MrLucky takes every aspect of protecting our members' personal data seriously. This Privacy Policy transparently explains what information we collect, how it is used, who it may be shared with, and your rights as a member regarding your personal data on the MrLucky platform.
Privacy Policy Contents
This Privacy Policy explains how the MrLucky platform handles your personal data in accordance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia. By using the MrLucky platform, you agree to the collection and use of your data as described here. If you do not agree with any part of this policy, please discontinue your use of our platform.
Trust is the foundation of the relationship between mrlucky and every member who joins our platform. When you register an account, make a deposit via Touch 'n Go eWallet or FPX, play slots, place bets on Malaysia Super League matches, or use any service on mrlucky — you are entrusting us with your personal information. That trust is not something we take lightly.
Most people have heard of a "Privacy Policy" but rarely read one carefully. So we have made every effort to write this document in plain language that everyone can understand — not in convoluted legal jargon. We want you to genuinely know what happens to your data at MrLucky, rather than simply ticking the "I agree" box without knowing what you are agreeing to.
In brief: MrLucky collects only the data that is necessary, uses it for clearly defined purposes, protects it with best-in-class technology, and never sells it to third parties for marketing purposes. That is the core of this Privacy Policy, and all sections below elaborate on how these principles are put into practice in MrLucky's day-to-day platform operations.
MrLucky collects your personal data through several means — directly when you register and use the platform, and automatically through standard technologies such as cookies and server logs. We only collect data that is genuinely necessary to provide the services you have requested.
Data you provide directly:
Data collected automatically when you use the platform:
Automatically collected information helps us ensure the platform runs smoothly, detect fraud, and deliver a better experience to every mrlucky member. We do not collect data that is unrelated to the platform's operations or that goes beyond what is necessary for the services you use.
The personal data we collect is used for specific and legitimate purposes. MrLucky does not use your data for purposes unrelated to the provision of this platform's services. Below is a detailed explanation of each purpose for which data is used:
Your registration data is used to create and manage your mrlucky account, verify your identity during login, and process withdrawal requests. Identity verification is an essential step in protecting your account from unauthorised access.
Your payment information is used to process deposits and withdrawals via your chosen Malaysian payment method. All financial information is handled in accordance with strict payment industry security standards.
Activity and transaction data is analysed to detect suspicious patterns, prevent money laundering, and ensure mrlucky complies with all applicable Malaysian legal requirements. This protects every member on our platform.
We use your contact information to provide support whenever you need assistance, send you important notifications about your account, and keep you informed of any changes to mrlucky's policies or services.
Anonymised usage data is used to understand how members interact with the mrlucky platform, identify areas for improvement, and develop new features relevant to the Malaysian user community.
Gaming activity data is monitored to identify patterns that may indicate problem gambling, enabling us to offer appropriate assistance or information to members who may need responsible gaming support.
What We Do NOT Do with Your Data: mrlucky does not sell your personal data to any third party. We do not use your data to send you advertisements on behalf of outside parties. We do not build profiles on you for sale to advertisers. Your data belongs to you — we are simply its custodians.
MrLucky understands that sharing personal data is a sensitive matter. We only share your data in genuinely necessary situations and with parties bound by strict confidentiality obligations. Below is a full list of who may receive a portion of your data and why:
| Third Parties | Data Shared | Purpose |
|---|---|---|
| Payment Providers TNG, GrabPay, DuitNow, FPX |
Transaction information, account numbers | Processing deposits & withdrawals |
| Game Providers Pragmatic Play, PG Soft, etc. |
Member ID without full name | Game delivery & RNG |
| Malaysian Authorities Police, courts, regulatory bodies |
Data subject to court order | Malaysian legal compliance |
| Cloud Services & Security Servers, encryption, anti-fraud |
Encrypted technical data | Platform infrastructure & security |
All third parties with whom we share data are bound by strict data protection agreements and are not permitted to use that data for any purpose other than what is specified. MrLucky remains accountable for the handling of your data even when it is processed by third parties on our behalf.
Your data will never be shared with: marketing companies, social media platforms, third-party advertisers, or any entity with no direct relationship to the provision of MrLucky's services to you.
Mrlucky takes security infrastructure seriously to ensure your personal data is always protected. We employ multiple layers of security operating simultaneously to provide comprehensive protection against all types of cyber threats.
mrlucky Data Security Measures:
Data Retention Period: MrLucky retains members' personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Data for active accounts is retained for the duration your account remains active. For closed accounts, financial transaction data is retained for a minimum of 7 years in accordance with Malaysian financial reporting requirements. Data that is no longer needed is securely deleted or anonymised.
