Updated: January 2026
PDPA Compliance

Lucky casino Malaysia Privacy Policy – Player Data Protection

Lucky casino respects the privacy of every member. This policy transparently explains what data we collect, how it is used, who can access it, and what rights you have as a player to control your own personal information.

SSL 256-bit
No Data Sales
Player Rights Guaranteed
Privacy Policy Summary
Minimum Data Collected

Only data necessary for operations and compliance

End-to-End Encryption

SSL 256-bit for all transactions and data storage

Right of Access & Erasure

Players may request a copy or deletion of their data

No Third-Party Data Sales

Your data is not sold for advertising purposes

lucky casino's Commitment to Your Privacy

Six core principles that guide how we handle players' personal data

Comprehensive Encryption Protection

All data transmitted between your device and lucky casino servers is protected with 256-bit SSL encryption — the same standard used by financial institutions and major banks in Malaysia. Your information cannot be intercepted in transit.

No Data Sales to Advertisers

Lucky casino has never and will never sell, rent, or trade players' personal information to third-party advertising or marketing companies. Your data belongs entirely to you — it is not a business asset for us to sell.

Minimum Data Collection

We only collect information that is strictly necessary to operate our services — account registration, KYC verification, and payment processing. We do not collect data that has no direct relevance to platform operations.

Full Player-Owned Control

As a lucky casino player, you have the right to access the data we hold about you, request corrections if there are errors, request a full copy of your data, or request deletion when your account is closed.

Limited Retention Period

Lucky casino retains player data only for as long as necessary for business and legal compliance purposes. Data that is no longer required is securely deleted in accordance with strict records management procedures.

Communication Preferences Control

You can manage your marketing communication preferences at any time through your account settings. Choose the types of notifications you wish to receive — promotions, account updates, or the latest news — and we will respect your choices.

01

Introduction & Scope of This Policy

This Privacy Policy explains how lucky casino collects, uses, stores, and protects the personal information you provide when using our platform. It applies to all registered players, website visitors, and lucky casino mobile app users.

Lucky casino operates in full compliance with applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA). We take these obligations seriously and strive to ensure all our data handling practices meet the highest legal requirements.

By registering an account with lucky casino or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

Current Version: This Privacy Policy was last updated in January 2026. Any significant changes will be communicated to players via in-account notifications or registered email at least 14 days before taking effect.

02

Personal Data We Collect

Lucky casino collects two main categories of data: information you provide directly while using the platform, and data collected automatically as you browse our website or use our app.

Information You Provide Directly

  • Registration information: Full name, date of birth, email address, phone number, password
  • KYC verification information: MyKad number or passport number, identity document image, facial verification selfie
  • Financial information: Bank account number, eWallet account number for withdrawal purposes
  • Address information: Residential address for anti-money laundering (AML) compliance
  • Support communications: Live Chat session records, emails, and support tickets you have submitted to us

Automatically Collected Data

  • Log and technical data: IP address, browser type, operating system, screen resolution
  • Usage data: Pages visited, games played, session duration, login frequency
  • Device data: Unique device identifiers, mobile phone model (for app users)
  • Cookies and tracking technologies: Session cookies, functional cookies, and preference cookies (with consent)

Lucky casino does not collect sensitive information such as race, religion, political views, or health information unless it is directly relevant to responsible gambling and voluntarily provided by the player to seek assistance.

03

Purpose and Legal Basis for Data Use

Lucky casino uses your personal data for lawful purposes that are necessary to deliver our online casino platform services. We do not use your data for unrelated purposes without your explicit consent.

Purpose of Use Legal Basis Data Category
Identity verification & KYC Legal Obligation Identity, KYC
Deposit & withdrawal processing Contract Performance Finance, Identity
Customer Support Contract Performance Communications, Account
Fraud detection & security Legitimate Interest Technical, Logs
User experience optimisation Legitimate Interest Usage, Device
Marketing & promotional communications Consent Contact, Preferences

You may withdraw consent for marketing communications at any time through your lucky casino account settings. Withdrawing consent does not affect your right to continue using the platform or to receive important account-related communications.

04

Data Sharing with Third Parties

Lucky casino does not sell or trade players' personal data to third parties for advertising or marketing purposes. However, in operating the platform, we do need to share certain data with carefully selected third parties.

Trusted Service Providers

Lucky casino shares data with third-party service providers that help us operate this platform, including:

  • Payment processors: Banks, eWallet operators, and payment gateways to process your deposits and withdrawals
  • Game providers: Companies such as Evolution Gaming, Playtech, and Pragmatic to operate Live Casino games and Slots
  • Identity verification providers: Third-party KYC services for identity document verification
  • Cloud service providers: Secure and audited data storage infrastructure
  • Analytics services: Tools that help us understand platform usage for improvement purposes

All these third-party service providers are contractually bound to handle lucky casino player data in accordance with data protection standards equivalent to or higher than those we apply ourselves.

