Introduction
MrLuck88 ("the Company", "we", "us", or "our") operates the online gaming and sports betting platform accessible at mrluck88.cam. In the course of providing our services to players across Malaysia — including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — we necessarily collect and process certain personal data about our registered players and website visitors.
This Privacy Policy sets out the nature of the personal data we collect, the purposes for which it is processed, the conditions under which it may be shared with third parties, the security measures we employ to protect it, and the rights you hold in relation to your own personal data. This Policy applies to all users of the MrLuck88 platform, including registered account holders, prospective players who browse without registering, and individuals who contact our customer support team.
By accessing the MrLuck88 website or creating a player account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Privacy Policy forms part of the overarching legal framework for your use of MrLuck88 and should be read alongside our Terms & Conditions.
Your Privacy Matters: MrLuck88 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. Your data is used solely to operate and improve our services, comply with legal obligations, and keep your account secure.
Definitions
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | MrLuck88, which determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | Any third party that processes personal data on behalf of MrLuck88 under a data processing agreement, such as payment service providers or KYC verification partners. |
| "Consent" | Any freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data for a stated purpose. |
| "Cookies" | Small text files placed on a user's device by the Platform to store session information, preferences, and behavioural analytics data. |
| "KYC Data" | Identity verification documentation including government-issued identification (MyKad, passport, or driving licence), proof of address, and source-of-funds evidence. |
Data We Collect
MrLuck88 collects personal data only to the extent necessary for the provision of our gaming and sports betting services, fulfilment of regulatory obligations, and improvement of the platform experience. The categories of personal data we collect include the following:
3.1 Registration & Identity Data
- Full legal name as per government-issued identification.
- Date of birth (for age verification — minimum 21 years required).
- Residential address, including city, state, and postcode.
- Nationality and country of residence.
- Username and encrypted account password.
3.2 Contact Data
- Email address (used for account communications, promotions, and security alerts).
- Mobile phone number (used for two-factor authentication and support contact).
3.3 KYC Verification Data
- Scanned copy or photograph of a valid Malaysian MyKad, passport, or driving licence.
- Proof of residential address (utility bill, bank statement, or official correspondence dated within 3 months).
- Source of funds documentation where required by our AML compliance obligations.
3.4 Financial & Transaction Data
- Deposit and withdrawal transaction history, including amounts in MYR and cryptocurrency equivalents.
- Payment method details — including the last four digits of bank account numbers, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX), and cryptocurrency wallet addresses for BTC, USDT, or ETH transactions.
- Wagering history, game participation records, and bonus redemption data.
3.5 Technical & Usage Data
- IP address and approximate geolocation at the time of login or Platform access.
- Device type, operating system, and browser version.
- Session duration, pages visited, features accessed, and navigation patterns.
- Referral source and marketing attribution data where applicable.
3.6 Communications Data
- Records of communications with our customer support team via Live Chat, WhatsApp, and email, including content, timestamps, and resolution outcomes.
How We Collect Data
MrLuck88 collects personal data through the following primary channels:
- Direct Submission: Information you provide voluntarily during account registration, KYC submission, deposit or withdrawal requests, support interactions, or when completing any other form on the Platform.
- Automated Technical Collection: Data collected automatically when you access the Platform, including IP addresses, device identifiers, browser fingerprints, session logs, and cookie-based behavioural data.
- Payment Service Providers: Transaction confirmation and status data relayed to MrLuck88 by your chosen payment method provider, including local Malaysian banking partners and e-wallet operators.
- Third-Party KYC Partners: Identity verification outcomes and risk-scoring data returned by licensed KYC and AML screening service providers engaged by MrLuck88.
- Publicly Available Sources: Sanctions list screening, adverse media checks, and PEP (Politically Exposed Person) database cross-references conducted as part of our AML compliance programme.