Data Breach Notice: In the event of a security incident affecting members' personal data, mrlucky will notify the affected members as promptly as possible and will take all necessary steps to limit the impact of the incident and prevent similar occurrences in the future.
The mrlucky platform uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device when you visit our platform. They allow the platform to remember your preferences and provide a more personalised experience.
Types of cookies used by MrLucky:
You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the MrLucky platform and your gaming experience. Third-party cookies that may be used by our game providers are subject to their respective privacy policies.
As a MrLucky member, you have clear rights over your personal data under Malaysia's Personal Data Protection Act 2010. MrLucky respects and fully facilitates the exercise of these rights. Below are the rights available to you and how to exercise them:
MrLucky recognises and facilitates all of your personal data protection rights under Malaysia's PDPA 2010.
You have the right to request a copy of all personal data that MrLucky holds about you. We will provide this information within 21 days of receiving your request.
If you find that the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Correction requests are processed within 14 days.
You may request the deletion of your personal data under certain circumstances — for example, when the data is no longer necessary or you withdraw your consent. This is subject to any applicable legal data retention requirements.
You have the right to object to the processing of your data for specific purposes such as direct marketing. Once you raise an objection, we will cease processing for that purpose immediately.
You have the right to receive your personal data in a structured, machine-readable format, allowing you to transfer it to another platform should you choose to do so.
In certain circumstances — such as when you dispute the accuracy of your data — you have the right to request a temporary restriction on the processing of your data while the dispute is being resolved by MrLucky.
To exercise any of the rights above, submit a written request to the mrlucky data protection team by email at support@mrlucky.biz with the subject line "Personal Data Rights Request". Please clearly state the right you wish to exercise and any relevant information to help us process your request. MrLucky will respond within 21 calendar days of receiving the request.
Mrlucky has appointed a Data Protection Officer responsible for ensuring all our data handling practices comply with Malaysia's PDPA 2010. If you have any questions, concerns, or complaints about how mrlucky handles your personal data, do not hesitate to get in touch with us.
MrLucky Data Protection Officer Contact Information:
If you are not satisfied with mrlucky's response to your data protection complaint, you have the right to refer your complaint to Personal Data Protection Commissioner of Malaysia which is the regulatory body under Malaysia's Ministry of Communications and Digital.
Mrlucky reserves the right to update this Privacy Policy from time to time to reflect changes in data handling practices, new legal requirements, or platform improvements. Any material changes will be communicated to members via an in-platform notice at least 14 days before taking effect. The latest version of this Privacy Policy will always be available on this page, with a clear update date displayed at the top of the document.
For MrLucky, privacy is more than a legal obligation — it is a core value we uphold. We continually review and enhance our data protection practices to keep pace with the latest technological developments and security threats. The trust that millions of Malaysian members place in MrLucky is a responsibility we take seriously every day.
More than just words — here are the concrete steps mrlucky takes to protect the privacy of every Malaysian member.
Every bit of data travelling between your device and mrlucky's servers — from logging in to submitting deposit details via Touch 'n Go eWallet or CIMB Clicks — is encrypted with SSL 256-bit. Think of it as a private tunnel that no one can intercept along the way.
MrLucky has never sold, and will never sell, members' personal data to advertisers, data brokers, or any third party for marketing purposes. Your data is not a commodity on this platform — it is a trust we uphold with the utmost responsibility.
Within MrLucky, access to members' personal data is strictly governed by the need-to-know principle. Staff can only access data that is relevant to their designated role, and all access is automatically logged for audit purposes.
MrLucky's Privacy Policy is built on the foundation of Malaysia's Personal Data Protection Act 2010. We comply with all seven PDPA principles, including the General Principle, Notice & Choice Principle, Disclosure Principle, Security Principle, Data Integrity, Access, and Oversight.
Data that is no longer required is deleted or anonymised in accordance with our established retention schedule. Data deletion is carried out securely using methods that ensure the data cannot be recovered once removed. This includes data from closed accounts.
The mrlucky security team monitors the platform 24/7 and has clear incident response procedures in place. In the event of a data breach, affected members will be notified promptly and mitigation steps will be taken as quickly as possible.
Straightforward answers to the questions members ask most about privacy and data protection at MrLucky.
All transactions are processed securely through trusted Malaysian payment providers — your financial data is never stored in its original form on our servers.
All transactions protected by 256-bit SSL • Minimum deposit RM20 • Withdrawals within 1–24 hours
MrLucky takes your privacy seriously while delivering Malaysia's finest online entertainment experience. Register for free today and feel the difference — slots, jackpots, Sports Betting, e-sports, and more are waiting for you.
Questions about your data privacy? Reach us at support@mrlucky.biz