Data Protection

Mylucky Privacy Policy – Your Data Security Is Our Priority

At mylucky, we understand that your trust is our most valuable asset. This Privacy Policy transparently explains how we collect, store, use, and protect your personal information every time you use our platform.

Updated: 1 January 2026
SSL
256-bit Encryption
24/7
Security Monitoring
PDPA
Full Compliance
0%
Sale of Data to Third Parties
500K+ Protected Users
256-bit SSL Encryption
PDPA Data Protection Act
0 Data Breaches Reported

Six Pillars Privacy Protection mylucky

We have built a multi-layered data protection system to ensure your personal information remains safe and fully under control.

Military-Grade Encryption

All data transmitted between your device and mylucky's servers is encrypted using 256-bit SSL/TLS — the same standard used by financial institutions and governments worldwide. No one can intercept or read your information while in transit.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls, intrusion detection systems (IDS), and strict access controls. Only authorised personnel may access user data, and every access is automatically logged for audit purposes.

Full User Control

You have full rights to access, edit, download, or delete your own personal data through your account settings. Data access requests are processed within 14 business days in accordance with Malaysia's Personal Data Protection Act (PDPA).

No Data Sales to Third Parties

Mylucky has never and will never sell, rent, or trade users' personal data to any third party for marketing purposes. Any data sharing only occurs when required by law or with your explicit consent.

Anonymous Analytics

When we collect usage data to improve the platform, all information used for internal analytics is anonymised — meaning it cannot be traced back to your identity. Your privacy is protected even throughout the product improvement process.

Marketing Opt-Out

You can opt out of marketing communications at any time via the notification settings in your account or by contacting our support team. Unsubscribe requests will be processed within 5 business days.

1Introduction

Mylucky is committed to protecting the privacy and personal data security of all users on our platform. This Privacy Policy ("Policy") describes our practices regarding the collection, use, disclosure, and protection of your personal information when you use the mylucky platform — including the mylucky.onl website and our mobile app.

This policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the latest international data protection standards. By using the mylucky platform, you agree to the terms outlined in this Privacy Policy.

We encourage you to read this Policy carefully. If there are any significant changes to how we handle your data, we will notify you via your registered email or in-app notification before the changes take effect.

Simple Summary: mylucky collects only the data it needs, uses it solely for the stated purposes, and never sells it to any outside party. You always have full control over your own data.

2Data We Collect

Mylucky collects two main categories of data: information you provide directly, and information collected automatically as you use the platform.

Information You Provide to Us:

  • Registration Data: Full name, date of birth, gender, email address, mobile number, and chosen password
  • Identity Verification Data (KYC): Copy of identity document (MyKad), passport, or other valid ID; selfie photo for biometric verification; proof of residential address
  • Financial Data: Bank account number, account holder name, digital wallet details (Touch 'n Go, Boost, MAE), and transaction history
  • Communications: Live chat session records, emails to the support team, and complaint form feedback

Information Collected Automatically:

  • Technical Data: IP address, browser type, operating system, screen resolution, and app version
  • Usage Data: Pages visited, session duration, games played, and click patterns
  • Device Data: Unique device identifier, phone model, and network information (WiFi or cellular data)
  • Location Data: Geographic location based on IP address for regional compliance purposes
Data Type Primary Purpose Legal Basis
Registration Data Create and manage user accounts Contract performance
KYC Data Identity verification, AML compliance Legal obligation
Financial Data Processing deposits and withdrawals Contract performance
Technical Data Security, fraud detection Legitimate interest
Usage Data Product and UX improvement Legitimate interest

3How We Use Your Data

We use collected data responsibly and only for the purposes stated below. mylucky does not use your data for any other purpose without your consent:

  • Account Management: Create, verify, and manage your account; process login and logout requests; send account security notifications
  • Transaction Processing: Verify and process deposits and withdrawals; detect and prevent fraudulent transactions; comply with financial reporting requirements
  • Legal Compliance: Conducting AML (Anti-Money Laundering) checks; complying with Malaysia's PDPA 2010; responding to valid legal requests
  • Customer Support: Responding to inquiries and complaints; resolving disputes; providing technical support
  • Platform Security: Detect and investigate suspicious activity; protect the integrity of the gaming system; prevent multi-account usage
  • Product Improvement: Analyze usage patterns anonymously; test new features; optimize user experience
  • Marketing Communications: Sending relevant promotions and offers (only to users who have agreed to receive such communications)
Data Minimisation Principle: mylucky only collects data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant information beyond what is needed to operate the platform.

4Data Sharing With Third Parties

Your trust is our priority. mylucky never sell users' personal data to any third party for commercial purposes. However, there are limited situations where data sharing is required for platform operations:

  • Payment Service Provider: Transaction information is shared with trusted payment gateway providers (such as banks and digital wallet operators) solely to process your financial transactions.
  • Identity Verification Provider: KYC data may be shared with licensed third-party identity verification services to meet legal requirements
  • Game Service Provider: Minimum necessary game information is shared with third-party game providers (live casino, slots, fish shooting games) to enable game sessions to function.
  • Competent Authorities: mylucky will disclose information to the police, courts, or regulatory authorities when required by Malaysian law or a valid court order
  • Cloud Services: Data is stored on cloud servers managed by licensed infrastructure providers subject to strict confidentiality agreements

All third parties that receive mylucky user data are bound by strict data protection agreements and are not permitted to use that data for any purpose beyond what mylucky has specified.

