mrlucky Privacy Policy

1. Introduction and Scope of This Policy

This Privacy Policy is published by mrlucky to describe our practices regarding the collection, use, storage and disclosure of personal information provided by users of the mrlucky.one website and all related services.

By registering an account, using the mrlucky platform or submitting any personal information to us, you agree to be bound by the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please stop using our services.

This policy applies to all users who access the mrlucky website, including those who register as members, visit as guests, contact our customer support or interact with any feature of our platform. This policy forms part of the overall mrlucky Terms and Conditions.

2. Personal Information We Collect

In operating the platform, mrlucky collects various types of personal information for legitimate and specific purposes. This collection is done directly from you during registration, use of the platform, or through interaction with our support team.

The information we collect includes:

• Identity information: Full name, date of birth, identity card number (MyKad) or passport, gender and nationality.
• Contact information: Email address, mobile phone number, and residential address.
• Financial information: E-wallet details (Touch 'n Go, Boost, ShopeePay), bank account information for DuitNow and FPX transactions, and cryptocurrency wallet details for USDT, BTC or ETH.
• Account information: Username, encrypted password, deposit and withdrawal records, betting history and game activity.
• Technical information: IP address, web browser type, device operating system, session data and cookies, and website access logs.
• Verification information: Supporting documents for the identity verification (KYC) process required to meet compliance and security requirements.

We only collect information that is genuinely necessary to provide services, process financial transactions, comply with legal obligations and ensure platform security. We do not collect sensitive information that is not relevant to the operation of our services.

3. Purpose of Using Personal Information

The personal information we collect is used solely for legitimate purposes directly related to the provision of mrlucky services. We do not use your data for purposes other than those stated below without obtaining separate consent from you.

• Account management: To register, verify and maintain your member account, and to process login requests securely.
• Transaction processing: To process deposits using methods such as Touch 'n Go eWallet, DuitNow, FPX, Boost, ShopeePay and cryptocurrency, and to manage withdrawals within 10 to 45 minutes.
• Compliance and verification: To carry out identity verification (KYC) checks to meet international licensing requirements and prevent money laundering.
• Platform security: To detect and prevent fraudulent activity, unauthorised access, and other security threats to your account.
• Customer service: To provide technical support and assistance via live chat and email in Malay and English, available 24/7.
• Service communications: To send important notifications relating to your account, transaction confirmations, terms updates, and relevant promotional information (subject to your preferences).
• Platform improvement: To analyse usage patterns in aggregate and anonymised form to improve the overall quality of our service and user experience.

4. Disclosure and Sharing of Information

mrlucky does not sell, transfer or disclose your personal information to third parties for their own marketing purposes. However, there are limited situations where we may need to share some of your information with certain parties.

Disclosure to third-party service providers only occurs where it is necessary to support the operation of our platform, such as payment processors handling deposit and withdrawal transactions, or technology service providers helping to deliver the platform infrastructure. All such third parties are required to comply with strict confidentiality obligations and are only permitted to use your data for specific purposes.

We may also disclose your personal information when required by law, court order, or direction from a legitimate law enforcement authority. In such situations, we will endeavour to notify you in advance where permitted by law.

5. Data Retention Period

mrlucky retains your personal information for as long as your account is active or as long as it is needed to provide services to you. We also retain data for a specified period after account closure to meet legal obligations, accounting requirements, dispute resolution and enforcement of our agreements.

Financial and transaction records are retained for the period required by applicable international licensing and regulatory requirements. Inactive account information is reviewed periodically, and after a set period of inactivity, we may contact you before taking any action regarding that account.

When data is no longer needed, we will delete or anonymise it in a secure and thorough manner to ensure it cannot be recovered.

6. Use of Cookies and Tracking Technologies

The mrlucky website uses cookies and similar tracking technologies to improve user experience, ensure the platform functions correctly and understand usage patterns on our platform.

The cookies we use include session cookies that expire automatically when you close your browser, preference cookies that store settings such as your chosen language, and analytics cookies that help us understand how users interact with our website. All analytics data collected through cookies is processed in aggregate and is not linked to your personal identity.

You can control and manage cookies through your web browser settings. However, please note that disabling certain cookies may affect the functionality and browsing experience of the mrlucky website.

7. Personal Information Security

The security of your personal information is a primary responsibility of mrlucky. We implement a range of comprehensive technical and operational security measures to protect your data from unauthorised access, disclosure, modification or destruction.

• SSL/TLS encryption for all communications between your browser and our servers.
• Password storage using a secure, irreversible hashing algorithm.
• Separation of financial data with additional security layers.
• Continuous security monitoring and intrusion detection systems.
• Strict internal access controls, ensuring our staff only access the data they need to carry out their duties.
• Regular security audits by independent parties to ensure compliance with industry standards.

Should any security incident involving your personal data occur, mrlucky is committed to notifying you within a reasonable timeframe and taking appropriate remedial steps.

8. Cross-Border Data Transfers

As a platform operating under an international licence, there is a possibility that your personal information may be processed or stored on servers located outside Malaysia. Should such a transfer occur, we ensure that appropriate protection mechanisms are in place to safeguard your personal information.

Cross-border data transfers are only made to countries or regions that provide an equivalent level of data protection, or through data transfer agreements that comply with recognised international protection standards.

9. Links to Other Websites

The mrlucky platform may contain links to third-party websites for informational convenience. Please note that mrlucky has no control over the content or privacy practices of those websites and is not responsible for them.

We encourage you to read the privacy policy of every website you visit. This mrlucky Privacy Policy applies only to information collected through the mrlucky.one website and services directly related to it.

10. Changes to This Privacy Policy

mrlucky reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or technological developments. Any changes made will take effect immediately upon publication on the mrlucky.one website.

When we make significant changes, we will endeavour to notify you via in-platform notifications or through the email address you have registered. The "Last updated" date at the top of this page will be updated each time a change is made.

Your continued use of mrlucky services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this page periodically.