Luck 888 Privacy Policy – Player Data Protection in Malaysia

1Scope & Application of This Privacy Policy

This Privacy Policy describes Luck 888's privacy practices regarding the collection and use of personal information you provide when using our platform at luck888.express, including all subpages, mobile applications, and related services operated by Luck 888.

This document applies to all users of the Luck 888 platform – whether you are simply browsing our website without registering, a prospective member in the process of signing up, or an active member making full use of the platform for casino games, Sports Betting on the Malaysia Super League football, badminton, e-sports, slots, Live Casino, and all other services we offer.

By accessing or using the Luck 888 platform, you agree to the collection and use of information as described in this privacy policy. If you do not agree, please discontinue use of the platform. This policy should be read together with Terms & Conditions Luck 888, which forms part of the complete agreement between you and our platform.

2Types of Personal Data We Collect

Luck 888 collects your personal data in several ways – information you provide directly when registering or using the platform, and technical information collected automatically as you use our services.

Information you provide directly:

• Identity information: Full name, date of birth, identity card number (where required for verification).
• Contact information: An active Malaysian phone number and email address.
• Payment information: E-wallet account details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) or FPX information – we do not directly store credit or debit card numbers.
• Account information: Username, password (stored as an unreadable hash), game preferences, betting history, and transaction records.
• Support communications: Live chat session records, emails, and any other communications you have sent to the Luck 888 support team.

Automatically collected information:

• Technical data: IP address, web browser type, operating system, screen resolution, time zone.
• Usage data: Pages visited, session duration, in-game actions, and betting patterns (for security and fraud detection purposes).
• Device data: Unique device identifiers (for mobile applications), hardware information (excluding IMEI or any information that could personally identify your device).
• Cookie data: Login session information, display preferences, and website analytics data – please refer to Section 5 for full details on cookie usage.

3How Luck 888 Uses Your Data

Luck 888 uses the data we collect solely for legitimate and reasonable purposes related to operating the platform and serving our members. The following are the primary purposes for which data is used:

• Managing your account: Processing registrations, verifying identity, managing logins, and ensuring your account functions properly on the Luck 888 platform.
• Processing financial transactions: Verifying and processing deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, as well as processing withdrawal requests in Malaysian Ringgit (RM).
• Security & fraud prevention: Detecting and preventing fraudulent activity, money laundering, multiple account registrations, and any activity that violates Luck 888's Terms & Conditions.
• Enhancing the platform experience: Analysing usage patterns to improve interface design, platform speed, and ease of use – particularly for the mobile experience of Malaysian players.
• Service communications: Sending important account-related notifications – including transaction confirmations, security alerts, and service terms updates.
• Marketing communications: Sending information about promotions, bonuses, and new offers – only where you have agreed to receive such communications. You may withdraw this consent at any time.
• Legal compliance: Complying with applicable Malaysian legal and regulatory requirements, including the Personal Data Protection Act 2010 (PDPA) and the requirements of relevant regulatory bodies.
• Responsible gaming: Identifying gameplay patterns that may indicate a gambling problem and reaching out to players who may need support – this is part of Luck 888's commitment to member wellbeing.

4Data Sharing with Third Parties

Luck 888 does not sell, rent, or commercialise your personal data to any third party. However, there are limited situations where we need to share data in order to operate our services for you:

Trusted service providers: We share necessary data with technical service providers that help us operate the platform – including server infrastructure providers, gaming software providers, and payment processors that facilitate transactions via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX. All such providers are bound by strict confidentiality agreements and may only use your data for the specific purposes set out in those agreements.

Legal requirement: We may be required to disclose member personal data to Malaysian authorities – such as the police, courts, or financial regulators – when presented with a valid court order, warrant, or other binding legal requirement. In such cases, we will disclose only the minimum information necessary and will notify you where permitted to do so by law.

Security safeguards: Where we suspect fraudulent activity, money laundering, or other criminal conduct involving the Luck 888 platform, we reserve the right to share relevant information with the appropriate law enforcement authorities without prior notice to the suspected user.

• Luck 888 not share your data with advertising companies for targeted advertising purposes outside our platform.
• Luck 888 not sharing your data with social media platforms without your explicit consent.
• Luck 888 not allowing third-party service providers to use your data for their own purposes beyond the scope of services they provide to us.

5Cookies & Tracking Technologies

Luck 888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functionality — such as maintaining your login session, remembering language preferences, and ensuring security features work correctly. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how pages are used – such as which pages are most frequently visited and what error messages are encountered. All information is aggregated and anonymised. We use this to continuously improve Luck 888's platform performance.
• Functional Cookies: Remembering your preferences such as your username (not password), display settings, and other configurations to provide a more personalised experience when you return to the platform.
• Analytics Cookies: Helping us understand overall platform usage patterns to make better product development decisions. This data is not linked to your personal identity.

