Privacy Policy lucky99 — Member Personal Data Protection

Lucky99 respects the privacy of every member and is fully committed to protecting your personal data. This document transparently explains how we collect, use, store, and protect your information.

Updated: 1 January 2026 256-bit SSL PDPA Compliance

Important Note: By using the lucky99 platform, you agree to this Privacy Policy. Please read the entire document carefully. This Policy should be read together with the Terms and Conditions lucky99.

1Introduction

Lucky99 ("we", "the lucky99 platform") is an online entertainment platform operating under a valid licence and in compliance with applicable data protection laws. We respect the privacy rights of every individual who uses our services and are committed to ensuring your personal data is always handled with full integrity and transparency.

This Privacy Policy ("Policy") explains in detail how lucky99 collects, processes, stores, protects, and in certain circumstances shares your personal information. It covers all your interactions with our platform — from your first visit to the website through to active use of our casino, bingo, sports, fish shooting, and wagering services.

Lucky99 operates in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and industry-leading international data protection standards. We continuously strive to ensure our data management practices meet or exceed all applicable legal requirements.

lucky99 has never and will never sell members' personal data to any third party for marketing purposes. This is our absolute commitment to all members.

2Personal Data We Collect

Lucky99 only collects data that is strictly necessary to provide a safe, fair, and quality service. Data is collected through three primary methods:

A. Data You Provide Directly

  • Full name as shown on your identity card or passport
  • Date of birth and gender
  • Email address and phone number
  • Current residential address
  • Bank account or e-wallet details for financial transaction purposes
  • Copies of identity documents (for the KYC verification process)
  • Information you share when contacting customer support

B. Automatically Collected Data

  • IP address and approximate location information
  • Device type, operating system, and web browser type used
  • Gaming session records — including games played, session duration, and wagering amounts
  • Detailed financial transaction records — deposits, withdrawals, and fund movements
  • Login activity logs including access time and location
  • Cookie data and related tracking technologies (see Section 6)

C. Data from Trusted Third Parties

  • Identity verification information from approved KYC service providers
  • Transaction data from FPX, DuitNow, Touch 'n Go, and GrabPay payment processors
  • Exclusion list information from relevant regulatory bodies for compliance purposes

3How We Use Your Data

Every piece of data collected by lucky99 has a clear and legitimate purpose. We use your personal data for the following purposes:

Purpose of Use Data Type Legal Basis
Account registration and management Name, email, phone number, date of birth Contract performance
Identity verification (KYC) ID documents, personal information Legal obligations
Deposit & withdrawal processing Bank, e-wallet, and transaction information Contract performance
Fraud prevention & security IP, session, activity logs Legitimate interests
Customer Support All data related to reported issues Contract performance
Promotional communications (with consent) Email, phone Consent
Regulatory compliance & reporting Transaction data, identity Legal obligations

Lucky99 will not use your personal data for any purpose other than those stated above without obtaining your prior consent. If you have given consent to receive marketing communications, you may withdraw that consent at any time through your account settings.

4Data Sharing with Third Parties

Lucky99 does not share members' personal data broadly. Data sharing only occurs in limited and controlled situations as follows:

  • Payment Processors: Required transaction information is shared with FPX, DuitNow, Touch 'n Go eWallet, and GrabPay solely to securely process your deposits and withdrawals.
  • KYC Verification Providers: Identity documents are shared with approved and trusted identity verification service providers to meet anti-money laundering (AML) compliance requirements.
  • Game Providers: Minimal game session data is shared with third-party game software providers to ensure smooth and fair game functionality.
  • Regulatory Bodies and Law Enforcement Agencies: lucky99 will disclose data when required by law, court order, or directive from a competent authority under the PDPA and related legislation.
  • Professional Advisors: Law firms, accountants, and business advisors subject to strict confidentiality obligations.
All third parties that receive data from lucky99 are required to comply with data protection standards equal to or exceeding our own. Legally binding data processing agreements are signed with every third party involved.

5Data Storage & Security

Lucky99 continuously invests in high-grade security infrastructure to protect the personal data of all members. The following are the key security measures we employ:

  • 256-bit SSL Encryption: All data transmitted between your device and lucky99's servers is protected by banking-grade SSL encryption.
  • Data-at-Rest Encryption: Sensitive data stored in our databases — including financial information and identity documents — is encrypted using AES-256 algorithms.
  • Strict Access Control: Access to member personal data is restricted to staff who genuinely need it on a strict need-to-know basis, with multiple layers of multi-factor authentication.
  • Real-Time Monitoring: Active security monitoring systems running 24 hours a day, 7 days a week to detect and respond to any unauthorized access attempts.
  • Regular Security Audits: lucky99 conducts regular independent penetration testing and security audits by accredited cybersecurity firms.

