This Privacy Policy explains how luky888 collects, processes, stores, and protects the personal data of players and visitors to the luky888.cam platform. We are committed to handling your information with the highest standards of security and transparency.
We collect personal data you provide at registration, during KYC verification, and through your ongoing use of the Platform — including transaction history, device data, and communication logs.
Your data is used exclusively for account management, identity verification, fraud prevention, payment processing, regulatory compliance, and — where consented — personalised marketing communications.
All data is encrypted in transit using256-bit SSL and encrypted at rest. Access is restricted to authorised personnel only. We conduct regular security audits to maintain the integrity of our systems.
We do not sell your personal data. We may share data with licensed payment processors (DuitNow, FPX, Touch 'n Go), identity verification providers, and regulatory bodies only where legally required.
You have the right to access, correct, and request deletion of your personal data. You may also withdraw marketing consent, request data portability, or object to certain processing activities at any time.
For any privacy-related queries, data access requests, or complaints, contact our Data Protection team via live chat or email. We aim to respond to all privacy requests within 30 days of receipt.
luky888 ("we", "us", "our", or the "Company") is the operator of the online gaming and sports betting platform accessible atluky888.cam
This Privacy Policy (the "Policy") describes the types of personal data we collect, the purposes for which we collect and use that data, how we store and protect it, who we share it with, and what rights you hold in respect of your personal data. This Policy applies to all users of the Platform, including players located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia.
By accessing the Platform, creating a luky888 account, or making use of any services offered on the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should immediately discontinue use of the Platform.
This Policy is to be read in conjunction with our Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions regarding data handling, this Privacy Policy shall prevail.
This Privacy Policy was last updated on 1 January 2026. We reserve the right to amend this Policy at any time. Continued use of the Platform following publication of amendments constitutes your acceptance of the revised Policy. We encourage you to review this page periodically.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including name, identification number, contact details, location data, and online identifiers. |
| Data Subject | The identified or identifiable natural person to whom Personal Data relates — in the context of this Policy, primarily the Player or visitor to the Platform. |
| Data Controller | luky888, the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| Data Processor | Any third party that processes Personal Data on behalf of luky888 pursuant to a data processing agreement, including payment processors, identity verification providers, and technology service partners. |
| Processing | Any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction. |
| KYC | Know Your Customer — the identity and age verification process through which Players submit documentation to confirm their identity, residential address, and eligibility to use the Platform. |
| Platform | The luky888 website at luky888.cam and all associated mobile-optimised interfaces and services. |
When you register an account, complete KYC verification, make deposits or withdrawals, or contact our support team, you provide us with the following categories of personal data:
When you access the Platform, certain data is collected automatically through technical means:
We may receive supplementary personal data from third-party sources including:
luky888 processes personal data only where a lawful basis exists under applicable data protection legislation. The primary bases on which we rely are as follows:
| Lawful Basis | When We Rely on It |
|---|---|
| Contractual Necessity | Processing required to perform our obligations under the Member Agreement — including account creation, payment processing, withdrawal execution, and KYC verification. |
| Legal Obligation | Processing required for compliance with applicable AML laws, regulatory reporting obligations, and responses to lawful requests from authorities. |
| Legitimate Interests | Processing for fraud prevention, platform security monitoring, responsible gambling enforcement, and product improvement — where such interests are not overridden by your privacy rights. |
| Consent | Processing for direct marketing communications, personalised promotional offers, and non-essential analytics cookies — where you have given explicit, informed consent that may be withdrawn at any time. |
luky888 uses the personal data we collect for the following defined purposes:
luky888 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Any data sharing that occurs is strictly limited to the purposes described in Section 7 of this Policy.
Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function efficiently, remember your preferences, and provide analytical information to website operators. luky888 uses cookies and similar tracking technologies on the Platform for the purposes described below.
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Essential for core Platform functionality — maintaining your session, processing transactions, and enforcing security. The Platform cannot function without these cookies. | No |
| Performance & Analytics | Collect anonymised data on how visitors use the Platform — pages visited, time spent, errors encountered. Used to improve Platform performance and user experience. | Yes |
| Functional | Remember your preferences such as language settings, preferred payment methods, and game display options to personalise your experience on return visits. | Yes |
| Marketing | Used to track the effectiveness of promotional campaigns and to deliver relevant personalised offers. These cookies may be set by trusted advertising partners operating on our behalf. | Yes |
You may withdraw consent for non-essential cookies at any time by adjusting your browser settings or using our cookie preference panel. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled while you are an active user of the Platform, as they are integral to its secure operation.
luky888 treats your personal data with strict confidentiality. We do not sell, license, or otherwise transfer your personal data to unafiliated third parties for their independent commercial use. However, we may share your personal data with the following categories of third parties under defined, lawful circumstances:
All third parties with whom luky888 shares personal data are required to enter into formal Data Processing Agreements (DPAs) that govern their permitted use of that data, security obligations, and data deletion requirements. We do not engage third-party processors that do not meet our security standards.
