My lucky888 Privacy Policy – Malaysia Personal Data Protection

Welcome to the my lucky888 Privacy Policy. This document is a trust agreement between my lucky888 and every individual who uses our platform — whether you are simply browsing our website, registering a new account, or a loyal member who has been with us for years.

My lucky888 is committed to protecting your privacy and handling your personal data responsibly. We adhere to the principles set out in Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection legislation.

This Privacy Policy covers all services provided by my lucky888, including the online casino platform, Sports Betting (Malaysian Super League, EPL, BWF badminton), Live Casino, table games, and all customer support interactions.

My lucky888 only collects data that is strictly necessary to provide you with a safe, legitimate, and quality service. The categories of data we collect are as follows:

My lucky888 collects your personal data through the following transparent and lawful methods:

• Direct Account Registration – When you complete the registration form on my lucky888, you voluntarily provide basic information such as your name, email address, phone number, and date of birth.
• KYC Verification Process – To ensure platform security and legal compliance, my lucky888 requires a copy of your identity document (MyKad or passport) at the identity verification stage.
• Financial Transactions – Payment method data is collected automatically when you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX online banking.
• Platform Usage – Technical and gameplay behavioural data is collected automatically while you use the my lucky888 platform via cookies, log files, and similar tracking technologies.
• Customer Support Interactions – All communications with the my lucky888 support team via live chat, email, or WhatsApp are recorded for training, quality control, and dispute resolution purposes.
• Third-Party Sources – In certain circumstances, we may receive your information from third-party identity verification providers we engage for KYC and fraud prevention purposes.

My lucky888 uses your personal data only for lawful, specific purposes directly related to the provision of our platform services. The primary purposes are:

• Account Management: Creating, maintaining, and securing your my lucky888 account, including identity verification and password management.
• Transaction Processing: Securely and promptly processes all deposits and withdrawals in MYR via your chosen payment method.
• Service Provision: To deliver a personalised gaming experience based on your interests and habits — for example, surfacing BWF badminton betting if you frequently visit that section.
• Security & Fraud Prevention: To identify and prevent suspicious activity, multiple account usage, or any fraudulent attempts that could compromise the security of the platform and other members.
• Legal Compliance: Fulfilling our obligations under the PDPA 2010, anti-money laundering laws (AMLA), and applicable regulatory requirements.
• Service Communications: Sending important account-related notifications such as deposit confirmations, security alerts, or changes to our terms.
• Marketing (with consent): Sending information about the latest my lucky888 promotions, bonuses, or special offers – only if you have given consent to receive marketing communications.

My lucky888 maintains strict controls over the sharing of your personal data. We does not sell or trade your data to any party. However, in the following limited situations, we may share your data with selected third parties:

• Payment Processing Providers: Minimal transaction information is shared with payment processors such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX operators to facilitate your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Game Software Providers: Basic game data is shared with our Live Casino and table game software providers for technical operational purposes only.
• KYC Service Providers: Your identification documents may be submitted to approved third-party identity verification services to meet legal compliance requirements.
• Legal Authorities: my lucky888 will disclose required data to Malaysian authorities where mandated by law, court order, or a legitimate official investigation.

All third parties that receive your data from my lucky888 are bound by data protection agreements and are not permitted to use that data for any purpose outside the agreed scope.

My lucky888 continually invests in security infrastructure to protect your personal data. The technical and organisational measures we implement include:

• Data Encryption in Transit: All communications between your device and my lucky888's servers are protected by TLS 1.3 protocol and 256-bit SSL encryption.
• Stored Data Encryption: Sensitive data stored in our databases is encrypted using the AES-256 algorithm, ensuring it remains unreadable even in the event of a server breach.
• Multi-Layer Access Control: Only authorised personnel with a specific business need may access user data, and all access is logged and audited.
• Two-Factor Authentication (2FA): We offer and encourage the use of 2FA on all my lucky888 accounts to provide an additional layer of protection.
• 24/7 Security Monitoring: Our threat detection system continuously monitors for suspicious activity and takes automated action to block potential threats.
• Regular Security Audits: my lucky888 conducts regular penetration testing and independent security audits to identify and address vulnerabilities.

My lucky888 does not retain your personal data for longer than necessary. Retention periods vary depending on the type of data and applicable legal requirements:

When data is no longer required, my lucky888 deletes it securely using methods that ensure it cannot be recovered.

Under Malaysia's PDPA 2010 and the my lucky888 Privacy Policy, you have the following rights with respect to your personal data:

To exercise any of the rights above, please contact the my lucky888 Data Protection Officer at privacy@mylucky888.im along with a copy of your identification document for verification purposes. We will respond within 30 calendar days.

My lucky888 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and analyse usage patterns. The types of cookies we use are as follows:

• Essential Cookies: Required for the core operation of the my lucky888 platform – including login session authentication, security settings, and betting functionality. These cookies cannot be disabled.
• Preference Cookies: Saves your preferences such as interface language and display settings to ensure a consistent experience every time you visit my lucky888.
• Analytics Cookies: Helps us understand how users interact with the my lucky888 platform so we can improve its design and functionality. This data is collected in aggregate form and does not identify individuals.
• Security Cookies: Used to detect and prevent suspicious activity such as multiple login attempts from different locations.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some features on the my lucky888 platform.

Should my lucky888 discover that we have collected personal data from an individual under the age of 21 without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question.

If you believe that someone under the age of 21 has registered on my lucky888, please report it to us at privacy@mylucky888.im immediately.

My lucky888 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to the email address registered to your my lucky888 account.
• Displaying a prominent pop-up notice on the my lucky888 platform for a minimum of 30 days.

Continued use of the my lucky888 platform after the effective date of any amendment constitutes acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your privacy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how my lucky888 handles your personal data, please contact us at:

We take every privacy complaint seriously and are committed to resolving them fairly and within a reasonable timeframe. If you feel your complaint has not been resolved to your satisfaction, you have the right to refer the matter to the Malaysian Communications and Multimedia Commission (MCMC) or the Department of Personal Data Protection Malaysia.