Privacy Policy

1 Introduction

MrLucky88 ("we", "us", "our", or "the Platform") is the operator of the online casino and sports betting platform accessible at mrlucky88.cam. We are committed to protecting the privacy and security of the personal data belonging to all individuals who interact with our platform ("you", "User", or "Player").

This Privacy Policy describes the types of personal information we collect, the purposes for which it is used, the parties with whom it may be shared, the safeguards we apply to protect it, and the rights available to you in relation to your personal data. This Policy applies to all Users of the MrLucky88 platform, including registered Players, visitors browsing the website without an account, and individuals who contact our support team.

By accessing mrlucky88.cam, registering an account, making a deposit, or otherwise engaging with our platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately.

Our Core Commitment: MrLucky88 does not sell, rent, or trade your personal data to third-party marketers. Your data is used exclusively for the purposes outlined in this Policy — primarily to operate your account, process transactions, ensure regulatory compliance, and improve your experience on the platform.

2 Definitions

Throughout this Privacy Policy, the following terms carry the meanings assigned below:

"Personal Data" means any information that identifies or can identify a living natural person, directly or indirectly. This includes names, identification numbers, location data, email addresses, device identifiers, and online behavioral data.
"Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, deletion, or any combination thereof.
"Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, the Data Controller is MrLucky88 as the operator of the platform.
"Data Processor" means any third party that processes Personal Data on behalf of MrLucky88 under contractual obligation, such as payment service providers or fraud detection vendors.
"Cookies" means small text files stored on a User's device by the browser upon visiting the Platform, used to retain session information, preferences, and behavioral tracking data.
"KYC" means Know Your Customer — the identity verification process through which MrLucky88 confirms the identity, age, and residency of a Player before activating certain account functions including withdrawals.
"Third Party" means any individual, organization, or entity that is not the User or MrLucky88.

3 Data We Collect

MrLucky88 collects Personal Data across several categories, depending on the nature of your interaction with the Platform. We collect only the data that is necessary for the purposes described in this Policy.

Category	Examples of Data Collected	When Collected
Identity Data	Full name, date of birth, gender, nationality, government-issued ID number	During registration and KYC verification
Contact Data	Email address, mobile phone number, city and state of residence (e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru)	During registration or account updates
Financial Data	Payment method details (bank account, e-wallet identifiers, cryptocurrency wallet addresses), transaction history, deposit and withdrawal records in MYR or equivalent	When depositing or withdrawing funds
Technical Data	IP address, browser type and version, operating system, device identifiers, session tokens, referring URL	Automatically upon platform access
Usage Data	Pages visited, games played, betting patterns, session duration, clickstream data, search queries within the Platform	Continuously during platform use
Communication Data	Content of live chat transcripts, support emails, and any correspondence sent to our support team	When contacting support
Verification Documents	Copies of national identity cards (MyKad), passports, utility bills, or bank statements submitted for KYC purposes	During KYC verification requests

We do not intentionally collect special categories of Personal Data (such as health data, racial or ethnic origin, or religious beliefs) and request that Users refrain from submitting such information through any channel.

4 How We Collect Your Data

We collect Personal Data through the following means:

Direct Submission: Information you actively provide when registering an account, completing KYC verification, making deposits or withdrawal requests, participating in promotions, or communicating with our support team;
Automated Technologies: Technical and Usage Data collected automatically via server logs, cookies, browser storage APIs, and similar tracking technologies when you access and navigate the Platform;
Payment Service Providers: Financial Data received from our integrated payment partners (including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and cryptocurrency processors) when you initiate a transaction;
Identity Verification Partners: In some cases, identity confirmation data may be obtained from or verified against third-party identity verification service providers as part of our KYC obligations;
Fraud Prevention Services: Device fingerprinting and behavioral data may be shared with and received from fraud detection providers to protect the integrity of the Platform.

5 Purposes of Data Processing

MrLucky88 processes Personal Data for the following purposes:

Account Management: Creating, maintaining, and administering your Player account, including processing login authentication and account settings;
Transaction Processing: Facilitating deposits, withdrawals, and bonus credit/debit transactions denominated in MYR or supported cryptocurrencies;
Identity Verification (KYC): Confirming the identity, age, and residency of Players as required under our compliance obligations and to prevent underage gambling;
Regulatory Compliance: Meeting our obligations under applicable anti-money laundering (AML) standards, responsible gambling requirements, and other applicable regulatory frameworks;
Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, account abuse, collusion, money laundering, and other prohibited conduct;
Customer Support: Responding to Player inquiries, resolving disputes, and providing assistance via live chat and email;
Platform Improvement: Analyzing Usage Data to understand how Players interact with the Platform and to improve functionality, navigation, and game offerings;
Promotional Communications: Sending marketing communications about bonuses, promotions, and Platform updates to Players who have opted in to receive such communications. Players may unsubscribe at any time;
Responsible Gambling: Monitoring player activity patterns to identify potential signs of problem gambling and, where applicable, applying or communicating self-exclusion and limit tools.

