Official Privacy Policy

Lucky99 Privacy Policy – Member Personal Data Protection

Lucky99 is committed to protecting the privacy and data security of every member. This policy transparently explains how we collect, use, store, and safeguard your information in accordance with applicable data protection laws in Malaysia.

Updated: 1 January 2026
Bahasa Melayu
Malaysia
256-bit SSL Encryption
Malaysia PDPA Compliant
No Data Sharing Without Permission
Data Access Rights Guaranteed

Lucky99's Six Privacy Principles

Your privacy is more than a written policy – it is a genuine commitment embedded in every aspect of lucky99's platform operations.

Purpose-Driven Data Collection

Lucky99 only collects the personal data genuinely necessary to provide its services, process transactions, and fulfil legal obligations. We do not collect excessive or irrelevant data beyond the platform's intended purposes.

High-Level Encryption

All members' personal data and financial information are protected using 256-bit SSL encryption technology. Data stored in our databases also employs multi-layered encryption to prevent unauthorized access.

No Disclosure Without Consent

Lucky99 will not sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent. Your data belongs to you, and we fully respect that right.

Right of Access and Correction

As a lucky99 member, you have the right to access the personal data we hold about you, request corrections to inaccurate information, and, under certain circumstances, request the deletion of your data in accordance with applicable laws.

Defined Retention Periods

Lucky99 sets clear and reasonable data retention periods. Data that is no longer required will be securely deleted or anonymized, unless a longer retention period is required by law.

Data Breach Notification

In the event of any data breach affecting your personal information, lucky99 is committed to notifying the relevant authorities and affected members within the timeframe required by law.


What Data Does lucky99 Collect?

Lucky99 collects various categories of personal data depending on how you use the platform. Below is a clear overview of the data we collect and its purpose.

Identity Data
Full name ID card number Date of birth Gender Nationality Passport copy

Used for KYC verification and confirming member eligibility.

Contact Data
Email Address Phone number Residential Address Postcode State

Used for service communications and address verification.

Financial Data
Bank account number Bank name Deposit records Withdrawal records Transaction history

Used to process payments and comply with AML requirements.

Game Activity Data
Betting records Game history Wins and losses Play time Game preferences

Used for service improvement and responsible gaming.

Technical Data
IP Address Device type Operating system Browser type Access logs Cookies

Used for account security and fraud detection.

Communication Data
Live chat records Support ticket Emails Sent Feedback Complaints

Used to improve lucky99 customer service.


This Privacy Policy describes lucky99's data protection practices and your rights as a user of our platform in Malaysia. By using the lucky99 platform, you agree to the terms set out in this policy. Please read carefully before registering.

01 Introduction and Scope

Lucky99 values the privacy of every individual who uses our platform. This Privacy Policy is designed to clearly and transparently explain how lucky99 handles your personal data – from how it is collected, to how it is protected, and when necessary, how it is deleted.

This policy applies to all users of the lucky99 platform, including unregistered website visitors, active registered members, and former members whose accounts have been closed. It covers all lucky99 digital platforms, including the official website and mobile app for Android and iOS.

Lucky99 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices. We appoint a Data Protection Officer responsible for ensuring ongoing compliance with all relevant legal requirements.

02 Data Collection Methods

Lucky99 collects your personal data through several different channels, depending on how you interact with our platform:

2.1 Data You Provide Directly

This includes information you provide directly when registering a new account, during the KYC verification process, when submitting a deposit or withdrawal request, when contacting our customer support team, or when participating in any survey or promotion hosted by lucky99.

2.2 Data Collected Automatically

When you browse the lucky99 website or use the app, our systems automatically record certain technical information such as your IP address, device details, browser type, pages visited, session time and duration, and app performance diagnostic data. This data is collected for security, fraud detection, and user experience improvement purposes.

2.3 Data from Trusted Third Parties

In some circumstances, lucky99 may receive your personal data from payment service providers we work with, identity verification bodies we use for the KYC process, and relevant credit or anti-money laundering (AML) information sources. All such third parties are bound by strict data protection agreements with lucky99.

