Privacy Policy

Myluky Privacy Policy — Member Personal Data Protection

Your privacy is our priority. This document clearly explains how myluky collects, uses, stores and protects your personal data as a member of our platform.

Updated: 1 January 2026  |  Version: 2.4

Our Privacy Commitment

Myluky's Six Core Data Protection Principles

We do not merely comply with data protection laws — we go beyond the minimum requirements to ensure your privacy is truly protected

🔐
Bank-Level Encryption

All data transmitted between your device and myluky's servers is protected by 256-bit SSL encryption — the same standard used by Malaysian banking institutions. Your personal and financial information cannot be intercepted by any third party.

🚫
No Sale of Data to Third Parties

Myluky has never and will never sell, rent or share member personal data with any third party for marketing purposes without your explicit consent. Your data belongs to you — we are merely its custodians.

🎯
Minimal Data Collection

We only collect data that is genuinely necessary to provide the myluky platform's services and meet our regulatory obligations. No excess data is collected merely on the basis that it might be useful in the future.

👁️
Full Transparency

This Privacy Policy is written in clear, plain English — not confusing legal language. You have the right to know exactly what we do with your information, and we are committed to telling you.

⚙️
Control in Your Hands

You have the right to access, correct, download or request deletion of your personal data at any time through your account settings or by contacting our support team, available 24/7.

🏛️
Malaysian Legal Compliance

Myluky operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable regulations. We appoint a Data Protection Officer to continuously oversee this compliance.


Important Note: This Privacy Policy forms part of your agreement with myluky. By registering and using our platform, you agree to how we handle your personal data as described in this document. Please read it carefully.

1Introduction

Myluky ("we", "our platform") takes seriously our responsibility to protect the privacy of every member using our online gaming platform. This Privacy Policy ("Policy") describes our practices regarding the collection, use, disclosure and protection of your personal information when you use the myluky website, mobile app and all related services.

This policy applies to all registered myluky members, website visitors and anyone who interacts with our platform in any capacity. We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in personal data management.

It is our sincere commitment not merely to comply with the law, but to go beyond the minimum requirements to ensure your personal data always remains in safe and trusted hands.

2Personal Data We Collect

Myluky collects your personal data through several channels — during account registration, during platform use, during financial transactions and through your interactions with our support team. The following are the categories of data we collect:

Data Category Examples of Information Primary Purpose
Identity Data Full name, date of birth, identity card number, facial image Account registration & KYC
Contact Data Email address, mobile number, residential address Communication & Verification
Financial Data Bank account number, bank name, deposit and withdrawal transaction records Payment processing & AML
Technical Data IP address, browser type, device type, operating system Security & fraud detection
Usage Data Game history, betting records, login times, pages visited Service improvement & responsible gaming
Communication Data Live chat records, support tickets, feedback Customer support & improvement

Minimum Principles: We only collect data that is strictly necessary for the stated purpose. No sensitive data such as health information or religious beliefs is collected by myluky.

3How We Use Your Personal Data

The personal data we collect is used responsibly for the following purposes only:

  • Account Management: Creating, verifying and maintaining your member account, including the required KYC process.
  • Transaction Processing: Processing deposits, withdrawals and all other financial transactions securely and accurately.
  • Platform Security: Identifying and preventing fraud, money laundering, unauthorized access and other harmful activities.
  • Customer Support: Providing effective assistance when you contact our support team via live chat or email.
  • Service Communication: Sending important notifications relating to your account, terms changes, promotions you have opted in to receive, and security information.
  • Regulatory Compliance: Meeting reporting obligations to the relevant authorities in accordance with Malaysian law.
  • Platform Improvement: Analyzing usage patterns in aggregate (not individually) to improve user experience and platform performance.
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate assistance.

Myluky does not use your personal data to make automated decisions that negatively affect you without human review. Any profiling carried out is solely to improve your security and experience on the platform.

4Data Sharing with Third Parties

Myluky does not sell your personal data to any party. However, in the course of operating the platform, we may need to share certain data with the following categories of third parties, and only to the extent necessary:

  • Payment Processors: Authorized payment service providers (FPX, DuitNow, e-wallets) receive the transaction information required to process your deposits and withdrawals.
  • Technology Service Providers: Server infrastructure providers, cybersecurity services and platform analytics tools bound by strict data protection agreements.
  • Game Providers: Third-party game developers operating games on our platform may receive game data necessary for technical functionality.
  • Authorities: Law enforcement agencies, regulatory authorities or courts when required by law or a valid court order.
  • Professional Consultants: Lawyers, accountants or auditors bound by professional confidentiality obligations.

Our Guarantee: Every third party that receives myluky member data is bound by a legally enforceable data processing agreement. They are permitted to use that data only for the specified purpose and must comply with the security standards we set.

