Privacy Policy
How MyLuck Protects Your Data

This Privacy Policy ("Policy") describes how MyLuck ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("Player", "User", "you") who access or use the website at myluck.cam, including any mobile-optimised versions of the Platform.

MyLuck is committed to handling your personal information with the highest standards of confidentiality and security. We operate in accordance with applicable data protection legislation and international best-practice frameworks for online privacy. This Policy is intended to provide you with complete transparency about our data practices so that you can make informed decisions about your use of the Platform.

By registering a MyLuck account, making a deposit, or otherwise using any Platform service, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree to this Policy, you should discontinue use of the Platform and contact our support team to close your account.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including names, contact details, financial information, device identifiers, and behavioural data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, transmission, retrieval, alteration, or deletion.
• "Data Controller" means MyLuck's licensed operating entity, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on MyLuck's behalf, under written instruction and subject to appropriate data protection agreements.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analytics, and personalisation.
• "KYC Data" means identity verification documents and related information submitted by Players as part of the Know Your Customer verification process.
• "Sensitive Data" means a special category of Personal Data requiring heightened protection, including financial account information, identification documents, and data relating to responsible gambling status.

MyLuck collects the following categories of Personal Data:

When you create a MyLuck account, we collect your full legal name, date of birth, residential address, email address, and contact number. This data is required to establish and administer your account and to meet our age verification and KYC obligations.

To comply with our licensing obligations and anti-money laundering (AML) requirements, we collect copies of government-issued identification documents (such as your Malaysian MyKad or passport) and, where required, proof of address and proof of payment method. This data is processed securely and retained only for as long as legally required.

We collect records of all deposit and withdrawal transactions conducted through your MyLuck account, including payment method identifiers (e.g., the registered name and last four digits associated with a Maybank2u or Touch 'n Go eWallet account), transaction amounts in Malaysian Ringgit (MYR), transaction timestamps, and processing statuses. Full payment credentials (card numbers, bank login details) are never stored on MyLuck servers.

We collect records of your gaming activity on the Platform, including games played, bet amounts, game outcomes, session durations, bonus claims, and wagering history. This data is used for account management, fraud prevention, responsible gambling monitoring, and service improvement.

We automatically collect certain technical data when you access the Platform, including your IP address, device type and operating system, browser type and version, unique device identifiers, time zone settings, and referring URLs. This data assists with security monitoring, fraud detection, and Platform optimisation.

We retain records of communications between you and MyLuck's customer support team, including live chat transcripts and email correspondence. These records are used to resolve disputes, improve service quality, and maintain audit trails.

MyLuck collects Personal Data through the following means:

• Direct collection: Information you actively provide when registering, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or responding to surveys.
• Automated collection: Technical and device data collected automatically via cookies, server logs, and similar technologies when you access or use the Platform.
• Third-party sources: Identity verification and fraud-screening data may be received from licensed third-party KYC and AML service providers, as well as from payment processors facilitating your transactions.
• Publicly available sources: In limited circumstances, we may supplement account data with information from publicly available sources for fraud prevention and compliance purposes only.

MyLuck processes your Personal Data on the following legal bases:

MyLuck uses the Personal Data we collect for the following purposes:

• To create, verify, and administer your MyLuck account and maintain accurate account records
• To process deposits and withdrawals through your chosen payment method (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, or cryptocurrency)
• To conduct KYC identity and age verification in compliance with our licensing obligations — confirming that all players are aged 21 or above 21+
• To detect, investigate, and prevent fraud, money laundering, collusion, and other prohibited activities
• To monitor gambling activity for responsible gambling purposes, including the identification of problem gambling indicators and the administration of player-requested self-exclusion, deposit limits, and cooling-off periods
• To provide customer support and resolve disputes, complaints, or technical issues
• To personalise your Platform experience and serve you relevant game recommendations, promotions, and content
• To send you transaction confirmations, account notifications, and service-related communications
• To send you marketing communications where you have opted in to receive them (you may withdraw consent at any time)
• To analyse Platform usage patterns, conduct A/B testing, and improve the performance, stability, and user experience of the Platform
• To comply with applicable laws, regulations, court orders, and regulatory directions

MyLuck does not sell, rent, or commercially exploit your Personal Data. We share your data only in the following limited circumstances:

We engage vetted third-party service providers who process data on our behalf under written data processing agreements. These include payment processors (facilitating MYR transactions through channels such as DuitNow and FPX), identity verification and KYC providers, fraud detection and AML screening services, cloud hosting and infrastructure providers, and customer support technology providers. All third-party processors are contractually bound to handle your data securely and only for the purposes we specify.