Data Processing & Purpose
MrLuck88 processes personal data only for defined, specific, and legitimate purposes. The table below sets out the primary purposes for which each category of data is processed:
| Processing Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration & Identity Data, Contact Data |
| Age and identity verification (KYC) | KYC Verification Data, Registration Data |
| Processing deposits and withdrawals | Financial & Transaction Data, KYC Data |
| Anti-money laundering (AML) compliance | KYC Data, Financial Data, Identity Data |
| Platform security and fraud prevention | Technical & Usage Data, Financial Data |
| Customer support and dispute resolution | Communications Data, Account Data |
| Responsible gambling monitoring | Financial Data, Usage Data, Account Data |
| Marketing and promotional communications (with consent) | Contact Data, Usage Data |
| Platform improvement and analytics | Technical & Usage Data (anonymized where possible) |
| Regulatory reporting and legal compliance | All categories, as required by applicable law |
Legal Basis for Processing
MrLuck88 processes personal data only where a valid legal basis exists. The legal grounds we rely upon for different processing activities are as follows:
- Contractual Necessity: Processing required to fulfil our obligations under the player account agreement, including account management, transaction processing, and customer support delivery.
- Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML legislation, KYC obligations, and reporting duties to our licensing authority.
- Legitimate Interests: Processing conducted to protect the security of the Platform, prevent fraud, conduct analytics for platform improvement, and manage business risk — provided such interests are not overridden by your fundamental privacy rights.
- Consent: Processing for direct marketing communications, including promotional emails and SMS notifications about bonuses or platform updates, where you have given explicit prior consent. You may withdraw this consent at any time by contacting our support team.
Data Sharing & Disclosure
MrLuck88 does not sell or disclose your personal data to unauthorized third parties. Data may be shared only in the following circumstances and with the following categories of recipients:
- Payment Service Providers: Financial transaction data is shared with relevant payment processors, including Malaysian banking institutions and e-wallet operators (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong), solely to execute deposit and withdrawal transactions.
- KYC and AML Service Providers: Identity verification documents and related data are shared with licensed third-party KYC verification and AML screening providers under binding data processing agreements.
- Regulatory and Law Enforcement Authorities: MrLuck88 may disclose personal data to our licensing authority, relevant regulatory bodies, or law enforcement agencies where required to do so by applicable law, court order, or regulatory directive.
- Technology and Infrastructure Partners: Hosting providers, cybersecurity services, and fraud detection platforms may access limited technical data as necessary to maintain Platform operations, under strict confidentiality obligations.
- Game Content Providers: Anonymized or aggregated game participation data may be shared with our game content partners for statistical and regulatory compliance purposes. No identifiable personal data is shared for this purpose.
All third parties with whom MrLuck88 shares personal data are contractually bound to process such data only for the purposes specified, in accordance with applicable data protection law, and under conditions of appropriate security.
Data Retention
MrLuck88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and contractual obligations. Retention periods vary by data category:
| Data Category | Retention Period |
|---|---|
| Account & Registration Data | Duration of active account + 5 years post-closure |
| KYC Verification Documents | 5 years from date of submission or account closure, whichever is later |
| Financial & Transaction Records | 7 years from transaction date (AML regulatory requirement) |
| Customer Support Communications | 3 years from date of last interaction |
| Technical & Usage Logs | 12 months from collection (anonymized thereafter for analytics) |
| Marketing Preferences | Until consent is withdrawn or account is closed |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification, unless a legal obligation requires extended retention.
Data Security
MrLuck88 implements a comprehensive range of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes the following controls:
- 256-bit TLS Encryption: All data transmitted between your device and the MrLuck88 platform is encrypted using Transport Layer Security (TLS) at 256-bit strength — equivalent to the standard applied by Malaysia's major commercial banks including Maybank and CIMB.
- Encrypted Data Storage: Sensitive personal and financial data stored in our databases is encrypted at rest using industry-standard encryption algorithms. Passwords are hashed using a one-way cryptographic function and are never stored in plaintext.
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal systems employ role-based access controls, multi-factor authentication for staff, and comprehensive audit logging of all data access events.
- Penetration Testing & Vulnerability Assessments: Our Platform undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
- Fraud Detection Systems: Automated fraud monitoring tools analyze transaction patterns and login behaviour in real time to detect and prevent unauthorized account access and financial crime.
While MrLuck88 takes all reasonable precautions to secure your data, no electronic transmission or storage system is entirely immune to risk. Players are encouraged to protect their own account security by using a strong, unique password and reporting any suspected unauthorized access immediately.
