Privacy Policy

This Privacy Policy ("Policy") describes how luckybet88 ("Company", "we", "us", "our"), the operator of the online gaming platform accessible at luckybet88.cam ("Platform"), collects, uses, processes, stores, and discloses personal data in connection with the provision of its services to registered members and visitors.

We are committed to handling your personal data responsibly and in accordance with applicable data protection laws, including the Personal Data Protection Act 2010 (PDPA) of Malaysia and any other applicable international data protection frameworks. By accessing or using the luckybet88 Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.

This Policy applies to all personal data collected through your use of the Platform, including during account registration, KYC verification, deposit and withdrawal transactions, customer support interactions, and Platform browsing activity. It does not apply to the privacy practices of third-party payment service providers, which are governed by their own separate policies.

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" — Any information that identifies or can be used to identify a natural person, directly or indirectly, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" — Any operation performed on personal data, whether automated or manual, including collection, recording, storage, alteration, retrieval, use, disclosure, or deletion.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is luckybet88.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller under a contractual arrangement and under the Controller's instructions.
• "Consent" — A freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their personal data for a stated purpose.
• "Data Subject" — The natural person to whom personal data relates — in this context, any registered Member or visitor of the luckybet88 Platform.
• "KYC" — Know Your Customer. The identity verification process required to comply with anti-money laundering obligations and to confirm a Member's eligibility to use the Platform.

luckybet88 is the Data Controller responsible for the personal data collected through the Platform. As Data Controller, we determine the purposes for which your personal data is processed and the means by which processing is conducted. Where third-party service providers process data on our behalf — such as payment processors or identity verification services — they act as Data Processors operating under contractual instructions from luckybet88.

For all privacy-related enquiries, data subject access requests, or complaints, please contact our Data Protection team at the address provided in Section 15 (Contact Us). We aim to acknowledge all privacy enquiries within 5 business days and to provide a substantive response within 30 calendar days.

luckybet88 collects personal data through multiple touchpoints over the course of your relationship with the Platform. The categories of data we collect are as follows:

Where you choose not to provide data that is marked as mandatory during registration or KYC, we may be unable to provide the Platform's services to you or process your withdrawal requests. We will always indicate at the point of collection which fields are mandatory and the consequences of not providing that data.

luckybet88 processes your personal data for the following purposes, each of which is supported by a legitimate legal basis described in Section 6:

• Account Management: Creating, maintaining, and administering your luckybet88 Account, including processing logins, updating account details, and managing Account security settings.
• Payment Processing: Facilitating deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, BTC, and USDT.
• KYC & Compliance: Verifying your identity and age (21+), conducting anti-money laundering checks, meeting regulatory obligations, and maintaining records required by applicable laws.
• Service Delivery: Operating the gaming Platform, providing live casino services, running sports betting markets (including EPL, Liga Super Malaysia, and UFC coverage), and managing VIP tier status and associated rewards.
• Customer Support: Responding to support enquiries, resolving disputes, processing complaints, and managing account-related requests.
• Responsible Gambling: Monitoring gaming activity for signs of problematic behaviour, administering deposit limit and self-exclusion requests, and complying with responsible gambling obligations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, identity theft, account takeovers, and other prohibited conduct.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Members who have opted in to receive such communications. You may opt out at any time.
• Platform Analytics & Improvement: Analysing aggregated usage data to improve Platform performance, user experience, and product offerings.

Under the Personal Data Protection Act 2010 and applicable international data protection frameworks, all processing of personal data requires a lawful basis. luckybet88 relies on the following legal bases for its data processing activities:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and luckybet88 — including account management, payment processing, and service delivery — is processed on this basis.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering obligations, KYC requirements, and financial record-keeping regulations, is processed on this basis.
• Legitimate Interests: Processing conducted for fraud prevention, Platform security, responsible gambling monitoring, and internal analytics is conducted on the basis of luckybet88's legitimate business interests, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications is conducted solely on the basis of your explicit opt-in consent. You may withdraw consent at any time by contacting support or adjusting your account preferences.

