Privacy Policy — luky88 Online Casino

1Introduction

This Privacy Policy ("Policy") describes how luky88 ("the Company", "we", "us", "our") — the operator of the online gaming platform accessible at luky88.cam ("the Platform") — collects, processes, stores, and protects the personal data of individuals who register accounts, visit the Platform, or otherwise interact with our services.

This Policy is intended to provide players, particularly those accessing the Platform from Malaysia, with a clear and transparent understanding of our data practices. It is written in plain, accessible English in accordance with our commitment to transparency and player trust.

This Policy should be read in conjunction with our Terms & Conditions, which govern the use of the Platform generally. Where any conflict arises between this Policy and the Terms & Conditions in relation to personal data, this Policy shall take precedence.

We reserve the right to update this Policy periodically. The most current version will always be published on this page with the effective date shown above. Continued use of the Platform following publication of a revised Policy constitutes acceptance of the changes.

2Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, IP address, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, luky88 (the Company).
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller, pursuant to a written data processing agreement.
• "Player" means any individual who has registered an account on the Platform or who accesses the Platform without a registered account.
• "KYC Data" means identity verification documents and related personal information provided by a Player in connection with the Know Your Customer process.
• "Sensitive Data" means a specific category of personal data deserving enhanced protection, including financial data, government-issued identity documents, and data relating to problem gambling indicators.

3Data Controller Identity

The Data Controller responsible for the personal data collected through the luky88 Platform is the Company operating luky88.cam under its applicable international gaming licence. Registered company details are available upon request by contacting our support team through the channels set out in Section 16 of this Policy.

For all privacy-related enquiries, requests to exercise data rights, or complaints regarding data handling practices, players may contact our Data Protection team directly via the email address provided in Section 16. All such correspondence will be handled in strict confidence.

4Personal Data We Collect

luky88 collects personal data through several channels, including account registration, platform use, payment transactions, KYC verification processes, and communications with our support team. The categories of data we collect are described below.

4.1 Registration Data

When you open an account on the Platform, we collect:

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Email address;
• Mobile phone number;
• Residential address (including city, state, and postcode — Malaysian addresses accepted);
• Username and hashed password (passwords are never stored in plain text).

4.2 KYC & Identity Verification Data

To comply with anti-money-laundering obligations and to verify your age and identity, we collect:

• Malaysian National Identity Card (MyKad) number and document images (front and back);
• Passport details (for non-MyKad holders);
• Proof of residential address documents (e.g., utility bill, bank statement issued by Maybank, CIMB, Public Bank, or other Malaysian institutions).

4.3 Financial & Transaction Data

In connection with deposits and withdrawals, we collect:

• Payment method details (e.g., e-wallet account numbers for Touch 'n Go eWallet, Boost, GrabPay; bank account numbers for Maybank, CIMB, Public Bank; DuitNow identifiers; FPX transaction references);
• Transaction amounts, timestamps, and reference numbers;
• Cryptocurrency wallet addresses where applicable (BTC, ETH, USDT, BNB).

4.4 Technical & Usage Data

When you access the Platform, we automatically collect:

• IP address and approximate geolocation (country/city level);
• Device type, operating system, and browser version;
• Session duration, pages visited, games played, and betting activity;
• Referral source (e.g., how you arrived at the Platform);
• Cookie identifiers and similar tracking data (see Section 10).

4.5 Communications Data

When you contact our support team via live chat or email, we retain records of that communication, including the content of messages, timestamps, and agent notes, for quality assurance, training, and complaint resolution purposes.

5How We Use Your Personal Data

luky88 processes personal data for the following purposes:

We do not use your personal data for automated profiling that produces legal or similarly significant effects without human review. Responsible gambling monitoring involves pattern analysis to identify potential at-risk behaviour — however, any resulting intervention (such as account contact or limit suggestions) is reviewed by a human member of our player welfare team before action is taken.

6Legal Basis for Processing

luky88 processes personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to perform the contract between you and luky88 — including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money-laundering legislation, identity verification obligations, and responsible gambling requirements.
• Legitimate interests: Processing undertaken to protect the Platform from fraud, maintain security, prevent abuse, and improve the platform experience — where such interests are not overridden by your privacy rights.
• Consent: For specific processing activities, such as sending promotional communications by email or SMS, we rely on your explicit consent. You may withdraw consent at any time by contacting our support team or updating your account notification preferences.

