In this Privacy Policy, the following terms have the meanings set out below:
luckin33 is the data controller responsible for the Personal Data processed under this Privacy Policy. For all data protection enquiries, please contact the luckin33 Data Protection team at [email protected].
luckin33 is committed to handling your Personal Data with integrity and in compliance with applicable international data protection standards, including those relevant to Malaysian data subjects under the Personal Data Protection Act 2010 (PDPA) where applicable.
luckin33 collects the following categories of Personal Data from Members:
| Category | Examples | Source |
|---|---|---|
| Registration Data | Full name, date of birth, email address, username, password hash | Provided by Member |
| Contact Data | Mobile phone number, residential address (city / state / postcode) | Provided by Member |
| KYC / Identity Data | Government-issued photo ID (MyKad, passport, driving licence), selfie verification | Provided by Member on request |
| Financial Data | Payment method type, eWallet identifier, bank name, transaction reference numbers | Provided by Member; payment processor |
| Technical Data | IP address, device type, browser type and version, operating system, session tokens | Collected automatically |
| Usage Data | Games played, bet amounts, session duration, pages visited, feature interactions | Collected automatically |
| Communications Data | Live chat transcripts, email correspondence with luckin33 support | Generated during support interactions |
luckin33 collects Personal Data through the following means:
luckin33 processes your Personal Data on the following legal bases:
luckin33 uses your Personal Data for the following purposes:
luckin33 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data with third parties only in the following circumstances:
Some of luckin33's service providers and infrastructure partners may process Personal Data outside of Malaysia. Where such transfers occur, luckin33 takes appropriate safeguards to ensure that your data is protected to a standard equivalent to that required under applicable data protection law. These safeguards may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions deemed to provide an adequate level of data protection by relevant authorities.
luckin33 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your Account and for such additional periods as are required by applicable law or regulation:
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with industry-standard data destruction practices.
luckin33 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used are as follows:
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality and may prevent you from logging in to your luckin33 Account.
Subject to applicable law, you have the following rights in relation to your Personal Data held by luckin33:
To exercise any of these rights, contact the luckin33 support team at [email protected]. luckin33 will respond to valid requests within thirty (30) days.
luckin33 implements a layered security framework to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:
No method of transmission over the internet or electronic storage is completely secure. While luckin33 employs commercially reasonable security measures, we cannot guarantee absolute security. Members are encouraged to maintain strong, unique passwords and enable two-factor authentication on their luckin33 Accounts.
The luckin33 Platform is strictly restricted to individuals aged twenty-one (21) years or older. luckin33 does not knowingly collect Personal Data from individuals under this age. Where luckin33 identifies or is notified that Personal Data has been collected from an individual under 21, such data will be deleted promptly and the Account suspended. Parents or guardians who believe a minor has accessed the luckin33 Platform should contact [email protected] immediately.
The luckin33 Platform does not contain links to third-party websites. This Privacy Policy applies solely to data processing activities conducted by luckin33 in connection with the Platform. luckin33 is not responsible for the privacy practices of any third-party service providers whose services are accessed independently by Members outside of the Platform.
luckin33 reserves the right to update this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, or Platform functionality. Material changes will be communicated to registered Members via the email address associated with their Account, or via a prominent notice on the Platform, no less than fourteen (14) days before the updated Policy takes effect. Your continued use of the luckin33 Platform following the effective date of any update constitutes your acceptance of the revised Policy.
For any questions, concerns, or requests relating to this Privacy Policy or luckin33's data processing practices, please contact the luckin33 Data Protection team:
Six principles that underpin luckin33's approach to privacy
All data transmitted between your device and luckin33 infrastructure is encrypted using the current industry standard — TLS 1.3. Your personal and financial data is never transmitted in plain text.
luckin33 does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes — ever. Your data is used solely to operate and improve the Platform.
luckin33 collects only the data necessary to operate the Platform and meet legal obligations. We do not request or retain data categories beyond what is proportionate to the service provided.
Personal Data is not kept indefinitely. luckin33 applies defined retention schedules — typically 5 years for account and KYC data — after which data is securely deleted or anonymised.
Access, rectification, erasure, portability, and objection rights are honoured by luckin33. Submit a request to support and receive a response within 30 days — no bureaucratic runaround.
In the unlikely event of a data breach affecting your Personal Data, luckin33 will notify affected Members in accordance with applicable legal notification timelines — promptly and transparently.
The luckin33 support team handles data enquiries, rights requests, and privacy concerns 24/7 in English. Whether you're a player in Kuala Lumpur, Penang, or Johor Bahru — we respond to all verified requests within the timelines stated in this Policy.
21+ only · Entertainment purposes only · Please gamble responsibly