Privacy Policy

Mrluck88 Privacy Policy – Our Commitment to Data Protection Malaysian Players' Privacy

Your trust is mrluck88's most valued asset. This Privacy Policy clearly explains how we collect, use, store, and protect your personal information – written in plain, easy-to-understand language, free of confusing technical jargon.

SSL 256
Security Encryption
Last Updated
January 2026
0
Data Sold to Third Parties
24/7
Security Monitoring
AES-256 Data Encryption Standards
KYC Secure Identity Verification
PDPA Data Protection Compliance
Secure Fully Protected Servers
Our Six Data Protection Principles

Every decision we make regarding player data is guided by the following principles – not merely as words, but as daily practice at mrluck88.

Bank-Grade Encryption
All data transmitted between your device and mrluck88's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's major banks, including Maybank and CIMB. This means your login credentials, payment details, and transactions cannot be intercepted by any third party while in transit.
Data Not Sold to Third Parties
mrluck88 has never and will never sell, rent, or share your personal information with any third party for marketing or commercial purposes without your explicit consent. The data you provide to mrluck88 is used solely for account management and our services – not to be monetised by others.
Secure Data Storage
All mrluck88 player data is stored on servers protected by a multi-layered security system — including firewalls, intrusion detection systems, and strict access controls. Only specifically authorised mrluck88 staff may access player data, and every access is logged for internal security audit purposes.
Full Control in Your Hands
mrluck88 gives you full control over your personal data. You have the right to request access to the data we hold, correct any inaccurate information, or request deletion of your data upon account closure – all of which can be done by contacting the mrluck88 support team via live chat or email.
24/7 Threat Monitoring
The mrluck88 security team monitors the platform infrastructure around the clock to detect any suspicious activity or intrusion attempts. Our automated anomaly detection system triggers an immediate alert whenever unusual access patterns are identified on any account — keeping you protected even while you sleep.
Data Protection Standards Compliance
mrluck88 operates in accordance with internationally recognised data protection principles. We conduct regular privacy reviews, train staff on proper data handling, and continually update our procedures in line with best practices in the cybersecurity industry to ensure our data protection standards remain consistently high.
Effective: 1 January 2026

This Privacy Policy explains how mrluck88 collects, uses, discloses, and protects your personal information when you use our platform. By registering for or using mrluck88, you agree to the practices described in this Privacy Policy.

01

Introduction & Scope of Privacy Policy


Mrluck88 ("we", "Platform") operates an online casino platform that provides entertainment and betting services to players in Malaysia. In delivering these services, we collect and process certain personal information relating to users of our platform ("you", "Member", "Player").

This Privacy Policy applies to all information collected through the mrluck88 website, mobile app, and all interactions you have with our platform – including account registration, deposits, withdrawals, gaming activity, and communications with our customer support team.

In summary: mrluck88 collects data necessary to operate the platform safely and fairly. We do not sell your data. You have the right to access and control your data. Your data security is our priority.

02

Types of Personal Data We Collect


2.1 Data You Provide Directly

  • Full name as stated on your MyKad or passport
  • An active mobile number registered in Malaysia
  • A valid and active email address
  • Date of birth for age verification (18 years and above)
  • MyKad or passport number (for the KYC process when required)
  • Residential address (for certain compliance requirements)
  • Payment method details — such as your Touch 'n Go eWallet or GrabPay account number, or bank account information for DuitNow

2.2 Data Collected Automatically

  • The IP address of the device you use to access mrluck88
  • Device type, operating system, and browser version
  • Time and duration of your login sessions
  • Detailed game history and betting activity
  • Records of all deposit and withdrawal transactions
  • General location data based on IP address (not GPS)
  • Communication logs with the customer support team

2.3 Data from the KYC Process

When you make your first withdrawal, or when a transaction exceeds a certain threshold, mrluck88 may request identity verification documents (KYC), including a clear copy of your MyKad or passport. These documents are stored securely and used solely for identity verification and anti-money laundering (AML) compliance purposes.

Important to Know: mrluck88 never requests your credit or debit card information directly. All payments are processed through secure payment gateways – Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u / CIMB Clicks). mrluck88 does not store your full bank account details.