luckybet88 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and under appropriate contractual safeguards:

• Payment Service Providers: Malaysian payment processors and financial institutions (including those facilitating Touch 'n Go, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong transactions) receive the minimum data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers receive identity documentation for the purpose of verifying your age and identity. These providers operate under strict data processing agreements and are not permitted to use your data for any other purpose.
• IT Infrastructure & Security Providers: Cloud infrastructure providers and cybersecurity vendors who host or secure Platform data receive access to personal data as necessary for system operation, under binding contractual obligations.
• Regulatory Authorities: Competent governmental, regulatory, or law enforcement authorities may receive personal data where we are legally required to disclose it, or where disclosure is necessary to prevent or detect fraud, money laundering, or other serious crime.
• Professional Advisors: Legal counsel, auditors, and compliance consultants may receive limited personal data where necessary for the exercise or defence of legal claims or regulatory proceedings.

luckybet88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Where retention is required for legal or regulatory compliance purposes, data may be retained beyond the above standard periods. Upon expiry of the applicable retention period, data is securely and irreversibly deleted or anonymised.

The security of your personal data is a foundational priority at luckybet88. We implement a range of technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the luckybet88 Platform is encrypted in transit using industry-standard Transport Layer Security (TLS).
• Encrypted Data Storage: Personal data at rest, including KYC documentation, financial records, and account credentials, is stored using AES-256 encryption on access-controlled infrastructure.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
• Two-Factor Authentication: Account access can be secured with two-factor authentication, which we strongly recommend all Members enable.
• Security Audits: Our Platform and infrastructure undergo regular independent security assessments to identify and remediate vulnerabilities.
• Incident Response: In the event of a personal data breach that poses a risk to your rights, luckybet88 will notify affected data subjects and relevant authorities in accordance with applicable legal requirements.

While luckybet88 employs comprehensive security measures, no online system can guarantee absolute security. You are responsible for maintaining the security of your own Account credentials and for promptly notifying us of any suspected unauthorised account access.

The luckybet88 Platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain session state, and gather aggregated analytics data. Cookies are small text files stored on your device by your browser when you visit the Platform.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core Platform, but some functional features may be less personalised. luckybet88 does not use cookies for third-party advertising or behavioural tracking across external websites.

In the course of providing services to Members, luckybet88 may transfer personal data to third-party service providers whose operations are located outside Malaysia. Where such transfers occur, we take steps to ensure that the receiving party provides an adequate level of protection for your personal data, including through the use of:

• Standard contractual clauses or equivalent contractual protections requiring the recipient to process data in accordance with applicable data protection standards.
• Binding corporate rules where transfers occur within a group of companies operating under a common privacy framework.
• Adequacy assessments confirming that the destination jurisdiction provides a comparable level of data protection to Malaysia.

luckybet88 will not transfer personal data to jurisdictions that lack adequate legal protections without first implementing appropriate safeguards. Where you have questions about a specific international transfer, please contact our Data Protection team.

As a data subject under the Personal Data Protection Act 2010 and applicable international frameworks, you hold the following rights in relation to your personal data held by luckybet88. These rights may be subject to certain legal exceptions and conditions:

To exercise any of these rights, submit a written request to [email protected] clearly identifying yourself and the right you wish to exercise. We may request proof of identity before processing your request. We aim to respond substantively within 30 calendar days. Where a request is complex or numerous, this period may be extended by a further 60 days with prior notification to you.

The luckybet88 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 21. Age verification is a mandatory component of our KYC process.

luckybet88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or regulatory guidance. Where amendments are material — meaning they substantively affect how we process your personal data or the rights available to you — we will provide reasonable advance notice via email to your registered address or via a prominent notice on the Platform.

The date of the most recent revision is displayed at the top of this Policy. We encourage you to review the Policy periodically. Your continued use of the Platform following the publication of a revised Policy constitutes acceptance of the updated terms, to the extent permitted by applicable law.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which luckybet88 processes your personal data, please contact our Data Protection team. All privacy enquiries are handled confidentially in English and are responded to within the timeframes set out in Section 12.