Lucky99 takes your data privacy seriously. This document clearly explains how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Our Privacy Commitment
Lucky99 does not sell, rent, or share members' personal data with third parties for marketing purposes. Your data is used only for the purposes clearly stated in this policy and with your consent.
The core principles that guide how Lucky99 handles the personal data of Malaysian members.
Lucky99 collects only the data strictly necessary for platform operations, identity verification (KYC), and legal compliance. We do not collect data that is irrelevant or unnecessary.
Lucky99 does not sell, rent, or transfer members' personal data to any third party for marketing or commercial purposes. Your data remains under the control of Lucky99 and a limited number of operational partners.
All data transmitted between your device and Lucky99's servers is encrypted using 256-bit SSL technology — the same security standard used by major Malaysian banks such as Maybank and CIMB.
You have the right to access, correct, delete, and export your personal data from Lucky99 at any time. Personal data requests are processed within 14 business days.
Lucky99's Privacy Policy is designed and implemented in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We comply with all applicable local legal requirements relating to personal data protection.
In the event of any data security breach affecting your personal information, Lucky99 will notify you within the timeframe required by law and take immediate remedial action.
Welcome to Lucky99's Privacy Policy. This document explains in detail how Lucky99 (hereinafter referred to as "we" or "Lucky99") collects, uses, discloses, and protects your personal information when you use our platform at lucky99.express. We encourage you to read this document carefully, as it contains important information about your privacy rights as a Lucky99 platform user in Malaysia. By registering for or using the Lucky99 platform, you agree to the collection and use of your information as described in this Privacy Policy.
Categories of data collected by lucky99 when you use the platform
Lucky99 collects various types of personal information from our members for legitimate purposes that are necessary for platform operations. We only collect data that is genuinely required — nothing beyond that. Below are the categories of information we may collect:
Account Registration Information:
Identity Verification (KYC) Information:
Financial Information:
Technical Information (collected automatically):
Important Note: Lucky99 never collects credit or debit card information directly. All card payments are processed by authorised, PCI-DSS compliant third-party payment processors. Lucky99 only receives transaction confirmation records — never full card numbers.
Legitimate purposes for which members' personal information is used
Lucky99 uses collected personal data solely for legitimate, necessary purposes directly related to the operation of the platform. We do not use your data for purposes you would not reasonably expect, or for anything unrelated to the services you use.
Primary purposes of data use:
Marketing communications:
Lucky99 may send promotional emails or SMS messages about bonus offers, new games, and special promotions to members who have consented to receive such communications during registration or subsequently through their account settings. You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or through the notification settings in your lucky99 account.
Lucky99 does not use your personal data to make automated decisions that materially affect your rights without human intervention, except for automated fraud detection systems operated under the oversight of our security team.
Who may receive your data and under what circumstances
Lucky99 does not sell or rent members' personal data to any third party. However, in the course of normal platform operations, Lucky99 may need to share certain information with a limited number of responsible parties as follows:
| Recipient Categories | Information Shared | Purpose |
|---|---|---|
| Payment Processors Touch 'n Go, GrabPay, FPX, and more. |
Transaction data required to process payments | Deposit and withdrawal processing |
| KYC Provider Identity verification provider |
Copy of identity document and biometric data (where applicable) | Identity verification and AML compliance |
| Game Providers Live casino studios, slots providers |
Fully anonymised game session ID | Game delivery and technical solutions |
| Cloud Infrastructure Providers Secure data hosting and storage |
Data stored on the Lucky99 platform | Secure data storage and processing |
| Malaysian Authorities PDRM, BNM, and other statutory bodies |
Legally requested data | Compliance with Malaysian court orders and legislation |
All third-party vendors working with Lucky99 are required to sign strict data protection agreements and may only use shared data for the stated purposes. Lucky99 conducts periodic reviews of all partners to ensure ongoing compliance with our privacy standards.
International Data Transfers: Where data needs to be processed outside Malaysia (for example, by international cloud or software providers), lucky99 ensures that protection equivalent to Malaysia's PDPA standards is upheld through valid data transfer agreements and appropriate safeguard mechanisms.
How Lucky99 stores and protects your personal information
Lucky99 invests seriously in data security infrastructure to ensure our members' personal information is continuously protected against unauthorised access, disclosure, alteration, or destruction.
Lucky99 technical security measures:
Data retention period:
Lucky99 retains members' personal data for as long as necessary for the purposes outlined in this policy, or for any period required by Malaysian law. Generally:
While Lucky99 takes all reasonable technical measures to protect your data, no security system is completely impenetrable. Lucky99 encourages members to play their part in securing their accounts by using strong passwords, keeping login credentials private, and reporting any suspicious activity to us promptly.
