Privacy Policy

myluck88 ("we", "us", "our", "the Platform") is operated by myluck88 Group and is accessible at https://myluck88.cam. We provide online casino games, live dealer services, sports betting, lottery, and associated promotional programmes primarily to players located in Malaysia and other permitted jurisdictions.

This Privacy Policy ("Policy") describes how myluck88 collects, uses, stores, discloses, and protects personal data obtained from individuals ("you", "Player", "User") who visit, register on, or otherwise interact with the Platform. This Policy applies to all personal data processed in connection with your use of myluck88's services, whether you access the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere.

By registering an Account or continuing to use the Platform, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue your use of the Platform immediately.

This Policy was last revised on 1 January 2026. It supersedes all previous privacy notices published by myluck88. The most current version is always accessible at https://myluck88.cam/privacy-policy.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Account" — the registered user account held by a Player on the myluck88 Platform.
• "Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Controller is myluck88 Group.
• "Cookie" — a small data file stored on your device by your web browser when you visit a website, used to retain session information and preferences.
• "KYC" — Know Your Customer identity verification procedures required before withdrawal processing, including age, identity, and payment method verification.
• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, device identifiers, and behavioural data.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Processor" — a third party that processes personal data on behalf of myluck88 under a data processing agreement.
• "Special Category Data" — sensitive personal data including health information, which may be collected in the context of responsible gambling self-assessment tools or problem gambling support requests.

myluck88 collects personal data in the following categories, depending on your level of interaction with the Platform:

3.1 Identity and Contact Data

• Full legal name as appearing on government-issued identification
• Date of birth (used to verify the 21+ age requirement)
• Malaysian MyKad number, passport number, or driving licence number (for KYC verification)
• Email address
• Telephone number (where provided)
• Residential address, including city and postcode (e.g., Kuala Lumpur, Petaling Jaya, Penang)

3.2 Financial and Payment Data

• Deposit and withdrawal transaction records denominated in MYR (Malaysian Ringgit)
• Payment method details, including e-wallet account identifiers (Touch 'n Go eWallet, GrabPay, Boost), bank account details used for transactions via Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, and FPX
• Cryptocurrency wallet addresses where cryptocurrency deposits or withdrawals are used (BTC, USDT)
• Transaction history including amounts, dates, and reference numbers

3.3 Gaming and Betting Activity Data

• Wager history across all game types (slots, live casino, sports betting, lottery, esports)
• Sports betting market selections, stake amounts, and outcomes
• Bonus claims, wagering requirement progress, and promotion usage records
• Session duration, game preferences, and navigation behaviour within the Platform

3.4 Technical and Device Data

• IP address and geolocation data (used for jurisdiction verification and fraud prevention)
• Browser type and version
• Operating system and device type
• Session identifiers and login timestamps
• Referring URL and Platform navigation paths

3.5 Responsible Gambling Data

• Self-imposed deposit limits, loss limits, and cooling-off period settings
• Self-exclusion requests and effective dates
• Responsible gambling self-assessment responses (where voluntarily submitted)

3.6 Communications Data

• Support chat transcripts and email correspondence
• Feedback and complaint records
• Marketing communication preferences and opt-out records

Personal data is collected through the following channels and mechanisms:

4.1 Direct Collection

Data you provide directly when you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, respond to surveys, or participate in promotions.

4.2 Automated Collection

Technical data collected automatically when you access the Platform, including through cookies, web server logs, session tracking technologies, and analytics tools. This data is collected each time you visit the Platform, whether or not you are logged into your Account.

4.3 Third-Party Sources

In certain circumstances, myluck88 may receive personal data about you from third-party sources, including:

• Identity verification and KYC service providers engaged to confirm your identity and age
• Payment processing partners (including Malaysian payment gateways and e-wallet providers) who confirm transaction completion
• Fraud detection and anti-money laundering screening services
• Responsible gambling support databases, where you have consented to inclusion

The following table summarises the principal purposes for which myluck88 processes your personal data, together with the categories of data involved:

myluck88 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and myluck88, including operating your Account, processing transactions, and delivering gaming services. Without this processing, we cannot provide the Platform services.
• Legal Obligation: Processing required to comply with myluck88's legal and regulatory obligations under its international gaming licence, including KYC verification, age verification (21+), anti-money laundering checks, and record-keeping requirements.
• Legitimate Interests: Processing carried out on the basis of myluck88's legitimate interests, including fraud prevention, security monitoring, responsible gambling oversight, and Platform analytics, provided that such interests are not overridden by your fundamental rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent, including the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

myluck88 does not sell, rent, or trade personal data with third parties for commercial purposes. Your data may be shared in the following limited circumstances:

7.1 Service Providers (Processors)

myluck88 engages third-party service providers to assist in operating the Platform. These providers act as data processors and are bound by data processing agreements that restrict their use of your data to the specific purpose for which it was shared. Categories of processor include:

