Privacy Policy mrluck

Mrluck (mrluck.onl) takes the privacy of every individual using our platform seriously. This Privacy Policy is designed to clearly and transparently explain how we collect, process, store and protect your personal data when you use the MrLuck platform — including the website, iOS and Android mobile apps, and all services operating under the MrLuck brand.

This document applies to all users of the mrluck platform regardless of how they access our services — whether via web browser, mobile app or any digital channel provided. By registering an account or continuing to use the mrluck platform, you consent to the data processing practices described in this document.

We understand that your trust is the foundation of our relationship. We are therefore committed to being fully transparent about how your data is managed, and we will never use your data in a manner that goes against your reasonable expectations as a player.

Mrluck only collects personal data that is strictly necessary to deliver quality services, ensure your account security, and comply with applicable legal requirements. The following are the categories of data we collect:

Registration & Identity Data

• Full name as per identity card or passport
• Date of birth for age verification (must be 18 or above)
• Active email address for account communications
• An active Malaysian mobile number
• Identity card or passport number (for the KYC process)
• Current residential address

Financial & Transaction Data

• Bank account number and bank name (for deposit and withdrawal processing )
• Deposit and withdrawal records with date and time stamps
• Account balance and in-platform transaction history
• E-wallet details such as Touch 'n Go eWallet or GrabPay

Activity & Technical Data

• IP address and general location information (country/city)
• Device type, operating system and browser version
• Game history, betting, wagering activity, and in-platform actions
• Account login and logout activity with timestamps
• Cookie data and session usage
• Mobile device information (model, IMEI if applicable) for app verification

Every piece of data we collect has a clear and lawful purpose. mrluck never processes your personal data without a solid legal basis or genuine operational need. The key purposes for using your data are:

• Account Operations — Creates, manages, and secures your account on the mrluck platform, including the login process, two-factor authentication (2FA), and password recovery.
• Financial Processing — Processes your deposits and withdrawals promptly and accurately, including transaction verification and financial record-keeping.
• Legal Compliance — Fulfils compliance obligations including anti-money laundering (AML), identity verification (KYC), and reporting to relevant authorities as required by law.
• Security & Fraud Prevention — Detects suspicious activity, prevents unauthorised access, and protects the integrity of the platform and your funds.
• Customer Support — Enables our team to provide accurate and personalised assistance whenever you contact customer support.
• Experience Enhancement — Analyses aggregated usage patterns to improve platform features, technical performance, and the overall gaming experience.
• Marketing Communications — Sends promotional information, exclusive offers, and platform updates (subject to your communication preferences, which can be updated at any time).

Mrluck understands that your privacy is valuable. We do not sell or rent your personal data to any party for commercial purposes. However, there are certain situations where we need to share data with specific parties to ensure the platform operates properly and remains legally compliant:

• Payment Service Providers — Payment processing partners such as local Malaysian banks, e-wallet operators (Touch 'n Go, GrabPay), and approved payment gateways. They only receive the data necessary to process your transaction.
• Identity Verification Service Providers — Accredited third-party KYC service providers for identity verification. All such providers are subject to strict data security agreements with mrluck.
• Technology Service Providers — Cloud infrastructure providers, transactional email services, and platform analytics tools that support mrluck operations. They act as data processors under our direction and have no right to use your data for any other purpose.
• Regulatory Authority — Government agencies, law enforcement bodies, or financial regulators when required by applicable Malaysian law.
• Gaming Service Partners — Gaming content providers (such as slot, table game, and live sports providers) that require minimal session information to deliver the gaming experience. Data shared is limited and anonymised where possible.

All third parties we engage are required to sign legally binding data processing agreements, ensuring they comply with security and privacy standards equal to or higher than those we apply ourselves.

The mrluck platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how our platform is used. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies — Required for the platform to function properly. This includes login session cookies, security tokens, and language preference cookies. Disabling these cookies will affect platform functionality.
• Performance Cookies — Collects information about how you use our platform (pages visited, time spent, errors encountered) to help us improve. This data is collected anonymously.
• Functional Cookies — Remembers your preferences such as language, currency, and display settings to deliver a more personalised experience.
• Analytics Cookies — Helps us understand overall platform usage trends through aggregated and anonymised data.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality or your experience on the MrLuck platform.

The security of your personal and financial data is mrluck's absolute top priority. We continuously invest in the latest security infrastructure to ensure your data is always protected against cyber threats, data breaches, and unauthorized access.

Security Measures We Implement:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of sensitive data at rest using AES-256
• Two-factor authentication (2FA) for player account access and internal administrative access
• Multi-layered firewall with active intrusion detection and prevention system (IDS/IPS)
• Round-the-clock security monitoring by our cybersecurity team
• Separation of financial data from profile data across separate server infrastructure
• Regular security audits by independent cybersecurity firms
• Tested and documented data incident response procedures

While we take all reasonable measures, no digital security system can be guaranteed 100% secure. In the event of a data breach that may affect you, we are committed to notifying you within the timeframe required by applicable law.

You also play an important role in keeping your account secure. We encourage you to use a strong password, enable 2FA and never share your login credentials with anyone.

As a mrluck player, you have certain rights regarding your personal data, which we fully respect. These rights include:

• Right to Access — You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 business days.
• Right to Rectification — If your data is inaccurate or incomplete, you may request a correction through your account profile settings or by contacting our support team.
• Right to Erasure — You may request the deletion of your personal data, subject to our legal obligations to retain certain records (such as financial records for 7 years).
• Right to Restrict Processing — In certain circumstances, you may request that we restrict how we process your data while a dispute is being resolved.
• Right to Data Portability — You may request your data in a structured, machine-readable format for transfer to another service provider.
• Right to Object — You may object to the processing of your data for direct marketing or profiling purposes at any time.
• Right to Withdraw Consent — Where processing is based on consent, you may withdraw that consent at any time without affecting the validity of prior processing.

To exercise any of the above rights, please log in to your mrluck account and navigate to the Privacy Settings section, or contact our customer support team via live chat, available 24/7.

The mrluck platform is intended exclusively for individuals who are of age 18 years and above. We do not intentionally collect or process personal data of children under the age of 18.

Our registration process requires date of birth verification, and our KYC process ensures player identity is confirmed before any financial transaction is permitted. This is part of our commitment to responsible gaming and the protection of minors.

The mrluck platform may contain links to third-party services or platforms in certain contexts, such as payment platforms or identity verification services. Please note that this Privacy Policy applies solely to the mrluck platform.

We are not responsible for the privacy practices of third-party platforms and encourage you to read their privacy policies separately before sharing any personal information with them. mrluck does not control and cannot be held responsible for the content, privacy policies or practices of any third-party platform.

Mrluck reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements to our services. Whenever we make a material amendment, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying a clear notice on the platform's home page for at least 14 days
• Sending a notification to the email address registered to your account for significant amendments
• Requesting your consent again if amendments require new or different data processing

Your continued use of the mrluck platform after the effective date of any amendment constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to assist. You can reach us through the following channels:

For requests related to personal data rights (access, correction, deletion), please clearly state the type of request along with your full name and the email address registered to your mrluck account to facilitate identity verification.