Official Privacy Policy

Lucky9 Privacy Policy – How We Protect Your Information

Your trust starts with how we handle your personal information. At lucky9, privacy is not just a legal document — it is a core value that shapes every system and process we build.

Updated: January 2026

256-bit SSL Protection

All data in transit is protected with industry-grade encryption.

No Data Sales

Your information is not sold to any third party without your consent.

Control Is in Your Hands

You can review, update, or delete your data at any time.

Legal Compliance

Lucky9 complies with Malaysia's PDPA and international data protection standards.

Important Note: This document explains how lucky9 collects, uses, stores, and protects your personal information. By using our platform, you agree to the practices described in this Privacy Policy. Please read it carefully.

1 Introduction

Lucky9 takes our members' privacy seriously — not merely to fulfil legal obligations, but because we believe that trust is the foundation of a healthy, long-term relationship between a platform and its users.

This Privacy Policy explains in detail how lucky9 ("we", "Platform") handles the personal information you provide when registering and using our services. It also outlines the rights you have over that data and how to exercise them.

Lucky9 operates in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and industry best practices in digital user data protection. We are committed to ensuring that your information is used only for the purposes stated in this document and nothing beyond that.

In the event of any conflict between the Bahasa Malaysia version and any other version of this document, the Bahasa Malaysia version shall prevail for members using the lucky9 platform in Malaysia.

2 Information We Collect

Lucky9 only collects information that is genuinely necessary to provide our services safely and effectively. Below are the categories of information we collect, along with their purposes and legal basis:

Data Categories Data Examples Purpose of Collection
Identity Full name, date of birth, IC number / passport number Identity verification (KYC), fraud prevention
Contact Email address, phone number Account communications, security notifications
Financial Bank account details, transaction history Deposit & withdrawal processing
Technical IP address, device type, web browser Security, fraud detection, platform improvement
Usage Game history, betting records, login activity Customer support, compliance, responsible gaming
Preferences Language settings, notification preferences Personalise the user experience

We do not collect sensitive information such as biometric data, health information, or political affiliations unless specifically required by law or a regulatory authority for compliance purposes.

3 How We Use Your Data

Every piece of information we collect is used for clear and lawful purposes. lucky9 does not use your data for any purpose you have not consented to, whether expressly or by implication.

  • Account management: Creating, verifying, and maintaining your account securely.
  • Financial processing: Verifying and processing deposits, withdrawals, and bonus payments.
  • KYC verification: Meeting legal requirements to verify member identity and prevent money laundering.
  • Platform security: Detecting and preventing fraudulent activity, account breaches, and behaviour that violates our terms of use.
  • Customer support: Helping you resolve issues, answer enquiries, and provide relevant assistance.
  • Platform improvements: Analysing usage patterns to improve the interface, speed, and overall gaming experience.
  • Service communications: Sending important notifications related to your account, security, and policy updates.
  • Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support.
We may send you marketing communications about lucky9 promotions based on the communication preferences you set during registration. You can opt out of marketing communications at any time through your account settings.

4 Sharing Information with Third Parties

Lucky9 does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. We only share your information in the following situations, and only to the extent necessary:

  • Service providers: Technical partners who help operate our platform — such as payment processors, cloud service providers, and identity verification vendors — are all bound by strict confidentiality agreements.
  • Legal requirement: When required by Malaysian law or directed by a legitimate regulatory authority, including for financial crime investigations.
  • Rights protection: To protect the rights, property, or safety of lucky9, our members, or the public when necessary.
  • With your consent: For any other purpose for which you have provided separate express consent.
All third-party service providers used by lucky9 have undergone security assessment and are required to comply with the same data protection standards we hold ourselves to.

5 Data Security

Lucky9 continuously invests in security infrastructure to protect your personal information from unauthorised access, loss, or disclosure. The key security measures we employ are:

  • 256-bit SSL/TLS encryption for all data transmitted between your browser and lucky9's servers.
  • Passwords are stored using a one-way hashing algorithm that cannot be decrypted, even by the lucky9 team itself.
  • An intrusion detection system (IDS) that monitors platform traffic 24/7 for suspicious attack patterns.
  • Role-based access controls to ensure only authorized staff can access sensitive member data.
  • Regular security audits and penetration testing conducted by independent third parties.
  • A tested incident response plan to ensure we know exactly what to do in the event of a data breach.

While no system can be guaranteed 100% secure, lucky9 is committed to notifying affected members within a reasonable timeframe should any security incident involving their personal data occur, in accordance with applicable legal requirements.

