Privacy Policy myluck –
Protection of Your Personal Data

This Privacy Policy is issued by myluck ("us", "Platform" or "MyLuck") and applies to all users who register, browse or use our services at myluck.vu, including all gaming products, customer service and related communication channels.

We operate in accordance with internationally recognised data protection principles, including those set out in Malaysia's Personal Data Protection Act 2010 (PDPA). Our commitment is to ensure every piece of data you entrust to us is handled with full integrity, transparency and accountability.

By using the MyLuck platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please stop using the platform and contact us to request deletion of your data.

We only collect data that is genuinely necessary to deliver a quality, secure service that meets regulatory requirements. Below is a summary of the types of data we collect and how they are gathered:

We does not collect credit or debit card information directly — all payments are processed through PCI-DSS compliant payment gateways and we do not store full card numbers in our systems.

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for purposes unrelated to the services you use, and we do not sell your data to third parties for marketing purposes.

• Account management: Creating, verifying, and maintaining your account securely.
• Transaction processing: Processing deposits, withdrawals, and bonus payments accurately and promptly.
• Regulatory compliance (KYC/AML): Verifying identity to meet anti-money laundering and age verification legal requirements.
• Platform security: Detecting and preventing fraud, unauthorized access, and suspicious activity.
• Customer support: Resolving complaints, responding to inquiries, and improving service quality.
• Experience personalization: Tailoring game recommendations and promotional offers based on your preferences.
• Analytics & improvement: Understanding how the platform is used to continually improve performance and user experience.
• Service communications: Sending important notices regarding your account, security, and platform changes.

Myluck does not share your personal data with external parties for commercial purposes without your consent. However, there are limited situations where data must be shared for legitimate operational purposes:

• Game service providers: Limited account information is shared with licensed game providers to enable seamless game integration.
• Payment gateway: Transaction data is shared with licensed payment processors (DuitNow, FPX, Touch 'n Go, etc.) solely to process your transactions.
• Technology service providers: Cloud infrastructure, cybersecurity, and analytics providers bound by strict confidentiality agreements.
• Legal authorities: When required by law, court order or a competent regulatory authority.
• Fraud prevention: Minimum data may be shared with recognised fraud prevention agencies to protect your interests and the platform.

All third parties we work with are bound by strict data protection agreements and are only permitted to process your data for specified purposes.

Your personal data is stored on secure servers using enterprise-grade cloud infrastructure that complies with international security standards. All data is protected with AES-256 encryption at rest and SSL/TLS encryption in transit.

The technical security measures we implement include:

• End-to-end encryption for all sensitive data communications
• Role-based access control — only authorized personnel can access user data
• Two-factor authentication (2FA) for all administrative access
• Real-time threat monitoring and intrusion detection systems (IDS)
• Regular independent security audits by third-party cybersecurity firms
• Encrypted data backups at geographically separate locations

Data retention period: Active account data is retained for as long as your account remains active. Following account closure, your data is kept for a minimum of 5 years for AML/KYC legal compliance purposes, after which it will be permanently deleted or anonymized.

Myluck uses cookies and similar tracking technologies to ensure the platform functions properly and to provide you with a better experience. Cookies are small text files stored on your device by your web browser.

We use four main types of cookies:

• Essential Cookies: Required for core platform functions such as login, session management and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how the platform is used (most visited pages, time spent, etc.) for improvement purposes.
• Functional Cookies: Remembering your preferences such as language, display settings, and game choices to personalize your experience.
• Analytics Cookies: Helping us understand usage patterns in aggregate and anonymized form for platform improvement purposes.

You can manage cookie settings through your browser settings. However, disabling essential cookies may affect platform functionality. Continued use of the MyLuck platform is considered consent to the use of cookies as described above.

As a MyLuck platform user, you have the following rights regarding your personal data, which you may exercise at any time by contacting our support team:

MyLuck Platform is not designed for and does not accept registrations from individuals under 18 years of age. We take child protection extremely seriously and enforce strict age verification during the registration and KYC process.

Should we find that personal data belonging to underage individuals has been collected unintentionally, we will immediately take the following actions:

• Suspending the relevant account immediately
• Deleting all related data as quickly as legally permitted
• Returning all funds to the original source
• Reporting the incident to the relevant authorities where required

If you as a parent or guardian believe your child may have registered on our platform, please contact our support team immediately at [email protected].

As an online platform operating internationally, some of your personal data may be stored or processed on servers located outside Malaysia. This includes cloud infrastructure used for platform operations and support services.

In all cases of cross-border data transfers, we ensure:

• The destination country or region has a level of data protection equivalent to or higher than Malaysia.
• Data transfer agreements complying with international data protection standards are in place before any transfer takes place.
• All infrastructure providers are contractually obligated to protect your data in accordance with the standards we have set.
• Data is always protected with strong encryption during cross-border transfers.

Myluck reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or technology developments. Any significant amendments will be communicated to you via your registered email or a prominent notice on the platform at least 14 days before taking effect.

The "Updated" date at the top of this document indicates when this Privacy Policy was last reviewed. We encourage you to review this policy periodically.

If you have any questions, concerns, or wish to exercise your privacy rights, please contact us through the following channels:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the MyLuck platform