Personal Data Protection
At Luck 99, your privacy is more than a legal obligation — it is a moral responsibility we take seriously. This document transparently explains how we collect, use, store, and protect your personal data as a player on our platform. Please read it carefully before using Luck 99's services.
Our Privacy Commitment
Every decision Luck 99 makes regarding player data is guided by these six core principles — not merely as words, but as our everyday practice.
Every bit of data travelling between your device and Luck 99's servers is protected by 256-bit SSL encryption — the same standard used by leading Malaysian banking institutions such as Maybank and CIMB.
Luck 99 does not collect your personal data excessively. Every piece of information requested has a specific, clearly stated purpose — there is no "just in case" data collection that is irrelevant to our services.
Luck 99 has never sold, and will never sell, players' personal data to advertisers, data brokers, or any third party for marketing purposes. Your data belongs to you — it is not a business commodity.
You have the right to access, correct, download, or request deletion of your personal data at any time. Luck 99 provides a straightforward and responsive process for all player data requests.
Player personal data is not retained indefinitely. Luck 99 adheres to a strict data retention policy — data is kept only for as long as necessary for operational and legal compliance purposes, then securely deleted.
In the event of any data breach affecting player information, Luck 99 is committed to notifying affected players within the timeframe required by applicable compliance obligations.
Data Type
We believe transparency starts with telling you exactly what data we collect and why it is needed for Luck 99's services.
Full name, date of birth, MyKad number, KYC photo. Required for account verification and legal compliance.
Phone number, email address, residential address. Used for account communications, OTP verification, and customer support.
EWallet or bank account numbers for processing deposits and withdrawals in RM. Luck 99 does not store credit card numbers.
Game history, bet values, wins and losses. Used for technical support, auditing, and responsible gaming.
IP address, device type, operating system, and web browser. Used for account security and detection of suspicious login attempts.
Session cookies, display preferences, website usage analytics data. Supports a better user experience and internal traffic analysis.
General location data based on IP address. Used solely for geographic eligibility verification and fraud detection.
Records of live chat and email interactions with the Luck 99 support team. Retained for quality control purposes and as a reference for all parties.
This Privacy Policy forms part of the agreement between you and Luck 99. By using the Luck 99 platform, you confirm that you have read and understood how we manage your personal data as outlined in this document.
This Privacy Policy is published by Luck 99 (hereinafter referred to as "we", "the platform", or "Luck 99") and applies to all players who register for or use the online entertainment platform luck99.world, along with all related applications, services, and content.
Luck 99 is committed to ensuring that the personal data you share with us is protected to the highest security standards and used only for legitimate purposes as described in this document. We adhere to internationally recognised data protection principles and continuously work to remain compliant with all relevant regulatory requirements.
This Privacy Policy should be read together with Terms & Conditions Luck 99 constitutes the entire agreement between you and our platform.
If you have any questions about how Luck 99 manages your data that are not addressed in this document, please contact us by email at support@luck99.world. Our team is available to assist in both Bahasa Malaysia and English.
Luck 99 collects various categories of personal data depending on how you interact with our platform. Below is a full list of the data categories that may be collected:
Luck 99 only collects data that is strictly necessary to provide our services. We do not request information that is excessive or irrelevant to the platform's operations.
Luck 99 collects your personal data through several different methods:
Luck 99 does not purchase personal data from third-party data brokers for marketing or profiling purposes. All data in our systems is either provided voluntarily by you or collected automatically as a result of your use of the platform.
Luck 99 uses the personal data collected for the following purposes. Each purpose has a valid legal basis:
Luck 99 processes your personal data on the basis of one or more of the following valid legal grounds:
Luck 99 does not sell your personal data to any party. However, in the normal course of platform operations, we may need to share certain data with carefully selected third parties for the following categories of purposes:
All third parties who receive Luck 99 player data are bound by strict data protection agreements. They may only process data for specific authorised purposes and must comply with security standards equivalent to or higher than those of Luck 99.
Luck 99 does not share player data with advertising companies, social media platforms, or data brokers for third-party marketing purposes under any circumstances.
In certain operational situations, your personal data may be transferred to servers or systems located outside Malaysia. This may occur in the following contexts:
In all cases of cross-border data transfers, Luck 99 ensures that protection equivalent to or greater than that set out in this Privacy Policy is applied through appropriate safeguards, such as standard data transfer agreements or adequacy assessments.
Luck 99 retains your personal data only for as long as necessary for the stated purposes, or as required by law. General data retention guidelines are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Active account data | For the duration of the active account | Platform operations |
| Financial transaction records | 7 years | Financial legal requirements |
| KYC Documents | 5 years after account closure | AML/KYC Compliance |
| Support communication records | 3 years | Quality control & reference |
| Technical & Security Logs | 12 months | Fraud Detection |
| Session cookie data | Up to 24 months | User experience |
Upon expiry of the applicable retention period, data will be securely deleted or anonymised using industry-standard procedures that ensure the data cannot be recovered or re-identified.
Luck 99 invests seriously in security infrastructure to protect players' personal data from unauthorized access, alteration, disclosure, or destruction. Key security measures we employ include:
While Luck 99 takes all reasonable security measures, no digital system can be guaranteed 100% secure. Players also play an important role in protecting their own data — use a strong password, enable 2FA, and never share your login credentials with anyone.
