Privacy Policy mr luck Malaysia

Welcome to the Privacy Policy mr luck. This document is part of our commitment to operating with full transparency and responsibility in managing your personal data.

This policy applies to all users who access or use the mr luck through the mrluck.biz website, mobile app, or any other relevant digital channel. This covers all personal information you provide directly, as well as data collected automatically while you use our services.

By registering for or using the platform mr luck, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us for assistance with closing your account.

mr luck collects various types of personal information to enable us to provide you with a safe, fair, and high-quality service. The following are the categories of information we collect:

We no collect credit card information directly — all payment processing is handled by licensed, PCI-DSS compliant third-party payment processors.

mr luck using your personal information only for legitimate purposes that are directly related to the delivery of our services:

• Account Management: Creating and managing your account, verifying your identity, and processing financial transactions.
• Service Provision: Enabling you to access all games, Sports Betting, virtual sports, and all other features on the mr luck platform.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and unauthorised access.
• Legal Compliance (KYC/AML): Meeting the Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations required under Malaysian law.
• Service Communications: Sending important notifications regarding your account, transactions, and policy updates.
• Marketing (with consent): Sending promotional offers, bonuses, and new game updates — only where you have given your consent.
• Platform Enhancements: Analysing usage patterns to improve the user experience and develop new features.
• Customer Support: Processing and resolving your enquiries, complaints, and support requests.

mr luck never sells your personal data to any third party. However, in certain limited circumstances, we may need to share your information with the following parties:

• Payment Service Providers: Licensed payment processors (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX) to handle your financial transactions.
• Game Providers: Gaming software companies (slots and Live Casino providers) that need to verify player status for game control purposes.
• Authority: Malaysian law enforcement agencies or regulatory bodies where required by a court order or applicable law.
• Technical Services: Cloud infrastructure and cybersecurity providers that help us operate the platform — bound by strict confidentiality agreements.

All third parties who receive your data are required to meet data protection standards equivalent to or higher than our own. We do not share your information for third-party advertising purposes.

mr luck implementing a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, or misuse:

• 256-bit SSL Encryption: All data transmitted between your browser and our platform is fully encrypted.
• Secure Password Storage: Passwords are stored as salted hashes — no one, including mr luck staff, is able to view your password.
• Two-Factor Authentication (2FA): 2FA is available on all accounts for an added layer of protection.
• 24/7 Activity Monitoring: An intrusion detection system (IDS) monitors all platform activity in real time.
• Regular Security Audits: Penetration testing and security audits are conducted regularly by independent third parties.
• Internal Access Controls: Only authorised personnel may access user data, and solely for legitimate operational purposes.

mr luck use cookies and similar tracking technologies to enhance your experience on our platform. Here are the types of cookies we use:

You can manage your cookie preferences through your account settings or browser settings. Disabling certain cookies may affect the functionality of some platform features.

As a user of the platform mr luck, you hold the following rights regarding your personal data under the Malaysian Personal Data Protection Act 2010:

To exercise any of the rights above, please contact us at privacy@mrluck.biz. We will process your request within 30 working days. Some requests may be subject to identity verification before they can be fulfilled.

mr luck retaining your personal data only for as long as is necessary for the purposes set out in this policy, or as required by applicable law in Malaysia.

• Active Account Data: For the duration your account is active, plus 5 years after account closure (as required by Malaysian AML and financial legislation).
• Financial Transaction Records: Minimum 7 years from the transaction date, in accordance with Malaysian tax law requirements.
• Support Communication Records: 3 years from the date of your last interaction.
• Technical Log Data: 12 months from the date of the record.
• Marketing Data: Until you withdraw your consent or request deletion.

Once the retention period expires, your data will be securely deleted or fully anonymised so that it can no longer be linked to your identity.

As a platform operating on global cloud infrastructure, your data may be processed or stored on servers located outside Malaysia. In all such cases, mr luck ensure that:

• The destination country has data protection laws that are equivalent to or stricter than those of Malaysia.
• Lawful data transfer agreements (such as Standard Contractual Clauses) have been put in place.
• Recipient service providers are bound by strict data protection obligations.

We do not transfer your data to countries that lack an adequate data protection framework without appropriate contractual safeguards in place.

Platform mr luck is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal information from individuals under the age of 18.

Should we discover that we have collected personal information from an individual under the age of 18 without appropriate age verification, we will take immediate steps to delete that information and close the associated account.

mr luck reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new technologies, or updated legal requirements.

If we make material changes to this policy, we will:

• Sending email notifications to all registered email addresses at least 14 days before the amendments take effect.
• A prominent notice will be displayed on the platform's main page for 30 days.
• Updating the "Last Updated" date at the top of this document.

Continued use of the platform mr luck after the amendments take effect will be considered your acceptance of the revised policy.

If you have any questions or concerns, or wish to exercise your privacy rights, please contact our Data Protection Officer (DPO) mr luck:

• Privacy Email: privacy@mrluck.biz
• General Support Email: support@mrluck.biz
• Live Chat: Available 24/7 on the platform
• Response Time: Within 3 business days (email) / under 3 minutes (live chat)

We are committed to handling every privacy-related enquiry seriously, professionally, and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection.