for the privacy practices of third-party websites. We encourage you to read the privacy policy of every website you visit before providing any personal information to them.

My lucky888 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this document
• Sending email notifications to all registered players
• Displaying a notice on the My Lucky888 platform at least 7 days before changes take effect

Continued use of the My Lucky888 platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, please stop using the platform and contact us to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how my lucky888 handles your personal data, please contact us through the following channels:

• Email: support@mylucky888.ws
• Live Chat: Available 24/7 on the My Lucky888 platform — click the chat icon at the bottom corner of your screen

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex requests such as data access or erasure, we will keep you informed of progress within the stipulated timeframe.