Official Privacy Documents

Privacy Policy MrLucky8 — Malaysia Member Data Protection

We take your privacy seriously. This document transparently explains how mrlucky8 collects, stores, uses, and protects the personal data of every registered member on our platform.

Updated: 1 January 2026

Data Protection Commitment

The Six Privacy Pillars of MrLucky8

Our privacy policy is built on six core principles that ensure your personal data always remains in responsible hands.

End-to-End Encryption

All data transmitted between your browser and mrlucky8 servers is encrypted using TLS 1.3 and 256-bit SSL — the same standard used by international banking institutions.

No Data Sales

MrLucky8 has never and will never sell, rent, or trade member personal data to any third party for marketing or commercial purposes without written consent.

Secure Server Infrastructure

Member data is stored in prestigious Tier-4 data centres with multi-layered physical and digital access controls, automatic backups, and full DDoS attack protection.

Responsible KYC Compliance

The Know Your Customer (KYC) process is carried out securely and confidentially. Identity verification documents are stored in an isolated environment accessible only to authorised personnel.

Minimum Access Control

Only staff who require access for legitimate operational purposes are permitted to view user data. All access is logged and regularly audited by our internal security team.

Periodic Policy Review

Our privacy policy is reviewed and updated regularly in line with developments in Malaysian data protection legislation and the latest international standards. Members will be notified of any material changes.


§1 Types of Personal Data We Collect

When you register and use the platform MrLucky8, we collect several categories of personal data depending on your level of interaction with our platform. This collection is carried out transparently and solely for legitimate, necessary purposes.

Directly Provided Data

This is information you personally provide during the registration process or when using our services:

  • Identity information: full name, date of birth, identification card number or passport number.
  • Contact information: email address, phone number, and residential address.
  • Financial information: bank account number, bank name, and e-wallet details for deposit and withdrawal purposes.
  • Verification documents: a copy of your identification card or other supporting documents for the KYC process.

Automatically Collected Data

When you browse or use our platform, certain technical information is automatically collected by our systems:

  • IP address and approximate location information.
  • Device type, operating system, and web browser version used.
  • In-platform activity records including login times, games played, and transaction history.
  • Session data and technical cookies that enable the platform to function smoothly.
Note: We do not collect sensitive personal data such as medical information, religious beliefs, or political views. Any data collected is strictly limited to what is necessary for platform operations.

§2 How Your Personal Data Is Used

All data collected by mrlucky8 is used responsibly and solely for the following clearly defined purposes:

Purpose of Use Legal Basis Retention Period
Account registration & verification Contract performance For the duration of active account
Deposit & withdrawal processing Contract performance 7 years (accounting requirements)
KYC & AML Compliance Legal obligation 5 years after account closure
Customer Support Legitimate interest 2 years after resolution
Platform improvement Legitimate interest Anonymised data, no restrictions
Promotional communications User consent Until unsubscribed

§3 Data Storage and Security Measures

MrLucky8 employs a multi-layered security infrastructure to ensure member personal data is always protected against unauthorised access, breaches, damage, or fraud. Among the security measures we actively implement:

  • AES-256 encryption for all data stored in our databases.
  • TLS 1.3 protocol for all communications between the platform and user devices.
  • Intrusion detection systems (IDS) and multi-layered firewalls monitored 24/7.
  • Automated daily backup imaging to encrypted remote server locations.
  • Regular security audits conducted by independent third-party cybersecurity firms.

Your personal data is retained only for as long as it is needed for the stated purposes or as required by applicable law. Once the retention period expires, data will be securely deleted using industry-standard methods.

Security Reminder: While we take every reasonable measure to protect your data, no system can be guaranteed 100% secure. You are responsible for keeping your own password and account login credentials safe.

§4 Data Sharing with Third Parties

MrLucky8 does not sell or transfer your personal data to third parties for commercial purposes. However, in certain limited circumstances, data may be shared with:

  • Payment service providers: to securely process deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay.
  • Licensed game software providers: that provide gaming platforms to us, subject to strict confidentiality agreements.
  • Law enforcement authorities: where required by a court order or legislation valid in the relevant jurisdiction.
  • Identity verification service providers: that help us carry out the KYC process in an automated and efficient manner.

