Official Data Protection

Lucy8 Privacy Policy – Our Commitment to Protecting Malaysian Users' Personal Data

At lucy8, your privacy is not merely a legal obligation – it is a core value we hold firmly. This document explains in detail how we collect, use, store, and protect your personal information.

Last Updated: 1 January 2026 | Compliant with Malaysia PDPA 2010
Our Privacy Commitment

Lucy8's Six Core Data Protection Principles

High-Level Encryption

All data transmitted between your device and lucy8 servers is encrypted using SSL 256-bit. No third party can intercept or read your information during transmission.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls and strict access controls. Only authorised personnel may access sensitive information.

Full User Control

You have the full right to access, correct, download, or request deletion of your personal data at any time via your account settings or by contacting us.

No Data Sales

Lucy8 has never and will never sell, rent, or trade your personal data to any third party for marketing or any other purpose without your consent.

PDPA 2010 Compliance

All our data handling practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a user are fully protected under the law.

Breach Notification

In the event of any security incident involving your data, we will notify you within the timeframe required by law and take immediate corrective action.

1Introduction & Scope of This Privacy Policy

This Privacy Policy ("Policy") describes how lucy8 ("Company", "we") handles personal information for all users who access or use the lucy8 platform at lucy8.org and our official mobile app.

We understand that entrusting your personal information to any online platform requires a high degree of confidence. That is why we ensure every data-related decision is made with full transparency and always with the best interests of our users in mind.

This Policy applies to all information collected through our platform, including during account registration, use of services, financial transactions, communications with our support team, and any other interactions with lucy8.

Important Note: By using the lucy8 platform, you agree to the collection and use of your personal information as described in this Privacy Policy. If you do not agree, please discontinue use of our platform.

2Information We Collect

Lucy8 only collects information that is strictly necessary to provide a safe, efficient, and legally compliant service. Below are the categories of information we collect:

Data Category Examples of Information Purpose of Collection
Identity Data Full name, date of birth, identification card number Identity verification (KYC), fraud prevention
Contact Data Email address, phone number, residential address Communications, delivery of important notices
Financial Data Bank account number, deposit and withdrawal transaction records Payment processing, anti-money laundering
Technical Data IP address, browser type, operating system, cookie data Account security, platform usage analytics
Behavioural Data Game history, betting patterns, login timestamps Responsible gaming monitoring, service improvement

We do not collect sensitive information such as biometric data, health information, or political views unless you voluntarily provide it in a specific context, such as during an advanced identity verification process.

3How We Use Your Information

The information we collect is used solely for lawful purposes that have been disclosed to you. We will not use your data for any other purpose without first obtaining your consent.

The primary purposes for which your personal data is used at lucy8 are as follows:

  • Account Management: Securely creating, verifying, and maintaining your user account.
  • Transaction Processing: Processing deposits, withdrawals, and all other financial transactions promptly and accurately.
  • Identity Verification (KYC): Complying with legal requirements related to identity verification and anti-money laundering.
  • Customer Support: Effectively handling enquiries, complaints, and assistance requests from users.
  • Platform Security: Detecting and preventing fraudulent activity, unauthorised access, and other security threats.
  • Service Improvement: Analysing usage patterns to improve platform performance, interface, and user experience.
  • Marketing Communications: Sending information about the latest promotions and offers — only if you have consented to receive such communications.
  • Legal Compliance: Fulfilling our obligations under applicable Malaysian law, including PDPA 2010.
Marketing Communications: You may opt out of receiving marketing emails or notifications from us at any time by clicking the "unsubscribe" link in any email we send, or by contacting our support team.