6 Legal Basis for Processing

Where applicable data protection law requires a legal basis for the processing of Personal Data, MrLucky88 relies on the following grounds:

Contractual Necessity: Processing required to perform the contract between MrLucky88 and the Player (i.e., the Terms & Conditions), including account management, transaction processing, and support services;
Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC/AML requirements and responsible gambling mandates;
Legitimate Interests: Processing for purposes of fraud prevention, platform security, and product improvement, where such interests do not override the fundamental rights and interests of the Player;
Consent: Where consent is required — for example, for optional marketing communications — we will request explicit consent and provide a clear and accessible means to withdraw it at any time.

7 Data Sharing & Disclosure

MrLucky88 does not sell your Personal Data. We may share your data with the following categories of recipients only to the extent necessary and proportionate for the stated purpose:

Payment Service Providers: Financial data is shared with integrated payment processors including Maybank, CIMB, Touch 'n Go eWallet, DuitNow, FPX, and cryptocurrency payment networks solely to facilitate your transactions;
Identity Verification Partners: KYC documentation may be transmitted to third-party identity verification service providers operating under contractual data processing agreements with MrLucky88;
Fraud Detection & Security Vendors: Technical and usage data may be shared with specialist fraud prevention providers to identify and prevent account abuse;
Customer Support Platforms: Communication data processed through our live chat and ticketing systems is handled by our support infrastructure providers, bound by appropriate data processing terms;
Legal & Regulatory Authorities: We may disclose Personal Data to law enforcement agencies, regulators, or courts where required by applicable law, a valid legal order, or where necessary to protect the rights, safety, or property of MrLucky88 or any third party;
Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of MrLucky88's business assets, Personal Data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

No Sale of Data: MrLucky88 strictly prohibits the sale, rental, lease, or commercial exploitation of Player Personal Data to third-party advertisers, data brokers, or marketing networks. Any vendor with access to Personal Data is bound by contractual data processing obligations that restrict their use of that data to the specific purposes for which it was shared.

8 Data Retention

MrLucky88 retains Personal Data only for as long as is necessary to fulfil the purposes outlined in this Policy and to meet our legal, regulatory, and compliance obligations. The following general retention periods apply:

Active Account Data: Retained for the full duration of your account's active status and for a period of 5 years following permanent account closure;
Transaction Records: Financial transaction data is retained for a minimum of 7 years from the transaction date, in accordance with standard financial record-keeping requirements;
KYC Documentation: Identity verification documents are retained for a minimum of 5 years from the date of submission or account closure, whichever is later;
Support Communications: Live chat transcripts and email correspondence are retained for 2 years from the date of the last communication in a given support thread;
Marketing Preferences: Records of consent and opt-out preferences are retained indefinitely to ensure compliance with marketing suppression obligations.

Upon expiry of the applicable retention period, Personal Data will be securely deleted, anonymized, or pseudonymized in a manner that prevents re-identification.

9 Cookies & Tracking Technologies

MrLucky88 uses cookies and similar tracking technologies to operate and improve the Platform. These technologies allow us to recognize returning visitors, remember preferences, maintain session security, and analyze how the Platform is used.

The following categories of cookies are used on mrlucky88.cam:

Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication tokens, anti-CSRF tokens, and load-balancing cookies. These cannot be disabled without impairing core functionality;
Functional Cookies: Used to remember your preferences, such as language settings, preferred display options, and last-visited game categories. These enhance your experience but are not required for core operation;
Analytical Cookies: Used to collect aggregated, anonymized data on how users navigate the Platform — including pages visited, session duration, and click behavior. This data helps us identify improvement opportunities;
Security Cookies: Used to identify and prevent fraudulent access attempts, detect anomalous session behavior, and support our broader fraud prevention infrastructure.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the availability or performance of Platform features. Continued use of the Platform after reviewing this notice constitutes acceptance of our cookie practices as described herein.