Legally Required Disclosures

Lucky casino may need to disclose players' personal data to authorities if required by applicable law, such as official requests from law enforcement or gambling regulatory bodies. In such cases, we will notify the relevant player unless prohibited from doing so by law.

Lucky casino has never and will never share player data with foreign governments or international authorities unless there is a valid and binding legal agreement between Malaysia and the country in question.

05

Security & Data Protection

Protecting players' personal data is lucky casino's top priority. We continuously invest in security infrastructure and industry best practices to ensure your data remains safe at all times.

Technical Security Measures

  • 256-bit SSL encryption: All data communications between you and the lucky casino platform are protected with high-level encryption
  • Two-factor authentication (2FA): Additional security layer for login and withdrawals
  • 24/7 Monitoring: An active intrusion detection system that monitors for suspicious activity at all times
  • Regular penetration testing: Independent security audits conducted by third-party cybersecurity firms to identify and address vulnerabilities
  • Network segmentation: Segmented server infrastructure to limit access between systems
  • Encrypted backups: Backup data is stored encrypted in a separate, secure location

Shared Responsibility: While lucky casino takes all reasonable steps to protect your data, account security also depends on your own actions. Use a strong password, enable 2FA, never share your login credentials, and always log out when using a shared device.

06

Player Rights Regarding Personal Data

As a lucky casino player, you have certain rights regarding your personal data that we hold. lucky casino is committed to respecting and facilitating the exercise of these rights.

Right of Access

Request a copy of all personal data we hold about you in a readable format.

Right to Rectification

Request correction of any inaccurate or incomplete information held about you.

Right to Erasure

Request deletion of your data when it is no longer required for a legitimate purpose.

Right to Restriction

Request restriction of your data processing under certain circumstances while a dispute is being resolved.

Right to Portability

Receive your data in a structured format for transfer to another service.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, contact the lucky casino support team via Live Chat or support email. We will process your request within 30 business days and provide a written response on the action taken.

In some cases, data deletion requests may not be fully fulfilled if the data in question is required for legal compliance purposes, such as financial records or ongoing fraud investigations. We will clearly explain the reason should this occur.

07

Cookies & Tracking Technologies

Lucky casino uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser that allow us to recognize you when you return.

Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
  • Functional Cookies: Stores your preferences such as language selection and display settings for a more personalized experience.
  • Analytics Cookies: Collects anonymized data on how players use the platform to help us improve our services.
  • Marketing Cookies: Used to display relevant advertisements. Only activated with your consent.

You can manage cookie settings through your browser or via the cookie preferences panel available on the lucky casino website. Please note that disabling certain cookies may affect platform functionality.

08

Cross-Border Data Transfers

In certain circumstances, personal data of lucky casino players may be transferred to, or processed in, countries other than Malaysia. This occurs when we engage third-party service providers with operations outside Malaysia, such as cloud service providers or international payment processors.

Lucky casino ensures that any cross-border data transfers take place with adequate safeguards in place, including:

  • Transfers only to countries with adequate data protection standards
  • Use of approved standard contractual clauses to ensure equivalent data protection
  • Data protection impact assessment before any new transfer is initiated
09

Data Retention Period

Lucky casino does not retain players' personal data longer than necessary for the purposes for which it was collected. Retention periods vary depending on the type of data and applicable legal requirements.

  • Active account data: Retained for the duration your account is active plus 7 years after account closure (AML compliance requirements)
  • Financial transaction records: 7 years in accordance with tax and financial legal requirements
  • KYC Data: 5 years after the business relationship ends (PDPA and AML requirements)
  • Support communication logs: 2 years from the date of last interaction
  • Analytics and usage data: 13 months (anonymised thereafter)
  • Marketing cookie data: Maximum 13 months or until consent is withdrawn

Note: Once the retention period expires, data is securely deleted or anonymised using methods that ensure it cannot be recovered or re-linked to you.

10

Contact the Data Protection Officer

Lucky casino has appointed a Data Protection Officer (DPO) responsible for ensuring the platform complies with applicable data protection laws and for handling privacy-related inquiries from players.

If you have any questions about this Privacy Policy, wish to exercise any of the player rights stated above, or wish to make a complaint regarding the handling of your personal data, you may contact the lucky casino team via:

  • Live Chat: Available 24/7 in your lucky casino account — the fastest way to get a response
  • Support Email: [email protected] (response within 2 business days)
  • Dedicated Privacy Email: [email protected] (for privacy inquiries and player rights requests)

Lucky casino is committed to responding to all privacy inquiries within 30 business days. For more complex cases, we will notify you within the first 30 days and provide an estimated timeline for final resolution.

If you are not satisfied with how lucky casino handles your privacy inquiry, you have the right to file a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the Department of Personal Data Protection Malaysia as the relevant regulatory body.

Your Data Is Safe with lucky casino

Create your lucky casino account today and enjoy an online casino experience that is secure, transparent, and fully respectful of your privacy.

SSL 256-bit No Data Sales PDPA Compliance
Bahasa Melayu