Luck3 respects the privacy of every member. This document clearly explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Your privacy is not merely a legal obligation to us — it is a sincere commitment we uphold.
Six data protection approaches that set luck3 apart from other platforms
All data processing operations at luck3 comply with the Personal Data Protection Act 2010. We conduct regular compliance audits to ensure every internal process remains aligned with the latest Malaysian legal requirements.
All personal and financial transaction data is encrypted using AES-256 standards — the same technology used by Malaysia's leading banking institutions. Your data remains unreadable even in the event of an external intrusion attempt.
Luck3 never sells, rents, or shares members' personal data with advertisers or third parties for marketing purposes without your explicit consent. Your data belongs entirely to you.
Through your account dashboard, you can access, review, correct, and request deletion of your personal data at any time. luck3 processes all privacy-related requests within 14 business days.
In the event of any security incident involving your data, luck3 is committed to notifying you within 72 hours in line with industry best practices. Our cybersecurity team operates 24/7 to monitor all threats.
Luck3 only collects data that is strictly necessary to operate our services and fulfil regulatory obligations. We do not collect excessive data — every piece of information requested has a clear and legitimate purpose.
Luck3 collects your personal data through several channels — primarily when you register an account, use the platform, contact our customer support team, or interact with our promotional content. Our core principle is to collect only the data that is necessary, nothing more.
The following are the main categories of personal data we collect and the purposes for which they are collected:
| Data Category | Example Information | Primary Purpose |
|---|---|---|
| Identity Information | Full name, MyKad number, date of birth | KYC verification & fraud prevention |
| Contact Information | Email, phone number, address | Account communications & customer support |
| Financial Data | Bank account details, e-wallet information, transaction history | Deposit & withdrawal processing |
| Technical Data | IP address, device type, web browser, access logs | Security & platform improvements |
| Behavioural Data | Game history, preferences, wagering habits | Responsible gaming & personalised experience |
| Communications | Support correspondence, feedback, complaints | Issue resolution & service improvement |
Luck3 does not collect sensitive information such as biometric data, health information, or religious beliefs except where required by applicable law. All data collection adheres to the principle of purpose limitation under Malaysia's PDPA.
The data we collect is used specifically and limited to the stated purposes. luck3 will not use your data for any other purpose without first obtaining your consent. The primary uses of your personal data include:
Where you have given your consent, we may also use your data to send promotional offers, special bonuses, and new product information relevant to your interests. You may withdraw this consent at any time through your account settings.
Every instance of personal data processing carried out by luck3 is supported by at least one valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA). We do not process your data without justification that is sound and legally defensible.
You have the right to withdraw consent for consent-based processing at any time. Withdrawing consent will not affect the validity of any processing carried out prior to withdrawal; however, luck3 will immediately cease using your data for the relevant purpose.
Luck3 takes the confidentiality of members' personal data seriously. We do not sell or rent your data to anyone. However, there are limited situations where we need to share data with certain parties to enable the platform to operate securely and in compliance with the law:
In all data sharing cases, luck3 ensures that recipients maintain data protection standards equal to or higher than our own. Data is shared only to the extent necessary and no further.
Luck3 uses a secure and modern data storage infrastructure. All data is stored in ISO 27001-certified data centres with layered access controls. Below is a summary of data retention periods by category:
On the technical security front, luck3 implements multiple layers of protection including AES-256 encryption for data at rest, TLS 1.3 for data in transit, two-factor authentication (2FA) for internal staff access, scheduled penetration testing, and real-time threat monitoring by our dedicated cybersecurity team.
While we take all reasonable steps to protect your data, no system is 100% guaranteed. We encourage you to use a strong password, enable two-factor authentication on your luck3 account, and never share your login credentials with anyone.
Luck3 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how our platform is used. The following are the types of cookies we use:
You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the luck3 platform. For more information on managing cookies in popular browsers, please refer to your browser's documentation.
As a user protected under Malaysia's PDPA, you hold the following rights regarding your personal data held by luck3. We are committed to respecting and facilitating the exercise of each of these rights:
You have the right to request a copy of the personal data we hold about you. luck3 will provide this information within 14 working days of receiving your request.
If your data is inaccurate or outdated, you have the right to request a correction. You can update basic information directly through your luck3 account dashboard.
You may request the deletion of your personal data, subject to any legal retention obligations binding on luck3 under AML and tax regulations.
You may object to the processing of your data for direct marketing purposes at any time without providing any justification.
In certain circumstances, you may request that we restrict how we process your data while a dispute or request is being resolved.
You have the right to receive your data in a machine-readable format for transfer to another service provider of your choice.
To exercise any of the above rights, contact the luck3 support team via live chat within the platform. We may require identity verification before processing your request to ensure the security of your data.
The luck3 platform is intended for users aged 18 and above only. We do not knowingly collect any personal data from children or minors. Should we discover that a child's data has been collected without our knowledge, immediate action will be taken to delete that data and close the account in question.
If you are a parent or guardian and discover that your child has registered an account on the luck3 platform, please contact our support team immediately. luck3 will process the account closure and data deletion within 48 hours of the report being verified.
As part of integrated platform operations, some personal data may be processed by service providers based outside Malaysia, including within cloud computing infrastructure. luck3 ensures that all cross-border data transfers are carried out with adequate safeguards through the following mechanisms:
Luck3 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in business practices, legal requirements, or the technologies we use. Any significant changes will be communicated to members via their registered email and in-platform notifications at least 14 days before taking effect.
The "Updated" date at the top of this document will always reflect the latest version of the luck3 Privacy Policy. We encourage you to review this document periodically. Continued use of the luck3 platform after any changes constitutes acceptance of the updated Privacy Policy.
Luck3 has appointed a Data Protection Officer responsible for ensuring compliance with this Privacy Policy at all levels of the organisation. Should you have any enquiries, concerns, or wish to exercise your privacy rights, the following channels are available:
Luck3 is committed to responding to all privacy-related enquiries within 14 business days. For more complex cases, we will inform you of a more accurate timeline for resolution.
If you are dissatisfied with our response to your privacy enquiry, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body overseeing PDPA in this country.
Luck3 ensures your privacy is protected at every step. Register today and enjoy a safe, fair, and exciting gaming experience alongside more than 500,000 Malaysian players who have already trusted luck3.