Mr Lucky99 Privacy Policy – Data Protection for Malaysian Users

1 Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") is published by mr lucky99 ("we", "Platform") and applies to all users who access or use the mr lucky99 online betting platform, including the website, mobile application and all related services we provide in Malaysia.

We are committed to protecting the privacy of every mr lucky99 member and ensuring that all personal data we collect is handled responsibly, transparently, and securely. This Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices in personal data management.

Please read this Policy carefully. If you do not agree with any part of it, please discontinue use of the mr lucky99 platform and contact us to close your account.

2 Types of Personal Data We Collect

Mr lucky99 collects various types of personal data from our members to enable us to deliver services that are secure, efficient and personalised. The data we collect falls into several categories:

A. Data You Provide Directly

• Full name as stated on your MyKad or passport
• Date of birth and gender
• Email address and mobile number
• Residential address in Malaysia
• MyKad number or passport number
• Bank account details or digital wallet information (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX) used for deposits and withdrawals
• Account password in encrypted form

B. Automatically Collected Data

• IP address and network information
• Device type, operating system and phone model
• Browser type and version
• Approximate location data (state/city) based on IP
• Platform activity logs including games played, bets placed and session duration
• Cookie and website tracker data

C. Data from Third-Party Sources

• Identity verification information from the KYC service providers we use
• Transaction information from payment processors such as banks and local digital wallet providers
• Information from fraud prevention agencies we work with to protect our members

3 How We Use Your Personal Data

Mr lucky99 uses collected personal data for legitimate and transparent purposes only. We will not use your data for any other purpose without first obtaining your consent.

• Account Management: Creating, verifying and maintaining your mr lucky99 account, including the KYC process to ensure the safety of all members.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks and other FPX methods, as well as handling your withdrawal of winnings securely and promptly.
• Platform Security: Detect and prevent fraud, money laundering, multi-account usage and other suspicious activity that could compromise the security of mr lucky99 members.
• Customer Support: Enables the mr lucky99 support team to assist you more effectively when you contact us via live chat, WhatsApp, or email.
• Service Communications: Sending important notifications about your account, transactions, changes to our terms, or security information you need to be aware of.
• Platform Improvements: Analysing usage patterns to improve the overall experience on mr lucky99, including the interface, speed and game selection.
• Legal Compliance: To fulfil our legal and regulatory obligations under Malaysia's PDPA and other applicable legislation.

4 Sharing Data With Third Parties

Mr lucky99 will not sell, rent or disclose your personal data to any third party for their own commercial purposes. However, there are limited situations where we may need to share your data:

• Payment Service Providers: Partner banks, digital wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and FPX processors receive only the minimum transaction information required to process your deposits and withdrawals.
• KYC Service Providers: Trusted and licensed third parties we engage to verify member identities in compliance with anti-money laundering (AML) legal requirements.
• Technology Service Providers: Companies that provide the technical infrastructure, hosting, and cybersecurity for the mr lucky99 platform — all parties are bound by strict confidentiality agreements.
• Legal Authorities: When required by Malaysian law, court order, or a lawful request from enforcement agencies such as the PDRM or BNM.
• Fraud Prevention Agencies: In cases involving suspected fraud or unlawful activity, we may share the necessary information with the relevant authorities to protect all members of the platform.

5 Data Security & Protection Measures

Mr lucky99 invests seriously in cybersecurity infrastructure to ensure your personal data is always protected to the highest standard. The security measures we employ include:

• SSL 256-bit Encryption: All data transmitted between your browser and mr lucky99's servers is encrypted using industry-standard TLS/SSL protocols, making it unreadable to any unauthorised party.
• Secure Password Storage: Your password is never stored in plain text — we use a strong cryptographic hashing algorithm (bcrypt), which means even our own staff cannot read your password.
• Two-Factor Authentication (2FA): You can — and we strongly encourage you to — enable 2FA on your mr lucky99 account for an additional layer of security.
• 24/7 Monitoring: Our automated security system monitors all account activity around the clock and will issue an immediate alert upon detecting any unusual or suspicious behaviour.
• Regular Security Audits: We conduct regular penetration testing and security audits by independent third parties to ensure our systems are resilient against the latest cyber threats.
• Internal Access Controls: Only specific mr lucky99 staff are granted access to user data, and that access is limited strictly to what is necessary to carry out their duties.

6 Cookies & Tracking Technologies

Mr lucky99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, user sessions, and security. These cookies cannot be disabled — without them, the platform will not function properly.
• Performance Cookies: Helps us understand how users interact with the mr lucky99 platform so we can improve speed, layout, and functionality.
• Functional Cookies: Remembering your preferences such as language, display settings and login details so you don't have to re-enter them each time.
• Analytics Cookies: Used to analyse usage patterns in aggregated, anonymised form for the continuous improvement of our platform.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some features on the mr lucky99 platform.

7 Data Retention & Deletion

Mr lucky99 retains your personal data only for as long as it is needed for the purposes set out in this Privacy Policy, or as required under Malaysian law. Retention periods vary by data type as specified in the table in Section 2.

When your personal data is no longer required, we will:

• Permanently delete the data from all our systems and backups
• Anonymising data that must be retained for statistical or audit purposes so it can no longer be linked back to you
• Ensuring secure deletion using methods that meet industry security standards

If you close your mr lucky99 account, we will begin the data deletion process within 30 days, except for data that must be retained to fulfil legal obligations — such as financial transaction records, which are required to be kept for 7 years under Malaysian law.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mr lucky99:

To exercise any of the above rights, please contact the mr lucky99 privacy team at support@mrlucky99.com. We will process your request within 14 business days.

9 Protection of Children's Data

Mr lucky99 services are strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

Should we discover that personal data of a minor has been collected without our knowledge, we will promptly take the following steps:

• Immediate closure of the associated account
• Deletion of all personal data associated with the account
• Returning any funds remaining in the account

If you believe your child or a minor has registered a mr lucky99 account, please contact us immediately at support@mrlucky99.com so we can take the appropriate action.

10 Amendments to the Privacy Policy

Mr lucky99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements in how we manage user data.

When we make material changes to this Policy, we will:

• Update the "Last Updated" date shown at the top of this page
• Sending email notifications to all registered members before changes take effect
• Display a prominent notice on the mr lucky99 homepage for a minimum of 7 days

Your continued use of the mr lucky99 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mr lucky99 handles your personal data, please reach out to us through the following channels:

• Privacy Email: support@mrlucky99.com
• Live Chat: Available 24 hours a day, 7 days a week on the mr lucky99 platform
• Response Time: We aim to respond to all privacy enquiries within 3 business days

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe that mr lucky99's processing of your personal data breaches the provisions of PDPA 2010.