5Cookies & Tracking Technologies

Mylucky uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session authentication and account security. These cookies cannot be disabled as they are critical to platform operation.
  • Preference Cookies: Saving user preferences such as display language, display settings, and preferred region to deliver a more personalized experience.
  • Analytics Cookies: Collecting anonymous information about how users interact with the platform to help us identify areas for improvement.
  • Security Cookies: Helps detect suspicious login patterns, unauthorized access attempts, and potentially fraudulent activity.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect platform functionality. For mobile app users, your device privacy settings control tracking permissions.

6Data Retention Period

Mylucky retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. The following are general data retention guidelines:

  • Active Account Data: Retained for the duration your account is active and for an additional period following account closure as required by law
  • Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements
  • KYC Data: Retained for a minimum of 6 years after the business relationship ends in accordance with AML requirements
  • Communication Logs: Customer support records are retained for 2 years for dispute resolution purposes.
  • Marketing Data: Retained until you withdraw consent or request deletion

Once the applicable retention period expires, data will be securely deleted or anonymised in accordance with established procedures, unless a legal requirement exists to retain it longer.

7Your Rights Under PDPA

As a mylucky user based in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA):

Right of Access

Request a copy of the personal data we hold about you. Requests are processed within 14 business days.

Right to Rectification

Update or correct your inaccurate or incomplete personal data at any time.

Right to Erasure

Request deletion of your personal data when it is no longer needed, subject to legal obligations.

Right to Object

Object to the processing of your data for direct marketing purposes at any time without any conditions.

Right to Data Portability

Receive your data in a structured, machine-readable format for transfer to another platform.

Right to Restriction of Processing

Request restriction of your data processing in certain situations, such as during a data accuracy dispute.

To exercise any of the above rights, you may submit a request via our 24/7 live chat or email us at [email protected]. We may need to verify your identity before processing your request to protect the security of your account. Verification is usually completed within 3 business days.

8Data Security Measures

Mylucky continuously invests in world-class security infrastructure to protect your personal data from unauthorized access, alteration, disclosure, or destruction. The technical and organizational security measures we implement include:

  • Encryption of Data in Transit: All communication between your browser or app and our servers uses TLS 1.3 protocol with 256-bit encryption.
  • Encryption of Data at Rest: Sensitive information such as financial data and KYC details is encrypted at rest using AES-256 encryption.
  • Multi-Layer Access Control: A least privilege principle is applied — staff are only granted access to the data necessary for their specific tasks.
  • Two-Factor Authentication: All staff accounts accessing data management systems require mandatory two-factor authentication (2FA).
  • Regular Security Audits: Our systems undergo independent penetration testing and security audits at least twice a year.
  • Continuous Monitoring: A Security Information and Event Management (SIEM) system monitors for suspicious activity 24 hours a day, 7 days a week.
  • Incident Response Plan: A dedicated security team is on standby to respond to any security incident in under 1 hour.
Data Breach Notification: In the event of a data breach affecting your personal information, mylucky will notify you within 72 hours of becoming aware of it, in line with international data protection best practices.

9Third-Party Links & Services

The mylucky platform may contain links to third-party services such as game providers and payment gateways. Please note that:

  • This Privacy Policy applies only to the mylucky platform and does not cover third-party websites or applications
  • Each third-party game provider integrated with mylucky has its own privacy policy.
  • Mylucky is not responsible for the privacy practices of any third party
  • We encourage you to read the privacy policy of any third-party service before using it.
  • All third-party providers working with mylucky are selected based on their security and data protection standards.

10Privacy Policy Amendments

Mylucky reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or the latest technology. When we make material changes, we will:

  • Sending email notifications to all registered users at least 14 days before changes take effect
  • Displaying a clear notice on the platform's home page for 30 days
  • Sending push notifications via the mylucky mobile app
  • Updating the "Last Updated" date at the top of this page

Your continued use of the mylucky platform after any Privacy Policy changes take effect constitutes your acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account and request deletion of your data.

Previous versions of this Privacy Policy are available upon request from our support team for your reference.

11Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

  • Privacy Email: [email protected]
  • General Support: [email protected]
  • Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform
  • Response Time: Privacy-related requests are answered within 3–5 business days.

We take every privacy complaint seriously and are committed to resolving your concerns in a fair and transparent manner. If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia.

Your Transactions Are Protected: mylucky is trusted by over 500,000 active users in Malaysia. Our commitment to data protection is not merely a legal obligation — it is a core value of our platform.

Commitment Data Protection We

Five core commitments from mylucky to every user regarding privacy and data security.

Fully Transparent
We are always transparent about what data we collect and why it is needed.
Securely Stored
Our multi-layered security infrastructure protects your data from all cyber threats.
Control in Your Hands
You can access, edit, or delete your own data at any time.
Legal Compliance
Fully compliant with Malaysia's PDPA 2010 and international data protection standards.
Immediate Notification
You will be notified within 72 hours in the event of any data security incident.
Dedicated Support
A dedicated privacy team is available 24/7 to assist with any inquiries or concerns.

Join Us 500,000+ Protected Users

Mylucky prioritizes your data security in every product development decision. Register today and enjoy a safe, fun, and trusted gaming experience.

256-bit SSL PDPA Compliance 24/7 Support No Data Sales
Bahasa Melayu