10 Data Security

MrLucky88 takes the security of your Personal Data seriously and applies a multi-layered set of technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction. These measures include:

256-bit TLS Encryption: All data transmitted between your browser and our servers is encrypted using Transport Layer Security (TLS 1.3), the current industry standard for secure web communications;
Encrypted Data Storage: Sensitive Personal Data stored on our servers is encrypted at rest using AES-256 encryption;
Access Controls: Access to Personal Data within our organization is restricted on a strict need-to-know basis. All personnel with data access are bound by confidentiality obligations;
Infrastructure Security: Our platform infrastructure is hosted in secure data centres with physical access controls, redundant systems, and continuous security monitoring;
Regular Security Reviews: We conduct periodic security assessments and vulnerability testing to identify and remediate potential weaknesses before they can be exploited.

While we employ industry-standard security measures, no internet-based system can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, MrLucky88 will notify affected Users and relevant authorities within the timeframes required by applicable law.

11 Your Privacy Rights

Subject to applicable law and our legitimate regulatory obligations (such as AML and KYC retention requirements), you have the following rights in relation to your Personal Data held by MrLucky88:

Right of Access

Request a copy of the Personal Data we hold about you and information on how it is being processed.

Right to Rectification

Request correction of inaccurate or incomplete Personal Data held in your account.

Right to Erasure

Request deletion of your Personal Data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations.

Right to Restrict Processing

Request that we limit the processing of your data in certain circumstances while a dispute or concern is being resolved.

Right to Data Portability

Request a structured, machine-readable copy of the Personal Data you provided to us directly, for transfer to another service provider.

Right to Object

Object to processing based on legitimate interests, or to the use of your data for direct marketing purposes at any time.

To exercise any of the above rights, please contact our support team via live chat or email at support@mrlucky88.cam. We will respond to all verified data subject requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, and you will be notified accordingly.

Please note that certain rights are subject to exceptions and limitations. For example, we may be unable to delete Personal Data that we are legally required to retain for KYC, AML, or tax record-keeping purposes.

12 Children & Minors

The MrLucky88 platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, store, or process Personal Data relating to persons under the age of 21. The provision of gambling services to minors is strictly prohibited and contrary to our foundational commitments as a responsible operator.

If MrLucky88 becomes aware or has reasonable grounds to believe that a registered User is under the age of 21, we will take immediate action to:

Suspend the User's account pending age verification;
Withhold any associated funds pending investigation;
Delete Personal Data collected in connection with the account where no legal obligation to retain it exists;
Refer the matter to relevant authorities where required.

Parental Guidance: If you are a parent or guardian and believe your child may have accessed the MrLucky88 platform or submitted personal information, please contact us immediately at support@mrlucky88.cam so that we may investigate and take appropriate action.

13 International Data Transfers

In order to deliver the MrLucky88 service to Malaysian players, certain Personal Data may be processed by or on behalf of MrLucky88 in jurisdictions outside Malaysia. Where such international transfers occur, MrLucky88 takes appropriate steps to ensure that your Personal Data receives a level of protection equivalent to that described in this Policy.

Safeguards for international data transfers include, where applicable:

Contractual data processing agreements incorporating standard data protection clauses between MrLucky88 and its international service providers;
Transfers to jurisdictions recognized as providing an adequate level of data protection by applicable standards;
Binding corporate rules or equivalent internal data governance standards where intra-group transfers are involved.

By using the MrLucky88 platform, you acknowledge and consent to the transfer of your Personal Data to third-party processors operating outside Malaysia, subject to the safeguards described above.

14 Updates to This Policy

MrLucky88 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The "Last Updated" date at the top of this Policy will be revised accordingly upon each update.

Where changes are material — meaning they significantly affect how your Personal Data is processed or your rights in relation to it — we will provide notice via:

A prominent notification banner on the Platform homepage;
An email notification to your registered email address, where we are able to do so.

Your continued use of the MrLucky88 platform following the effective date of any updated Policy constitutes your acknowledgment and acceptance of the revised terms. We encourage you to review this page periodically to remain informed of our current privacy practices.

15 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data by MrLucky88, please contact us through the following channels:

Live Chat Support: Available 24 hours a day, 7 days a week, including Malaysian public holidays such as Hari Raya Aidilfitri, Chinese New Year, and Deepavali. Average response time is under 3 minutes.
Email: support@mrlucky88.cam — we aim to respond to all privacy-related inquiries within 5 business days, and all formal data subject access requests within 30 calendar days.

When submitting a data-related inquiry by email, please include your registered username, the nature of your request, and any relevant account reference numbers to allow us to process your inquiry efficiently and accurately.

For matters relating to responsible gambling, self-exclusion, or deposit limit adjustments, please refer to our dedicated Responsible Gambling page, or contact our support team directly.

Contents