4Information Sharing & Disclosure

Lucy8 understands the importance of your data privacy. We do not share, sell, or disclose your personal information to third parties except in the following circumstances:

  • Trusted Service Providers: We work with carefully selected third-party service providers for payment processing, identity verification, cloud computing services, and analytics. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.
  • Legal Requirements: We may disclose your information to the relevant authorities if required to do so by law, court order, or direction from a competent regulatory body.
  • Rights Protection: Where necessary to protect the rights, property, or safety of lucy8, its users, or the public, we may disclose relevant information.
  • Business Transfer: In the event of a merger, acquisition, or sale of company assets, user data may be transferred as part of the business assets. You will be notified in advance via a prominent notice on our platform.

In all of the above data-sharing cases, we ensure that the receiving parties have data protection measures equal to or exceeding the standards we uphold ourselves.

5Cookies & Tracking Technologies

The lucy8 platform uses cookies and similar tracking technologies to enhance user experience and ensure the security of your account. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
  • Performance Cookies: Helping us understand how users interact with the platform through anonymous statistical data collection.
  • Functional Cookies: Saving your preferences such as interface language and display settings to provide a more personalised experience.
  • Analytics Cookies: Used to analyse usage patterns and help us improve our services over time.
You can control and manage cookie settings through your internet browser settings. However, disabling certain cookies may affect the functionality and performance of the lucy8 platform on your device.

6Data Security & Protection Measures

The security of your personal data is our top priority. lucy8 continuously invests in the latest security infrastructure to ensure your information is always protected against cyber threats.

The security measures we implement include:

  • 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
  • Password storage using strong hashing algorithms with random salting.
  • Two-factor authentication (2FA) available for all user accounts.
  • Real-time account activity monitoring to detect suspicious login patterns.
  • Regular internal and external security audits conducted by independent experts.
  • Mandatory cybersecurity training for all staff with access to user data.
  • An automated data backup system that ensures continuity of service in emergency situations.

While we take all reasonable steps to protect your data, no system is completely 100% secure against all threats. In the event of a security incident involving your data, we will notify you via your registered email within the timeframe required by law.

7Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our own policies, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time. We will provide this information within 21 business days.

Right to Rectification

If any personal data we hold about you is inaccurate or outdated, you may request a correction and we will update it promptly.

Right to Erasure

You may request the deletion of your personal data, subject to our data retention obligations under applicable laws such as AML/KYC requirements.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes or in certain other situations permitted by law.

Right to Data Portability

You may request your personal data in a machine-readable format for transfer to another service provider, at our discretion.

To exercise any of the rights above, please contact our Data Protection Officer (DPO) team via live chat or the official email address listed at the bottom of this page. We may need to verify your identity before processing your request in order to ensure account security.

8Data Retention Period

Lucy8 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. Retention periods vary by data type:

  • Active Account Data: Retained for the duration your account is active and for at least 7 years after account closure for legal compliance purposes.
  • Financial Transaction Records: Retained for 7 years in accordance with Malaysia's financial and AML legal requirements.
  • Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes.
  • Technical and Log Data: Retained for 12 months for security and technical troubleshooting purposes.
  • Marketing Data: Retained until you withdraw your consent or request deletion.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.

9Children's Privacy

The lucy8 platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data from individuals under the age of 18.

If we discover that a child's personal information has been collected without our knowledge, we will take immediate steps to delete that information and close the relevant account. Parents or guardians who believe their child may have registered an account on our platform are encouraged to contact us immediately.

10Privacy Policy Amendments & How to Contact Us

Lucy8 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or new service features. Any significant amendments will be communicated to you via a prominent notice on our platform or by email at least 14 days before the changes take effect.

The latest version of the Privacy Policy will always be available on this page with a clear last-updated date. Continued use of the lucy8 platform after any amendments constitutes acceptance of the updated terms.

Contact Our Data Protection Officer (DPO):
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us via 24/7 live chat on the lucy8 platform or our official email at [email protected]. We are committed to responding within 5 business days.

Your Data Is Safe. Now Let's Play!

Join millions of users who trust lucy8 for a safe, fair, and enjoyable online betting experience in Malaysia.

Bahasa Melayu