Welcome to the my lucky888 Privacy Policy. This document explains in detail how my lucky888 ("we", "platform") collects, uses, stores, protects, and discloses your personal data as a user of the mylucky888.biz online entertainment platform.
My lucky888 is fully committed to protecting the privacy of every member and user on our platform, in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia. We believe your trust is our most valuable asset, and every decision we make in managing your data is guided by a strong sense of responsibility.
By registering an account or using my lucky888's services, you consent to the collection and use of your personal data as described in this Privacy Policy. If you disagree with any part of this policy, please contact us or discontinue use of the platform.
My lucky888 collects the following personal data from members and users of our platform:
| Data Category | Example Information | Status |
|---|---|---|
| Personal Identity | Full name, MyKad/passport number, date of birth, gender | Mandatory |
| Contact Information | Malaysian phone number, email address, residential address | Mandatory |
| Financial Information | Bank account details, e-wallets (TnG, GrabPay, DuitNow, Boost, ShopeePay), MYR transaction history | Mandatory |
| Game Data | Betting history, game types played, wins and losses | Mandatory |
| Technical Data | IP address, browser type, operating system, device ID | Mandatory |
| Usage Data | Pages visited, session duration, clicks and navigation | Optional |
| Marketing Preferences | Communication preferences, types of promotions of interest | Optional |
We do not collect sensitive personal data such as health records, political affiliations, or biometric data unless required by applicable Malaysian law.
My lucky888 collects your personal data through the following methods:
- Account Registration: Information you provide when registering a my lucky888 account for the first time
- Platform Usage: Data generated automatically as you browse and use the my lucky888 website
- Financial Transactions: Information collected when you make deposits or withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX
- Identity Verification (KYC): Documents submitted for identity verification purposes, such as a copy of your MyKad
- Customer Support: Information you provide when contacting the my lucky888 support team
- Cookies & Tracking Technologies: Data collected automatically via cookies, pixels, and similar technologies
- Authorised Third Parties: Information from approved payment service providers and identity verification platforms
My lucky888 uses your personal data solely for the following legitimate and stated purposes:
- Account Management: Creating, managing, and maintaining your my lucky888 account, as well as processing MYR withdrawal and deposit requests
- Identity Verification: Ensuring every player is a verified individual, aged 18 and above, and eligible to use the platform
- Service Fulfilment: Grants you access to all games — slots, live casino, roulette, poker, EPL and Malaysia Super League football betting, badminton, and more
- Transaction Processing: Manages all deposits and withdrawals via Malaysian e-wallets and related payment methods
- Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering (AML), and platform abuse
- Marketing & Promotions: Sending relevant promotional information and offers (with your consent only)
- Legal Compliance: Fulfilling obligations under Malaysian law, including the PDPA 2010
- Service Improvement: Analysing usage patterns to improve the quality of the my lucky888 platform
My lucky888 does not sell, rent, or trade your personal data to third parties for marketing purposes. Your data is only shared in the following limited circumstances:
- Payment Service Providers: The parties that process your transactions — Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX — receive only the minimum data required to complete your transaction
- Gaming Platform Providers: Game software providers supporting slots, Live Casino, roulette, and poker operations on my lucky888 may receive necessary game session data
- Malaysian Authorities: my lucky888 will disclose data when required by law or upon order from a Malaysian court or enforcement agency
- Third-Party Identity Verification: Approved KYC service providers to verify your identity during account verification requirements
- Business Transfers: In the event of a business merger or acquisition, data may be transferred to the successor entity subject to the same level of protection
My lucky888 invests seriously in security technology and procedures to protect your personal data from unauthorised access, loss, or misuse. The security measures we have in place include:
- 256-bit SSL Encryption: All communications between your browser and my lucky888's servers are protected by 256-bit SSL encryption — the same standard used by Maybank2u and Malaysia's leading financial institutions
- Stored Data Encryption: Sensitive data such as passwords and financial information is stored in encrypted form and cannot be read even by our own staff
- Two-Factor Authentication (2FA): 2FA is available on all my lucky888 accounts for stronger login protection
- Continuous Monitoring: my lucky888's IT security team monitors systems 24/7 to detect and respond to any threats promptly
- Internal Access Controls: Only staff who require access to specific data in order to carry out their duties are granted permission
- Periodic Security Audits: my lucky888 conducts regular security audits and penetration testing by independent parties
That said, no security system is perfect. You also play an important role in keeping your account secure — use a strong password, enable 2FA, and never share your login credentials with anyone.
My lucky888 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law:
- Active Account Data: Retained for the duration your account remains active and for 7 years after account closure for legal compliance purposes
- Financial Transaction Records: Retained for a minimum of 7 years in compliance with anti-money laundering (AML) requirements and Malaysian financial regulations
- Security Logs: Retained for 2 years for investigation purposes in the event of a security incident
- Marketing Data: Retained until you withdraw consent or request deletion
- Cookie Data: Duration varies by cookie type — please refer to the Cookies section for more details
As a data subject under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have the following rights regarding your personal data held by my lucky888:
To exercise any of the above rights, contact us via email at support@mylucky888.biz or through 24/7 Live Chat on the my lucky888 platform. We will respond within 21 business days.
My lucky888 uses cookies and similar technologies to enhance your experience on our platform. We use three categories of cookies:
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Session login, security, core platform functionality | Session / 30 days | No — the platform cannot function without these | |
| Remembers preferences, language, and display settings | 1 year | Yes — via browser settings | |
| Usage statistics for platform improvement | 2 years | Yes — via browser settings |
You can manage cookie settings through your browser (Chrome, Firefox, Safari, Edge). Please note that disabling certain cookies may affect the functionality of the my lucky888 platform.
Parts of my lucky888's technical infrastructure may involve servers or services located outside Malaysia. Where personal data is transferred across Malaysian borders, my lucky888 ensures that:
- The recipient country provides a level of data protection equivalent to or higher than that required under Malaysia's PDPA 2010
- Comprehensive data transfer agreements are in place with all recipient parties
- Transfers are carried out only when necessary to deliver the service you requested
- You will be notified of any material changes to data transfer practices
The my lucky888 platform is exclusively for individuals who are aged 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18.
If we discover that a child's personal data has been collected without parental or guardian consent, we will take immediate steps to delete that data and terminate the account in question. If you have reason to believe that a child has registered using false information, please contact us immediately at support@mylucky888.biz.
My lucky888 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform improvements. The "updated" date at the top of this page will always reflect the latest version.
For material changes, my lucky888 will notify members via in-platform notifications or email before the changes take effect. Continued use of the platform after changes are published constitutes acceptance of the revised policy.
If you have any questions or concerns, or wish to exercise your rights under the PDPA 2010 in relation to this Privacy Policy, please contact my lucky888's Data Protection Officer:
- Privacy Email: privacy@mylucky888.biz
- General Support Email: support@mylucky888.biz
- Live Chat: Available 24/7 on the my lucky888 platform — mention "Data Privacy" to an agent
- Response Time: Within 21 business days from the date the request is received
You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you are dissatisfied with how my lucky888 has handled your personal data.