Official Privacy Policy

Your Privacy is Our Priority

mrluck takes our responsibility to protect the personal information of every member seriously. This Privacy Policy explains clearly and transparently how we collect, process and safeguard your data in line with international best practices for information protection.

Full Data Protection 256-bit SSL Encryption No Sharing Without Consent User Rights Guaranteed

Our Principles

Six Core Data Protection Principles of mrluck

Every decision we make regarding your data is guided by the following principles.

Full Transparency

We clearly state the purpose of every piece of data we collect. No hidden agenda — you know exactly why your information is needed before we process it.

Layered Security

Our systems are protected by industry-grade SSL encryption and continuously updated firewalls. Your data is stored in a secure, controlled server environment.

Data Collection Limits

We only collect information that is genuinely needed for platform operations. Irrelevant data is not collected, and data that is no longer needed is deleted.

User-Owned Control

You have the right to access, correct and request deletion of your personal data at any time. Your requests will be processed promptly through our support channels. 🔒

Controlled Sharing

Your data is not sold or shared with third parties for marketing purposes. Any sharing only takes place with operational partners bound by strict confidentiality agreements.

Regular Updates

This Privacy Policy is reviewed and updated regularly to ensure it stays relevant with changes in technology, legislation and global industry best practices. ✅

Official Document

Provisions of the Privacy Policy

Please read each of the following provisions carefully. By using the mrluck platform, you agree to the terms set out here.

Introduction and Scope of Policy

This Privacy Policy is issued by mrluck ("we", "platform" or "mrluck") and applies to all users who register an account, access or use any services provided through the website mrluck.one ("Website").

This policy explains in detail:

The types of personal information we collect from you
The data collection methods we use
The purpose and legal basis for data processing
How we protect your personal information
Your rights as a data subject
How to contact us regarding privacy matters

Important Note: Continued use of the mrluck platform after any changes to this Privacy Policy are published will be considered your acceptance of those changes. We encourage you to review this page from time to time.

Personal Information We Collect

During the account registration process and use of the platform, we collect various categories of personal information depending on the context of your interaction with us:

Identity and Account Information:

Full name as it appears on your official identification document
Identification card number (MyKad) or equivalent document for age and identity verification purposes
Date of birth — to ensure compliance with the minimum age requirement of 21 years
Email address and mobile phone number
Account username and password (passwords are stored in a hashed form that cannot be read)

Financial and Transaction Information:

E-wallet account details (Touch 'n Go eWallet, Boost, ShopeePay) used for deposits and withdrawals
Bank account number for transactions via DuitNow or FPX Online Banking
Crypto wallet address (for users transacting with USDT, BTC or ETH)
Deposit and withdrawal transaction history

Usage and Technical Information:

IP address and type of device used
Web browser data and operating system
Game activity and betting logs
Records of interactions with the customer support team
Cookie data and associated tracking technologies

Purpose and Legal Basis for Data Processing

Every piece of information we collect is processed based on a legitimate purpose and a solid legal basis. We do not process your data for purposes unrelated to platform operations without your explicit consent.

The main purposes for processing your data include:

Account Management: Creating, verifying and securely managing your member account
Transaction Processing: Processing deposits and withdrawals using your chosen payment method in under 1 hour for withdrawals
Legal Compliance: Meeting Know Your Customer (KYC) identity verification and Anti-Money Laundering (AML) requirements under our international licensing framework
Platform Security: Detecting and preventing fraud, unauthorised access and suspicious activity
Customer Support: Providing assistance via live chat and email 24 hours a day, 7 days a week
Responsible Gambling: Monitoring usage patterns to identify members who may need responsible gambling support
Service Improvement: Analysing aggregated usage patterns to improve the user experience and platform performance
Communications: Sending important account-related notices, policy updates and relevant promotional information (with your consent)

Usage Limits: Your personal information will not be used for profiling based on race, religion, political opinion or any protected characteristic. We operate on the principle of equal treatment for all members.

Sharing Information with Third Parties

Your privacy is something we uphold firmly. We do not sell, rent or disclose your personal information to third parties for their own marketing purposes. However, there are limited situations where data sharing is required for platform operations:

Payment Processors: Required transaction information is shared with payment service providers (such as FPX gateways, e-wallet processors and blockchain networks) solely to complete your financial transactions
Game Software Providers: Minimal game session data is shared with software providers to ensure games function smoothly
Legal Authorities: We will disclose information when required by court order, regulatory requirements or valid legal obligations
Infrastructure Providers: Technology service providers (hosting, cybersecurity, analytics) who are bound by strict data confidentiality agreements with us

Every third party that receives your data is required to comply with data protection standards equal to or higher than those we set internally.

Use of Cookies and Tracking Technologies

Our Website uses cookies and associated technologies to improve the user experience, analyse website performance and identify valid user sessions.