How Lucky99 uses cookies to enhance your experience
Lucky99 uses cookies and similar tracking technologies to enhance platform functionality, analyse usage patterns, and deliver a more personalised experience to each member. Cookies are small text files stored on your device by your web browser.
| Cookie Type | Purpose | Duration |
|---|---|---|
Session Cookies & Authentication |
Maintaining your login session and ensuring account security. Required for the platform to function. | Until sign-out |
Preference Cookies |
Saving your language settings, theme, and display preferences. | 12 months |
Performance Cookies |
Collecting information on how you use the platform to help us improve our services. | 24 months |
Marketing Cookies |
Used to evaluate the effectiveness of lucky99 promotional campaigns. Only activated with your consent. | 30 days |
You can manage cookie settings through your web browser. Most browsers allow you to view, delete, or block cookies. Please note, however, that blocking essential cookies may affect certain functions of the Lucky99 platform, including your login session and preference settings.
No Cross-Site Tracking: Lucky99 does not use tracking technologies to monitor your activity on other websites outside the lucky99.express platform. Our tracking is strictly limited to your usage within the Lucky99 platform only.
Full control you have over your personal information at Lucky99
As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal information held by Lucky99. Lucky99 respects and facilitates the exercise of these rights.
Special security measures for your transaction and payment information
As Lucky99 operates a platform involving financial transactions, we apply additional security measures to protect members' financial data — above and beyond standard data protection requirements.
All financial transactions on Lucky99 — including deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks, and other Malaysian banks) — are processed through fully encrypted channels. Transaction records are stored in a strictly controlled environment with multi-layered access controls.
For AML (Anti-Money Laundering) compliance as required by Bank Negara Malaysia, Lucky99 retains financial transaction records for the period prescribed by law. These records may only be disclosed to the relevant Malaysian authorities pursuant to a court order or a lawful law enforcement request.
Segregation of Funds: Funds deposited by Lucky99 members are held in accounts kept entirely separate from the company's operational accounts. This ensures your account balance is always protected and available for withdrawal, independent of Lucky99's operational financial position. This is Lucky99's commitment to the financial integrity of our members.
Lucky99 conducts real-time transaction monitoring to detect unusual patterns that may indicate fraudulent activity or money laundering. If a transaction is flagged for review, our compliance team may reach out to you for additional verification before processing a withdrawal. This is done to protect you, not to obstruct legitimate withdrawals.
Lucky99's zero-tolerance policy on access by minors
Lucky99 maintains a strict zero-tolerance policy against the use of the platform by individuals under the age of 21. We do not knowingly collect personal data from individuals known to be under 21 years of age.
Should Lucky99 discover that we have collected personal data from a minor without proper verification, we will take immediate steps to:
Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms such as Lucky99. If you suspect that someone under your care has registered an account on Lucky99, please contact our customer support immediately.
How lucky99 notifies you of privacy policy updates
Lucky99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new Malaysian legal requirements, or improvements to how we operate. Any changes will take effect upon publication of the updated version on this page.
For material and significant changes to how we use your personal data, Lucky99 will provide advance notice through:
Your continued use of the Lucky99 platform after any Privacy Policy changes take effect will be considered your acceptance of the amended policy. If you do not agree with the changes, you have the right to close your account and request deletion of your personal data in accordance with the procedure set out in Section 6.
Periodic Reviews: Lucky99 recommends reviewing this Privacy Policy from time to time to stay informed of our latest privacy practices. The date of the most recent update is always displayed at the top of this document for your reference.
How to contact us for any data privacy-related enquiries
If you have any questions, concerns, or requests relating to Lucky99's Privacy Policy or how we handle your personal data, you may contact our Privacy Officer through the following channels:
Lucky99 is committed to acknowledging privacy-related requests within 3 business days and providing a full response within 14 business days. For more complex requests, additional time may be required — we will notify you if a longer processing period is needed.
Complaints to Authorities: If you are not satisfied with how Lucky99 has handled your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010 (PDPA). That said, we always encourage you to contact Lucky99 first so we can resolve any issue directly with you.
As a Lucky99 member, you hold these rights over your personal data.
You have the right to request a copy of the personal data Lucky99 holds about you at any time.
You have the right to request correction of any inaccurate or outdated personal data held in Lucky99's records.
You may request that Lucky99 delete your personal data when it is no longer needed or when you withdraw your consent.
You may object to the processing of your personal data for direct marketing purposes at any time, without needing to provide a reason.
You have the right to receive your personal data in a machine-readable format for transfer to another service provider.
You may request that Lucky99 restrict the processing of your data in certain situations, such as while a dispute over data accuracy is being resolved.
Where data processing is based on your consent, you may withdraw that consent at any time through your account settings.
You have the right to lodge a complaint with the Malaysian PDPA Commissioner if you are dissatisfied with how Lucky99 has handled your data.
To exercise any of the rights above, please contact us at privacy@lucky99.express. All requests are processed within 14 working days.
Answers to the most frequently asked questions from Lucky99 members about data privacy.
This Privacy Policy should be read together with Terms & Conditions Lucky99, which sets out the overall terms of use for the platform, as well as the Responsible Gaming that provide information and resources for safe and responsible play at lucky99.