Privacy Policy luky88 – Your Personal Data Protection

01 Information We Collect

When you interact with the luky88 platform, we collect several categories of information to ensure our services run smoothly and securely. The following are the types of information we collect:

We only collect information that is strictly necessary to operate the platform. We do not collect sensitive information such as medical data, political views, or religious beliefs unless required by law.

02 How We Use Your Data

The personal data we collect is used solely for lawful and transparent purposes. luky88 uses your information for the following:

• Account Management: Creates, verifies, and maintains your member account, including mandatory KYC processes.
• Transaction Processing: Processes all deposits, withdrawals, and other financial activities in your account securely and efficiently.
• Platform Security: Detects and prevents fraud, money laundering, multiple account ownership, and other suspicious activities that could compromise platform integrity.
• Service Improvement: Analyses usage patterns to improve user experience, platform performance, and the relevance of game offerings.
• Service Communications: Sends important notices relating to your account, security updates, changes to terms, or transaction information.
• Legal Compliance: Fulfils reporting and compliance obligations to the relevant authorities in accordance with Malaysian law.
• Customer Support: Enables our support team to provide accurate and effective assistance whenever you contact us.

We do not use your data to make automated decisions that materially affect you without appropriate human oversight. Any profiling analysis carried out is solely for security purposes and service improvement.

03 Information Sharing

Luky88 does not sell or rent your personal data to any third party. However, there are limited situations where we need to share information with certain parties:

• Service Providers: Payment providers (FPX, DuitNow, Touch 'n Go, GrabPay, Boost), gaming software providers, and IT infrastructure providers that assist us in operating the platform. They are bound by strict confidentiality agreements.
• Legal Authority: Government agencies, law enforcement bodies, or courts when required under Malaysian law, including for anti-money laundering purposes.
• Auditors & Professional Advisors: Accountants, lawyers, or auditors subject to strict professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition or sale of assets, data may be transferred to the receiving entity provided they comply with the same privacy terms.

04 Cookies & Tracking Technologies

The luky88 platform uses cookies and similar tracking technologies to enhance user experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helps us understand how users interact with the platform through anonymous analytics for continuous improvement purposes.
• Functional Cookies: Saves your preferences such as language, display settings, and platform configuration to deliver a more personalised experience.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage or disable cookies through your web browser settings at any time. However, some platform features may not function fully if essential cookies are disabled. We do not use third-party cookies for targeted advertising.

05 Data Security

Protecting your personal data is luky88's highest priority. We implement multiple layers of technical and organisational security measures to ensure your data remains protected at all times:

• SSL/TLS Encryption: All communications between your device and luky88 servers are encrypted using 256-bit SSL/TLS protocol to prevent data interception.
• Two-Factor Authentication: Members may enable two-factor authentication (2FA) for an added layer of security when logging into their account.
• 24/7 Monitoring: Our cybersecurity team continuously monitors the platform to detect and respond to any threats or unusual activity.
• Internal Access Controls: Only staff with a legitimate business need are permitted to access member personal data, and all such access is logged and audited.
• Regular Security Testing: We conduct regular penetration testing and security audits by independent experts to identify and address vulnerabilities.

06 Data Retention

Luky88 only retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law. Data retention periods are as follows:

• Active Account Data: Retained for the duration your account remains active and in use.
• KYC & Identity Data: Retained for a minimum of 6 years after account closure in line with anti-money laundering legal requirements.
• Financial Transaction Records: Retained for 7 years in accordance with financial reporting and tax requirements prescribed under Malaysian law.
• Security Logs: Retained for 12 months for security incident investigation purposes if required.
• Support Communication Records: Retained for 2 years after the last interaction to assist in resolving any disputes.

Once the retention period expires and there is no legal requirement to retain it, your data will be securely deleted or anonymized so it can no longer be associated with you.

07 Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by luky88:

To exercise any of the above rights, please contact our data protection team via email at [email protected]. We will process your request within 14 business days. In complex cases, this period may be extended up to 30 days with prior notice to you.

08 Third-Party Links

The luky88 platform may contain links or integrations to third-party services such as payment providers and game providers. This Privacy Policy applies only to the luky88 platform and does not cover the privacy practices of those third parties.

Each third-party provider integrated with the luky88 platform has its own privacy policy. We recommend reading the relevant provider's privacy policy before interacting with their services. luky88 is not responsible for the privacy practices or content of third-party websites.

All third-party providers working with luky88 are selected based on their compliance with high data security standards and are required to sign data processing agreements that set out their obligations regarding the protection of your data.

09 Children's Privacy

The luky88 platform is strictly restricted to individuals aged 18 and above. We do not intentionally collect or process any personal data from individuals under the age of 18.

If we discover that personal data of an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. If you are aware that a minor has registered on our platform, please contact us immediately through the available support channels.

10 Changes to the Privacy Policy

Luky88 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements or service improvements. Any material changes will be communicated to you via:

• A clear notice on the luky88 platform home page
• Email to the address registered to your account
• Update the "Last Updated" date at the top of this page

We encourage you to review this Privacy Policy periodically so you remain informed about how we protect your information. Continued use of the platform after any changes take effect constitutes your acceptance of the updated policy.

11 Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer through the following channels:

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Department of Malaysia or the relevant data protection authority in your country of residence.