• KYC and identity verification providers
• Payment gateway operators and Malaysian banking partners (including those facilitating DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, Maybank2u, CIMB Clicks, and Public Bank transactions)
• Game software providers whose titles are hosted on the Platform
• Fraud detection and AML screening services
• Customer support software providers
• Platform hosting and cloud infrastructure providers

7.2 Regulatory and Legal Disclosure

myluck88 may disclose personal data to competent authorities, regulators, or law enforcement agencies where required to do so by law, court order, or our gaming licensing obligations. This includes compliance with anti-money laundering reporting obligations under our international licence.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of the assets of myluck88 Group, personal data held about Players may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and their rights in relation to their data at the time.

myluck88 retains personal data for as long as is necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised. Where data is anonymised, the anonymised dataset is no longer personal data and may be retained for analytical purposes indefinitely.

myluck88 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Transport Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard TLS (Transport Layer Security) / SSL (Secure Sockets Layer) protocols. You can verify the secure connection by the padlock icon in your browser's address bar when visiting https://myluck88.cam.
• Data-at-Rest Encryption: Personal data stored in our databases is encrypted using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data systems is restricted to authorised personnel on a need-to-know basis, with role-based access controls and audit logging in place.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their Account as an additional layer of protection.
• Penetration Testing: Our systems are subject to regular security assessments and penetration testing by qualified security professionals.
• Incident Response: myluck88 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights, affected Players will be notified without undue delay.

myluck88 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable session management, login authentication, and security features. These cookies cannot be disabled without impacting the functionality of the Platform.

10.2 Functional Cookies

These cookies remember your preferences and settings, such as language and display preferences, to provide a personalised experience. They are not strictly essential but improve the usability of the Platform.

10.3 Analytics Cookies

These cookies collect aggregated, anonymised information about how Players use the Platform, including which pages are visited most frequently and how Players navigate between sections. This data helps myluck88 improve the Platform's performance and user experience. Analytics data is processed in aggregated form and is not linked to individual Player identities.

10.4 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling cookies may affect the functionality of the Platform, including your ability to remain logged in to your Account. Detailed instructions for managing cookies are available in the help section of your browser.

Subject to applicable data protection law and the conditions set out in this Policy, you have the following rights in respect of your personal data held by myluck88:

11.1 Right of Access

You have the right to request a copy of the personal data myluck88 holds about you. We will provide a copy of your data in a commonly used electronic format within thirty (30) days of receiving a valid request.

11.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data held about you. Account profile information can be updated directly through your Account settings for certain data categories. For data that cannot be self-corrected (such as KYC records), please contact our support team.

11.3 Right to Erasure

You may request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected. Please note that deletion requests may be subject to overriding legal retention obligations, particularly in relation to financial transaction records and KYC documentation, which must be retained for specified periods under our licensing obligations.

11.4 Right to Restrict Processing

In certain circumstances, you may request that myluck88 restrict the processing of your personal data — for example, while the accuracy of your data is being verified following a rectification request.

11.5 Right to Data Portability

Where processing is based on your consent or contractual necessity, and is carried out by automated means, you may request that myluck88 provide your personal data in a structured, commonly used, and machine-readable format.

11.6 Right to Object

You have the right to object to processing of your personal data carried out on the basis of myluck88's legitimate interests, including direct marketing. Where you object to direct marketing, your preferences will be updated immediately.

11.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The myluck88 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. The 21+ minimum age threshold applies to all Players regardless of jurisdiction and is strictly enforced through mandatory KYC age verification procedures.

If myluck88 becomes aware that personal data has been collected from an individual under the age of 21, that Account will be immediately suspended, any deposited balance will be returned, and all associated personal data will be deleted as soon as practicably possible, subject only to any retention obligations that may arise under anti-money laundering law.

If you believe that a person under the age of 21 has registered an Account with myluck88, please notify us immediately at [email protected].

The myluck88 Platform may contain references to or links to third-party services, including payment provider portals (such as Touch 'n Go eWallet, DuitNow, or Maybank2u) which you may access in the course of completing a deposit or withdrawal. This Privacy Policy applies only to the myluck88 Platform itself.

When you navigate to a third-party payment provider's website or application to complete a transaction, you are subject to that provider's own privacy policy and data practices. myluck88 is not responsible for the privacy practices of third-party services and encourages Players to review the privacy policies of any third-party platforms they interact with.

myluck88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. Where amendments are material, we will notify registered Players via the email address associated with their Account and/or by posting a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy reflects when the most recent revision was published. Your continued use of the Platform following notification of changes constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, please discontinue your use of the Platform and submit a data deletion request in accordance with Section 11.3.

The most current version of this Privacy Policy is always available at https://myluck88.cam/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our support team using the following details. We treat all privacy-related enquiries as a priority.

• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 via the Platform interface at https://myluck88.cam
• Response Target: Privacy-related email queries are prioritised for response within five (5) business days; complex rights requests within thirty (30) days

If you are dissatisfied with the way in which myluck88 has handled your personal data or responded to a rights request, you may have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. Malaysian players may consider contacting the Personal Data Protection Department (PDPD) of Malaysia for guidance on data protection matters within Malaysia.