A plain-English summary of our most important data practices. Full legal detail follows in the policy below.
What We Collect
We collect only the personal data necessary to operate your account: identity documents (for KYC), contact information, payment details, and platform usage data. We do not collect unnecessary data.
How We Protect It
All data is encrypted in transit using 256-bit SSL and stored on secured servers. Access to personal data is restricted to authorised personnel only, on a strict need-to-know basis.
Who We Share With
We do not sell your data. We share it only with regulated payment processors, KYC verification partners, and regulatory authorities where legally required — never with advertising third parties.
Your Rights
You have the right to access, correct, delete, or export your personal data at any time. You may also object to certain processing activities or withdraw consent where consent is the legal basis.
How Long We Keep It
We retain your data for as long as your account is active and for a defined period thereafter as required by law. KYC documents are retained for a minimum of five years to satisfy anti-money laundering obligations.
Cookies & Tracking
We use strictly necessary cookies for platform functionality and optional analytics cookies to improve your experience. You may manage cookie preferences via your browser settings at any time.
Contents
This site uses 256-bit SSL encryption on all pages. Your connection to mylucky888 is always secure.
1 Introduction
mylucky888 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of all users who access our online casino, sports betting, and related services at https://mylucky888.cam. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
We have designed this Policy to be as clear and accessible as possible. We want you to fully understand how your information is handled at every stage of your relationship with mylucky888 — from the moment you first visit our website through to the active use of your account and beyond.
Your agreement: By registering an account, accessing, or continuing to use the mylucky888 Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal data as described herein. This Policy forms part of our broader Terms & Conditions.
This Policy applies to all personal data processed in connection with the mylucky888 Platform, including data collected via the website, live chat support interactions, email correspondence, and any other communication channels operated by mylucky888.
2 Data Controller
For the purposes of applicable data protection legislation, mylucky888 acts as the data controller in respect of the personal data collected from users of the Platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable legal requirements.
If you have any questions regarding data controller responsibilities or wish to exercise your data subject rights, please refer to the contact details provided in Section 15 of this Policy.
3 Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
- "Personal Data"
- Any information relating to an identified or identifiable natural person, including names, identification numbers, location data, online identifiers, or factors specific to physical, economic, cultural, or social identity.
- "Processing"
- Any operation or set of operations performed on personal data, whether automated or not, including collection, recording, storage, adaptation, retrieval, use, disclosure, or erasure.
- "Data Subject"
- The natural person to whom the personal data relates — in the context of this Policy, this means you as a user of the mylucky888 Platform.
- "Third Party"
- Any natural or legal person other than you, mylucky888, or persons under direct authority of mylucky888 who is authorised to process personal data.
- "KYC Documents"
- Identity verification documents submitted by a player as part of the Know Your Customer verification process, including but not limited to national identification cards, passports, driver's licences, and proof of address documentation.
- "Cookies"
- Small text files placed on your device by a website you visit, used to store information about your session, preferences, or browsing behaviour for functional or analytical purposes.
4 Data We Collect
mylucky888 collects personal data through various means in connection with your use of the Platform. The categories of personal data we collect and the circumstances in which they are collected are set out below.
4.1 Data You Provide Directly
- Registration data: Full legal name, date of birth, gender, nationality, residential address, telephone number, and email address provided when creating an Account.
- KYC documents: Copies of your Malaysian MyKad, Passport, or Driver's Licence; proof of address documents (utility bills, bank statements); and where required, selfie photographs for identity verification.
- Payment information: Bank account details, e-wallet identifiers (e.g., Touch 'n Go eWallet phone number, Boost-linked number, GrabPay ID), or cryptocurrency wallet addresses used for deposits and withdrawals. We do not store full card numbers or banking passwords.
- Support communications: Records of any correspondence with our customer support team, including live chat transcripts, email exchanges, and any documents submitted in connection with account queries or disputes.
- Responsible gambling preferences: Self-exclusion requests, deposit limit settings, and session limit preferences you configure through your account settings.
4.2 Data Collected Automatically
- Device and technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone.
- Usage and behavioural data: Pages visited on the Platform, game sessions played, betting history, deposit and withdrawal transactions, session duration, and feature interactions.
- Geolocation data: Approximate geographic location derived from IP address, used to verify eligibility and comply with jurisdictional restrictions.
- Cookie and tracking data: Information collected through cookies and similar technologies as described in Section 11 of this Policy.