You can manage cookie settings through your web browser preferences. Please note that disabling essential cookies may affect the functionality of the Luck 888 platform. For mobile browsers on Android or iOS, please refer to your browser's privacy settings guide.

6Data Security – How We Protect Your Information

Luck 888 takes security infrastructure seriously to protect our members' personal data. The following are the technical and organisational security measures we have in place:

• Data encryption in transit: All communications between your device and Luck 888's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate – the highest standard commercially available.
• Stored data encryption: Sensitive data such as financial information and identity details are stored in encrypted databases. Passwords are never stored in plain text – they are hashed using strong cryptographic algorithms.
• Layered access controls: Only Luck 888 staff who require access to specific data to perform their duties are granted that access, and only to the extent necessary (least privilege principle). All access is logged and monitored.
• Continuous security monitoring: Our intrusion detection and threat monitoring systems operate 24/7. Any suspicious activity immediately triggers an alert to the Luck 888 security team.
• Regular security testing: Luck 888 conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.
• Incident management: We have established procedures for responding to data security incidents. In the event of a data breach that affects members, we will notify those affected within the timeframe required by Malaysian law.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against every cyber threat. We encourage you to play an active role in your account security by using a strong password, enabling 2FA, and staying alert to phishing attempts that may impersonate Luck 888.

7Data Retention Period

Luck 888 does not retain your personal data for longer than is necessary for the purposes stated in this privacy policy, or beyond the period required by Malaysian law.

• Active account data: Retained for as long as your account remains active and has not been officially closed.
• Financial transaction records: Retained for a minimum of 7 years after a transaction takes place, in line with Malaysia's financial and taxation legal requirements.
• Customer support communication records: Retained for 3 years from the date of communication, for reference and dispute resolution purposes.
• Security log data: Retained for 12 months for security analysis and incident investigation purposes when required.
• Marketing data (email & notifications): Retained for as long as you have not withdrawn your consent to receive marketing communications from Luck 888.

Once the applicable retention period has lapsed, your personal data will be permanently deleted or anonymised in our systems. Anonymised data can no longer be linked to your personal identity and may be retained indefinitely for statistical and analytical purposes.

If you request account closure, we will initiate the data deletion process in line with the schedule outlined above. Data that must be retained for legal compliance will be held in isolated systems no longer used for active platform operations.

8Your Rights as a Luck 888 User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy best practices adopted by Luck 888, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a readable format within 14 business days of receiving your request.
• Right to Rectification: If the data we hold about you is inaccurate or out of date, you have the right to request a correction. You can also update most account information directly through your Luck 888 profile settings.
• Right to Erasure: You may request the deletion of your personal data under certain circumstances – for example, when the data is no longer needed for the purpose it was collected, or when you withdraw your consent. Please note that some data may need to be retained to meet legal obligations.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict how we use your data – for example, while you are verifying the accuracy of your data or when you object to its processing.
• Right to Withdraw Consent: If you have consented to receive marketing communications or to certain uses of your data, you may withdraw that consent at any time without affecting the validity of any processing that took place prior to withdrawal.
• Right to Complain: If you believe Luck 888 has not handled your data in accordance with the law, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, contact the Luck 888 team via live chat or email support@luck888.express by clearly stating the right you wish to exercise and any relevant details. We will respond within 14 business days of receiving your request.

9Children's Policy

The Luck 888 platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store the personal data of children under the age of 18.

If you believe someone under the age of 18 has registered an account on Luck 888, please contact us immediately at support@luck888.express. We will investigate and close the account, and delete all related data within a reasonable timeframe.

Luck 888 applies age verification measures during registration, including requiring an active Malaysian phone number and OTP verification. Players required to undergo further identity verification must provide valid proof of age. Child protection is an absolute priority that we never compromise on.

10Amendments to This Privacy Policy

Luck 888 reserves the right to update or amend this privacy policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer.

When significant amendments are made to this privacy policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending a notification to your registered email address or phone number at least 14 days before amendments take effect for material changes.
• Displaying a clear notice on the Luck 888 platform about the changes being made.

For minor amendments that do not materially affect your fundamental rights — such as language corrections, clarifications, or updated contact information — we may update this page without a separate notice. We encourage you to review this page periodically to stay informed about how we protect your data.

Continued use of the Luck 888 platform after an amendment's effective date is considered acceptance of the revised privacy policy. If you do not agree with the changes made, you have the right to close your account before the amendment takes effect.

11Contact Us About Privacy

If you have any questions, concerns, or complaints regarding Luck 888's privacy policy or how we handle your personal data, our team is here to help.

We are committed to responding to all privacy-related enquiries within 3 business days, and personal rights requests within 14 business days. If you are not satisfied with how we have handled your enquiry, you have the right to file a complaint with the Department of Personal Data Protection Malaysia.