Personal Data Protection

Lycky8 Privacy Policy – Malaysia Member Personal Data Protection

Your privacy is our priority. Learn how lycky8 collects, uses, and protects your personal information in a transparent and responsible manner.

Updated: 1 January 2026

1. Introduction & Scope of This Policy

This Privacy Policy outlines lycky8's commitment to protecting your personal information as a platform member. We understand that your trust is our most valuable asset, and we take seriously our responsibility to safeguard every user's privacy.

This policy applies to all information collected through the lycky8.onl, the lycky8 mobile app, and any other interactions you have with our platform — including use of customer support services, participation in promotions, and gaming activity.

By registering or using the lycky8 platform, you agree to the collection and use of information as described in this policy. We encourage you to read this document from start to finish so you fully understand how your data is handled.

This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming lycky8, which forms the complete agreement between you and our platform.

2. Information We Collect

Lycky8 only collects information that is genuinely necessary to provide you with the best possible service. Below are the categories of information we collect and their purposes:

Data Category Example Information Collection Method
Identity Information Full name, date of birth, identity card number Registration Form
Contact Information Phone number, email address, residential address Registration / KYC
Financial Information Bank account number, bank name, transaction records Deposit / Withdrawal
Usage Data Games played, session duration, wagering Automatic / Platform
Technical Data IP address, device type, web browser, operating system Cookies / Server Logs
KYC Documents Identity card copy, bank statement, proof of address Member Upload

Sensitive Data

Lycky8 does not collect sensitive data such as health information, political affiliations, or religious beliefs without your explicit consent. Should you choose to disclose any sensitive information in communications with our support team, we will handle it with a higher level of confidentiality.

3. How We Use Your Information

Every piece of information we collect is used for a clear and lawful purpose. We will not use your data for any other purpose without informing you in advance.

  • Identity Verification & KYC — We use your identity information to verify that you are a legitimate individual aged 18 and above, in line with legal compliance requirements.
  • Deposit & Withdrawal Processing — Your financial information is used solely to securely process deposits and withdrawals through trusted payment channels.
  • Customer Support — Records of your interactions with our support team help us resolve issues faster and provide more relevant assistance.
  • Fraud Prevention & Security — Usage and technical data are analyzed to detect suspicious activity, protect your account, and maintain platform integrity.
  • Personalise Your Gaming Experience — We use your gaming behavior data to recommend suitable games, relevant bonuses, and more meaningful promotions tailored to you.
  • Marketing Communications — With your consent, we send you notifications about promotions, new bonuses, and platform updates. You can unsubscribe at any time.
  • Responsible Gaming — Your gaming activity data is used to detect patterns that may indicate a need for responsible gaming intervention, in line with our commitment to member well-being.

4. Data Sharing with Third Parties

Lycky8 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. However, there are limited situations where we need to share your data, namely:

  • Payment Processing Providers — Required financial information is shared with licensed and trusted payment gateway providers to securely process your deposits and withdrawals.
  • KYC Verification Service Providers — Your identity documents are shared with third-party KYC verification partners that maintain strict, audited data security standards.
  • Game Software Providers — Limited game session data is shared with game software providers to ensure games function correctly and results are accurately recorded.
  • Legal Authorities — lycky8 will disclose required information to the relevant authorities when mandated by law, court order, or to assist in financial crime investigations.
All third parties we work with are subject to strict data protection agreements. They are only permitted to use your data for specified purposes and may not use it for any other reason.

5. Data Security & Encryption

We implement a range of technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction.

256-bit SSL Encryption

All data transmitted between your device and lycky8 servers is protected with industry-standard SSL encryption, ensuring no third party can intercept your information.

Two-Factor Authentication (2FA)

2FA is available for all lycky8 accounts. By enabling this feature, logging in to your account will require additional verification through your mobile device.

Secure Server Infrastructure

Your data is stored in high-grade data centres with strict physical access controls, automated backup systems, and real-time threat monitoring 24/7.

