Official Data Protection

Privacy Policy MrLucky – Our Commitment to Protecting Your Data

MrLucky takes every player's privacy seriously. This document clearly explains how we collect, use, store and protect your personal information when you use the mrlucky.fun platform.

Updated: 1 January 2026  |  Bahasa Melayu (Malaysia)

Why Your Data Secure With MrLucky

Six layers of data protection we apply to ensure the privacy of every mrlucky player is fully maintained.

256-bit SSL Encryption

All data transmitted between your device and mrlucky servers is protected by industry-grade 256-bit SSL encryption — the same security standard used by leading banking institutions in Malaysia.

Secure Data Storage

Your personal information is stored on servers protected with AES-256 encryption and is accessible only to authorised personnel. We do not store payment card data directly on our servers.

No Data Selling

MrLucky does not sell, rent or share players' personal information with third parties for marketing purposes. Your data is used solely for account operations and platform experience improvement.

Secure KYC Verification

The mrlucky identity verification (KYC) process is conducted through an encrypted and secure system. Documents you upload are processed securely and are not retained longer than required by compliance obligations.

24/7 Threat Monitoring

The mrlucky security team continuously monitors the platform around the clock to detect and prevent any intrusion attempts, unauthorised access or suspicious activity that could compromise your data.

Full Control in Your Hands

You have the right to access, correct, and delete your personal data from the mrlucky system at any time. Contact our support team and your request will be processed within 30 business days.

Important Note: This Privacy Policy describes MrLucky's data processing practices. By using the mrlucky.fun platform, you agree to the terms set out in this document. Please contact us if you have any questions about how we handle your data.

1Introduction

MrLucky ("we", "our platform"), operating through mrlucky.fun, is fully committed to protecting the privacy and security of all our players' personal data. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices.

This policy applies to all information we collect through the mrlucky.fun website, the mrlucky mobile app for Android and iOS, and all interactions between you and our support team via live chat, email, or other communication channels provided within the platform.

We encourage you to read this document carefully. If you disagree with any part of this Privacy Policy, please stop using the mrlucky platform and contact us for further assistance.

2Data We Collect

MrLucky collects various types of information for the purposes of secure platform operation, identity verification and improving the player experience. Below are the categories of data we collect:

Data Category Example Information Primary Purpose
Identity Data Full name, MyKad number, date of birth KYC & account verification
Contact Data Email, phone number, address Communication & notifications
Financial Data Bank account details, e-wallet information Deposit & withdrawal processing
Technical Data IP address, device type, browser Security & analytics
Usage Data Wagering history, game preferences Platform improvement
Communication Data Chat logs, support tickets Customer support

We also collect information automatically when you browse mrlucky.fun, including cookie data, server logs, and analytics data that help us understand usage patterns and improve our services.

3How We Use Your Data

Every piece of information we collect is used for clear and legitimate purposes. mrlucky uses your personal data to:

  • To process account registration and verify your identity through the mandatory KYC process.
  • To securely and efficiently process deposits, withdrawals and all financial transactions in your mrlucky account.
  • To deliver a personalised gaming experience based on your preferences and gaming history.
  • To contact you with important information regarding your account, transactions and policy updates.
  • To send you relevant promotional information and bonuses – you may unsubscribe at any time.
  • To detect and prevent fraud, money laundering and activities that violate our terms of use.
  • To comply with legal obligations and regulations applicable to our platform's operations.
  • To improve platform performance, resolve technical issues and develop new features.

MrLucky does not use your data for fully automated decision-making that significantly affects you without human involvement in the process.

4Legal Basis for Data Processing

MrLucky processes your personal data on valid legal bases as provided under Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Contract Fulfilment: Processing necessary to execute the account agreement between you and mrlucky, including payment processing and account management.
  • Legitimate Interest: Processing for fraud prevention, platform security and service improvement that does not affect your fundamental rights.
  • Legal Obligation: Processing required to comply with AML (Anti-Money Laundering) compliance requirements and applicable financial regulations.
  • Consent: For marketing communications and certain cookie usage, we require your explicit consent, which may be withdrawn at any time.

5Data Sharing & Disclosure

MrLucky does not sell or rent your personal data to any party for commercial purposes. However, we may share your information in the following limited circumstances:

  • Third-Party Service Providers: Includes payment processors, identity verification providers, and cloud infrastructure providers that support platform operations, all bound by strict confidentiality agreements.
  • Legal Authorities: When required by a court, law enforcement agency, or legitimate regulatory body, we will disclose only the information necessary.
  • Fraud Investigation: In cases of suspected fraud, relevant information may be shared with payment providers or financial authorities for investigation purposes.
  • Business Transfers: In the event of a merger or acquisition, player data may be transferred to the new entity subject to equivalent privacy protections.

