Privacy Policy MrLucky — Malaysia Player Data Protection

MrLucky takes every member's privacy seriously. This policy transparently explains how we collect, use, store, and protect your personal data — so you can play with full confidence that your information is safe with us.

Updated: 2026 256-bit SSL Data Protected Bahasa Melayu

How MrLucky Protects Malaysian Players' Personal Data

Privacy is not merely a legal obligation for us — it is a core value we uphold across every aspect of MrLucky's platform operations.

256-bit SSL Encryption

All data transmitted between your browser and MrLucky's servers is protected by 256-bit SSL encryption — the same standard used by leading Malaysian banking institutions including Maybank and CIMB.

Banking Standards

Data Not Sold

MrLucky never sells, rents, or trades members' personal data to any third party for marketing or commercial purposes. Your data belongs to you — not to us as a business asset.

No Data Sales

Restricted & Controlled Access

Only MrLucky staff who require access to specific data for their job functions are permitted to view that information. All access is audited and continuously monitored.

Strict Internal Controls

Two-Factor Authentication

Your MrLucky account is protected by two-factor authentication (2FA), ensuring that only you can access your account even if your password falls into the wrong hands.

2FA Available

Legal Compliance

The MrLucky Privacy Policy is designed to comply with applicable data protection requirements. We handle your personal data in accordance with legal standards and industry best practices.

Legal Compliance

Right to Data Deletion

You have the right to request the deletion of your personal data from MrLucky's systems, subject to applicable legal requirements and minimum record retention policies. Requests are processed within 30 business days.

Right to Erasure

01Introduction & Scope of This Privacy Policy

MrLucky is committed to protecting the privacy of all members and users of our platform. This Privacy Policy explains in detail how we collect, use, store, share, and protect your personal information when you use the MrLucky platform at mrlucky.asia.

This policy applies to all users of the MrLucky platform, including registered members, website visitors, and anyone who interacts with our services in any capacity. By registering an account or continuing to use the MrLucky platform, you agree to the collection and use of information as described in this Privacy Policy.

Important Note: This Privacy Policy should be read together with Terms & Conditions MrLucky. Together, these documents form the entire agreement between you and MrLucky regarding your use of the platform and the handling of your personal data.

If you have any questions about how we handle your personal data, you can reach our support team at any time via live chat or email at support@mrlucky.asia. We aim to respond to all enquiries within 2 business days.

02Types of Personal Data Collected

MrLucky collects various types of personal data depending on how you interact with our platform. This data falls under several main categories:

Personal Identification Data

  • Full name as stated on your official Malaysian identity document
  • Date of birth and age for eligibility verification (18 years and above)
  • Identity card number (MyKad) for the KYC verification process
  • Current residential address in Malaysia
  • Photos or scans of identity documents requested during the KYC process

Contact Details

  • Malaysian mobile number registered to the account
  • An active, reachable email address

Financial Data

  • E-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay) for processing deposits and withdrawals
  • Malaysian bank account details for withdrawals via DuitNow or FPX
  • Deposit and withdrawal transaction history on the MrLucky platform
  • Betting and gaming activity records related to legal compliance

Technical & Usage Data

  • IP address of the device used to access the platform
  • Web browser type and device operating system
  • Cookie data and similar tracking technologies
  • Login and logout timestamps for your account
  • General location data based on IP address (state or city only)
Data Minimisation Principle: MrLucky only collects data that is strictly necessary to provide our services, meet legal obligations, and protect the interests of all parties. We do not collect data that is excessive or irrelevant to the operation of the platform.

03How We Collect Your Personal Data

Your personal data is collected through several channels when you interact with the MrLucky platform. Understanding how this collection works helps you make more informed decisions about the information you share with us.

Directly from You

This is the primary way we collect your personal data — when you register a new MrLucky account, complete the KYC verification process, make a deposit or withdrawal, contact our customer support team, submit a feedback form, or participate in a customer satisfaction survey.

Automatically During Platform Use

Each time you access the MrLucky platform, our systems automatically record certain technical information, including your IP address, device and browser type, pages visited, and time of visit. This data is used to ensure account security, detect suspicious activity, and improve the overall user experience.

Via Cookies and Similar Technologies

The MrLucky platform uses cookies and similar tracking technologies to store your preferences, maintain login sessions, and analyse usage patterns. More information about cookies can be found in Section 7 of this Privacy Policy.