03

How We Use Your Data


Mrluck88 uses your personal data only for legitimate purposes that are necessary for platform operations. Below is a full list of the purposes for which your data is used:

Purpose of Use Data Used Legal Basis for Processing
Registration & account management Name, phone number, email, date of birth Contractual agreement
Processing deposits & withdrawals Payment details, transaction history Contractual agreement
Identity verification (KYC) Identity document, address Legal obligation
Fraud prevention & AML IP address, transaction history, device data Legitimate interests & legal obligations
Customer Support All data relevant to the enquiry Contractual agreement
Platform improvements Anonymized usage data Legitimate interests
Promotional communications (with consent) Phone number, email Consent

3.1 Marketing Communications

Mrluck88 may send you information about promotions, new bonuses, and platform updates via SMS or email. You may withdraw consent for marketing communications at any time by contacting the support team or using the unsubscribe link provided in every communication. Withdrawing marketing consent will not affect your ability to use the mrluck88 platform.

04

Data Sharing & Disclosure to Third Parties


Mrluck88 is committed to not selling or sharing your personal data with third parties for marketing purposes. However, there are certain situations where we need to share your data with others in order to provide our services or fulfil legal obligations:

4.1 Approved Service Providers

  • Payment gateways — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u / CIMB Clicks) — for processing your financial transactions
  • Certified game providers – Evolution Gaming, Pragmatic Play, PG Soft – powering the games you play on our platform
  • Cloud service providers used for mrluck88 platform infrastructure
  • Third-party identity verification companies that assist with the KYC process

All third-party service providers we work with are bound by strict data confidentiality agreements and are only permitted to use your data for the specific purposes set out in those agreements.

4.2 Legal Obligations

Mrluck88 may disclose your data to the relevant authorities if required by law, court order, or within the framework of a legitimate criminal investigation. This includes reports to the financial intelligence unit (FIU) in relation to transactions suspected of involving money laundering or terrorism financing.

mrluck88 Guarantee: Your data is never sold to advertisers, data brokers, or any third party for commercial purposes. Any data sharing is strictly limited to legitimate operational needs.

05

Data Security Measures at mrluck88


Mrluck88 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or improper disclosure.

5.1 Technical Security

  • 256-bit SSL/TLS encryption for all communications between your browser and mrluck88 servers
  • AES-256 encryption for data stored in our database
  • Next-generation firewall (NGFW) and intrusion detection systems (IDS/IPS)
  • 24/7 real-time security monitoring by our cybersecurity team
  • Two-factor authentication (2FA) is available for member accounts and mandatory for all mrluck88 staff
  • Regular data backups to secure, geographically separate locations

5.2 Organisational Security

  • Access to player data is restricted to staff who require it to perform their duties ("least privilege" principle)
  • All access to sensitive data is logged and audited regularly
  • Regular data security training and privacy awareness programmes for all mrluck88 staff
  • Strict non-disclosure agreements (NDAs) for all staff and contractors

5.3 Response to Data Breaches

While mrluck88 takes every reasonable measure to protect your data, no system can guarantee absolute security. In the event of a data breach affecting your personal information, mrluck88 is committed to notifying you and the relevant authorities within the timeframe prescribed by applicable law, and to taking prompt remedial action.

06

Cookies, Tracking & Similar Technologies


Mrluck88 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and analyse usage patterns in aggregate.

6.1 Types of Cookies Used

Cookie Types Purpose Duration
Session Cookies (Required) Maintaining your logged-in status during an active session Until logout
Security Cookies (Required) Detecting fraud attempts and protecting accounts 30 days
Preference Cookies (Optional) Storing your language settings and display preferences 1 year
Analytical Cookies (Non-Essential) Understanding how players use the platform in order to improve it 90 days

6.2 Managing Cookies

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the mrluck88 platform, including the ability to stay logged in or receive full security protection. Analytical and preference cookies can be disabled without affecting basic platform use.

07

Data Retention Period


Mrluck88 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or for as long as required by applicable law.

  • Active account data: retained for the duration the account is active and for 5 years following account closure for legal compliance purposes
  • Financial transaction records: retained for a minimum of 7 years in accordance with anti-money laundering legal requirements
  • KYC documents: retained for 5 years after the business relationship ends
  • Customer support communication logs: retained for 2 years after the last interaction
  • Analytics cookie data: automatically deleted after 90 days
  • Marketing records: deleted within 30 days after you withdraw consent

Note: The requirement to retain data longer for financial records is a legal obligation that cannot be waived even upon a deletion request. However, such data is stored securely and accessible only for legal compliance purposes.