As a Luck 99 player, you have the following rights regarding your personal data. Luck 99 is committed to respecting and facilitating the exercise of these rights:
| Your Rights | Description | Response Time |
|---|---|---|
| Access | Requesting a copy of the personal data Luck 99 holds about you | 30 days |
| Correction | Requesting the correction of inaccurate or incomplete data | 14 days |
| Deletion | Requesting the deletion of your personal data (subject to legal obligations) | 30 days |
| Restriction | Requesting restriction of data processing in certain circumstances | 14 days |
| Mobile | Receive your data in a structured, machine-readable format | 30 days |
| Objection | Objecting to processing for direct marketing or legitimate interests | 14 days |
To exercise any of the rights above, please contact us by email at support@luck99.world with the subject line "Privacy Rights Request", specifying the particular right you wish to exercise along with sufficient information for us to verify your identity. Luck 99 does not charge any fee for reasonable privacy rights requests.
Please note that in certain circumstances, Luck 99 may not be able to fulfil a request in full — for example, if the requested deletion of data would affect our legal obligations. In such cases, we will explain the reasons to you.
Luck 99 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform usage. The following are the types of cookies we use:
You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of the Luck 99 platform. Essential cookies cannot be disabled without impacting your ability to log in and use our services.
Luck 99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new technologies, or updated legal requirements. When material changes are made:
We encourage you to review this Privacy Policy page periodically. The latest version of the Luck 99 Privacy Policy is always accessible on our website.
For specific enquiries regarding data privacy, data subject rights requests, or privacy complaints, please contact us at support@luck99.world with the subject line "Data Privacy Enquiry".
For general privacy enquiries at Luck 99, our support team is available via in-platform live chat 24 hours a day, 7 days a week, in both Bahasa Malaysia and English.
Player Guide
In today's digital landscape, personal data security is among the top concerns for Malaysian internet users — and for good reason. High-profile data breaches, the sale of personal information to advertisers, and a lack of transparency from tech companies have made many people much more cautious about what they share online. At Luck 99, we fully understand these concerns, and our Privacy Policy is built on a foundation of genuine transparency.
One of the most common questions new Luck 99 players ask is: "Is my information safe?" The short answer is yes – but we don't want you to simply take our word for it. We want you to understand the concrete steps we take to protect your data. The 256-bit SSL encryption we use is the same standard applied by Malaysia's major banks, such as Maybank and CIMB, to secure your online banking transactions. This means that when you make a deposit via Touch 'n Go eWallet or GrabPay on Luck 99, your transaction details are protected by the same level of encryption as your everyday banking.
Regarding financial data specifically, Luck 99 does not directly store credit or debit card numbers in our systems. When you use FPX Maybank2u or CIMB Clicks for deposits, transactions are processed directly through the secure FPX gateway without your sensitive banking information passing through Luck 99's servers. For eWallets such as Touch 'n Go, GrabPay, Boost, and ShopeePay, we only store the associated account number to ensure withdrawals are sent to the correct account — not your eWallet login credentials.
One aspect of privacy that many players overlook is game activity data. Luck 99 does retain your gaming history — this is a legitimate operational requirement to ensure winnings are calculated accurately, for audit purposes, and to support our responsible gambling programme. This data is used internally and is not shared with outside parties except in defined circumstances such as dispute resolution or legal compliance. Importantly, your gaming history is not used to "profile" you for third-party advertising purposes — it remains strictly internal to Luck 99's operations.
Regarding the right to request data deletion – this is a right we fully respect. If you close your Luck 99 account and request deletion of your data, we will delete all data that can be removed within the specified timeframe. However, certain data cannot be deleted even upon request – this includes financial transaction records, which must be retained for 7 years under financial law requirements, and KYC documents, which must be kept for 5 years after account closure under AML compliance requirements. This is not an arbitrary Luck 99 policy – it is a legal obligation imposed on all licensed operators in this industry.
From an account security perspective, Luck 99 offers two-factor authentication (2FA), which can be enabled through your account settings. We strongly recommend that all players activate this feature. With 2FA enabled, even if someone obtains your Luck 99 password, they still cannot log in without access to your phone number to receive the OTP. This adds a highly effective extra layer of security, particularly if you have ever reused the same password across multiple platforms.
Finally, we want to make it clear that Luck 99 will never contact players via email, WhatsApp, or any other channel to request passwords, PINs, or sensitive account information. If you receive any communication claiming to be from Luck 99 that asks for such information, it is a phishing attempt and you should report it to us at support@luck99.world immediately. Protecting your data is a shared responsibility — Luck 99 handles the technical side, while you stay personally vigilant.
Frequently Asked Questions
At Luck 99, our privacy policy is closely tied to our commitment to responsible gaming. The gaming activity data we collect is used in part to identify players who may need support — this is data usage intended to help, not exploit. You have the right to request limits on our access to your gaming data through the privacy options in your account settings. For more information on the responsible gaming tools we provide, visit the Responsible Gaming us. Luck 99 is for players aged 18 and above only.
Ready to Get Started?
With a clear understanding of how Luck 99 protects your data, you can enjoy over 1,200 games, EPL and Malaysia Super League Sports Betting, Live Casino, and jackpot slots with complete peace of mind. Register for free today.