04Purpose of Personal Data Use

MrLucky uses the personal data we collect for the following purposes, all of which are necessary to deliver a safe, fair, and high-quality service to all members in Malaysia:

  • Account Management: Creating and managing your MrLucky account, including processing your registration and verifying your identity
  • Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, FPX, and other Malaysian payment methods, as well as withdrawals to your bank account
  • KYC Verification: Verifying your age, identity and eligibility to use the platform in accordance with legal requirements
  • Fraud Prevention: Detecting and preventing fraud, money laundering, unauthorised account access and activities that violate our Terms & Conditions
  • Customer Support: Processing and responding to enquiries, complaints and assistance requests submitted to the MrLucky support team
  • Platform Communications: Sending important notifications related to your account, transactions, policy updates and security information
  • Service Improvement: Analysing aggregated platform usage patterns to improve the overall user experience and platform features
  • Legal Compliance: Comply with applicable legal requirements, regulations and directions from relevant authorities
  • Responsible Gaming: Monitoring playing patterns to identify users who may need responsible gambling support
Marketing: If you opted in to receive marketing communications during registration, we may use your data to send you promotional offers, bonuses, and information about new games. You can opt out of marketing communications at any time through your account settings or by contacting us directly.

05Sharing Data with Third Parties

MrLucky does not sell, rent or trade your personal data to third parties for marketing purposes. However, there are limited situations where we need to share your data with certain parties in order to provide our services to you:

Payment Processors

To process your deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX, the necessary transaction information will be shared with the respective payment processor. They are subject to their own privacy policies and confidentiality agreements with MrLucky.

Technical Service Providers

MrLucky works with trusted third-party service providers for technical infrastructure, platform analytics, and security services. These providers are only permitted to use your data for the purposes specified in their agreements with MrLucky and may not use it for any other purpose.

Authorities & Law Enforcement

MrLucky will disclose your personal data to authorities or law enforcement agencies if required by a valid court order, applicable legal obligations or to protect public safety in serious cases.

Guarantee: In all data sharing situations, MrLucky ensures that recipients are bound by confidentiality and data protection obligations that are equivalent to, or stricter than, our own.

06Data Storage & Security

MrLucky implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration or unintended disclosure.

Technical Security Measures

  • 256-bit SSL encryption for all data transmissions between your device and MrLucky's servers
  • Encryption of sensitive data stored in the database using industry-standard encryption algorithms
  • Firewall and intrusion detection systems operating 24 hours a day
  • Two-factor authentication (2FA) for member account access and MrLucky's internal systems
  • Regular security audits conducted by our internal security team and independent third-party assessments

Data Retention Period

MrLucky retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy. As a general rule, active account data is kept for the duration of your membership plus a minimum of 5 years to comply with anti-money laundering laws and financial record-keeping requirements. After this period, data that is no longer needed will be securely deleted from our systems.

Security Breach: In the event of a security breach that may compromise your personal data, MrLucky is committed to notifying you and the relevant authorities within the timeframe required by law. We will also take immediate remediation steps to protect any affected data.

07Cookies & Tracking Technologies

The MrLucky platform uses cookies and similar tracking technologies to enhance the user experience and maintain platform security. Cookies are small text files stored on your device when you visit our website.

There are several types of cookies used on the MrLucky platform, each serving a different purpose:

08Your Rights as a MrLucky User

As a MrLucky member, you have certain rights regarding your personal data, which we take seriously and respect in full. These rights can be exercised at any time by contacting our support team.

Your Rights Regarding Personal Data at MrLucky

These rights may be exercised at any time. Contact our support team and we will process your request within the stipulated timeframe.

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 30 business days.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request a correction. Updates can be made through your account settings.

Right to Erasure

You may request the deletion of your personal data, subject to any applicable minimum record retention requirements under the law.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain circumstances while a dispute or review is in progress.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider, should you wish to do so.

Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time through your account settings or by contacting us.

Right to Unsubscribe

You can opt out of marketing communications from MrLucky at any time via the unsubscribe link in our emails or through your account settings.

Right to Explanation

You have the right to a clear and straightforward explanation of how and why your data is used. Contact us with any questions.

09Children's Data

The MrLucky platform is intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18 under any circumstances.

If you believe a minor has registered an account or provided personal data to us without parental or guardian consent, please contact MrLucky's support team immediately at support@mrlucky.asia. We will take appropriate action, including closing the account in question and deleting all associated data as soon as possible once the investigation is complete.

Child Protection: MrLucky employs a rigorous age verification process during registration and throughout the KYC process, including official identity document verification. Anyone found to be registering an account on behalf of a minor, or using their account to allow a minor to play, will have their account closed and may be reported to the relevant authorities.

10Amendments to This Privacy Policy

MrLucky reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. The date of the most recent revision will always be displayed at the top of this document.

When we make significant changes to this Privacy Policy, we will notify you through one or more of the following methods:

  • Notifications prominently displayed on the MrLucky platform homepage
  • Email from the address registered to your account
  • Notification via the phone number registered to your account

Continued use of the MrLucky platform after any amendments to this Privacy Policy take effect will be considered your acceptance of those changes. If you do not agree with any changes, you have the right to close your account and request the deletion of your personal data to the extent permitted by law.

