Your privacy is our priority. This luckin33 Privacy Policy clearly explains how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010. Please read it carefully before using our platform.
Luckin33 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) in all data processing activities. This means every collection, use, and disclosure of your personal data is carried out in accordance with the legal guidelines set by the Personal Data Protection Commissioner of Malaysia.
Every bit of data that travels between your device and luckin33's servers – whether it's your login credentials, Touch 'n Go or DuitNow deposit details, or gaming activity – is protected by industry-standard 256-bit SSL encryption, the same protocol used by leading financial institutions worldwide.
Luckin33 has never sold, rented, or traded members' personal information to any third party for marketing purposes, and never will. Your data belongs to you – we only use it for purposes you have expressly or implicitly consented to at the time of registration.
Luckin33 only collects data that is genuinely necessary to provide our services to you. We do not collect excessive or irrelevant information. Every data field we request has a clear and justifiable purpose within the context of operating a safe online entertainment platform.
You have the right to access, correct, restrict, and request deletion of your personal data held by luckin33. Exercising these rights is straightforward – contact our support team via live chat or email and we will process your request within the stipulated timeframe.
Every marketing communication sent by luckin33 – whether via SMS, email, or in-platform notification – includes a clear and effective unsubscribe option. Opting out of marketing communications will not affect the core services you receive from luckin33.
This Privacy Policy describes luckin33's data collection and usage practices. By registering an account or continuing to use the luckin33 platform, you confirm that you have read and understood this policy. If you do not agree with any part of this policy, please do not use our platform.
Luckin33 ("we", "our platform") takes seriously our responsibility to protect the privacy of every member who entrusts us with their personal information. This Privacy Policy is designed to ensure that every individual who interacts with the luckin33 platform has a clear understanding of what data we collect, why we need it, how we use it, and the rights you hold over that data.
As an online entertainment platform operating primarily for users in Malaysia, luckin33 is subject to Malaysia's Personal Data Protection Act 2010 (PDPA). We take compliance with this legislation very seriously and have implemented comprehensive internal policies and procedures to ensure ongoing adherence.
This Privacy Policy is to be read together with Terms & Conditions and Responsible Gaming Policy luckin33. Together, these documents form a comprehensive agreement governing the relationship between you and our platform.
Luckin33 collects information you provide directly when you register an account, make a deposit, request a withdrawal, or contact our customer support. This includes:
When you use the luckin33 platform, our systems automatically collect certain technical information necessary to ensure the platform operates correctly and securely:
In certain circumstances, luckin33 may receive information about you from trusted third-party sources, including:
Luckin33 does not collect sensitive information such as biometric data, medical records, or details about your religion or ethnicity. Every piece of data we collect has a specific, justifiable purpose within the context of operating an online entertainment platform.
Luckin33 uses the personal data collected for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and managing your member account; processing registration and login |
| Transaction Processing | Processing deposits via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, ShopeePay; processing winning withdrawals in RM |
| Identity Verification (KYC) | Verifying a member's identity before approving withdrawals or upon regulatory compliance request |
| Security & Fraud Prevention | Identifying and preventing fraudulent activity, money laundering, and multi-account abuse |
| Customer Support | Handling enquiries, complaints, and providing technical assistance via live chat or email |
| Platform Improvements | Analysing usage patterns to improve the interface, introduce new games, and enhance the overall user experience |
| Legal Compliance | Fulfilling legal obligations, complying with regulatory directives, and maintaining required records |
| Marketing Communications | Sending information about promotions, bonuses, and new offers – only with your consent (which may be withdrawn at any time) |
Luckin33 will not use your personal data for any purpose beyond those listed above without first obtaining your separate consent.
Under Malaysia's Personal Data Protection Act 2010, luckin33 processes your personal data on the following bases:
Luckin33 does not sell, rent, or share members' personal data with third parties for their own marketing purposes under any circumstances. Data sharing only occurs in limited, defined contexts as set out below.
In the course of operating the luckin33 platform, we may share data with the following parties on a necessary and relevant basis:
Some of luckin33's technical service providers may be located outside Malaysia. In such cases, luckin33 ensures that any cross-border data transfers are carried out in accordance with Malaysia's PDPA requirements, including ensuring a comparable level of data protection in the recipient country or by implementing appropriate contractual safeguards.
Every third-party service provider with access to luckin33 member data is bound by a non-disclosure agreement (NDA) and a data processing agreement, requiring them to maintain a level of privacy protection consistent with luckin33's standards.
Luckin33 implements a range of technical measures to protect members' personal data against unauthorised access, disclosure, alteration, or destruction:
Beyond technical safeguards, luckin33 also enforces strict organisational controls:
In the event of a data security breach affecting your personal data, luckin33 is committed to notifying you within a reasonable timeframe after we become aware of the incident, in accordance with Malaysia's PDPA requirements. The notice will include details on the nature of the breach, the data affected, and the steps we have taken to address it.
Cookies are small text files stored on your device when you visit the luckin33 platform. They help us remember your preferences, maintain your login session, and understand how you use our platform for improvement purposes.
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the luckin33 platform. Essential cookies cannot be disabled without impacting the platform's core operations.