08

Your Rights Regarding Personal Data


Mrluck88 respects your rights regarding the personal data we hold. Here are the rights you have and how to exercise them:

  • Right of Access – You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of the date of your request.
  • Right to Rectification – If any data we hold about you is inaccurate or out of date, you have the right to request a correction. We will update the data within 14 days.
  • Right to Erasure – You may request the deletion of your personal data under certain circumstances, such as when the data is no longer needed for its original purpose. This does not apply to data we are legally required to retain for compliance purposes.
  • Right to Restrict Processing – Under certain circumstances, you have the right to request that we restrict the processing of your data while a dispute is being resolved.
  • Right to Object – You have the right to object to the processing of your data for direct marketing purposes at any time.
  • Right to Data Portability — You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

To exercise any of these rights, contact the mrluck88 support team via live chat or email at support@mrluck88.biz. We may need to verify your identity before processing the request in order to safeguard your data security.

09

Amendments to the Privacy Policy


Mrluck88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or service improvements. You will be notified of any material amendments via a prominently displayed notice on the mrluck88 platform or by email to your registered address.

The "Effective Date" at the top of this page will be updated whenever amendments are made. We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your data. Your continued use of the mrluck88 platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy.

10

Contact Us About Data Privacy


If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by mrluck88, please contact us through the following channels:

  • Live Chat – available 24/7 with Malay-speaking representatives, the fastest way to get immediate assistance
  • Email: support@mrluck88.biz — for more formal written requests, we will respond within 2 business days

All requests relating to data privacy rights will be handled with care and within the stipulated timeframe. You may also refer to the Terms & Conditions us for more information on the platform's terms of use, or the FAQ for answers to the most frequently asked questions about security and privacy at mrluck88.

Full Control Over Your Personal Data

Mrluck88 believes you have absolute rights over your personal data. Here is a summary of your key rights as a mrluck88 member.

01
Right to Know
You have the right to know exactly what data mrluck88 holds about you, how it is used, and who it is shared with. Request a personal data report at any time through mrluck88 support.
02
Right to Rectification
If any information in your mrluck88 account is inaccurate — a misspelled name, a phone number that has changed — you have the right to request a correction and we will update it within 14 days.
03
Right to Erasure
Once your mrluck88 account is closed and the legally required retention period has ended, you may request the permanent deletion of your personal data from all our systems.
04
Right to Object
You may object to the processing of your data for marketing or promotional communications at any time, without needing to provide a reason. Once your objection is received, mrluck88 will stop using your data for those purposes.
05
Right to Data Portability
You have the right to receive a copy of your personal data in a structured, machine-readable format (such as CSV or JSON), allowing you to transfer it to another platform should you wish to do so.
06
Right to Protection
As a mrluck88 player, you are entitled to the highest standard of data protection. If you believe your privacy rights have been violated, you have the right to lodge a complaint with mrluck88, and we are committed to investigating every complaint seriously.
Frequently Asked Questions About Data Privacy at mrluck88

No, mrluck88 does not directly store your full bank account number or credit card details. All payments are processed through secure third-party payment gateways such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX. The only payment information we retain is what is necessary to process withdrawals back to the same method – for example, the eWallet account number you registered, not your eWallet password or PIN. All such information is encrypted and cannot be accessed by unauthorised parties.

Yes, you may request deletion of your personal data once you close your mrluck88 account and after the legally required retention period has elapsed. However, please note that financial transaction records must be retained for a minimum of 7 years under Malaysia's anti-money laundering laws — this is a legal obligation that cannot be waived, even at your request. This data is stored securely and accessible solely for legal compliance purposes. For all other data not subject to such legal requirements, deletion requests will be processed within 30 days.

mrluck88 protects your account with multiple layers of security. First, all communications are encrypted with 256-bit SSL so your login credentials cannot be intercepted. Second, our anomaly detection system monitors login patterns — if a login attempt is made from an unfamiliar location or device, the system will prompt for additional verification. Third, you can enable two-factor authentication (2FA) for an extra layer of security. Fourth, if our system detects suspicious activity in your account, the mrluck88 security team will reach out to you proactively. You should also make sure to use a strong password and avoid reusing the same password across other platforms.