6 Cookies & Tracking Technologies

Lucky9 uses cookies and similar technologies to ensure the platform functions correctly, remember your preferences, and understand how the platform is used. Below are the types of cookies we use:

  • Essential cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
  • Performance cookies: Collecting information about how you use the platform — pages visited, errors encountered — to help us improve our services.
  • Functional cookies: Remembering your preferences such as language settings and display options for a more personalised experience.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the lucky9 platform.

7 Data Storage & Retention

Lucky9 retains your personal information for as long as your account is active or as long as it is needed to provide services to you. After an account is closed, we retain certain data for the period required by law.

  • Financial transaction records are retained for a minimum of 7 years for tax compliance and anti-money laundering (AML) purposes.
  • Customer support communication records are retained for 3 years after resolution.
  • Security and audit logs are retained for 2 years for investigation purposes if required.
  • Marketing data is deleted within 30 days after you opt out of marketing communications.

All lucky9 data servers are housed in data centers with physical and cyber security certifications, with automatic backups running to ensure service continuity.

Your data may be processed or stored outside Malaysia by the cloud service providers we use. In all cases, such data transfers are governed by contractual safeguards that ensure equivalent security standards are maintained.

8 Your Privacy Rights

As a lucky9 member, you have the following rights regarding your personal information. To exercise any of these rights, please contact our support team.

Right of Access

You have the right to request a copy of all personal information lucky9 holds about you at any time.

Right to Rectification

If your information is inaccurate or outdated, you may request that it be corrected or updated.

Right to Erasure

You may request that your data be deleted, subject to applicable legal retention requirements.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time, without needing to give a reason.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform if needed.

Right to Restrict Processing

In certain circumstances, you may ask lucky9 to restrict the processing of your data while an issue is being resolved.

lucky9 aims to fulfil all privacy rights requests within 30 days of receipt. More complex requests may require additional time, and we will notify you if an extended period is needed.

9 Changes to This Privacy Policy

Lucky9 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. When significant changes occur, we will:

  • Sending a notification to your registered email at least 14 days before the changes take effect.
  • Displaying a clear notice on the lucky9 platform for a reasonable period.
  • Updating the "Last Updated" date at the top of this page.

Continued use of the lucky9 platform after the effective date of any changes constitutes your acceptance of the amended Privacy Policy. If you disagree, you may close your account before that date.

10 Contact Us About Privacy

If you have any questions, concerns, or complaints about how lucky9 handles your personal information, our team is ready to assist through the following channels:

  • Live Chat: Click the chat icon on the lucky9 platform for instant support from our agents.
  • Email: [email protected] — for privacy inquiries that require further investigation.
  • FAQ: Refer to our FAQ page for answers to frequently asked questions about privacy and account security.
If you are not satisfied with our response to your privacy complaint, you have the right to refer the matter to Malaysia's Department of Personal Data Protection (JPDP).

Why Your Privacy Is Safe with lucky9

Data protection is not something lucky9 does only when required. It is how we operate every day.

Encrypted Database

Sensitive member data such as financial information and identity documents is stored in encrypted form in our databases — unreadable even if physical storage is accessed.

Fast & Secure KYC

Lucky9's identity verification process uses trusted OCR technology and facial recognition. Your documents are processed securely and are not retained longer than necessary.

24/7 Threat Monitoring

Lucky9's cybersecurity systems operate around the clock to detect and block threats before they can affect our members' data. Any unusual login activity triggers an automatic alert.

Two-Factor Authentication (2FA)

Enable 2FA on your lucky9 account for an extra layer of protection. Even if your password is compromised, no one can log in without your authentication device.

Data Usage Limit Principles

Lucky9 operates on the principle of data minimisation — we only collect what is necessary, use it solely for the stated purposes, and delete it when it is no longer needed.

Regular Audits & Compliance

Lucky9's privacy practices are reviewed regularly by internal and external parties to ensure ongoing compliance with Malaysia's PDPA and international data protection standards.

Your Data Is Safe. Time to Play with Peace of Mind.

Now that you know how lucky9 handles your personal information responsibly, you can enjoy your gaming experience with complete confidence. Your privacy is protected — that is our promise.

Create a free lucky9 account today and join over 500,000 members who already trust us with their online entertainment. Or download our mobile app for a smoother experience wherever you are.

lucky9's Privacy Promise

  • Your data is never sold to third parties
  • 256-bit SSL encryption for all transactions
  • Full control is in your hands
  • Compliant with Malaysia's PDPA 2010
  • Regular independent security audits
  • 24/7 privacy support in Bahasa Malaysia
Bahasa Melayu