The operation of the luky888 Platform may involve the transfer of personal data to, or processing of personal data in, countries outside of Malaysia. Where such international transfers occur, luky888 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable Malaysian data protection law.
Safeguards employed for international transfers may include: binding contractual clauses between luky888 and the receiving entity; transfers to jurisdictions that have received an adequacy determination; or other lawful transfer mechanisms recognised under applicable data protection frameworks.
If you have questions about the safeguards in place for a specific international transfer of your personal data, please contact our Data Protection team using the details provided in Section 15.
luky888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, regulation, or our regulatory licence conditions. The following indicative retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Retained for the duration of the active account relationship, plus a minimum of five (5) years following account closure, to satisfy AML record-keeping requirements. |
| KYC Documents | Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later. |
| Transaction Records | Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations. |
| Support Communications | Retained for three (3) years from the date of the most recent interaction, or longer where relevant to an open dispute or regulatory inquiry. |
| Marketing Consent Records | Retained for the duration of the marketing relationship plus three (3) years following withdrawal of consent, to evidence prior consent if required. |
| Cookie & Analytics Data | Retained per the individual cookie lifetime as described in our cookie settings. Analytical data is typically aggregated and anonymised after 26 months. |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents re-identification.
luky888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
While we take every reasonable precaution to protect your data on our end, the security of your account also depends on you keeping your login credentials confidential and logging out of shared devices. Never share your password with any third party, including anyone claiming to represent luky888 support.
Subject to applicable data protection law and certain limited exceptions, you hold the following rights with respect to your personal data held by luky888. You may exercise any of these rights by contacting our Data Protection team using the details in Section 15.
Request a copy of the personal data we hold about you, together with information about how it is processed.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
Request that we limit the processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
Request a structured, machine-readable copy of personal data you have provided to us, for transfer to another service provider.
Object to processing based on our legitimate interests, or to direct marketing communications, at any time.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Lodge a complaint with the relevant data protection authority if you believe your rights have not been respected. We encourage you to contact us first.
We will respond to verified rights requests within thirty (30) days. In complex cases, this period may be extended by an additional sixty (60) days, with notice provided to you within the initial thirty-day window.
The luky888 Platform is strictly intended for adults aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. During the account registration process, all prospective Members are required to confirm they meet the minimum age requirement, and this is verified through our mandatory KYC process.
If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete all associated personal data, and return any deposits made. If you believe that a minor may have registered on the Platform or submitted personal data, please contact us immediately using the details in Section 15.
The Platform may contain references to third-party payment providers — such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, and Hong Leong Connect — whose services you access during deposit and withdrawal transactions. When you interact with third-party payment infrastructure, your data is processed subject to those third parties' own privacy policies and terms of service, over which luky888 has no control.
luky888 is not responsible for the privacy practices or content of any third-party service providers. We recommend reviewing the privacy policies of any payment providers or third-party services you use in connection with the Platform.
luky888 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — that is, where they significantly affect your rights or the way we handle your personal data — we will provide reasonable advance notice through a prominent notice on the Platform or by email to your registered address, where practicable.
The date of the most recent revision is displayed at the top of this Policy. Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.
For any privacy-related queries, data subject rights requests, or complaints regarding the handling of your personal data by luky888, please contact our Data Protection team using the following details:
We aim to acknowledge all privacy-related requests within five (5) business days and to provide a substantive response within thirty (30) days. For complex requests, we may require additional time as described in Section 11.
If you are not satisfied with our response to a privacy complaint, you retain the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.
To protect your personal data from unauthorised disclosure, we may ask you to verify your identity before processing a data access, portability, or deletion request. This typically requires confirmation of your registered email address and one additional piece of identifying information.
Still have questions about how luky888 handles your personal data? Our24/7 support team is happy to help. Alternatively, visit our homepage or explore our FAQ for more information about the Platform.
🔞 For players aged 21 and above only. Play responsibly.