Game providers such as Evolution Gaming, Pragmatic Play, and PG Soft receive only the minimum data required to deliver games to you — typically an anonymized player ID and your current credit balance to enable gameplay. Your real name, phone number, banking details, or any other personal information is never shared with game providers. All game providers partnered with mrluck88 are licensed companies bound by strict data confidentiality agreements, and they are not permitted to use any data received from mrluck88 for any purpose other than delivering their gaming services.

mrluck88 will NEVER ask for your password, PIN, or any sensitive account information via email, SMS, WhatsApp, or any other communication channel. If you receive a message claiming to be from mrluck88 that requests such information, it is a phishing attempt and you should not reply or click any links within that message. Please report any suspicious messages to the mrluck88 support team via the official live chat on the mrluck88 website only — not through any link in a suspicious message. We will investigate and take appropriate action.

If your mrluck88 account is inactive (no logins or transactions) for 12 consecutive months, we may send a notice to your registered email to confirm whether you wish to keep your account. If no response is received within 30 days of that notice, the account may be classified as dormant. Dormant account data is still stored securely in accordance with our standard retention policy. Any balance in a dormant account will not expire – you can reactivate your account at any time by contacting mrluck88 support and completing the identity verification process.
Privacy Policy & Terms & Conditions – Two Documents That Protect You

This Privacy Policy should be read together with Terms & Conditions mrluck88 for a complete overview of your rights and responsibilities as a member of our platform. Together, these documents form the foundation of the transparent relationship between mrluck88 and our players.

Your Privacy is mrluck88's Unwavering Commitment

In today's digital world, data privacy is no longer something that can be taken lightly – especially on a platform that handles financial transactions and sensitive personal information. mrluck88 understands this fully, which is why we continuously invest in world-class security infrastructure to ensure every piece of personal data you entrust to us is protected at all times.

Many Malaysian players may have concerns about the security of their data when signing up with an online casino platform. These concerns are valid and we take them seriously. What sets mrluck88 apart from irresponsible platforms is our transparency in explaining exactly what we do with your data – and more importantly, what we do not do.

Why mrluck88 Needs to Collect Your Data

Data collection at mrluck88 is based on genuine necessity, not simply because we can. Your name and MyKad number are required for the KYC process that protects you – ensuring no one can withdraw funds from your account without proper identity verification. Your phone number is needed for security alerts and important account communications. Your IP address and device information are used solely to detect fraud attempts and unauthorised access.

Every data point we collect serves a clear and legitimate purpose. This sets us apart from many digital platforms that gather as much data as possible "for future use" with no defined goal. mrluck88 follows the principle of data minimisation — we only collect what is genuinely necessary to provide you with a safe and fair service.

Secure Malaysian Payment Methods

One often overlooked aspect of privacy is the security of payment methods. mrluck88 supports only Malaysian local payment methods that have undergone rigorous oversight and security processes – Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX via Maybank2u and CIMB Clicks. This is no coincidence. These methods were chosen not just for the convenience of Malaysian players, but because they all carry robust security infrastructure that complements the protections mrluck88 has in place.

Worth emphasising: mrluck88 never stores your PIN, password, or any sensitive information related to your eWallet or bank account. All transactions are processed through a secure gateway where such sensitive details never pass directly through mrluck88 servers. This is an additional layer of security that protects you from any risk of data exposure on our end.

Your Data, Your Control

Mrluck88 believes Malaysian players deserve full control over their personal data. That is why we make it straightforward to exercise your privacy rights – whether you need to access your data, correct inaccurate information, or request deletion when you decide to leave the platform. The process should not be complicated or require you to navigate frustrating red tape. Reach out to the mrluck88 support team via Malay-language live chat, available 24/7, and we will help you exercise your privacy rights quickly and easily.

We are also committed to maintaining transparency whenever there are changes to how we handle your data. If this Privacy Policy is amended in a material way, you will be notified via a clear notice on the mrluck88 platform or by email to your registered address. Your trust in mrluck88 is something we uphold with every action and decision we make. For information on how to play safely and responsibly, visit the Responsible Gaming us.

Register at mrluck88 – A Platform That Respects Your Privacy

Your data is protected with 256-bit SSL encryption. Your information is never sold to anyone. Register now and play with full confidence at mrluck88.

256-bit SSL Encryption
Data Not Sold
Touch 'n Go & DuitNow
24/7 BM Support
Bahasa Melayu