Privacy Policy – mrluky88 Online Casino Malaysia

1. Introduction

mrluky88 ("mrluky88", "we", "us", "our") is committed to protecting the privacy and personal data of all users ("you", "Player") who access or use the mrluky88 platform at mrluky88.org, including all associated gaming, account management, and support services.

This Privacy Policy ("Policy") describes in detail the categories of personal data mrluky88 collects, the purposes for which that data is processed, the basis on which it is processed, how long it is retained, and the rights available to you in respect of your personal data.

By creating an account on mrluky88 or otherwise using our Platform, you acknowledge that you have read and understood this Policy. This Policy is to be read in conjunction with our Terms & Conditions, which are incorporated herein by reference.

2. Data Controller

For the purposes of applicable data protection legislation, mrluky88 acts as the Data Controller in respect of personal data collected through the mrluky88 Platform. mrluky88 operates under international gaming authority standards and applies data governance practices consistent with internationally recognised data protection principles.

If you have any questions regarding data control, data processing activities, or the exercise of your data rights, please contact our Data Protection team using the contact details provided in Section 15 of this Policy.

3. Data We Collect

mrluky88 collects the following categories of personal data from Players:

Identity & Contact Data

• Full legal name, date of birth, and nationality.
• Residential address, including postcode and country of residence.
• Email address and mobile phone number.
• Government-issued identity document details (e.g., MyKad number, passport number) collected as part of Know Your Customer ("KYC") verification.

Financial Data

• Bank account details, e-wallet identifiers (e.g., Touch n Go eWallet, Boost), and payment card details (processed via our payment service providers — mrluky88 does not store full card numbers).
• Transaction history including deposits, withdrawals, bonus credits, and wager settlements.

Technical & Usage Data

• IP address, browser type and version, operating system, and device identifiers.
• Session logs, login timestamps, pages visited, and interactions with Platform features.
• Gaming activity data including game history, bet amounts, session duration, and win/loss records.

Communications Data

• Records of live chat interactions, email correspondence, and support ticket exchanges between you and mrluky88 support staff.

4. How We Collect Data

mrluky88 collects personal data through the following means:

• Account Registration: Information you provide directly when creating your mrluky88 account.
• KYC Verification: Identity and address documents submitted during the verification process.
• Transactions: Financial data captured when you make deposits or withdrawal requests.
• Platform Use: Technical and usage data collected automatically through server logs, cookies, and session tracking technologies as you navigate and interact with the mrluky88 Platform.
• Support Interactions: Communications you initiate with our customer support team through live chat or email.

5. How We Use Your Data

mrluky88 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your mrluky88 account, including authentication and access control.
• KYC & Regulatory Compliance: To verify your identity and age (21+), comply with anti-money laundering ("AML") obligations, and meet reporting requirements under applicable gaming regulations.
• Transaction Processing: To process your deposits and withdrawals accurately and in a timely manner.
• Service Delivery: To provide you with access to casino games, sportsbook markets, promotions, and support services.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, bonus abuse, and unauthorised account access.
• Responsible Gaming: To monitor gaming activity and proactively identify patterns that may indicate problem gambling, and to apply responsible gaming tools where appropriate.
• Legal Obligations: To comply with applicable laws, regulatory requirements, court orders, or directions from gaming authorities.
• Service Improvement: To analyse Platform usage in aggregate form to improve game offerings, user experience, and Platform performance.
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates where you have consented to receive such communications. You may opt out at any time by contacting support.

6. Legal Basis for Processing

mrluky88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the mrluky88 Terms & Conditions — including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable AML, KYC, data retention, and gaming regulatory requirements.
• Legitimate Interests: Processing carried out for the purposes of fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing communications, where you have provided your express consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7. Data Sharing

mrluky88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly as required to operate the Platform and comply with our obligations:

• Payment Service Providers: Banks and e-wallet operators (including Maybank, CIMB, Public Bank, Touch n Go eWallet, and Boost) to process deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification services used to authenticate your identity documents.
• Game Content Providers: Licensed game studios and RNG certification bodies that supply and audit game software on the Platform.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or valid regulatory directive.
• Professional Advisers: Legal, audit, and compliance advisers, subject to confidentiality obligations.

