πŸ” Privacy Policy

Privacy Policy mrlucky –
Malaysia Member Data Protection

Your privacy is our priority. This document transparently explains how mrlucky collects, uses, stores, and protects your personal information as a member of our platform.

Last Updated: 1 January 2026
This Privacy Policy applies to all users of the mrlucky platform, including the website, mobile app, and all related services. By using our platform, you agree to the privacy practices described in this document.

1 Introduction

Mrlucky understands that your trust is our most valuable asset. When you register and use the mrlucky platform, you entrust us with your personal information β€” and we do not take that responsibility lightly.

This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and leading international data protection standards. We are committed to ensuring your information is managed transparently, responsibly, and securely at all times.

In this document, "we", "MrLucky", or "Platform" refers to the operators of the mrlucky platform. "You" or "member" refers to any individual who registers for or uses our platform. "Personal data" refers to any information that can be used to identify you directly or indirectly.

mrlucky never sells member personal data to any third party for marketing purposes. Your information belongs to you β€” we only use it to operate the platform effectively and meet legal requirements.

2 Data Collected

Mrlucky only collects data that is strictly necessary for platform operations and legal compliance. Here is a summary of the types of data we collect:

Data Category Examples of Information Primary Purpose
Identity Data Full name, identification card number, date of birth, gender Account verification (KYC) and legal compliance
Contact Data Email address, phone number, residential address Account communications and identity verification
Financial Data Bank account details, e-wallets, transaction history Deposit and withdrawal processing
Technical Data IP address, device type, web browser, operating system Account security and platform improvements
Usage Data Game history, session duration, and game preferences Experience personalization and platform analytics
Communications Data Customer support conversation records and feedback Customer service improvements

We do not collect sensitive data such as health information, religious beliefs, or political views unless it is directly relevant to a specific request you make (for example, in the context of a responsible gaming programme).

3 How We Collect Data

Mrlucky collects your personal information through a variety of transparent methods. We always strive to explain why we need each piece of information requested:

  • Directly from You: During the account registration process, identity verification (KYC), when contacting customer support, or when submitting any information on the platform.
  • Automatically: When you browse our platform, our systems automatically record technical data such as IP address, device type, and usage patterns via cookies and similar tracking technologies.
  • From Third Parties: In certain cases, we may receive information from payment service providers, identity verification bodies, or legitimate business partners for verification and security purposes.
  • Via Mobile Device: The mrlucky app may collect approximate location data (based on IP), device information, and notifications with your permission.
You may always choose not to share certain information, though this may limit our ability to provide full services or meet regulatory requirements.

4 Data Usage Purpose

Every piece of data we collect has a clear and legitimate purpose. mrlucky uses your personal information for the following purposes:

  1. Account Management: Creating, managing and maintaining your member account, including the KYC identity verification process required by law.
  2. Transaction Processing: Processing deposits, withdrawals and all financial transactions securely and efficiently.
  3. Platform Security: Detecting and preventing fraud, money laundering, unauthorized access and platform abuse.
  4. Customer Support: Responding to enquiries, resolving complaints and providing the necessary technical support.
  5. Legal Compliance: Meeting all relevant legal and regulatory obligations, including mandated record retention requirements.
  6. Personalize Your Experience: Personalizing content, game recommendations and promotional offers based on your preferences and usage patterns.
  7. Service Communications: Sending important notifications about your account, transactions, policy changes and security updates.
  8. Platform Improvements: Analyzing aggregate usage data to enhance platform performance, design and functionality.

We will not use your data for any purposes not stated here without obtaining your consent first.

5 Data Sharing

Mrlucky does not sell, rent or trade your personal data to any third party for their own marketing purposes. However, in limited and legitimate circumstances, we may share your information with the following parties:

  • Payment Service Providers: Banks, e-wallet operators, and payment processors required to carry out your financial transactions.
  • Game Providers: Gaming software companies that provide game content to the mrlucky platform, within the limits necessary for technical operations.
  • Identity Verification Services: Third-party bodies used to verify member identity for KYC compliance and fraud prevention purposes.
  • Legal Authority: Law enforcement agencies, courts, or regulatory bodies where required by law or a valid court order.
  • Professional Advisors: Lawyers, accountants or auditors bound by strict confidentiality obligations.
Every third party we share data with is bound by strict confidentiality agreements and is only permitted to use your information for the specified purpose.

6 Data Security

Mrlucky continuously invests in cutting-edge security infrastructure to protect your personal data. The security measures we implement cover multiple layers of protection:

  • 256-bit SSL Encryption: All data transmitted between your device and mrlucky's servers is protected with bank-grade encryption, ensuring no third party can intercept your information in transit.
  • Two-Factor Authentication (2FA): A multi-layered security system that requires additional verification beyond your password to protect your account from unauthorized access.
  • 24/7 Monitoring: An automated security monitoring system that operates around the clock to detect and respond to any suspicious activity immediately.
  • Encrypted Data Storage: All sensitive data is stored in encrypted format on secure servers with strict access controls.
  • Regular Security Audits: The mrlucky platform undergoes regular independent security assessments by qualified third parties to identify and address vulnerabilities.
  • Staff Training: All mrlucky staff who handle personal data receive comprehensive data protection training.