We may disclose Personal Data to gaming regulators, financial intelligence units, law enforcement agencies, or courts when legally required to do so, or when MyLuck reasonably determines that disclosure is necessary to comply with a legal obligation, protect the rights or safety of MyLuck or its players, or prevent fraud and financial crime.

In the event of a merger, acquisition, restructuring, or sale of assets, Personal Data may be transferred to the acquiring entity subject to equivalent privacy protections. We will notify affected Players of any such transaction where required by law.

The MyLuck Platform uses cookies and similar tracking technologies to deliver and improve our services. The following categories of cookies may be used:

• Strictly Necessary Cookies: Required for the Platform to function. These cannot be disabled. They include session management cookies, authentication tokens, and security cookies.
• Functional Cookies: Enable personalisation features such as remembering your language preferences, session settings, and game lobby layout preferences.
• Analytics Cookies: Collect aggregated, anonymised data about how players interact with the Platform. We use this data to understand usage patterns and improve Platform performance. No personally identifiable information is used in analytics reporting.
• Security Cookies: Assist with fraud detection, IP verification, and the identification of unusual account behaviour.

You may adjust your browser settings to refuse or delete non-essential cookies. Please note that disabling certain cookies may affect Platform functionality. MyLuck does not use third-party advertising cookies or cross-site tracking technologies.

MyLuck employs a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• AES-256 encryption for data stored at rest across all production database systems
• Multi-factor authentication requirements for all internal staff accessing production systems
• Role-based access controls ensuring staff can only access data relevant to their operational function
• Continuous intrusion detection and monitoring across all production infrastructure
• Regular penetration testing and third-party security audits conducted by independent cybersecurity specialists
• Secure, encrypted backup procedures with geographically distributed redundancy

In the event of a data breach that is likely to result in a risk to your rights and freedoms, MyLuck will notify affected Players and the relevant regulatory authority within the timeframe required by applicable law. We will provide clear information about the nature of the breach, the data affected, and the steps taken to mitigate potential harm.

MyLuck retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligation. Our general retention schedule is as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymised so that it can no longer be attributed to any individual.

As a MyLuck player, you hold the following rights with respect to your Personal Data. You may exercise any of these rights by contacting our support team via live chat or by emailing [email protected]:

MyLuck enforces mandatory age verification as part of the account registration and KYC process. Any account found to be registered by a person under the age of 21 will be immediately closed and all associated data will be securely deleted, except where retention is required by law for anti-fraud or AML purposes.

If you become aware that a minor has registered an account on the MyLuck Platform or that their data has been collected without appropriate age verification, please notify us immediately at [email protected]. We will investigate and take immediate remedial action.

MyLuck's primary data processing infrastructure is hosted within data centres that meet internationally recognised security standards. In the course of operating our services, certain Personal Data may be transferred to or processed in jurisdictions outside Malaysia, for example where third-party service providers (such as cloud infrastructure providers or KYC verification partners) maintain operations.

Where Personal Data is transferred internationally, MyLuck ensures that appropriate safeguards are in place to protect it to a standard equivalent to that described in this Policy. These safeguards may include contractual data processing agreements incorporating standard contractual clauses, data transfer impact assessments, and supplier security audits.

By using the MyLuck Platform, you consent to the transfer of your Personal Data in accordance with the safeguards described in this section.

MyLuck reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered Players by email and/or by displaying a prominent notice upon login to the Platform, at least seven (7) days prior to the changes taking effect.

The "Effective Date" and "Last Reviewed" date displayed at the top of this page indicate the currently operative version. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing activities, please contact the MyLuck Data Protection team through the following channels:

• Live Chat: Available on the Platform, 8am – 2am MYT, 7 days a week
• Email: [email protected] (plain text — not a clickable link)

All privacy-related enquiries and data subject rights requests will be acknowledged within two (2) business days and resolved within thirty (30) calendar days. For queries relating to your account Terms of Service, please refer to our Terms & Conditions page.