Official Documents • Privacy & Data Protection

Luck 88 Privacy Policy – Protection of Your Personal Data in Malaysia

At Luck 88, your privacy is not merely a legal obligation — it is a moral responsibility we take seriously. This document transparently explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

PDPA 2010 Compliance SSL 256-bit Encrypted Updated: January 2026
Our Privacy Commitment
No sale of data to third parties
256-bit SSL encryption for all data
Full rights to access & delete data
Full compliance with Malaysia's PDPA 2010
Data is never used without your consent
Current version: 1 January 2026

Luck 88 Data Protection Principles

Six core principles that shape how we manage your personal data.

Clear Purpose

Luck 88 only collects data that is strictly necessary to deliver our services. Every piece of data collected has a specific, clearly stated purpose. We do not collect data in excess or without solid justification.

Minimum Collection
Robust Security

Your data is protected with 256-bit SSL encryption — the same security standard used by the banking industry. Our servers are shielded by multi-layered firewalls and monitored around the clock by our cybersecurity team.

SSL 256-bit
User Rights Respected

You have the full right to access, correct, transfer, or request deletion of your personal data at any time. Requests will be processed within 14 working days at no additional cost.

14-Day Response
Limited Retention Period

Personal data is not stored indefinitely. Luck 88 has a clear data retention policy — active data is retained for the duration of the active account and no longer than 7 years after account closure for legal compliance purposes.

7-Year Policy
No Data Selling

Luck 88 has never and will never sell, rent, or exchange your personal data with third parties for marketing purposes. Your data belongs to you — we are only its trusted custodians.

Zero Data Selling
PDPA 2010 Compliance

All our data handling practices are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing personal data protection in the country. Compliance is reviewed on a regular basis.

Malaysia PDPA

1. Introduction

Welcome to the Privacy Policy Luck 88 (luck88-khelo.com). This policy transparently explains how we collect, process, store, protect, and — under certain circumstances — share your personal data when you use our online casino and gaming platform.

Luck 88 is fully committed to protecting the privacy of our Malaysian users. We believe you deserve to know exactly what happens to your personal information — not vague answers or explanations too technical for the average person to understand.

Important Note: By using the Luck 88 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

This policy applies to all information collected through the luck88-khelo.com website, the Luck 88 mobile app, and all related services we offer to users in Malaysia.

2. Types of Personal Data We Collect

Luck 88 collects your personal data across several key categories. The table below outlines the data types, purposes of collection, and retention periods:

Data Category Specific Examples Requirements
Personal Identity Full name, date of birth, MyKad/passport number Mandatory
Contact Information Mobile number, email address, home address Mandatory
Financial Data Bank account number, e-wallet name (TNG, GrabPay, DuitNow) Mandatory
Transaction Data Deposit history, withdrawals, wagering, winnings Mandatory
Technical Data IP address, device type, web browser, access time Automatic
Game Data Games played, session duration, game preferences Automatic
Communication Data Support chat logs, emails, complaint history Situation
Luck 88 no collect credit or debit card information directly. All payment transactions are handled by third-party payment processors that are certified and compliant with PCI-DSS standards.

3. How We Collect Your Data

Luck 88 collects your personal data through three main channels:

📝
Provided Directly by You

During account registration, form completion, the KYC process, customer support communications, or withdrawal requests.

🤖
Automatically Collected

Technical and game data are collected automatically via cookies, server logs, and tracking technologies while you use the platform.

🔗
From Third Parties

Verification information from payment processors (TNG, DuitNow, GrabPay), KYC providers, and in certain cases, the relevant regulatory authorities.

4. How We Use Your Personal Data

Luck 88 uses your personal data solely for the following purposes. Each purpose has a valid legal basis under Malaysia's PDPA 2010:

  • Identity verification and KYC — to verify your eligibility and ensure compliance requirements are met
  • Transaction processing — to process deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, and ShopeePay
  • Service delivery — to manage your account and provide access to games and promotions
  • Service communications — to send important notifications related to your account, security, and transactions
  • Fraud prevention & AML — to detect and prevent fraudulent activity, money laundering, and platform abuse
  • Service improvement — to analyse usage patterns and improve the user experience
  • Responsible gaming — to monitor gaming patterns and provide support to players who need it
  • Legal compliance — to comply with applicable legal and regulatory requirements
For marketing communications such as promotions and bonus offers, we will only contact you if you have given explicit consent during registration. You may withdraw this consent at any time through your account settings or by contacting our support team.

5. Data Sharing & Disclosure

Luck 88 does not sell, rent, or trade your personal data. However, in certain limited situations, we may share data with the following parties:

Payment Processors

Information required to process transactions is shared with certified payment processors such as TNG, GrabPay, DuitNow, FPX gateway providers, and others. Such sharing is kept to a minimum and used solely for transaction processing purposes.

Level of data sharing:
Regulatory Authorities

We may be required to disclose data to regulatory authorities, law enforcement, or courts when mandated by Malaysian law. In such cases, we will notify you if permitted by law to do so.

