MrLuck Privacy Policy for Malaysian Players

1 Introduction

This Privacy Policy applies to the website at mrluck.cam, the associated player account facilities, and the casino and sports betting services made available through the mrluck platform. References to “mrluck”, “we”, “us”, or “our” mean the operator responsible for handling personal information under this Policy. References to “player”, “user”, “you”, or “your” mean a visitor or registered account holder.

mrluck recognises that privacy is important to players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia. This Policy is intended to explain our practices in clear English while preserving the formal detail expected of a privacy document.

By accessing mrluck or using an account, you acknowledge that your information will be handled as described here. This Policy should be read together with the Terms & Conditions. If you do not agree with this Policy, you should stop using mrluck and contact support regarding any eligible account closure or data request.

2 Definitions

For this Privacy Policy, the following terms have the meanings set out below:

• Personal information means information relating to an identified or reasonably identifiable person.
• Account data means information supplied when a player registers, signs in, updates a profile, or communicates with mrluck.
• KYC data means identity, age, address, and verification information used to confirm account eligibility and payment ownership.
• Transaction data means deposit, withdrawal, refund, bonus, and account balance records, normally shown in MYR.
• Gaming data means casino rounds, slot activity, live casino participation, sports selections, stakes, odds, wins, losses, and bonus progress.
• Technical data means device, browser, network, log, security, and cookie information generated when mrluck is accessed.

3 Information We Collect

mrluck collects information directly from players, automatically from devices, and from service providers involved in identity checks, payments, fraud prevention, game delivery, and customer support. The exact information depends on how you use mrluck.

Please provide accurate information and keep your mrluck account details current. Supplying false, incomplete, or misleading data may prevent verification, delay an MYR withdrawal, or lead to account restrictions under the Terms & Conditions.

4 How MrLuck Uses Information

mrluck may process personal information for the following operational purposes:

• Creating, maintaining, authenticating, and securing your mrluck account.
• Confirming identity, age, account ownership, and eligibility to use casino or sports betting services.
• Processing deposits and withdrawals in MYR through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, or other supported methods.
• Recording casino results, sports bets, bonus requirements, account balances, and transaction histories.
• Detecting duplicate accounts, payment misuse, suspicious betting patterns, unauthorised access, collusion, and other prohibited conduct.
• Providing account support, answering questions, resolving complaints, and investigating disputed transactions.
• Administering deposit limits, time-outs, reality checks, and self-exclusion requests.
• Maintaining platform performance, correcting technical faults, and improving the usability of mrluck on mobile and desktop devices.
• Meeting record-keeping, risk management, legal, regulatory, and dispute-resolution obligations that apply to our operations.

5 Grounds for Processing

Depending on the circumstances and applicable requirements, mrluck processes information because it is necessary to provide requested services, meet legal or compliance duties, protect legitimate business and security interests, establish or defend legal claims, protect player wellbeing, or act with the player’s consent.

Where processing depends on consent, you may withdraw that consent by contacting mrluck. Withdrawal does not affect processing that occurred before the request and does not require mrluck to delete records that must be retained for security, financial reconciliation, legal claims, responsible gambling protection, or other legitimate requirements.

6 Payments, Identity Checks and KYC

mrluck uses identity and payment information to verify that deposits and withdrawals are connected to the registered player. Payment providers may process transaction details under their own operational and legal obligations. mrluck generally receives payment status, reference, account ownership, amount, currency, and risk information rather than complete payment credentials.

A player may be asked to provide a MyKad, passport, proof of address, or evidence relating to a payment method or source of funds. Additional checks may be requested when account information does not match, a transaction is unusually large, a payment is disputed, or mrluck identifies activity requiring further review.

mrluck does not publish KYC documents or payment details. Access is limited to authorised personnel and providers who require the information for verification, security, transaction processing, or lawful record-keeping.

7 When Information May Be Shared

mrluck does not sell player information. Personal information may be disclosed only where reasonably necessary to operate the platform, protect users, or meet applicable obligations. Recipients may include:

• Payment processors, Malaysian banks, e-wallet providers, and transaction verification services.
• Identity verification, fraud detection, cybersecurity, hosting, analytics, and customer support providers.
• Casino game studios, live dealer platforms, and sports data providers where limited information is necessary to deliver or settle a service.
• Professional advisers, insurers, auditors, or dispute-resolution specialists acting under confidentiality duties.
• Courts, regulators, enforcement bodies, or other competent authorities where disclosure is legally required or reasonably necessary to protect rights and safety.
• A successor organisation involved in a legitimate corporate restructuring, provided appropriate privacy safeguards continue to apply.

