Privacy Policy — lucjy8

1 Information We Collect

Lucjy8 collects various categories of personal information as you interact with our platform. This collection occurs directly from you, automatically through your use of the platform, or from legitimate third-party sources.

We do not collect sensitive information such as health data, religious beliefs, or political views unless required by applicable law. All documents submitted during the KYC process are stored in an encrypted environment and accessible only to authorised personnel.

2 How We Use Your Data

The personal information we collect is used solely for the following purposes. lucjy8 will not use your data beyond the scope stated here without obtaining your consent first.

• Account management — processes registration, verifies identity, and manages your account.
• Transaction processing — processes your deposits, withdrawals, and all financial transactions.
• Service provision — ensures the platform operates smoothly and delivers a seamless gaming experience.
• Service communications — sends important notifications relating to your account, security, and platform changes.
• Legal compliance — fulfils obligations under the Personal Data Protection Act 2010, AML legislation, and other regulatory requirements.
• Fraud prevention — detects and prevents fraudulent activity, money laundering, and platform abuse.
• Platform improvement — analyses usage patterns to improve the overall user experience.
• Responsible gaming — monitors gaming behaviour to identify players who may need assistance.
• Marketing communications — sends promotional information and special offers to users who have consented to receive them.

3 Legal Basis for Processing

Under the Malaysia Personal Data Protection Act 2010 (PDPA), lucjy8 processes your personal data on the following legal bases:

• Consent — for marketing communications and optional cookies, we obtain your explicit consent before processing.
• Contract performance — processing required to fulfil the contractual obligations between you and lucjy8, including the processing of deposits and withdrawals.
• Legal obligation — processing required to comply with applicable law, including KYC and AML requirements.
• Legitimate interests — processing for fraud prevention, platform security, and analytics that does not override your fundamental rights.

Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the validity of any processing carried out prior to withdrawal.

4 Data Sharing with Third Parties

Lucjy8 does not sell or rent your personal data to third parties. However, we may share your data with the following parties in limited circumstances and for specific purposes:

• Payment service providers — FPX, Touch 'n Go eWallet, GrabPay, and affiliated banks to process your financial transactions.
• Game software providers — gaming platform providers supporting our casino operations, subject to strict confidentiality agreements.
• KYC service providers — authorised third-party identity verification companies to conduct background checks and document verification.
• Regulatory authorities — Malaysian government agencies and regulatory bodies when required by law or court order.
• Cloud service providers — cloud computing platforms that store and process our data, subject to strict data processing agreements.

All third parties we work with are required to comply with data protection standards equal to or exceeding those applied by lucjy8. We conduct periodic due diligence reviews on all our data partners.

5 Data Security

Lucjy8 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or accidental disclosure.

Key security measures we use include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for all sensitive data stored in our databases.
• Two-factor authentication (2FA) available for all user accounts.
• 24/7 security monitoring with automated intrusion detection systems.
• Role-based access control — staff can only access the data required to perform their duties.
• Regular security audits and penetration testing by independent third parties.
• Regular data backup procedures with full encryption on all backup copies.
• Mandatory security awareness training for all lucjy8 staff.

6 Cookies and Tracking Technologies

Lucjy8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use the following categories of cookies:

• Necessary cookies — required for core platform functions such as session authentication and security. These cookies cannot be disabled.
• Preference cookies — stores your settings and preferences to improve usability, such as your preferred language and display settings.
• Analytical cookies — helps us understand how users interact with the platform for improvement purposes.
• Performance cookies — collects information on the most frequently visited pages and error sources to help us improve platform performance.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect platform functionality. We do not use third-party cookies for targeted advertising.

7 Data Retention

Lucjy8 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law.

• Active account data — retained for as long as your account is active and for the required period following account closure.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial reporting and AML.
• KYC Documents — retained for 5 years after the business relationship ends, in accordance with PDPA and AML legal requirements.
• Support communication logs — retained for 2 years for reference and dispute resolution purposes.
• Anonymised analytics data — may be retained for an extended period for usage pattern analysis in a form that cannot be traced back to any individual.

Once the retention period expires, your data will be securely deleted or anonymised using industry-recognised methods. You may request early deletion of your data subject to our legal obligations.

8 Your Rights

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

To exercise any of the rights above, contact our privacy team via live chat on the platform or refer to the FAQ us. We will process your request within 30 days of receipt.

9 International Data Transfers

In the course of its operations, lucjy8 may transfer your personal data to servers or service providers located outside Malaysia. All such transfers are carried out with adequate safeguards, including:

• Standard data transfer agreements ensuring protection equivalent to Malaysia's PDPA.
• Selection of service providers operating in jurisdictions with comparable data protection laws.
• Implementation of additional technical security measures during cross-border data transfers.

10 Privacy Policy Amendments

Lucjy8 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice on the platform's home page for a minimum of 14 days.
• Sending notifications to the registered email address for significant changes.

We encourage you to review this Privacy Policy periodically. Continued use of the lucjy8 platform after any changes take effect will be deemed acceptance of the updated terms.

11 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the lucjy8 Data Protection Officer (DPO) through the following channels:

We are committed to handling every privacy enquiry seriously and professionally. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Personal Data Protection Commissioner.