Level of data sharing:
Technical Service Providers

Cloud service, cybersecurity, and technical infrastructure providers that help us operate the platform. All such providers are bound by strict data protection agreements and are prohibited from using your data for any other purpose.

Level of data sharing:
What We Will Never Do: Luck 88 does not share your data with advertisers, marketing companies, or any third party for marketing purposes without your explicit consent.

6. Data Security Measures

Luck 88 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, modification, disclosure, or destruction:

End-to-End Encryption
SSL/TLS 256-bit encryption for all data communications between your device and our servers
Multi-Layered Firewalls
Infrastructure protection with enterprise-grade firewalls and intrusion detection systems
Strict Access Control
Only authorised personnel may access personal data, and only on a need-to-know basis
24/7 Monitoring
Continuous security monitoring to detect and respond to threats in real time
Regular Data Backups
Data is automatically backed up and encrypted to ensure service continuity
Staff Training
All Luck 88 staff undergo mandatory data protection training on a regular basis
While we take every reasonable precaution, no system can guarantee absolute security. In the event of a data breach that affects you, Luck 88 will notify you within 72 hours, in line with industry best practices.

7. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Luck 88:

1
Right of Access

Request a copy of the personal data we hold about you. We will provide it in a readable format within 14 working days.

2
Right to Rectification

Request the correction of inaccurate or incomplete personal data. Update your information via profile settings or contact our support team.

3
Right to Erasure

Request deletion of your personal data in certain circumstances. Please note that deletion may be restricted by legal obligations and compliance requirements.

4
Right to Object

Object to the processing of your personal data for marketing or analytics purposes. You may withdraw consent for marketing communications at any time.

5
Data Portability Rights

Request your data in a machine-readable format for transfer to another platform. Available in CSV or JSON format.

6
Right to Lodge a Complaint

File a complaint with us or with the Malaysian Personal Data Protection Commissioner if you believe your privacy rights have been violated.

To exercise any of the above rights, please email privacy@luck88-khelo.com with the subject line "PRIVACY RIGHTS REQUEST" along with your account number. We will verify your identity and process your request within 14 working days.

8. Cookies & Tracking Technologies

Luck 88 uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and understand usage patterns. The types of cookies we use are as follows:

You can manage your cookie settings at any time through your web browser settings. Disabling certain cookies may affect platform functionality. Session cookies are automatically deleted when you close your browser.

9. Protection of Children's Data

Platform Luck 88 is intended for users aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

Immediate Action in the Event of an Underage Registration: Should we find that personal data of an individual under 18 has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question. If you believe your child has registered an account on our platform, please contact us immediately.

10. Cross-Border Data Transfers

In the course of our operations, your personal data may be stored or processed on servers located outside Malaysia. This primarily involves cloud infrastructure services to ensure platform availability and reliability.

Luck 88 ensures that any cross-border data transfers are carried out with adequate safeguards in place, including:

  • Legally binding data transfer agreements with providers
  • Security standards equivalent to or higher than Malaysia's PDPA requirements
  • Regular security assessments of all cloud service providers

11. Data Retention Period

Luck 88 retains your personal data only for as long as necessary for the stated purposes or as required by law:

Data Type Retention Period Reason
Identity & active account data For the duration of the active account Service requirements
Data after account closure 7 years AML & legal compliance
Financial transaction records 7 years Malaysian legal requirements
Support communication logs 3 years Complaint resolution & audit
Technical & security logs 12 months Security & investigations
Analytical cookie data 13 months Usage pattern analysis

Once the retention period expires, data will be permanently deleted or anonymised so it can no longer be linked to any individual. The deletion process is audited on a regular basis.

12. Amendments to This Privacy Policy

Luck 88 may update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to how we protect your data.

When we make significant changes, we will:

  • Updating the "Last Updated" date at the top of this policy
  • Sending notifications to all registered members via email or in-platform notices
  • Displaying a notice on the platform's main page for no less than 14 days

We encourage you to review this Privacy Policy periodically. Your continued use of the platform after any changes are published constitutes your acceptance of the updated policy.

13. Contact Our Data Protection Officer

Luck 88 has appointed a Data Protection Officer (DPO) responsible for ensuring PDPA compliance and handling all privacy-related enquiries.

Privacy Enquiries
privacy@luck88-khelo.com
Response within 14 working days
For General Support
24/7 Live Chat (in-platform)
support@luck88-khelo.com
Include your account number and clearly describe your privacy-related query in the email. For data rights requests, use the subject line "PRIVACY RIGHTS REQUEST" for faster processing. You may also refer to our FAQ page for answers to frequently asked questions about privacy.

Your Data Is Safe. Your Platform Is Trusted.

Luck 88 protects your privacy to the highest standards. Register today and enjoy a safe, transparent, and responsible gaming experience — along with a welcome bonus of up to RM 888 awaits you.

* 18+ only • Data protected under PDPA 2010 • Play responsibly

Bahasa Melayu