All third-party service providers we work with are bound by data protection agreements that prohibit them from using your data for any purpose beyond the scope of services provided to us.

§5 User Rights Regarding Personal Data

As a mrlucky8 member, you hold certain rights regarding your personal data that we fully respect. These rights are as follows:

Right of Access

Request a copy of all personal data we hold about you at any time.

Right to Rectification

Update or correct any inaccurate or outdated personal information.

Right to Erasure

Request deletion of your personal data, subject to legal retention requirements.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Portability

Receive your data in a structured, machine-readable format upon request.

Right to Restriction

Request restriction of your data processing during an active review or objection.

To exercise any of the above rights, please contact our Data Protection team via the support email. We will process every request within 30 business days of receipt.

§6 Cookies and Tracking Technologies

The mrlucky8 platform uses cookies and similar tracking technologies to deliver a smooth, secure, and personalised user experience. The cookies we use can be grouped into the following categories:

  • Essential Cookies: Required for core platform operations such as login session verification and security. This cannot be disabled.
  • Performance Cookies: Collect anonymised data on how users interact with the platform for technical improvement purposes.
  • Functional Cookies: Store your preferences such as language, currency, and display settings for a smoother recurring experience.
  • Marketing Cookies: Used to deliver more relevant promotional content. You may opt out of this category via the cookie settings on the platform.

You can manage your cookie settings through your web browser settings at any time. Please note that disabling essential cookies may affect the core functionality of our platform.

§7 Children's Data Policy

Mrlucky8 services are exclusively for individuals aged 18 years and above. We do not knowingly collect or store personal data from any individual under the age of 18. Should we discover that a child's data has been collected without our knowledge, such data will be deleted immediately and the associated account will be terminated without delay.

Parents or guardians who believe their child has registered on our platform are requested to contact our support team immediately so that prompt action can be taken.

§8 How to Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, please contact our Data Protection Officer through the following channels:

Data Protection Email:
[email protected]
Response time: within 3 working days for general enquiries; 30 working days for formal data rights requests.

Frequently Asked Questions

General Privacy FAQs for mrlucky8

Absolutely not. mrlucky8 has never and will never sell, rent, or transfer your personal data to any advertiser or third party for commercial purposes. Your data is used solely for platform operations as clearly stated in this privacy policy.

Retention periods vary by data type and legal requirement. Active account data is retained for the duration of the account. Financial records are kept for up to 7 years in accordance with accounting requirements. KYC documents are retained for a minimum of 5 years after account closure. Once the retention period expires, data is securely deleted.

You may submit a written data access request to our Data Protection team via email. Please include your full name, registered email address, and details of your request. We will process the request within 30 business days and deliver the data in an appropriate format to your registered email.

Yes, you may request data deletion under the "Right to be Forgotten". However, certain data may need to be retained to fulfil legal obligations such as financial records and KYC documents. We will clearly inform you which data can and cannot be deleted, along with the reasons, upon receiving your request.

Upon account closure, marketing data and user preferences will be deleted immediately. Identity and financial data will be retained for the period required by law before being permanently deleted. You will receive an email confirmation once the account closure and data deletion process is complete.
Your Data Is Safe With Us

MrLucky8 meets international data security standards. Register with full confidence today.

Register a Free Account Member Login
Security Standards
SSL 256-bit
Full data encryption
TLS 1.3
Secure transmission protocol
Integrated KYC
Secure identity verification
Daily Backup
Data Encrypted & Backed Up
Contact the Privacy Team

Have a data privacy enquiry? Our team is ready to assist in both Bahasa Melayu and English.

Your Privacy is Protected — Join mrlucky8 with Full Confidence

Our platform is built with data security as the top priority. Register today and enjoy world-class digital entertainment with peace of mind.

Bahasa Melayu