Privacy Policy

This Privacy Policy ("Policy") describes how mrluky88 ("the Platform", "we", "us", or "our") collects, processes, stores, and protects the personal data of individuals who access or use the mrluky88 website at mrluky88.cam and all associated services.

mrluky88 is committed to maintaining the privacy, confidentiality, and security of all personal data entrusted to us by our Members and website visitors. We operate in compliance with applicable data protection principles and implement technical and organisational measures appropriate to the nature of the data we handle.

By registering a Member Account, making a deposit, or otherwise using the mrluky88 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

"Personal Data"

Any information that identifies or can reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, financial data, and online identifiers.

"Processing"

Any operation performed on personal data, including collection, recording, storage, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, combination, restriction, erasure, or destruction.

"Data Controller"

mrluky88, which determines the purposes and means of processing Members' personal data.

"Data Subject"

Any identified or identifiable natural person whose personal data is processed by mrluky88 — including all registered Members and website visitors.

"Consent"

A freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their personal data.

"KYC"

Know Your Customer — the identity and address verification process conducted on Members prior to withdrawal approval, as required for anti-money laundering compliance.

"Cookies"

Small text files placed on a user's device by a website to store preferences, session information, and usage data for functionality and analytical purposes.

mrluky88 collects personal data through several channels, including Member registration, account activity, payment transactions, customer support interactions, and passive technical collection via our website infrastructure. The categories of data we collect include:

We collect only the minimum data necessary to fulfil the purposes described in this Policy. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, or health information unless legally required to do so in the context of responsible gambling obligations.

mrluky88 processes personal data for the following specific and legitimate purposes:

• Account Creation and Management: To register your Member Account, verify your identity, and maintain your account profile and preferences.
• Transaction Processing: To process deposits and withdrawals in Malaysian Ringgit (MYR) via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Boost, GrabPay, and cryptocurrency methods.
• KYC and Compliance Verification: To verify your identity and age (21+ requirement), comply with anti-money laundering (AML) obligations, and fulfil fraud prevention duties.
• Platform Provision and Improvement: To deliver casino games, sports betting markets (including Liga Super Malaysia, EPL, and UFC), live dealer services, and other Platform features.
• Customer Support: To respond to queries, resolve disputes, and process complaints submitted via live chat or email.
• Responsible Gambling: To administer self-exclusion requests, deposit limits, session reminders, and cooling-off periods in accordance with responsible gaming standards.
• Fraud Detection and Security: To detect and prevent unauthorised access, fraudulent activity, money laundering, and abuse of the Platform's bonus systems.
• Marketing and Promotions: To send promotional communications to Members who have consented to receive them, including bonus offers, VIP programme updates, and platform news. Consent may be withdrawn at any time.
• Analytics and Platform Optimisation: To understand how Members use the Platform and improve its performance, usability, and content.
• Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and enforce our Terms and Conditions.

mrluky88 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the Member Agreement, including account management, transaction processing, and support services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, AML obligations, and age verification.
• Legitimate Interests: Processing carried out in pursuit of our legitimate business interests where those interests are not overridden by your rights — for example, fraud detection, security monitoring, and platform analytics.
• Consent: Processing based on your freely given and specific consent, such as receiving marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

mrluky88 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment Service Providers: We share necessary financial and identity data with payment processors who facilitate deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Maybank, CIMB, and other supported methods. These processors are contractually bound to protect your data.
• KYC and Identity Verification Partners: We may engage specialist identity verification services to assist in processing KYC documentation. All such partners are subject to strict confidentiality and data security obligations.
• Game and Technology Providers: Third-party game studios and software providers who power the games and betting markets on our Platform may receive limited technical data necessary to operate those services.
• Regulatory and Law Enforcement Authorities: We will disclose personal data where required to do so by law, court order, or a valid request from a competent authority. We will notify affected Members where legally permitted to do so.
• Fraud Prevention and Security Services: We may share data with fraud detection agencies or cybersecurity providers where we have a legitimate interest in preventing financial crime or protecting Member accounts.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business assets, personal data held by mrluky88 may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.

