Privacy Policy lycky8 — Malaysia Player Data Security

Lycky8 collects your personal information in several ways: information you provide directly when registering or using the platform, and information collected automatically as you browse our website.

Information you provide directly:

• Full name, date of birth, and national ID or passport number
• Email address and mobile phone number
• Current residential address
• Bank account, e-wallet, or payment method details you have registered
• Identity verification documents (KYC) including ID card images and proof of address
• Any information you share with our customer support team

Information collected automatically:

• IP address, browser type, and device information you use
• Login history and session activity, including games played
• Cookie and session token data for an improved user experience
• Deposit and withdrawal transaction records with timestamps
• General geolocation data based on your IP address

Data collected by lycky8 is used solely for legitimate purposes directly related to delivering platform services to you. The purposes for which data is used are as follows:

• Process account registration and verify your identity through the KYC process
• Process deposits and fund withdrawals securely and accurately
• Detect and prevent fraud, money laundering, and platform abuse
• Provide responsive and effective customer support
• Send important information related to your account such as transaction confirmations
• Personalize your gaming experience based on your habits and preferences
• Send promotional offers and bonuses (only if you have opted in to receive them)
• Comply with applicable legal and regulatory requirements in Malaysia
• Improve platform performance and identify technical issues

Lycky8 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, there are limited situations where data sharing is necessary and lawful:

• Payment service providers — transaction details required to process your deposits and withdrawals via bank or e-wallet
• Game software providers — game session data required to ensure games run correctly and wins are accurately recorded
• Identity verification services (KYC) — identity documents shared with approved third-party KYC providers for verification purposes only
• Legal authorities — lycky8 is obligated to comply with court orders, regulatory investigations, or valid legal reporting requirements
• Business transfers — in the event of a merger or acquisition, user data may be transferred subject to reasonable advance notice to users

All third parties we work with are required to meet data protection standards equal to or exceeding our own, and they are not permitted to use your data for any purpose other than what is specified in their agreement with lycky8.

Your data security is a responsibility we take extremely seriously. lycky8 uses a multi-layered security infrastructure to ensure your data is always protected:

• 256-bit SSL encryption for all data transferred between your browser and our servers
• At-rest encryption for all personal and financial information in our databases
• Role-based access control (RBAC) ensuring only authorized personnel can access specific data
• 24/7 security monitoring and automated intrusion detection systems
• Regular penetration testing conducted by independent security experts
• Encrypted data backups stored at geographically separate locations

Data Retention Period:

• Active account data — retained for as long as your account is active and for the period required by law after account closure
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's financial compliance requirements
• Customer support communication logs — retained for 3 years for reference and dispute resolution purposes
• Access and security log data — retained for 12 months for security investigation purposes

Lycky8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage or block cookies through your browser settings. Please note that blocking essential cookies may affect core platform functions such as login and payment processing.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and lycky8's policies, you have the following rights regarding your personal data:

Lycky8 will process all requests relating to data rights within 30 days of receiving a complete request. In complex cases, this period may be extended to 90 days with notice to you.

Lycky8 is an exclusive platform for individuals aged 18 and above. We do not knowingly collect or store any personal data from individuals under the age of 18.

The lycky8 platform may contain links or integrations with third-party services such as game providers and payment processors. Please note that:

• Lycky8 is not responsible for the privacy practices of any third party that operates a separate website or service
• When you interact with third-party services, their own privacy policies apply
• We encourage you to read the privacy policy of any third-party service you use alongside our platform
• All game providers integrated with lycky8 are required to meet the minimum data protection standards we have set

In the course of its operations, lycky8 may transfer your personal data to servers located in other countries, including for backup storage and technical processing purposes.

• Any cross-border data transfers are carried out with contractual safeguards ensuring your data is protected to a standard equivalent to Malaysia's requirements
• We only use cloud service and infrastructure providers that hold internationally recognised security certifications
• Data transfer destination countries are selected based on adequate data protection standards or with additional contractual safeguards

Lycky8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data.

• Material changes will be communicated to you via a clear notice on the platform and/or to your registered email address
• The "Last Updated" date at the top of this document will be updated whenever changes are made
• Continued use of the platform after a change notice is considered your acceptance of the updated Policy
• For changes that require fresh consent, we will request your explicit confirmation before the changes take effect

We encourage you to check this page regularly to stay informed about how we protect your privacy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the lycky8 privacy team is here to help.

• In-platform live chat — response within 15 minutes, 24 hours a day
• Privacy email: [email protected] (copy and paste into your email client)
• For official complaints relating to PDPA, you also have the right to contact the Department of Personal Data Protection Malaysia