Myluck Privacy Policy – Our Commitment to Protecting Your Personal Data

1 Introduction & Scope of This Policy

Myluck (hereinafter referred to as "we", "our platform" or "myluck") places great importance on the privacy of every user who uses our services. This Privacy Policy explains in detail how we manage your personal information from the moment you first visit our website through the entire duration of your active membership.

This policy applies to all users of the myluck platform, including website visitors, registered account holders and active members using our betting services. It covers all channels of our platform — website, Android mobile app, iOS PWA version and any related services we provide.

2 Types of Personal Data We Collect

We collect your personal data through several means — directly when you register or use the platform, and automatically through standard tracking technologies. The following are the categories of data we collect:

Data you provide directly:

• Full name, national identity card number (MyKad) and date of birth upon registration and KYC verification.
• Email address and phone number for communication and account verification purposes.
• Full address for residency verification (if requested during KYC).
• Bank account or e-wallet details for deposit and withdrawal purposes.
• Images of identification documents and verification selfies for the KYC process.

Data collected automatically:

• IP address and approximate location information based on IP.
• Device type, operating system and browser version used.
• Usage activity logs including pages visited, session duration and access frequency.
• Platform performance technical data for system improvement purposes.

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for any purpose other than those stated here:

• Account management: Creating, verifying and managing your myluck account, including the mandatory KYC process.
• Transaction processing: Processing deposits and withdrawals securely through your preferred payment method.
• Platform security: Detecting and preventing fraud, hacking and suspicious activity that could compromise your account.
• Service communications: Sending important notifications about your account, transactions and security updates.
• Legal compliance: Meeting anti-money laundering (AML) and know your customer (KYC) regulatory requirements.
• Platform improvement: Analysing usage patterns in aggregate to improve the user experience.
• Responsible gaming: Monitoring wagering patterns to identify users who may need responsible gaming assistance.

4 Data Sharing with Third Parties

Myluck does not sell, rent or trade your personal data to any third party for marketing or commercial purposes. Data sharing only occurs in the following limited situations, and all third parties involved are required to comply with data protection standards equivalent to our own:

• Payment provider: Transaction data that must be shared with banks, FPX or e-wallet providers to process your deposits and withdrawals.
• KYC verification provider: Identity documents are shared with certified third-party verification services to process your identity verification.
• Statutory authority: Information required by law or a valid court order — and only to the extent required by law.
• Technical infrastructure provider: Server and CDN providers that manage the platform's technical infrastructure, subject to strict confidentiality agreements.

5 Security & Data Protection

Protecting your data is one of the top priorities of the myluck technical team. We continuously invest in security infrastructure to ensure your data is always protected against unauthorised access, breaches or misuse.

The technical security measures we implement include:

• 256-bit SSL encryption for all communications between your device and our servers.
• Passwords stored as bcrypt hashes — we never store passwords in plain text.
• Encryption of sensitive data such as bank account information at the database level.
• Strict internal access controls — only authorised staff may access user data, and every access is logged.
• Regular vulnerability scanning and penetration testing by independent security experts.
• Automatic hourly data backups to a geographically separate location.

While we take all reasonable measures, no online system can guarantee absolute 100% security. We encourage you to play your part by using a strong password and enabling two-factor authentication (2FA) on your account.

6 Cookies & Tracking Technologies

The myluck platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Cookies are small text files stored on your device by your web browser.

Types of cookies we use:

• Essential cookies: Required for basic platform functions such as login session management. Cannot be disabled without affecting platform functionality.
• Performance cookies: Gathering information on how users interact with the platform to help us identify areas for improvement.
• Functional cookies: Saving your preferences such as language, display settings and login details for ease of use.
• Security cookies: Used to detect suspicious login activity and protect your account from unauthorized access.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the myluck platform.

7 User Rights Relating to Personal Data

As a myluck platform user, you have certain rights regarding the personal data we hold. We respect and facilitate the exercise of these rights:

• Right of access: You may request a copy of the personal data we hold about you at any time.
• Right to rectification: You may request corrections to any inaccurate or outdated data via account settings or customer support.
• Right to erasure: You may request deletion of your personal data upon account closure, subject to legally required record retention obligations.
• Right to restriction: You may request that we restrict the processing of your data under certain circumstances.
• Right to object: You may object to the processing of your data for certain purposes unrelated to core services.

To exercise any of the above rights, contact the myluck customer support team via live chat on the platform. We will respond within 14 business days.

8 Child Data Protection

The myluck platform is exclusively for users aged 21 years and above. We do not intentionally collect, store or process any personal data of individuals under the age of 21.

If you believe we have inadvertently collected data from someone under the age of 21, please contact our team immediately via live chat on the platform and we will take immediate action to delete that data and close the relevant account.

9 Data Retention Period

We retain your personal data for as long as necessary for the purposes stated in this policy or as required by applicable law. Our data retention guidelines are as follows:

• Active account data: Retained for the duration your account is active and used for ongoing services.
• Financial transaction records: Retained for a minimum of 7 years in accordance with financial services legal requirements and AML compliance.
• KYC Documents: Retained for 5 years after account closure in accordance with international compliance standards.
• System & security logs: Retained for 2 years for fraud detection and security audit purposes.
• Support communication records: Retained for 2 years for reference and dispute resolution.

After the defined retention period, data will be securely deleted using methods that ensure it cannot be recovered.

10 Amendments to Privacy Policy

Myluck reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or platform improvements. Any material amendments will be communicated to you via in-platform notifications or email at least 14 days before they take effect.

The latest version of the Privacy Policy is always available on this page. The "Updated" date at the top of the page indicates the date of the current version. Continued use of the myluck platform after amendments take effect is considered your acceptance of the updated policy.