11Contact Us Regarding Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data by MrLucky, please contact us through the following channels:

  • Email: support@mrlucky.asia — we aim to respond within 2 business days
  • Live Chat: Available 24 hours a day, 7 days a week on the MrLucky platform

For requests relating to your data protection rights — such as data access, correction, or deletion — please clearly state the type of request you are making and include sufficient information to verify your identity. This is a necessary security measure to ensure we only disclose or modify data to the correct individual.

Response Time: MrLucky is committed to responding to all privacy-related enquiries within 2 business days and completing any data protection rights requests within 30 calendar days from the date the request is received.

MrLucky Privacy Policy Quick Reference Table

A summary of the key points in MrLucky's Privacy Policy for your quick reference.

Item Details
Data Collector MrLucky (mrlucky.asia)
Primary Purpose Service provision, identity verification, payment processing, fraud prevention
Malaysian Payment Methods Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks
Data Security 256-bit SSL • Database encryption • 2FA • Regular audits
Third-Party Data Sharing Not sold. Shared only with payment processors and when required by law
Retention Period Membership lifetime + minimum 5 years for financial records
Right to Erasure Available subject to minimum statutory retention requirements
Request Response Time Enquiries: 2 business days • Right to request: 30 days
Children's Data Not collected. The platform is intended exclusively for 18 years and above
Privacy Support Support@mrlucky.asia • Live Chat 24/7

All Financial Transactions Are Protected by MrLucky

Your financial data is protected with the highest level of encryption. Only approved Malaysian payment methods are accepted on the MrLucky platform.

Touch 'n Go
GrabPay
Boost
ShopeePay
DuitNow
FPX
Maybank2u
CIMB Clicks

All transactions are protected by encryption 256-bit SSL • Financial data is not shared with third parties without necessity

MrLucky Privacy & Data Security FAQs

Answers to the most frequently asked questions from MrLucky members on privacy and data protection.

MrLucky does not sell or share members' personal information with any third party for marketing purposes. Your data is only shared in limited circumstances — with Malaysian payment processors such as Touch 'n Go, GrabPay, and DuitNow to facilitate transactions, with technical service providers bound by strict confidentiality agreements, and with authorities only where required by court order or applicable law. In all cases, your data is protected by agreements that ensure it is not used beyond its intended purpose.

To request a copy of the personal data we hold about you, send an email to support@mrlucky.asia with the subject line "Data Access Request", or contact our support team via live chat. Please include your full name, account number or registered phone number, and clearly state that you are submitting a request under your data access rights. We will verify your identity before processing the request and will deliver a copy of your data within 30 calendar days. Data will be provided in a secure and readable format.

Yes, you may request the deletion of your personal data from MrLucky's systems by contacting our support team. However, please note that certain limitations apply — anti-money laundering laws and financial regulations require us to retain records of financial transactions and identity verification for a minimum period, even after an account is closed. Data not subject to these statutory retention requirements will be securely deleted within 30 days of the request being received and verified.

Yes, the security of your financial information is our highest priority. All communications between your device and MrLucky's servers are protected by 256-bit SSL encryption. MrLucky does not store your full card number or e-wallet password — this sensitive information is handled directly by licensed and registered payment processors such as Touch 'n Go, GrabPay and FPX providers. We only retain the information needed to identify the payment method used for future withdrawal purposes. All stored financial data is also encrypted within our database.

There are two easy ways to stop receiving promotional emails from MrLucky. First, click the "Unsubscribe" link found at the bottom of any promotional email we send — this will remove you from our marketing mailing list immediately. Second, log in to your MrLucky account, go to Account Settings and disable the "Receive Marketing Communications" option under the notifications section. Changes will take effect within 48 hours. Please note that opting out of marketing emails will not stop important account notifications such as transaction confirmations and security alerts, which we are still required to send to keep your account secure.

Your Privacy is Fully Protected at MrLucky
This Privacy Policy should be read together with Terms & Conditions and page Responsible Gambling us. If you have any questions about privacy or how we handle your data, do not hesitate to reach out to the MrLucky support team, available 24 hours a day, 7 days a week via live chat or email at support@mrlucky.asia.

MrLucky & Responsible Gaming

At MrLucky, we monitor player behaviour patterns not to sell data to third parties, but to identify players who may benefit from responsible gambling support. This data is used solely for player wellbeing and is never shared for marketing purposes. Responsible gambling tools such as deposit limits, wagering limits, and self-exclusion are available free of charge to all members.

If you feel that your gambling habits are affecting your life, please visit our Responsible Gambling us for guidance and support resources in Malaysia.

Play with Confidence — Your Data Is Safe with MrLucky

Now that you know how we protect your personal data, sign up with MrLucky today and enjoy over 3,000 slots, Sports Betting on Malaysia Super League, EPL, cricket, poker and more — with complete peace of mind that your privacy is fully protected.

256-bit SSL Data Not Sold Deposit From RM30 24/7 Support
Bahasa Melayu