Privacy Policy mrluck88 –
Your Personal Data Protection

Welcome to the mrluck88 Privacy Policy. This document is an agreement between you as a platform user and mrluck88 regarding how we manage your personal information. We understand that your trust is our most valuable asset, and we take our data protection responsibilities with the utmost seriousness.

This Privacy Policy applies to all services provided by mrluck88 through the official website at https://mrluck88.vu, including the Live Casino platform, Slot Games, Fish Shooting Games, Sports Betting, and all interactions via our mobile app and communication channels.

By registering or continuing to use the mrluck88 platform, you agree to the terms of this Privacy Policy. If you disagree with any part of this policy, we recommend that you discontinue use of our services and contact our support team for further clarification before making any decision.

To enable mrluck88 to provide a safe, private, and responsible service, we need to collect certain categories of information from our users. This collection is carried out transparently and only for legitimate purposes.

We may also receive information about you from legitimate third-party sources, such as identity verification agencies, payment service providers and gambling exclusion lists established by the relevant Malaysian authorities.

• Information you voluntarily provide during account registration and the KYC process.
• Data automatically generated when you use the mrluck88 platform.
• Information received from our legitimate business partners for verification purposes.
• Public data required for legal compliance purposes such as sanctions list checks.

Mrluck88 uses your personal data only for purposes that are lawful, relevant, and proportionate to the needs of the services we provide. Below is a detailed breakdown of how your data is used:

• Account Management: Creating, verifying and maintaining your user account, including the KYC process and age verification to ensure only eligible users can access the platform.
• Transaction Processing: Processing deposits, withdrawals and any other financial transactions securely via local payment methods such as DuitNow, FPX, Touch 'n Go eWallet, Boost and GrabPay.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access and any suspicious activity or violations of the terms of use.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support to players who need it.
• Service Communications: Sending important notifications regarding your account, transactions, policy changes and security updates that you need to be aware of.
• Legal Compliance: Fulfilling our obligations under applicable Malaysian law, including providing information to authorities when lawfully required.
• Personalised Marketing: With your consent, we may send you promotional offers, bonuses, and information about new games that may interest you.

Mrluck88 will not use your data for any purpose not stated in this policy without obtaining your consent first. If you wish to withdraw consent for marketing, you may do so at any time through your account settings.

Mrluck88 firmly upholds the principle that your personal data will never be sold, rented, or shared with third parties for their commercial gain. However, there are limited situations where sharing information is necessary to enable us to operate effectively and comply with the law:

• Payment Service Providers: Required transaction information is shared with payment processors such as local banks and digital wallet operators to facilitate deposit and withdrawal management.
• Game Providers: Minimal technical data necessary to be shared with our game providers (such as Pragmatic Play, Evolution, Microgaming, and others) solely to enable the gaming platform to function.
• Identity Verification: Identity information is shared with approved third-party KYC verification agencies to confirm the authenticity of user identities.
• Legal Requirements: mrluck88 will disclose user information when required by a valid court order, regulatory authority directive, or other applicable legal obligation.
• Platform Protection: In cases of suspected fraud or illegal activity, relevant information may be shared with fraud prevention agencies or the relevant authorities.

Mrluck88 invests heavily in cybersecurity infrastructure to ensure your personal and financial data is always protected to the highest standard. Our security systems are designed using a layered approach so that there is no single point of failure.

• Data in transit is encrypted using TLS 1.3 protocol with industry-standard 256-bit SSL certificates, the same level used by leading banks.
• Data at rest is encrypted using AES-256, ensuring your information remains secure even in the event of a physical breach.
• An active 24/7 intrusion detection and prevention system (IDS/IPS) monitors all suspicious activity on our network.
• Regular security vulnerability scanning and penetration testing conducted by independent security experts.
• Role-based access control (RBAC) ensures that only authorised staff can access user data, and only to the extent necessary.
• Two-factor authentication (2FA) is available for all user accounts to provide an additional layer of security.
• Frequent automatic data backups to ensure quick data recovery in the event of any technical incident.

While we employ all reasonable security measures, no system can be guaranteed 100% secure. We recommend that you also take responsibility for protecting your account by using a strong password, not sharing it with anyone, and notifying us immediately if you suspect any unauthorised access.

Mrluck88 uses cookies and similar tracking technologies to enhance user experience, analyse platform performance, and ensure the security of your login session. Below is an explanation of the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how users interact with our platform — such as the most frequently visited pages and time spent — to help us improve our services.
• Functional Cookies: Saving your preferences such as language, time zone and display settings so you do not need to reconfigure them every time you log in.
• Security Cookies: Used to detect suspicious login attempts, verify device identity, and prevent CSRF (Cross-Site Request Forgery) attacks.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality or user experience of the mrluck88 platform. For more information, refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant data protection regulations, you have the following rights regarding your personal data held by mrluck88. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the mrluck88 support team via live chat or email at [email protected]. We will endeavour to process your request within 30 business days following identity verification.

Mrluck88 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law. Retention periods vary by data type and regulatory requirements:

• Active Account Data: Retained for the duration your account is active, plus the period prescribed by law after account closure (typically 5–7 years).
• Financial Transaction Records: Retained for a minimum of 7 years as required by Malaysian financial and tax legislation.
• KYC Data: Retained for 5 years after the business relationship ends, in accordance with anti-money laundering (AML) compliance requirements.
• Support Communication Logs: Retained for 2 years for quality control and complaint resolution purposes.
• Cookie & Analytics Data: Retained for between 30 days and 2 years depending on the cookie type and its purpose.

Once the defined retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. For anonymised data (where identifying information has been removed), we may retain it for statistical and analytical purposes without a time limit.

Mrluck88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform enhancements. Any changes will take effect as soon as they are published on our website.

For changes deemed significant that may affect how we use your data, mrluck88 will endeavour to provide at least 30 days' notice before the changes take effect, either via email to your registered address or through a clear notification on the platform.

Continued use of the mrluck88 platform after the effective date of any changes will be considered your acceptance of the updated policy. If you do not agree with the changes, please contact our team before the effective date to discuss your options.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, the mrluck88 privacy team is ready to assist you:

• Live Chat 24/7 — The fastest way to get help, available directly within the mrluck88 platform in Bahasa Melayu and English.
• Privacy Email: [email protected] — for written enquiries or official requests relating to your personal data.
• Visit the FAQ us for answers to frequently asked questions about privacy and account security.

For official privacy rights requests such as data access, correction or deletion, please include the following in your request: your registered full name, mrluck88 account number, type of request, and a brief description of the data involved. This will expedite the identity verification process and ensure your request is handled accurately.

We are committed to responding to all privacy-related enquiries within 5 business days, and completing any data rights requests within 30 business days from the date the request is received and identity is verified.