Service providers acting for mrluck are expected to use personal information only for the assigned purpose, maintain appropriate safeguards, and return or delete the information when their role ends, subject to lawful retention requirements.

8 Cookies, Devices and Session Data

mrluck may use cookies and similar browser storage to keep players signed in, remember preferences, protect account sessions, measure page performance, and detect suspicious activity. Some cookies are necessary for security and core platform functions.

Technical records may include an IP address, browser version, operating system, language preference, screen size, approximate location, referral page, session duration, and interactions with mrluck features. These records help diagnose faults, prevent abuse, and optimise the website for Malaysian mobile networks and common devices.

You may use browser controls to remove or block cookies. However, disabling essential cookies can affect sign-in, account verification, payment confirmation, game loading, or security features on mrluck.

9 Data Retention

mrluck retains personal information only for as long as reasonably necessary for the purposes described in this Policy. Retention periods vary according to the nature of the information, account status, transaction history, security risk, dispute status, and applicable record-keeping obligations.

Account, payment, KYC, gambling, self-exclusion, and complaint records may need to be retained after an account closes. This supports fraud prevention, financial reconciliation, legal claims, responsible gambling safeguards, and the enforcement of permanent exclusion requests. When retention is no longer justified, mrluck will take reasonable steps to delete, anonymise, or securely dispose of the information.

10 Information Security

mrluck applies administrative, technical, and organisational controls designed to protect information against unauthorised access, accidental loss, misuse, alteration, or disclosure. Controls may include access restrictions, encrypted transmission, account authentication, monitoring, staff confidentiality requirements, backups, and incident response procedures.

No online system can be guaranteed to be completely secure. Players also have an important role: use a strong and unique password, keep login details private, sign out of shared devices, and contact mrluck immediately if an unfamiliar login or payment appears.

11 Your Privacy Rights

Subject to identity verification, legal restrictions, and applicable requirements, you may submit a request concerning personal information held by mrluck. Available rights may differ by circumstance, but commonly include the following:

To protect your account, mrluck will verify your identity before completing a privacy request. We may ask for clarification if a request is broad or unclear. A request may be limited or refused where necessary to protect another person, prevent fraud, maintain self-exclusion safeguards, comply with record-keeping duties, or establish and defend legal claims.

12 Responsible Gaming and Age Protection

mrluck is intended only for players aged 21 and above. Identity and account activity may be used to confirm age, prevent access by underage users, and identify signs that responsible gambling support may be appropriate.

Where a player sets a deposit limit, requests a time-out, or activates self-exclusion, mrluck records that instruction so it can be applied consistently. Self-exclusion information may be retained after account closure when necessary to prevent an excluded player from opening another account.

Responsible gambling information is handled with care and is used to administer player protection controls, respond to wellbeing concerns, and meet related obligations. Additional information about deposit limits, budget management, self-exclusion, and support resources is available on the Responsible Gambling page.

13 International Processing

Some providers supporting mrluck may operate infrastructure or specialist services outside Malaysia. This can involve processing information in another jurisdiction. Where such processing occurs, mrluck takes reasonable steps to require appropriate confidentiality, security, and contractual safeguards.

Data protection rules can differ between countries. International processing does not remove mrluck’s responsibility to handle information consistently with this Policy and to use providers suited to the nature and sensitivity of the information.

14 Changes to This Privacy Policy

mrluck may update this Privacy Policy to reflect changes in services, payment methods, technology, security practices, or applicable requirements. The revised version will be published on this page with an updated effective date.

Where a change materially affects how player information is handled, mrluck may provide an additional account notice. Players should review this page periodically. Continued use of mrluck after an updated Policy takes effect signifies acknowledgement of the revised privacy information, but does not override any consent requirement that may apply to a specific activity.

15 Contact Us

Questions, concerns, complaints, and privacy rights requests may be directed to the mrluck support team. Please do not send full passwords, one-time codes, unmasked bank credentials, or cryptocurrency private keys in any support message.

mrluck aims to review privacy enquiries fairly and within a reasonable period. More complex requests may take longer where records must be retrieved from payment, security, game, or account systems. If additional information is needed, the mrluck support team will explain what is required and why.