All third parties with whom we share your data are required to uphold data protection standards no less stringent than those we apply at mrlucky.

6Cookies & Tracking Technologies

MrLucky uses cookies and similar tracking technologies to enhance your experience on our platform. There are four types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
  • Performance Cookies: To collect information on how you use mrlucky to help us improve platform speed and usability.
  • Functional Cookies: To save your preferences such as language and display settings so you don't need to reconfigure them each time.
  • Analytics Cookies: To help us understand aggregated, non-identifiable platform usage patterns for service improvement purposes.

You can manage your cookie settings through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the mrlucky platform.

7Data Retention & Deletion Period

MrLucky retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, subject to any longer retention periods required by law.

  • Active Account Data: Retained for the duration your account is active and in use.
  • Data After Account Closure: Transaction records and KYC documents are retained for a minimum of 7 years in accordance with Malaysia's AML compliance requirements.
  • Communication Logs: Chat records and emails are retained for 2 years for dispute resolution purposes.
  • Analytics Data: Anonymised usage data is retained for 3 years for long-term trend analysis.

When the retention period expires, your data will be securely deleted or anonymised using approved data deletion procedures. You may request early deletion of specific data by contacting our team.

8Information Security

MrLucky implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration or accidental disclosure:

  • 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
  • AES-256 encryption for all sensitive personal data stored in our databases.
  • Strict role-based access control – only staff with specific authorisation may access player data.
  • Continuous 24/7 security monitoring with automated intrusion detection systems.
  • Regular penetration testing conducted by independent security experts.
  • Mandatory security awareness training for all mrlucky staff who handle player data.

In the event of a significant data security incident, mrlucky is committed to notifying affected players within 72 hours of becoming aware of the incident, in line with data protection best practices.

9Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

Right of Access

Request a copy of the personal data we hold about you in a readable format.

Right to Rectification

Request correction of inaccurate or incomplete data in your mrlucky account.

Right to Erasure

Request deletion of your personal data, subject to legal obligations we are required to fulfil.

Right to Object

Object to the processing of your data for direct marketing purposes at any time, without conditions.

Right to Restrict Processing

Request that we restrict how we process your data under certain circumstances defined by law.

Right to Data Portability

Receive your data in a structured, machine-readable format for transfer to another platform.

To submit any request relating to your privacy rights, please contact the mrlucky data protection team by email at [email protected]. We will process your request within 30 business days.

10Cross-Border Data Transfers

In the course of operating the platform, some of your data may be processed or stored on servers located outside Malaysia. MrLucky ensures that all cross-border data transfers are protected by adequate safeguards, including:

  • PDPA Malaysia-compliant data processing agreements with all international vendors.
  • Use of certified data centres that meet ISO 27001 and SOC 2 security standards.
  • Data protection impact assessments (DPIA) for any large-scale data transfers outside Malaysia.

11Children & Underage Users

The mrlucky platform is strictly for adult users aged 18 and above. We do not knowingly collect personal data from minors. If we discover that we have collected data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question.

If you believe that someone under the age of 18 has registered an account on mrlucky, please notify us immediately at [email protected] so that we may take the appropriate action.

12Privacy Policy Amendments

MrLucky reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements or technology. All amendments take effect immediately upon publication on mrlucky.fun.

For significant amendments that directly affect your privacy rights, we will provide at least 14 days' advance notice via:

  • In-platform notifications when you log in to your mrlucky account.
  • Email to the address registered in your account.
  • Prominent notices on the mrlucky.fun homepage.

The "Updated" date at the top of this document indicates when this Privacy Policy was last revised. Continued use of the platform after any amendments take effect constitutes your acceptance of the revised policy.

13Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how MrLucky handles your personal data, we encourage you to reach out to us directly. The mrlucky Data Protection Team is ready to assist you:

Privacy Email
[email protected]

Live Chat Support
Available 24/7 – instant response

For more information about your rights under Malaysia's PDPA, you may visit the official website of the Department of Personal Data Protection Malaysia. You may also refer to Terms and Conditions as well as the FAQ for additional information.

Safe & Trusted Platform

Your Data Is Safe. Now It's Time to Start Playing

Register a mrlucky account today and enjoy a safe, fair, and exciting wagering experience. Your privacy is always protected with us.

Bahasa Melayu