Lucky99 has never purchased or acquired personal data lists from third-party data brokers for marketing purposes. All data we hold is collected lawfully through your direct interaction with our platform or through approved service partners.

03 Data Usage Purpose

Lucky99 uses collected personal data only for legitimate, clearly stated purposes. We will not use your data for purposes unrelated to the services you use without first obtaining your additional consent.

Purpose of Use Types of Data Used Legal Basis
Account registration and management Identity, contact details Contract performance
KYC and age verification Identity, official documents Legal obligation
Deposit and withdrawal processing Financial, identity Contract performance
Fraud detection and security Technical, transactions Legitimate interest
Customer support Communication, identity Contract performance
AML and regulatory compliance Financial, identity Legal obligation
Marketing and promotions (with consent) Contact details, game preferences Consent
Platform improvement and analytics Technical, game activity Legitimate interest

04 Third-Party Sharing

Lucky99 does not sell your personal data. However, in the course of operating the platform, we may need to share your personal data with certain categories of third parties that have undergone our security assessment process:

  • Payment Service Provider – to process deposits and withdrawals via FPX, DuitNow, Touch 'n Go, Boost, and local Malaysian banks.
  • Game Software Providers – to provide casino games, bingo, sports betting, and other games within the lucky99 platform, where minimum data is required for game functionality.
  • KYC Service Provider – to verify member identities and comply with legal requirements related to anti-money laundering.
  • Cloud Infrastructure Provider – to store and process data securely using server services hosted at locations that comply with international security standards.
  • Regulatory Bodies and Authorities – when required by law, court order, or directive from a recognized regulatory body.

All third parties that receive personal data from lucky99 are bound by strict Data Processing Agreements. They are permitted to use that data only for the agreed purposes and may not use it for any other purpose or share it with others without lucky99's explicit consent.

05 Cookie Usage

Lucky99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the lucky99 website.

5.1 Types of Cookies Used

  • Essential Cookies – Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies – Collect information about how you use the platform to help us identify technical issues and improve overall performance. Data is collected anonymously.
  • Functional Cookies – Store your preferences such as display settings, favourite games, and other personal choices to deliver a more personalized experience.
  • Analytics Cookies – Help us understand platform usage patterns to make better-informed improvement decisions. Analytical data does not contain information that can personally identify you.

You can manage your cookie preferences through your browser settings at any time. However, disabling certain cookies may affect the functionality and your experience on the lucky99 platform.

06 Data Security

The security of your personal data is lucky99's top priority. We implement multiple layers of technical and organisational protection to ensure your data remains safe at all times:

256-bit SSL Encryption
All data transmitted between your device and lucky99's servers is encrypted using the latest TLS protocol, ensuring no third party can intercept or read your data in transit.
Database Encryption
Sensitive data such as banking information and identity documents is stored in encrypted form in our databases. Even in the event of unauthorised access, the data cannot be read without the correct encryption key.
Two-Factor Authentication (2FA)
lucky99 provides two-factor authentication to protect your account from unauthorized access. We encourage all members to enable this additional security feature.
24/7 Continuous Monitoring
The lucky99 security team monitors our systems around the clock to detect any suspicious activity or potential security threats that could affect member data.
Internal Access Controls
Access to member personal data within lucky99 is restricted to staff who genuinely require it to perform their duties, based on the principle of least privilege.
Regular Security Audits
lucky99 conducts regular security audits and penetration testing with independent security experts to identify and address any system vulnerabilities before they can be exploited.

07 Your Rights

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have specific rights regarding the personal data held by lucky99. lucky99 fully respects and supports the exercise of these rights.