Restricted Data Access

Only staff who genuinely require access to your data to perform their authorised duties are permitted to do so, and all access is logged and audited on a regular basis.

Regular Security Testing

The lycky8 system undergoes regular penetration testing and security audits by independent cybersecurity experts to identify and address any vulnerabilities.

Data Breach Notification

In the event of any data breach affecting your personal information, lycky8 will notify you within the timeframe prescribed by applicable law.

6. Your Rights as a Data Subject

As a lycky8 member and data subject, you have certain rights regarding your personal information that we hold. We fully respect and uphold these rights.

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Correct any information that is inaccurate or out of date.

Right to Erasure

Request deletion of your data subject to legal obligations.

Right to Object

Object to the processing of your data for direct marketing purposes.

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Restriction

Restrict how we use your data in certain circumstances.

To exercise any of the above rights, contact our support team via Live Chat in the lycky8 app. We will process your request within 30 business days. In some cases, we may need to verify your identity before processing the request.

7. Use of Cookies

Lycky8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

  • Essential Cookies — Required for core platform functions such as login session authentication and security. These cookies cannot be disabled.
  • Functional Cookies — Remembers your preferences such as language selection and display settings to provide a more comfortable experience on your next visit.
  • Analytical Cookies — Helps us understand how members use our platform so we can continuously improve the user experience. Data collected is non-personally identifiable.
  • Marketing Cookies — Used to display more relevant promotions and offers based on your interests and activity. You can disable these cookies through your browser settings.

You can manage and delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the lycky8 platform.

8. Data Retention & Deletion

Lycky8 retains your personal data for as long as your account is active or as long as necessary to provide services to you. Retention periods are also determined by applicable legal obligations, including financial record requirements and anti-money laundering (AML) compliance.

Generally, we retain financial transaction records for a minimum of seven (7) years as required by Malaysia's financial laws. Once the required retention period has ended, your data will be securely deleted or anonymised.

If you close your lycky8 account, we will initiate the data deletion process within 90 days of receiving your request, subject to applicable legal retention obligations. You will be notified once the deletion process is complete.

Data that is legally required to be retained cannot be deleted upon request. In such cases, we will inform you of the reason and the required retention period.

9. Privacy Policy Amendments

Lycky8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or platform improvements. Any changes will take effect as soon as the new version is published on this page.

For material changes — that is, changes that significantly affect how we use your personal data — we will notify you via in-app notification or email at least seven (7) days before the changes take effect.

The "Updated" date shown at the top of this page reflects the last date this policy was reviewed. You are encouraged to check this page periodically to stay informed of our latest policy.

Your continued use of the lycky8 platform after any Privacy Policy changes take effect constitutes your acceptance of the revised terms.

10. Privacy-Related FAQs

Below are questions frequently asked by lycky8 members regarding data protection and privacy.

Absolutely not. lycky8 does not sell, rent, or trade your personal information to any third party for their marketing purposes. Your data is only shared with necessary operational partners such as payment and KYC verification providers, and only for specific, limited purposes.

You can submit a data access request via Live Chat in the lycky8 app. Our team will verify your identity and provide a data report within 30 working days. The report will include the information we hold, the purposes for which it is used, and the parties who may have received it.

When you close your lycky8 account, we will begin the process of deleting your data within 90 days. However, certain records — particularly financial and transaction records — must be retained for seven (7) years as required by financial regulations. Data retained for legal reasons will not be used for any marketing or communications purposes.

Yes, you can unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link found at the bottom of every promotional email we send. You can also update your communication preferences in your account settings or by contacting our support team. Please note that important transactional emails such as withdrawal confirmations cannot be disabled.

Yes. The lycky8 mobile app uses the same end-to-end encryption as our website. All communication between the app and our servers is protected with 256-bit SSL. The app also supports biometric login (fingerprint or facial recognition) as an additional security layer to protect your account on mobile devices.

Your Privacy, Our Priority

Lycky8 is committed to keeping your personal data protected to the highest standard. Join the lycky8 member community today and enjoy a safe, fair, and enjoyable gaming experience.

Bahasa Melayu