Luckin33 does not use cookies to track your activity outside our platform or for cross-site marketing purposes.
Luckin33 retains members' personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by law:
When your luckin33 account is closed, we will begin the process of deleting or anonymising personal data that is no longer required for legal or operational purposes. Data that must be retained for legal compliance will be isolated and access-restricted. You will be informed of the relevant retention periods when you submit your account closure request.
Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by luckin33:
You have the right to request a copy of the personal data we hold about you. We will process your request within 21 business days.
If the data we hold is inaccurate or out of date, you have the right to request that we correct or update it promptly.
Under certain circumstances, you have the right to request that we delete your personal data – subject to our legal obligations to retain specific records.
You may request that we restrict how we use your data in certain situations, such as while you are disputing the accuracy of the data.
You may object to the processing of your data for direct marketing purposes at any time, and we are obliged to honour that objection immediately.
You have the right to receive the personal data you have provided to us in a structured, machine-readable format for transfer to another provider.
To exercise any of the rights stated above, contact the luckin33 privacy team via:
Please include your full name, registered phone number, and a specific description of your request. We will verify your identity before processing the request to protect your data security. Requests will be processed within 21 business days from the date of receipt.
Luckin33 does not charge any fees for processing requests related to your privacy rights, except in exceptional cases where a request is manifestly excessive or repetitive. In such cases, we will notify you in advance.
Luckin33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes, we will:
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Continued use of the luckin33 platform following any amendments constitutes your acceptance of the updated Privacy Policy.
If you have any questions, concerns, or complaints about how luckin33 handles your personal data, we encourage you to reach out to us directly first:
We are committed to addressing all privacy enquiries seriously and resolving them within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia as the relevant regulatory authority.
This Privacy Policy was last updated on 1 January 2026. Further questions? View FAQs or contact our 24/7 support team.
When you deposit funds into your luckin33 account using Touch 'n Go or DuitNow, play slots, bet on Malaysia Super League football or BWF badminton matches, or simply browse our promotions page – you are entrusting us with highly personal information. That trust is not something we take lightly. Every aspect of how luckin33 operates is designed to ensure that trust is always upheld.
We understand that in today's digital age, concerns about data privacy are very real. News of data breaches, the sale of user information to third parties, and misuse of personal data have left many people feeling uneasy about using online services. At luckin33, we want you to feel differently – and we work hard every day to ensure that feeling isn't blind faith, but trust grounded in evidence and real action.
Many online platforms treat Malaysia's Personal Data Protection Act 2010 as little more than a formality – publishing lengthy Privacy Policies that no one reads while continuing questionable data practices behind the scenes. luckin33 takes a different approach. For us, the PDPA is not just a law to comply with – it is a framework that helps us become a more responsible platform for our members.
This means we continually review our data collection practices to ensure that every piece of data we collect has a clear purpose. When data is no longer needed, it is deleted or anonymised according to a set schedule — not left to accumulate on servers without purpose. This approach requires more effort on our part, but it is the right way to handle other people's personal information.
Perhaps the most sensitive data you share with luckin33 is your financial information – your Touch 'n Go account number, GrabPay details, or bank information for FPX. luckin33 understands how sensitive this information is and has implemented multi-layered protections specifically for financial data.
First, all payment information is transmitted via an encrypted SSL connection – meaning anyone who intercepts communication between your device and our servers will not be able to read anything meaningful. Second, luckin33 does not store full e-wallet or bank account numbers in our database – only the minimum information required to process future transactions is retained, in a truncated and encrypted form. Third, every attempt to access financial data within our systems is logged and monitored in real time.
Many websites use cookies in ways that feel intrusive – tracking users across multiple sites, building detailed advertising profiles, and selling that data to advertisers. luckin33 does not do this. The cookies we use are limited to platform operational needs and internal analytics for service improvement purposes.
When you play your favourite slots on luckin33 or check the latest odds for a badminton match, cookies allow us to remember your settings and keep your login session secure. Analytics cookies help us understand which parts of the platform are used most and which may need improvement. All of this is done to enhance your experience – not to track or sell your information.
There is one aspect of privacy that is often overlooked in the context of online entertainment platforms: the relationship between privacy and responsible gaming. At luckin33, your platform usage data – including gaming patterns, deposit frequency, and time spent on the platform – is used not only for business purposes but also to identify members who may benefit from responsible gaming support.
This means your data, in this context, is used to protect you. If our systems identify patterns that indicate elevated risk, our support team may proactively reach out to offer information about responsible gaming tools. This information is not shared with external parties and is used solely for member wellbeing purposes. For more information, visit the Responsible Gaming us.
A core principle at luckin33 is that personal data belongs to the individual it concerns – not to the platform that collects it. This means you have real control over what happens to your information at luckin33. Whether you wish to access a copy of the data we hold, correct inaccurate information, restrict how we use your data, or request its complete deletion – all of these are rights guaranteed under Malaysian law and that luckin33 is committed to upholding.
We have intentionally made the process of exercising these rights as simple as possible. You don't need to fill out lengthy forms or wait weeks for a response. Reach out via live chat or email, state your request clearly, and our team will handle it. That is luckin33's commitment to your privacy – in action, not just in words.