Privacy Policy Mr Lucky88 — Our Commitment to Protecting the Personal Information of Malaysian Players

Mr Lucky88 cares deeply about the privacy of every player on our platform. As an online casino and Sports Betting platform serving the Malaysian market, we understand how sensitive your financial and personal information is.

This Privacy Policy applies to all information collected through the Mr Lucky88 website, mobile app, interactions with our customer support team, and any other communication channels we operate. It covers both registered players and casual visitors browsing our platform.

As a data controller under Malaysia's PDPA 2010, Mr Lucky88 is fully accountable for compliance with this policy and all data handling processes within our organisation, including third parties appointed to process data on our behalf.

Mr Lucky88 collects various categories of personal data depending on how you interact with our platform:

2.1 Data You Provide Directly

2.2 Automatically Collected Data

• IP address, device type, operating system, and web browser version used.
• Platform usage data — pages visited, session duration, games played.
• General location data (based on IP address) for geographic compliance purposes.
• Technical information such as error logs, performance data, and app crash reports.

Mr Lucky88 use your personal data for the following legitimate purposes:

• Account management — creating, verifying, and managing your member account.
• Transaction processing — processing deposits via DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, FPX / Maybank2u or CIMB Clicks, as well as withdrawals of your winnings.
• Legal compliance — fulfil KYC (Know Your Customer), AML (Anti-Money Laundering), and other regulatory compliance obligations.
• Platform security — detect and prevent fraud, account misuse, and unauthorised access.
• Service improvement — analyse usage patterns to improve user experience, platform performance, and game selection.
• Customer support — provides assistance when you contact the Mr Lucky88 support team.
• Important communications — sending account-related notifications, policy updates, and security information.
• Responsible Gaming — monitoring gameplay patterns to identify players who may need support.

Mr Lucky88 ensures that every use of your personal data has a valid legal basis under Malaysia's PDPA 2010 — whether grounded in your consent, contractual necessity, legal obligation, or the platform's legitimate interests.

Mr Lucky88 does not sell your personal data to any third party for commercial purposes. However, under certain limited circumstances, we may share your information with:

4.1 Authorised Third Parties

• Payment processors — to process deposits and withdrawals via e-wallets and FPX Malaysia. These processors are bound by strict confidentiality agreements.
• Gaming software providers — the minimum information required to access casino and slot games on the Mr Lucky88 platform.
• IT service providers — who assist in operating the platform's technical infrastructure under strict data processing agreements.
• Independent auditing body — for compliance auditing and RNG verification purposes.

4.2 Legal Obligations

Mr Lucky88 may disclose your personal data to the relevant Malaysian authorities when required to do so by law, court order, or direction from a legitimate regulatory body. In such cases, we will endeavour to notify you where permitted by law.

Mr Lucky88 implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All communications between your device and the Mr Lucky88 platform are encrypted using TLS 1.3 protocol with AES-256 encryption.
• Encryption of data at rest: Sensitive data stored in our databases is encrypted using column-level encryption.
• Access controls: Access to player data by Mr Lucky88 staff is strictly governed on a need-to-know basis, with full audit logs maintained.
• 24/7 monitoring: An active threat detection system monitors our platform around the clock for any suspicious activity.
• Periodic penetration testing: Independent security audits are conducted periodically by third-party cybersecurity experts.

In the event of a material data breach, Mr Lucky88 is committed to notifying affected users within 72 hours of becoming aware of the incident, in line with industry best practices.

Mr Lucky88 will not retain your personal data longer than is necessary for the stated purposes or as required under Malaysian law:

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your personal identity.

As a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding the personal data held by Mr Lucky88:

Website Mr Lucky88 use cookies and similar tracking technologies to enhance your experience. The following are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may affect certain features of the Mr Lucky88 platform.

Mr Lucky88 may send you marketing communications about the latest promotions, bonuses, and offers via email or platform notifications, subject to your consent.

You may opt out of receiving marketing communications at any time by:

• Click the "Unsubscribe" link at the bottom of any of our marketing emails.
• Update your communication preferences in your Mr Lucky88 account settings.
• Reach our support team via live chat or email.

In certain operational circumstances, your personal data may be processed or stored outside Malaysia — for example, at data centres or systems operated by licensed gaming software providers. In all such cases, Mr Lucky88 ensuring that:

• Transfers are only made to countries or organisations that provide a level of data protection comparable to Malaysia's PDPA.
• Legally binding data processing agreements are signed with all data recipients.
• You will be notified of any material international data transfers via updates to this Privacy Policy.

Mr Lucky88 does not provide services to individuals under the age of 21. We do not knowingly collect personal data from minors or underage individuals. Should we become aware that personal data has been inadvertently collected from anyone under 21, that data will be promptly deleted and the associated account will be closed.

If you are a parent or guardian who becomes aware that your child has registered on our platform, please contact us immediately at support@mrlucky88-jit.com.

Mr Lucky88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to all registered members via email or in-platform notifications.
• In the event of highly material changes, we will seek your consent again before you can continue using the service.

Your continued use of Mr Lucky88 after any changes are published constitutes your acceptance of the updated Privacy Policy.

For any enquiries, complaints, or requests related to your privacy and personal data at Mr Lucky88, please reach out to us through the following channels:

• Email (Privacy): support@mrlucky88-jit.com — subject: "Privacy Policy Inquiry"
• Live Chat: Available 24/7 on the Mr Lucky88 platform — contact an agent and state "privacy inquiry"
• Response time: We are committed to responding to all privacy enquiries within 21 business days

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection under the Ministry of Communications.