4.3 Data We Receive from Third Parties
- Payment processors: Confirmation of transaction status and payment method verification from providers including FPX, DuitNow, and e-wallet operators.
- KYC verification partners: Results of identity verification checks conducted through authorised third-party verification service providers.
- Fraud prevention services: Risk scores and fraud indicators from authorised anti-fraud and anti-money laundering screening services.
5 Legal Basis for Processing
We process your personal data on one or more of the following legal bases depending on the specific purpose of the processing:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract with you |
| Processing deposits and withdrawals | Performance of a contract; legal obligation |
| KYC identity verification | Legal obligation (AML/compliance requirements) |
| Fraud detection and prevention | Legitimate interest; legal obligation |
| Customer support communications | Performance of a contract; legitimate interest |
| Responsible gambling tools & monitoring | Legal obligation; legitimate interest |
| Analytics and platform improvement | Legitimate interest |
| Marketing communications (where opted in) | Consent |
6 How We Use Your Data
mylucky888 uses your personal data strictly for the purposes for which it was collected and any additional compatible purposes permitted by applicable law. Specifically, we use your personal data for the following purposes:
- Account administration: Creating, maintaining, and managing your account, verifying your identity, and ensuring the security of your account.
- Service delivery: Enabling you to access and use all features of the Platform, including casino games, sports betting markets, live dealer tables, and the VIP loyalty programme.
- Payment processing: Processing deposits via Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and other accepted Malaysian payment channels, and processing withdrawal requests to your designated payment method.
- KYC compliance: Verifying your identity and eligibility to use the Platform in compliance with applicable anti-money laundering and responsible gambling regulations.
- Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, bonus abuse, and other prohibited activities.
- Customer support: Responding to your enquiries, resolving disputes, and providing assistance through live chat and email support channels.
- Responsible gambling: Monitoring gaming activity to identify potential problem gambling patterns and administering self-exclusion, deposit limits, and cooling-off periods.
- Legal and regulatory compliance: Fulfilling our legal obligations, responding to regulatory requests, and cooperating with law enforcement where required.
- Platform improvements: Analysing user behaviour and feedback to improve the functionality, performance, and user experience of the Platform.
- Marketing communications: Sending you promotional offers, bonus notifications, and relevant updates about mylucky888 services — only where you have expressly opted in to receive such communications. You may unsubscribe at any time.
We do not use your personal data to make automated decisions that produce significant legal effects without human review. All account suspension and restriction decisions involve manual review by our compliance team.
7 Data Sharing & Disclosure
mylucky888 does not sell, rent, or trade your personal data to any third party. We share your personal data only in the following limited circumstances:
7.1 Service Providers and Processors
We engage trusted third-party service providers to assist in delivering our services. These include: payment processors (FPX, DuitNow, e-wallet providers), identity verification and KYC service providers, fraud detection and anti-money laundering screening services, cloud hosting and infrastructure providers, and customer support platform operators. All such providers are contractually required to process personal data only for the purposes we specify and to maintain appropriate security standards.
7.2 Regulatory and Law Enforcement Authorities
We may disclose personal data to relevant regulatory authorities, law enforcement agencies, or other government bodies where we are legally required or permitted to do so — for example, in response to a court order, regulatory investigation, or to comply with anti-money laundering reporting obligations. Any such disclosure will be made on a minimum-necessary basis.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of the business, your personal data may be transferred to the successor entity as part of that transaction. Where this occurs, you will be notified in advance and the processing of your data will continue to be subject to equivalent privacy protections.
7.4 With Your Consent
We may share your data with other third parties where you have provided explicit consent for us to do so. You may withdraw such consent at any time by contacting our support team.
We do not share your personal data with advertising networks, data brokers, or social media platforms for marketing or profiling purposes.
8 International Data Transfers
Some of our service providers and infrastructure partners may be located outside of Malaysia. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect your data, including contractual clauses requiring equivalent data protection standards to those applicable in the jurisdiction from which the data originates.
We will not transfer your personal data to countries that do not provide an adequate level of data protection without implementing appropriate protective measures.
9 Data Retention
We retain your personal data for as long as is necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations. The key retention periods applicable to different categories of data are:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years after closure |
| KYC identity documents | Minimum 5 years from submission (AML obligation) |
| Transaction records | Minimum 5 years from transaction date |
| Support communications | 3 years from last interaction |
| Responsible gambling records | Duration of exclusion + 5 years |
| Website usage/analytics data | Up to 26 months (anonymised) |
| Marketing preferences | Until consent is withdrawn |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised. Where anonymisation is not possible, data will be rendered inaccessible through secure archival processes.