5Data Storage and Security

The security of your data is myluky's top technical priority. We implement multiple layers of protection to keep your data safe at all times:

  • Encryption in Transit: All communications between your device and our servers are protected by TLS 1.3 / 256-bit SSL encryption.
  • Stored Data Encryption: Sensitive data such as financial information and KYC documents is encrypted at rest in our database using the AES-256 standard.
  • Strict Access Control: Only authorised myluky staff with a clear job requirement may access members' personal data, with full audit logs maintained.
  • Regular Security Testing: We conduct regular penetration testing and security audits by independent third parties.
  • Integrated Data Centre: Data is stored in certified data centres with multi-location redundancy to ensure availability and protection against data loss.

Regarding retention periods, myluky stores members' personal data for the duration required by Malaysian law — generally five (5) years after account closure for financial records, and two (2) years for general usage data. After this period, data will be securely deleted or anonymised.

Reporting a Security Incident: If you suspect your account has been accessed without authorisation or notice any suspicious activity, please contact our support team immediately via live chat. We will respond within 15 minutes.

6Cookies and Tracking Technologies

Myluky uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled as they are critical to platform operation.
  • Performance Cookies: Collecting information about how you use the platform (pages visited, time spent) to help us improve the user experience. This data is collected in aggregate and does not identify you individually.
  • Functional Cookies: Remembering your preferences such as language, display settings and login details so you do not have to re-enter them each time.
  • Analytics Cookies: Helping us understand overall platform usage patterns to make better development decisions.

You can manage your cookie settings through your internet browser at any time. However, disabling essential cookies may affect the functionality of the myluky platform. For more information on managing cookies, refer to your browser's help section.

7Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by myluky:

📋
Right of Access

Request a copy of the personal data we hold about you. We will provide this information within 21 business days.

✏️
Right to Rectification

Request correction of any inaccurate or incomplete personal data via account settings or customer support.

🗑️
Right to Erasure

Request deletion of your personal data under certain circumstances, subject to applicable legal retention obligations.

🚫
Right to Object

Objecting to the processing of your data for specific purposes such as direct marketing at any time.

📦
Right to Data Portability

Request your personal data in a structured, machine-readable format for transfer to another provider.

⏸️
Right to Restrict Processing

Request that we restrict how we process your data while any dispute or review is ongoing.

To exercise any of the above rights, please contact our Data Protection Officer by email at [email protected] or via live chat in your account. We will verify your identity before processing any request to ensure the security of your data.

8KYC and Identity Verification

As a platform compliant with Anti-Money Laundering (AML) and Counter Financing of Terrorism (CFT) regulations, myluky conducts thorough Know Your Customer (KYC) processes. This is a legal requirement that cannot be waived.

Documents you may be asked to submit include:

  • Malaysian Identity Card (MyKad) — front and back
  • Recent bank statement (not more than 3 months old) for payment account verification
  • Proof of address such as a utility bill or official letter
  • A selfie holding your identity document for liveness verification

All submitted KYC documents are processed through a secure, integrated verification system. They are stored in an encrypted environment and accessible only by authorised personnel for compliance purposes. myluky does not use KYC documents for any other purpose.

Fast Process: KYC verification at myluky is typically completed within 15–30 minutes. Once verified, your account will have full access to all platform features including unlimited withdrawals.

9Children's Privacy

The myluky platform is strictly for individuals aged 18 and above. We do not intentionally collect, store or process any personal data from individuals under the age of 18.

Should we discover that a child's personal data has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the relevant account. This is a non-negotiable commitment from myluky.

If you believe your underage child has registered an account at myluky, please contact our support team immediately at [email protected] so we can take the necessary action.

10Amendments to the Privacy Policy

Myluky reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our platform practices, new legal requirements or member feedback.

When there are significant amendments, we will:

  • Updating the "Last Updated" date at the top of this page.
  • Sending email notifications to all registered members explaining key changes.
  • Displaying a clear notice on the platform's login page for at least 30 days.
  • Maintaining an archive of previous Privacy Policy versions available upon member request.

Continued use of the myluky platform after the effective date of any amendment will be considered your acceptance of the updated Privacy Policy.

11Contact the Data Protection Officer

If you have any questions, concerns or complaints regarding how myluky handles your personal data, you may contact our Data Protection Officer through the following channels:

  • Privacy Email: [email protected] (response within 2 business days)
  • Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform
  • Via Account: Login → Settings → Privacy & Security → Submit Inquiry

We are committed to addressing every privacy enquiry seriously and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner (JPDP).

Our Promise to You: Privacy is more than a legal obligation at myluky — it is a core value we uphold. Play with peace of mind knowing we protect your data the same way we protect our own reputation.


Ready to Play Safely?

Register with myluky — The Platform That Protects Your Privacy

You now know how we protect your personal data. Join millions of myluky members and enjoy a safe, fair and fun online gaming experience with complete peace of mind.

For users aged 18 and above only. Please read our Responsible Gaming and Terms and Conditions .

256-bit

SSL Encryption

PDPA

Malaysia Compliance

24/7

Privacy Support

0

Data Sold to Third Parties


Bahasa Melayu