Data Retention Period: lucky99 retains members' personal data for as long as necessary to fulfil the purpose of collection — typically for the duration of the active account plus 7 years after account closure to meet financial record-keeping and legal compliance requirements. Data that is no longer needed will be securely deleted or anonymised.

While we take all reasonable precautions, no security system can guarantee 100% absolute protection. We encourage members to also take responsibility for safeguarding their own login credentials.

6Cookies & Tracking Technologies

Lucky99 uses cookies and similar tracking technologies to enhance user experience, maintain platform security, and understand how members use our services. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions, language preferences, and security. These cookies cannot be disabled as they affect platform functionality.
  • Performance Cookies: Collects information on how pages are used to help us improve platform speed and usability. Data is collected anonymously.
  • Functional Cookies: Saves your preferences such as display settings, favourite game selections, and interface language to provide a more personalised experience.
  • Analytics Cookies: Used by our internal analytics tools to understand overall usage patterns for the purpose of continuous platform improvement.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality of some parts of the lucky99 platform.

7Your Rights as a Data Owner

Under Malaysia's PDPA and the data protection principles we adhere to, you hold the following rights regarding your personal data held by lucky99:

👁️
Right of Access

You have the right to obtain a copy of the personal data we hold about you at any time. Requests will be processed within 14 business days.

✏️
Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request a correction through your account settings or customer support.

🗑️
Right to Erasure

You may request data deletion under certain circumstances, subject to legal record-retention obligations binding upon us.

🚫
Right to Object

You have the right to object to data processing for direct marketing purposes. Objections will be enforced within 5 business days.

📦
Right to Portability

You may request your data in a machine-readable format for transfer to another platform as needed.

⏸️
Right to Restriction of Processing

Under certain circumstances, you may request that the processing of your data be temporarily restricted pending review or dispute.

To exercise any of the above rights, please contact the lucky99 customer support team via Live Chat or email at [email protected]. We will respond to all valid requests within 14 business days.

8Children's Data

Lucky99 is a platform exclusively for adults aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

If we find that data belonging to an underage individual has been collected unknowingly or in error, we will take immediate action to delete that data and close the relevant account without prior notice. lucky99 encourages parents and guardians to monitor their children's internet usage and ensure they do not access online gambling platforms.

If you become aware that a child has accessed the lucky99 platform, please contact us immediately at [email protected] so that we may take the appropriate action.

9Links to Third-Party Sites

The lucky99 platform may contain links or integrations to third-party services such as payment processors and game providers. Please note that lucky99 is not responsible for the privacy practices of any third-party website or service you access through those links.

Every third-party service we use has undergone a thorough security and privacy assessment by the lucky99 team. Nevertheless, we encourage you to read the individual privacy policy of each relevant third-party service provider.

10Privacy Policy Amendments

Lucky99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Members will be notified of any material amendments via their registered email or in-platform notification at least 7 days before the changes take effect.

The "Updated" date at the top of this page will always reflect the latest version of the Privacy Policy in effect. Your continued use of the lucky99 platform following any amendments taking effect will be considered your acceptance of the revised policy.

We encourage you to review this page regularly to stay informed about how lucky99 protects your personal data.

11Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how lucky99 handles your personal data, please contact us through the following channels:

  • Email: [email protected]
  • Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform
  • Response time: We are committed to responding to all privacy-related inquiries within 2 business days

If you believe that lucky99 has failed to meet our data protection obligations, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department or the relevant regulatory body in your country.

Your privacy is our priority. lucky99 is always ready to listen and address any concerns regarding your personal data with the utmost care and professionalism.

Why Your Data Is Safe with lucky99

We do not merely comply with the law — we go beyond the minimum standards to ensure your privacy is genuinely protected at all times.

Bank-Grade Encryption

All data transmitted through the lucky99 platform is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banks to safeguard their customers' financial transactions.

Data Is Never Sold to Anyone

Lucky99 has a clear and firm policy: members' personal data has never been and will never be sold, rented, or transferred to third-party advertisers or data brokers for commercial purposes.

Secure & Trusted KYC

Our KYC identity verification process is handled by approved service providers and is fully encrypted. Your identity documents are never stored in an unsecured or publicly accessible state.

24/7 Security Monitoring

Lucky99's cybersecurity systems operate around the clock to detect and counter any threats. Our security team responds promptly to any suspicious activity to protect your account.

Malaysia PDPA Compliance

Lucky99 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) and is regularly updated in line with the latest legislative amendments to ensure full protection for members in Malaysia.

Privacy Controls in Your Hands

Lucky99 members have full control over their personal data — from updating information and withdrawing marketing consent to requesting data deletion through an easy-to-use account settings panel.


Your Privacy Is Protected — Join lucky99 Today

Now you know how lucky99 protects your personal data. Join over 500,000 members who trust lucky99 as their top online entertainment platform in Malaysia.

By registering, you agree to the Terms and Conditions and Privacy Policy lucky99. For users aged 18 and above only.

Bahasa Melayu