This document clearly explains how luky888 collects, uses, stores, and protects your personal data as a member of our online betting platform operating in Malaysia.
All data transmitted between your device and luky888's servers is protected by bank-grade 256-bit SSL encryption.
Luky888 fully complies with Malaysia's Personal Data Protection Act 2010 in all aspects of member data collection and processing.
Your personal data is never sold, rented, or shared with third parties for marketing purposes without your explicit consent.
You have the right to access, correct, and request the deletion of your personal data at any time through luky888's support channels.
This Privacy Policy explains how luky888 ("Platform", "We", "Operator") collects, uses, discloses, and protects your personal information when you register and use the luky888 online betting platform. We are committed to safeguarding your privacy and complying with all requirements under Malaysia's Personal Data Protection Act (PDPA) 2010. By registering a luky888 account, you consent to the processing of your personal data as described in this Privacy Policy. Please read this document carefully.
Luky888 is an online Sports Betting and casino platform operating exclusively for users in Malaysia. As the platform operator, we act as the data controller for all information you provide to us during registration and your continued use of our services.
This Privacy Policy applies to all registered luky888 members, website visitors, and anyone who interacts with our platform – whether via the website, iOS or Android mobile app, or any official luky888 communication channel. It also applies to all data collected through the use of Malaysian digital payment services, including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX.
We take a privacy by design approach, meaning privacy protection is built into every aspect of our operations from the system design stage, rather than added as an afterthought after issues arise. The luky888 technology team conducts a Privacy Impact Assessment whenever a new system is introduced or significant changes are made to existing systems.
Luky888 only collects personal data that is strictly necessary to provide a secure betting platform and to meet licensing and legal compliance requirements. The following are the categories of data we collect:
We do not collect special categories of personal data — such as health information, biometric data, religious beliefs, political views, or criminal records — unless required by law or specific compliance obligations, and only where you have given your explicit consent in advance.
Your personal data is collected through various methods as you interact with the luky888 platform. It is important that you understand each of these data collection points:
Luky888 only uses your personal data for lawful, specified purposes. We will not use your data for any other purpose without informing you first and obtaining your consent where required. The following are the primary purposes for which your data is used:
Luky888 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, there are limited situations where we need to share your data with certain parties for legitimate operational purposes:
Luky888 does not disclose member data to parent companies, subsidiaries, or related entities for cross-marketing purposes without your consent. Any business restructuring or acquisition involving the transfer of member data will be communicated in advance with sufficient notice for you to make an informed decision.
Luky888 continually invests in security infrastructure to protect members' personal data from unauthorised access, misuse, loss, or destruction. The following are the key security measures we have in place:
Luky888 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law. Our principle is "retain the minimum, delete on time".
Once the relevant retention period has expired, your data will be securely deleted using non-recoverable deletion methods, or anonymised so it can no longer be linked to you personally. Anonymised data may be retained for platform analytics purposes for a longer period.
Luky888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the luky888 website. They help the platform remember your settings and ensure a smoother, more personalised experience.
We use four main types of cookies:
Luky888 does not use cookies or tracking technologies to collect sensitive personal data or to monitor your activity outside of the luky888 platform itself.
Under Malaysia's Personal Data Protection Act (PDPA) 2010 and international best practices, you have the following rights regarding your personal data processed by luky888:
You have the right to request a copy of all personal data we hold about you. Such requests will be processed within 21 working days. We reserve the right to charge a reasonable fee for repeated or excessive requests.
If you find that the personal data we hold about you is inaccurate or incomplete, you may request a correction at any time through your account settings or by contacting the luky888 support team.
You may withdraw consent for data processing that relies on consent (such as marketing communications) at any time. Withdrawal of consent does not affect any processing that took place prior to the withdrawal.
You have the right to object to the processing of your data for specific purposes, including direct marketing. luky888 will honour such objections unless there are overriding legal grounds that take precedence.
In certain circumstances, you may request the deletion of your personal data. This right is subject to data retention obligations prescribed under Malaysian law — for example, financial transaction records must be retained for 7 years under AML legislation.
To exercise any of the rights above, contact luky888's Privacy Officer by email at support@luky888.click with the subject line "Personal Data Rights Request". Please include your full name, account number, and the specific right you wish to exercise.
The luky888 platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. Account registration requires confirmation that you are at least 18 years old, and our KYC process verifies each member's date of birth through official documents such as MyKad.
If you are a parent or guardian and believe that your minor child has registered a luky888 account or provided us with their personal data without your knowledge, please contact us immediately at support@luky888.click. We will investigate and take prompt action to delete the relevant data and close the account.
Luky888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new Malaysian legal requirements, or technological developments that affect how we handle member data.
For significant changes — meaning changes that materially affect how we use your data or your rights as a member — we will provide at least 14 days before the changes take effect via:
Your continued use of the luky888 platform after the updated Privacy Policy takes effect constitutes your acceptance of those changes. If you do not agree with the changes, you have the right to close your account and withdraw your balance before the effective date.
If you have any questions, concerns, or complaints about how luky888 handles your personal data, or if you wish to exercise any of your rights as a data subject, please contact our Privacy Officer through the following channels:
We aim to respond to all privacy-related enquiries within 5 working days. For more complex requests such as full data access or data deletion, please allow up to 21 working days for complete processing.
This Privacy Policy was last updated on 1 January 2026. The latest version is always available on this page.
This is more than legal compliance – it is a value we uphold in every decision that involves your data.
Luky888 only collects data that is genuinely necessary to deliver our services. We do not collect data "just in case" — every data point we request has a clear and legitimate purpose.
We tell you clearly and plainly everything we do with your data – in straightforward language, not confusing legal jargon. No hidden agendas.
256-bit SSL, AES-256 encryption for stored data, strict access controls, 24/7 monitoring, and ISO/IEC 27001 certification – multiple layers of security protecting your data from every angle.
Rights of access, correction, withdrawal of consent, objection, and data deletion – all exercisable by you. Your data belongs to you, and we are here to help you manage it.
Data is retained only for as long as necessary. Once the relevant retention period has elapsed, data is securely deleted or anonymised – not left sitting idle in our systems.
All data processing by luky888 is in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. We undergo periodic compliance reviews by independent legal advisors.
Register in under 2 minutes. Minimum deposit RM 30 via DuitNow or Touch 'n Go eWallet. Enjoy a Welcome Bonus of up to RM 2,888 with your data privacy and security fully protected.