Categories of cookies we use:

Essential Cookies: Required for basic website functions such as login authentication and session security. These cookies cannot be disabled.
Functional Cookies: Store your preferences such as language, display settings and game preferences to make repeated use easier.
Analytics Cookies: Help us understand how users interact with the platform for continuous improvement. This data is collected in aggregate and without individual identification.

You can manage cookie settings through your web browser options. However, disabling essential cookies may affect overall platform functionality.

Data Retention Period

We retain your personal information for as long as your account is active or as long as necessary to provide services to you. Once an account is closed or upon your deletion request, we will delete or anonymise your personal data, with the following exception:

Financial transaction records that must be retained for the minimum period specified under international financial regulations for audit and compliance purposes
Information related to any fraud investigations or unresolved disputes
Data that must be retained to fulfil ongoing legal obligations

Right to Erasure: You have the right to request deletion of your personal data by contacting us at [email protected]. Requests will be assessed in accordance with applicable legal obligations.

Personal Information Security

We implement comprehensive technical and organisational measures to protect your personal information from unauthorised access, modification, disclosure or destruction:

Data encryption during transmission using 256-bit TLS/SSL protocols
Data encryption at rest for sensitive information
Strict role-based access controls for internal staff
Continuous security monitoring and intrusion detection systems
Regularly tested security incident recovery procedures
Mandatory data security training for all staff who handle personal data

While we take all reasonable precautions, no system can be guaranteed entirely risk-free. Should a security incident affecting your data occur, we will notify you without undue delay.

Cross-Border Data Transfers

As a platform operating under international licensing, some of your personal data may be processed or stored on servers located outside Malaysia. In all such cases, we ensure:

Equivalent protection is provided through legally binding data processing agreements
Data transfers occur only to countries or entities that offer an adequate level of privacy protection
All data transfers comply with internationally recognised data protection frameworks

Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy at any time to reflect changes in our operational practices, legal requirements or business needs. Any material changes will be communicated to members through:

A prominent notice on the website's main page for a period of at least 30 days before the changes take effect
Notification via email to the email address registered in your account
An in-platform notice during your next login session

The "Effective Date" at the top of this document will be updated each time changes are made. We encourage you to review this page periodically.

Your Rights

Your Data Protection Rights

As a mrluck member, you have the following rights that we are committed to upholding.

Right of Access

You have the right to obtain a copy of the personal information we hold about you at any time upon request.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request a correction at no additional charge.

Right to Erasure

You may request deletion of your personal data subject to applicable legal retention obligations.

Right to Restriction of Processing

You have the right to request restriction of the processing of your data under certain circumstances defined by privacy law.

Right to Data Portability

You may request your personal data in a machine-readable format for transfer to another party upon your request.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time without having to provide a reason. 🛡️

FAQ

Frequently Asked Privacy Questions

Answers to questions commonly asked by mrluck members about data protection and privacy.

During registration, we require your full name, MyKad number or valid identification document, date of birth (to verify the minimum age requirement of 21 years), an active email address and mobile phone number. Financial information such as e-wallet or bank account details is only required when you wish to make a deposit or withdrawal.

We do not sell or provide your personal data to third parties for their marketing purposes. Data sharing only takes place with payment processors to complete your transactions, game software providers for technical operations, and legal authorities when required by law. All third parties are bound by strict confidentiality agreements.

You can access and update most of your personal information through the profile settings page in your mrluck account. For broader requests such as access to full records or correction of specific data, please contact our support team via 24/7 live chat or email at [email protected]. We will process your request within a reasonable timeframe.

When you close your account, we will delete or anonymise your personal data that is no longer needed. However, financial transaction records and certain data may need to be retained for a period specified under international financial regulations for audit and legal compliance purposes. This data is not used for any other purpose once the account is closed.

All financial information is transmitted over 256-bit SSL encrypted connections. Your bank account and e-wallet details are stored using strong encryption. We do not store credit or debit card information directly — all card transactions are processed through payment gateways that comply with PCI DSS standards. Access to financial records is restricted to authorised personnel only and is continuously monitored.

Yes, you have the right to request deletion of your personal data. Contact us by email at [email protected] with the subject "Data Deletion Request" and include your account verification details. The request will be assessed in accordance with applicable legal obligations. If any data must be retained for legal reasons, we will clearly inform you of the reason and the retention period.

Questions? We're Here to Help

Contact Our Support Team

If you have any questions about this Privacy Policy or how we handle your data, our support team is available to assist in Malay and English, 24 hours a day.

Live Chat 24/7

Chat directly with our support team via live chat within the platform

Support Email

Send your privacy enquiry to [email protected] and we will respond promptly

Safe Communication

All privacy-related communications are handled confidentially and professionally

Full Terms

Also read our Terms & Conditions for a complete overview of your rights and responsibilities