While we take all reasonable precautions, no security system can be guaranteed 100% secure. You also play an important role in keeping your account safe by using a strong password and never sharing it with anyone.

7 Cookies and Tracking Technologies

Mrlucky uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how you use the platform to help us improve the overall user experience.
  • Functional Cookies: Remembering your preferences and settings such as language, currency and display options.
  • Analytics Cookies: Helping us understand aggregate platform usage patterns for continuous improvement.

You can manage cookie settings through your web browser at any time. Disabling certain cookies may affect platform functionality but will not prevent you from using our core services.

8 Data Retention and Deletion

Mrlucky retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy or as required by Malaysian law.

  • Active Account Data: Retained for the duration your account is active and for the defined period following account closure.
  • Financial Transaction Records: Retained for a minimum of 7 years after a transaction occurs, in line with Malaysian legal requirements.
  • KYC and Verification Data: Retained for a minimum of 5 years after account closure for anti-money laundering compliance purposes.
  • Support Communication Logs: Retained for 3 years for quality assurance and dispute resolution purposes.
  • Technical and Log Data: Retained for 12 months, then anonymised or deleted.

When your data is no longer needed, we will securely delete it or anonymise it so it can no longer be associated with you.

If you close your account and wish to request deletion of your personal data, you may do so by contacting our support team. Requests will be processed within 30 working days, subject to legal retention requirements.

9 Your Rights

As a mrlucky member and data subject under Malaysia's PDPA, you have certain rights regarding your personal information. mrlucky respects and facilitates the exercise of these rights:

πŸ‘οΈ
Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 days.

✏️
Right to Rectification

If any of your data is inaccurate or out of date, you have the right to request that it be corrected or updated promptly.

πŸ—‘οΈ
Right to Erasure

In certain circumstances, you may request that your data be deleted, subject to applicable legal retention requirements.

🚫
Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing a reason.

πŸ“¦
Right to Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform.

⏸️
Right to Restriction

In certain circumstances, you may request that mrlucky restrict the processing of your data while a dispute is being resolved.

To exercise any of the above rights, please contact our Data Protection team via our support email. We will verify your identity before processing any request to ensure the security of your data.

10 Children's Data

The mrlucky platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data from anyone under 18 years of age.

If you are a parent or guardian and discover that your underage child has provided personal information to mrlucky without your consent, please contact us immediately. We will take steps to delete that information and close the account without delay.

We encourage parents and guardians to install parental control software on shared devices to prevent children from accessing online gambling platforms.

11 Policy Amendments

Mrlucky reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements or enhancements to the privacy protections we offer.

When we make significant changes, we will:

  • Updating the "Last Updated" date at the top of this page.
  • Sending notifications to your registered email address for material changes.
  • Displaying a clear notice on the platform at least 14 days before changes take effect.

Your continued use of the mrlucky platform after changes take effect will be considered your acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account before those changes come into effect.

12 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist you.

You may contact our Data Protection Officer (DPO) through the following channels:

  • Email: [email protected]
  • Live Chat: Available 24/7 via the mrlucky platform
  • Response Time: We aim to respond to all privacy enquiries within 3 working days.

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department or the relevant regulatory body in your jurisdiction.

Why Your Data Safe with mrlucky

We do not merely comply with the law β€” we go beyond the minimum standards to ensure your privacy is genuinely protected.

πŸ”
Bank-Grade Encryption

The same 256-bit SSL encryption technology used by leading banks protects every piece of data flowing between you and the mrlucky platform.

πŸ›‘οΈ
Malaysia PDPA Compliance

All data management operations at mrlucky are designed and implemented in accordance with the requirements of Malaysia's Personal Data Protection Act 2010.

βœ…
No Data Selling

Our policy is firm β€” member personal data has never been and will never be sold to advertisers or any third party for their marketing purposes.

πŸ”
Independent Security Audit

The mrlucky platform undergoes periodic security audits by internationally certified independent auditors to ensure data protection systems remain up to date.

πŸ‘€
Data Control in Your Hands

Through your account settings, you can manage your privacy preferences, view the data we hold, and submit deletion requests with ease.

πŸ’¬
Dedicated Privacy Officer

Mrlucky has a dedicated Data Protection Officer to handle all privacy-related enquiries and complaints professionally and promptly.

Your Privacy, Protected. Have Fun Playing!

Now you know how mrlucky safeguards your privacy. Join thousands of Malaysian members enjoying online entertainment with peace of mind and confidence.

Terms & Conditions  |  Responsible Gaming  |  FAQ

Bahasa Melayu