7Data Sharing & Disclosure

luky88 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment processors and e-wallet providers: Transaction data is shared with the relevant payment service provider (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX banking partners) solely to process your deposit or withdrawal request.
• Identity verification (KYC) providers: KYC data may be shared with third-party identity verification services contracted by the Company to perform document validation and sanctions screening.
• Games providers: Limited technical identifiers (not full personal data) are shared with games studios and live dealer platform providers to deliver the game experience and settle wagers.
• Regulatory and law enforcement authorities: We may be required by law or court order to disclose personal data to competent authorities. We will notify you of such disclosure where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of business assets, personal data may be transferred as part of that transaction. Players will be notified in advance where practicable.

All third parties to whom we disclose personal data are subject to contractual data protection obligations at least equivalent to those applied by luky88 itself.

8International Data Transfers

As an internationally licensed online gaming platform, luky88 may process and store personal data in jurisdictions outside Malaysia. Where personal data is transferred to countries that may not offer the same level of data protection as recognised international standards, the Company implements appropriate safeguards to ensure that your data remains protected, including contractual data protection clauses with recipient service providers and access restriction controls.

By using the luky88 Platform, you acknowledge and consent to the international transfer of your personal data as described in this Policy.

9Data Retention

luky88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Specific retention periods include:

• Active account data: Retained for the duration of the account relationship and for a period of five (5) years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years to comply with financial regulatory requirements.
• KYC documents: Retained for five (5) years following the end of the business relationship, or longer if required by applicable law.
• Support communications: Retained for three (3) years for quality assurance and complaint resolution purposes.
• Technical and usage data (logs): Retained for twelve (12) months for platform security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

10Cookies & Tracking Technologies

luky88 uses cookies and similar tracking technologies (including pixel tags and local storage) to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Performance & Analytics Cookies: Used to understand how players interact with the Platform — which pages are visited most, where errors occur, and how load times can be improved. Data is collected in aggregated, anonymised form.
• Functional Cookies: Enable the Platform to remember your preferences, such as language settings, preferred game lobby view, and deposit method defaults.
• Marketing Cookies: Used, with your consent, to track your referral source and to deliver relevant promotional content. These may be placed by our affiliate marketing partners and are subject to their own privacy policies.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use the Platform effectively.

11Security Measures

luky88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including identity documents and financial data;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Two-factor authentication (2FA) available for all player accounts and mandatory for staff accounts;
• Regular third-party penetration testing and vulnerability assessments;
• Automated monitoring for suspicious access patterns and potential data breaches.

Notwithstanding the above, no internet-based system is entirely immune to security risks. You are responsible for maintaining the security of your own account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

12Your Data Rights

Subject to applicable law and regulatory restrictions, you have the following rights in relation to your personal data held by luky88. To exercise any of these rights, please contact our Data Protection team as described in Section 16.

We will respond to all data rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 60 days, with notification. We may need to verify your identity before actioning a request.

13Minors & Age Restrictions

The luky88 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered an account on luky88, please contact our support team immediately. All such reports are treated as a priority and investigated without delay.

14Third-Party Links & Services

The luky88 Platform may contain references to third-party services, such as payment providers (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, DuitNow) and games studios. While we take care to work only with reputable service providers, luky88 is not responsible for the privacy practices or content of any third-party website or service.

When you interact with a third-party payment or identity verification service as part of the luky88 deposit, withdrawal, or KYC process, that service's own privacy policy will also apply to how they handle your data. We encourage you to review the privacy policies of any third-party services you use in connection with the Platform.

15Amendments to This Policy

luky88 reserves the right to update or amend this Privacy Policy at any time. Changes will be published on this page with an updated effective date. Where changes are material — for example, where we introduce a new category of data collection or a new third-party data sharing arrangement — we will notify active players by email or via an in-platform notification.

Your continued use of the Platform following the publication of any updated Policy constitutes your acceptance of those changes. If you object to any amendment, you should cease using the Platform and contact us to close your account.

16Contact Us & Complaints

For all privacy-related enquiries, requests to exercise your data rights, or complaints regarding our data handling practices, please contact the luky88 Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, from the Platform dashboard. For urgent privacy concerns — such as suspected unauthorised access to your account — live chat is the fastest channel.
• Email (plain text — not a link): [email protected] — please mark your message "Privacy Request" in the subject line to ensure it is routed to the correct team. Responses are provided within 2 business hours during standard operating hours, and within 5 business days for formal data rights requests.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the data protection supervisory authority in the jurisdiction under which the Company is licensed. Details of the relevant authority are available upon request from our support team.

This Privacy Policy was last reviewed and updated on 1 January 2026. luky88 is committed to reviewing this Policy at least annually and following any material change to our data processing activities.