All third-party service providers engaged by mrluky88 are contractually required to handle personal data in a manner consistent with this Policy and applicable data protection standards.

8. Data Retention

mrluky88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. In general:

• Account and transaction data is retained for a minimum of five (5) years following account closure, in compliance with standard AML record-keeping requirements.
• KYC documentation is retained for the period required under applicable gaming authority regulations.
• Support communications are retained for three (3) years unless a longer retention period is required by law.
• Technical and usage data collected via cookies and session logs is retained for shorter periods as specified in our cookie management settings.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised.

9. Security Measures

mrluky88 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-Bit SSL Encryption: All data transmitted between your device and mrluky88 servers is encrypted using industry-standard TLS/SSL protocols — the same level of protection applied by major Malaysian financial institutions.
• Access Controls: Personal data is accessible only to authorised mrluky88 personnel and service providers on a strict need-to-know basis.
• Login Security: Anomalous login attempts trigger automatic alerts. Two-factor authentication is available to Players on request.
• Payment Security: Full payment card numbers are never stored on mrluky88 servers. Card data is processed exclusively by PCI-DSS compliant payment service providers.
• Internal Policies: mrluky88 maintains internal data protection policies, staff training programmes, and incident response procedures governing the handling of personal data.

While mrluky88 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. We encourage you to maintain a strong, unique password for your account and to notify us immediately of any suspected unauthorised access.

10. Cookies & Tracking Technologies

mrluky88 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use include:

• Strictly Necessary Cookies: Essential for Platform functionality, including session management and authentication. These cannot be disabled.
• Performance Cookies: Used to collect aggregated, anonymised data on how Players navigate and interact with the Platform, enabling us to improve usability and performance.
• Functional Cookies: Used to remember your preferences (e.g., language, display settings) across sessions.
• Analytics Cookies: Used to analyse Platform traffic and usage patterns in aggregate form to support service development decisions.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the mrluky88 Platform.

11. Your Rights

Subject to applicable law, you have the following rights in respect of the personal data mrluky88 holds about you:

• Right of Access: You may request a copy of the personal data mrluky88 holds about you.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations and regulatory requirements.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You may request that we provide your personal data to you or a third party in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing communications.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our Data Protection team using the details in Section 15. mrluky88 will respond to verified requests within a reasonable timeframe and in accordance with applicable law.

12. Responsible Gaming & Data

mrluky88 processes gaming activity data as part of our responsible gaming obligations. This includes monitoring deposit frequency, session duration, and wagering patterns to identify Players who may be exhibiting signs of problem gambling. Where such patterns are identified, mrluky88 may proactively reach out to the Player, apply responsible gaming interventions, or flag the account for enhanced monitoring.

Self-exclusion requests and responsible gaming tool activations are recorded and enforced across all mrluky88 sessions and devices. Records of self-exclusion are retained for the full duration of the exclusion period and for a reasonable period thereafter to prevent inadvertent re-activation.

mrluky88 is strictly for players aged 21 and above. Age verification data is processed as a mandatory compliance requirement and is non-negotiable. For more information, visit our Responsible Gaming page.

13. Children's Privacy

The mrluky88 Platform is strictly intended for persons aged 21 and above. mrluky88 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under this age threshold, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor is using the mrluky88 Platform, please contact us immediately using the details in Section 15.

14. Policy Changes

mrluky88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform functionality. Where changes are material, we will provide reasonable advance notice through the Platform or via your registered contact details. The date of the most recent revision is displayed at the top of this page. Your continued use of the mrluky88 Platform following publication of a revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically.

15. Contact Us

For any questions, requests, or complaints relating to this Privacy Policy, or to exercise your data rights, please contact the mrluky88 Data Protection team through the following channels:

• 24/7 Live Chat: Available on-site at mrluky88.org
• Email: [email protected]

mrluky88 will acknowledge receipt of your request promptly and endeavours to provide a full response within thirty (30) calendar days of receiving a verified request. Where the complexity or volume of requests requires additional time, we will notify you accordingly within the initial thirty-day period.