Cookies & Tracking Technologies
MrLuck88 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session state, and collect analytics data that helps us understand how the Platform is used and where improvements can be made.
10.1 Types of Cookies Used
- Essential Cookies: Strictly necessary for the operation of the Platform, including maintaining your logged-in session, remembering your language preference, and securing form submissions. These cannot be disabled without impairing Platform functionality.
- Analytics Cookies: Used to collect aggregated information about how visitors interact with the Platform — including pages visited, session durations, and navigation paths — to inform platform development and optimization decisions.
- Preference Cookies: Store user-specific settings such as display preferences, region selection, and notification preferences across sessions.
- Security Cookies: Used to authenticate users, detect fraudulent login attempts, and protect player accounts from unauthorized access.
10.2 Cookie Management
You may configure your browser to refuse or delete cookies at any time. Note that disabling essential cookies may prevent some features of the Platform from functioning correctly. For instructions on managing cookies in your specific browser, please refer to your browser's help documentation.
Your Rights as a Data Subject
Subject to applicable data protection law and any overriding legal obligations, you hold the following rights in relation to your personal data held by MrLuck88:
- Right of Access: You have the right to request a copy of the personal data MrLuck88 holds about you, together with information about how it is being processed.
- Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held about you.
- Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to our obligations under applicable AML, KYC, and financial record-keeping regulations, which may require us to retain certain data for a prescribed period.
- Right to Restrict Processing: You may request that we limit the processing of your data in specific circumstances, such as where you contest its accuracy or object to its use.
- Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format where technically feasible and where processing is based on your consent.
- Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing communications.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
To exercise any of the above rights, please contact our Data Privacy team using the contact details provided in Section 15. MrLuck88 will respond to all verifiable data subject requests within thirty (30) calendar days of receipt.
Identity Verification for Rights Requests: To protect your privacy and security, MrLuck88 will require you to verify your identity before acting on any data subject rights request. This is to prevent unauthorized disclosure of your personal data to a third party.
Protection of Minors
MrLuck88 strictly prohibits the use of its Platform by individuals under the age of 21. We do not knowingly collect personal data from any person under 21 years of age. Our KYC verification process is specifically designed to confirm that all registered account holders meet the minimum age requirement before they can access real-money gaming services or process withdrawals.
If MrLuck88 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to suspend the relevant account, delete the collected data where permitted, and report the matter to our compliance team for further investigation and action.
Parents and guardians who have reason to believe that a minor in their care has registered an account on MrLuck88 should contact our customer support team immediately using the contact details in Section 15. For players aged 21 and above only. 21+
Third-Party Links
The MrLuck88 Platform does not contain links to third-party websites for general browsing purposes. Where references to third-party service providers (such as payment processors or support platforms) are made within the Platform, MrLuck88 is not responsible for the privacy practices or data handling of those third parties.
We encourage you to review the privacy policies of any third-party services you interact with independently of the MrLuck88 Platform, particularly in relation to how they handle data associated with payment transactions.
Changes to This Privacy Policy
MrLuck88 reserves the right to update or modify this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, operational practices, or technical capabilities. Any material changes to this Policy will be indicated by an updated "Last Updated" date at the top of this page.
We encourage you to review this Privacy Policy periodically to remain informed about how we protect your personal data. Where changes are material and affect your rights in a significant way, we may notify registered account holders directly via the email address associated with their account. Continued use of the MrLuck88 Platform following any amendment constitutes acceptance of the updated Privacy Policy.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by MrLuck88, please contact our Data Privacy team through the following channels. All contact details are displayed as plain text only and are not clickable links.
- Email: [email protected]
- Live Chat: Available 24 hours a day, 7 days a week via the Platform.
- WhatsApp: Available 24/7 — contact details accessible within the Platform after login.
- Support Languages: Bahasa Melayu, Mandarin Chinese, and English.
- Response Time: Data subject rights requests responded to within 30 calendar days. General support enquiries typically within 3–5 minutes via Live Chat.
For matters relating to your account terms and conditions, please refer to our Terms & Conditions. For responsible gambling tools and support resources, please visit our Responsible Gambling page.