All third-party recipients of personal data are required to implement appropriate technical and organisational security measures and to process data only for the purposes for which it was shared.

mrluky88 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and deliver a more personalised experience. The types of cookies we use include:

• Essential Cookies: Strictly necessary for the Platform to function. These include session authentication cookies, security tokens, and load balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, display options, and saved login details where permitted. Disabling these may reduce Platform usability.
• Analytics Cookies: Used to collect aggregated data on how visitors interact with the Platform — including pages visited, time spent, and navigation paths. This data is used to improve Platform performance and user experience.
• Marketing and Attribution Cookies: Used where you have consented to receive targeted promotions or to help us understand which marketing channels are most effective. These may be placed by trusted analytics partners.

You may control cookie settings through your browser preferences. Note that disabling essential cookies will prevent you from using core Platform features including login and cashier functions. Continued use of the Platform without adjusting browser settings constitutes acceptance of our use of cookies as described in this Policy.

mrluky88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general data retention framework is as follows:

• Active Account Data: Retained for the duration of your active membership on mrluky88, plus a minimum of five (5) years following Account closure, in accordance with standard financial record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years following the conclusion of the relevant business relationship, as required by applicable anti-money laundering regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the relevant transaction.
• Support Communications: Retained for three (3) years from the date of the interaction unless the matter is subject to ongoing legal proceedings.
• Marketing Consent Records: Retained until consent is withdrawn. Upon withdrawal of consent, marketing data is deleted within 30 days.
• Technical and Log Data: Generally retained for up to twelve (12) months for security and performance purposes, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be used to identify an individual.

mrluky88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Two-Factor Authentication (2FA): Available for all Member Accounts to provide an additional layer of protection against unauthorised login.
• Access Controls: Personal data is accessible only to authorised mrluky88 personnel who require it to perform their specific job functions. Staff access is managed through role-based permission systems.
• Secure Payment Infrastructure: Financial data processed through Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, and other payment partners is handled within their own PCI-DSS compliant environments. mrluky88 does not store full payment card numbers.
• Regular Security Audits: Our systems are subject to periodic security assessments and vulnerability testing to identify and remediate potential weaknesses.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities as required by law.

As a Data Subject whose personal data is processed by mrluky88, you hold the following rights in relation to your personal data. You may exercise any of these rights by contacting our support team via live chat or the email address listed in Section 14.

We will respond to all rights requests within 30 days of receipt. Where a request is complex or there are a large number of requests, we may extend this period by a further two months, in which case we will notify you of the extension and the reasons for it.

Please note that certain rights may be limited where processing is necessary to comply with legal obligations — for example, KYC records retained for AML compliance purposes may not be eligible for erasure during the mandatory retention period.

mrluky88 operates a strict 21+ age policy and does not knowingly collect personal data from individuals under the age of 21. Our registration process and KYC verification procedures are specifically designed to identify and prevent underage individuals from accessing the Platform.

If we become aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated Account, delete the personal data collected to the extent permitted by law, and take appropriate remedial action. Any deposits made by an underage user may be returned, and any associated winnings will be voided.

If you are a parent or guardian and have reason to believe that a minor in your care has registered on the mrluky88 Platform, please contact our support team immediately via live chat or email so that we can take prompt action.

The mrluky88 Platform may contain references or links to third-party websites, services, or resources for informational purposes. These third-party resources operate under their own independent privacy policies, over which mrluky88 has no control and for which we accept no responsibility.

We strongly encourage you to review the privacy policies of any third-party services you access. mrluky88 shall not be held liable for the data practices, content, or privacy standards of any external websites or services, even where a link to them appears on our Platform.

mrluky88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform features. The "Last updated" date at the top of this Policy will be amended to reflect the most recent revision.

Where changes are material — meaning they significantly affect your rights or how we use your personal data — we will provide advance notice via email to your registered address and/or via a prominent on-site notification, where reasonably practicable, before the changes take effect.

Your continued use of the mrluky88 Platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to the revised Policy, you should discontinue use of the Platform and contact us to arrange Account closure.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a concern about how your personal data is being handled, please contact mrluky88 through the following channels:

• Live Chat: Available directly on the mrluky88 website, 24 hours a day, 7 days a week — including all Malaysian public holidays. Average response time: under 2 minutes.
• Email (plain text — not a link): [email protected]

All data-related requests will be acknowledged within 48 hours of receipt. We will endeavour to respond in full within 30 calendar days. In cases involving complex legal matters, identity verification may be required before we can fulfil a data rights request, to ensure we do not disclose personal data to an unauthorised party.