Lukcy8 Privacy Policy – Malaysian User Data Protection

To provide a complete and secure service, lukcy8 collects various types of information when you interact with our platform. This information is collected transparently and only for the purposes stated in this policy.

All information you provide during registration must be accurate and up to date. You are responsible for updating your information if any changes occur. Inaccurate information may affect our ability to process transactions or provide effective support.

Data collected by lukcy8 used solely for legitimate purposes necessary to operate the platform safely and efficiently. We do not use your data for any other purpose without obtaining your consent first.

The primary uses of your data include:

• Account management — creating, verifying, and managing your user account
• Transaction processing — processing deposits, withdrawals, and bonus payments securely
• Fraud prevention — detecting and preventing unauthorised access, money laundering, and fraudulent activity
• Legal compliance — fulfilling reporting and audit obligations required by applicable law
• Service improvement — analysing usage patterns to improve the overall user experience
• Responsible gaming — monitoring gaming patterns to identify users who may need assistance
• Service communications — sending important notifications related to your account, security, and transactions

lukcy8 does not sell or rent your personal information to any third party. However, there are limited situations where we share certain information with trusted parties:

• Payment service providers — information required to process your financial transactions is shared with licensed and registered payment providers
• Technical service providers — infrastructure and cloud computing providers that help operate the platform, subject to strict confidentiality agreements
• Legal authorities — we will disclose information when required by law, court order, or a legitimate request from the relevant authorities
• Fraud prevention — limited information may be shared with recognised fraud prevention agencies to protect our platform and users

All third parties who receive your data are bound by data protection agreements ensuring your information is handled to the same or higher security standards that we maintain.

Protecting your data from unauthorized access, modification, or leakage is the absolute priority of lukcy8. We continuously invest in state-of-the-art security infrastructure to ensure your data remains protected at all times.

The technical and organizational measures we implement include:

• Data encryption — all data in transit is protected with 256-bit SSL/TLS; stored data is protected with AES-256 encryption
• Multi-layered firewall — firewall systems configured to detect and block any suspicious access attempts
• Two-factor authentication (2FA) — available to all accounts for an additional layer of protection
• Regular security audits — penetration testing and security audits are conducted regularly by independent experts
• Internal Access Controls — lukcy8 staff may only access data necessary for their specific duties, and all access is logged and monitored
• 24/7 Monitoring — our security team continuously monitors systems to detect and respond to any threats promptly

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a security incident affecting your data, we will notify you within the timeframe required by applicable law.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy policy of lukcy8, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact our support team via live chat on the platform. Your request will be processed within 14 business days and we may need to verify your identity before processing a request.

Platform lukcy8 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyze platform usage. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

• Essential Cookies — required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Functional Cookies — storing your preferences such as language and display settings to deliver a more personalised experience.
• Analytics Cookies — helps us understand how users interact with the platform so we can continually improve it. This data is collected in aggregate and anonymised form.

You can control cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality or user experience of our platform.

lukcy8 retains your personal data only for as long as necessary to fulfill the purpose for which it was collected or to comply with applicable legal obligations. The following are general guidelines for our data retention periods:

• Active account data — retained for the duration your account is active and for an additional period following account closure as required by law
• Financial transaction records — retained for a minimum of 7 years in accordance with financial and anti-money laundering legal requirements
• Support communication logs — retained for 2 years after case resolution
• Anonymized analytics data — may be retained indefinitely as it contains no personally identifiable information

When the retention period expires, your data will be securely deleted or anonymized in a manner that prevents re-identification.

In operating the platform lukcy8, there are situations where your data may be processed or stored outside Malaysia, particularly in connection with cloud computing infrastructure and international technical service providers.

Whenever any cross-border data transfer occurs, we ensure adequate protection is in place through:

• Standard data transfer agreements compliant with applicable legal requirements
• Selecting only partners who meet equivalent or stricter data protection standards
• Use of encryption for all data transferred across borders

Platform lukcy8 is restricted to users aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18. If we discover that such data has been collected without our knowledge, we will take immediate action to delete the information and close the account involved.

lukcy8 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or data protection improvements. When material changes are made, we will notify you via a prominent notice on the platform or by email at least 14 days before the changes take effect.

You are encouraged to review this page periodically to ensure you stay informed about how we protect your privacy. The "Updated" date at the top of this page reflects when the latest changes were posted. Continued use of our platform after the effective date of changes constitutes your acceptance of this latest Privacy Policy.