Your Rights Description Response Time
Right of Access You have the right to request a copy of the personal data we hold about you. 30 working days
Right to Correction You have the right to request correction of inaccurate or incomplete data. 14 working days
Right to Erasure You may request deletion of your data under circumstances permitted by law. 30 working days
Right to Object You have the right to object to the processing of your data for direct marketing purposes. 7 working days
Right to Withdraw Consent You may withdraw any consent given at any time without prejudice. Immediately
Right to Complain You have the right to lodge a complaint with the Personal Data Protection Department of Malaysia if you are not satisfied. —

To exercise any of the rights above, please contact the lucky99 Data Protection team by email at [email protected] with the subject line "Personal Data Rights Request". Please state the type of request and include sufficient information for us to verify your identity before processing it.

08 Cross-Border Data Transfers

In certain operational situations, your personal data may be transferred to, stored in, or processed in countries outside Malaysia. This may occur when we use international cloud infrastructure providers or collaborate with global game software vendors.

Lucky99 ensures that all cross-border data transfers are carried out with adequate safeguards, including confirming that the recipient country offers a level of data protection equivalent to or higher than Malaysia's, or by implementing appropriate contractual protection mechanisms such as Standard Contractual Clauses.

Lucky99 prioritizes working with service providers that store data within the Asia-Pacific region where possible, to minimize risks associated with cross-border data transfers and ensure easier compliance with local laws.

09 Children's Privacy

The lucky99 platform is an adult entertainment service accessible only to individuals aged 18 and above. lucky99 does not intentionally collect personal data from anyone under the age of 18.

If we discover or are notified that we have inadvertently collected data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question. Parents or guardians who have reason to believe their child has registered on lucky99 should contact us immediately.

10 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how lucky99 handles your personal data, please do not hesitate to contact us.

The lucky99 Data Protection Team can be reached by email at [email protected]. For general enquiries, you may also visit the Frequently Asked Questions (FAQ) us. We will endeavour to respond to every enquiry within two business days.

This Privacy Policy may be updated from time to time to reflect changes in our business practices, legal requirements, or new services we offer. Any material changes will be communicated to members via email or a prominent notice on the lucky99 platform. The "Updated" date at the top of this policy will always reflect the latest version in effect.

By continuing to use the lucky99 platform after any changes to this Privacy Policy, you are deemed to have accepted and agreed to the updated terms. We encourage you to review this page periodically to stay informed about how we protect your privacy.


Lucky99 Privacy FAQ

Answers to the most frequently asked questions by lucky99 members regarding personal data protection and our platform's privacy policy.

Absolutely not. lucky99 has never and will never sell, rent, or trade members' personal data to any advertiser or third-party data broker. Your data is used solely to provide platform services, process financial transactions, and meet applicable legal obligations.

You may submit a data access request by emailing the lucky99 Data Protection team at [email protected] with the subject line "Personal Data Access Request". Please include your full name, account username, and registered phone number for identity verification. lucky99 will process your request within 30 working days.

Data retention periods depend on the type of data and its collection purpose. Generally, active account data is retained for as long as your account remains active. Following account closure, financial transaction records and KYC data are retained for a minimum of seven years to meet anti-money laundering legal requirements. Technical data and activity logs are typically retained for 12 months.

You have the right to request deletion of your personal data under certain circumstances. However, lucky99 may need to retain certain data to fulfil legal obligations, resolve ongoing disputes, or enforce existing agreements. A full data deletion request can typically only be processed after all legal obligations related to the account have been settled.

If you suspect unauthorized access to your lucky99 account, contact our support team immediately via live chat or email at [email protected]. Change your password right away and enable two-factor authentication (2FA) if you have not already done so. The lucky99 security team will investigate and take the appropriate steps to protect your account.

lucky99 may use your game activity data to tailor promotional offers and game recommendations more relevant to your interests on the platform. This is done solely to enhance your experience as a lucky99 member. If you do not wish to receive personalized marketing communications, you may withdraw that consent at any time through your account settings or by contacting our support team.

Your Privacy Is Protected

Play Safe and Confident at lucky99

Your personal data is protected with the latest encryption technology and strict privacy policies. Register now and enjoy a safe, fair, and responsible online gaming experience with lucky99.

256-bit SSL
PDPA Compliant
No Data Sales
Bahasa Melayu