10 Security Measures
mylucky888 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:
- Transport Layer Security (TLS): All data transmitted between your browser and the mylucky888 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
- Data encryption at rest: Sensitive personal data stored in our systems, including KYC documents and payment information, is encrypted at rest using AES-256 encryption.
- Access controls: Access to personal data is restricted to authorised personnel only, on a strict need-to-know basis, with role-based access controls enforced across all internal systems.
- Two-factor authentication: Internal systems containing personal data require multi-factor authentication for access by our staff.
- Regular security audits: We conduct periodic security assessments, penetration testing, and vulnerability scanning of our systems.
- Incident response: We maintain documented procedures for responding to data security incidents, including breach notification to affected users and relevant authorities as required by applicable law.
Note: While we employ robust security measures, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data, but we commit to maintaining industry best practices and promptly addressing any security incidents that may occur.
11 Cookies & Tracking Technologies
mylucky888 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help us provide you with a better, more personalised experience. Below is a summary of the types of cookies we use:
11.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function correctly. They enable core functionality such as account login sessions, security features, and navigation. You cannot opt out of strictly necessary cookies as they are required for the Platform to operate.
11.2 Functional Cookies
Functional cookies remember your preferences and settings, such as your chosen language, display preferences, and previously viewed games. Disabling these cookies may affect your user experience but will not prevent you from using the Platform.
11.3 Analytics Cookies
We use analytics cookies (including tools such as anonymised session recording) to understand how players interact with the Platform, which pages are most visited, and how we can improve the overall user experience. All analytics data is aggregated and anonymised where possible. You may opt out of analytics cookies through your browser settings.
11.4 Managing Cookie Preferences
You may control and manage cookies through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling certain cookies may affect the functionality of the Platform. Instructions for managing cookies in common browsers are available in the respective browser's help documentation.
12 Your Data Rights
Subject to applicable data protection law, you have the following rights in respect of your personal data held by mylucky888. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all valid requests within 30 days, or sooner where required by law.
Right of Access
You have the right to request a copy of the personal data we hold about you and information about how it is processed.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data we hold about you without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Right to Restriction
You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy.
Right to Portability
You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another controller where technically feasible.
Right to Object
You may object to the processing of your personal data where it is based on legitimate interests, including profiling for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
You have the right to lodge a complaint with the relevant supervisory authority if you believe your personal data has been processed in breach of applicable law.
Please note that certain rights are subject to exceptions. For example, we may be unable to delete data that we are required to retain for legal or regulatory reasons (such as KYC records required under anti-money laundering laws). We will always explain the specific reason if we are unable to fulfil a data rights request.
13 Minors & Age Restriction
The mylucky888 Platform is strictly intended for use by adults aged 21 years and above only. We do not knowingly collect, process, or retain personal data from any individual under the age of 21.
If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete such data and close the associated account. Any funds deposited by an underage user will be returned, and any winnings generated will be forfeited.
If you believe that a minor has accessed or registered on the Platform, please notify us immediately at [email protected] so that we can investigate and take appropriate action promptly.
14 Policy Amendments
mylucky888 reserves the right to modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or business operations. Significant changes will be communicated to you via email notification to your registered address or via a prominent notice on the Platform prior to the changes taking effect.
The "Last Updated" date at the top of this Policy reflects when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the Platform following the posting of a revised Policy constitutes your acceptance of the updated terms.
Where changes materially affect your rights or our obligations, we will provide at least 14 days' advance notice before the changes become effective, giving you the opportunity to review and, if you do not agree, to close your account and request return of your remaining balance.
15 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by mylucky888, please do not hesitate to contact our Data Protection team through the following channels:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the Platform. For data rights requests, please use email to ensure a full written record is maintained.
When submitting a data rights request, please include sufficient information to allow us to identify your account (such as your registered email address and account username) and clearly describe the nature of your request. We may need to verify your identity before processing certain types of requests to protect against unauthorised disclosure.
We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days of receipt. Complex requests may require up to an additional 60 days, in which case we will notify you of the extension and the reason for the delay.
For further information about your rights and how to use our platform responsibly, please also refer to our Responsible Gambling page and our full Terms & Conditions.
Your Data Is Safe with mylucky888
We are committed to transparency, security, and giving you full control over your personal information. If you have any questions about your data or your rights, our support team is here 24/7. For players aged 21 and above only.