Your personal data is a trust we take seriously. This document transparently explains how Lucky 8 collects, uses, stores, and protects your information — in plain, easy-to-understand English.
Privacy enquiries:
privacy@lucky8-jit.com
Response within 48 hours
Lucky 8 understands that trust is the foundation of our relationship with every member. A large part of that trust depends on how we handle your personal data — information you share with us when you register, make transactions, or use any Lucky 8 service.
This Privacy Policy is written in plain, easy-to-understand language because we believe every Malaysian using our platform deserves to know exactly what happens to their data — not wade through lengthy, confusing legal text that most people never read.
Lucky 8 is fully compliant with Personal Data Protection Act 2010 (PDPA) Malaysia, which is the principal law governing how organisations collect, process, and store the personal data of Malaysians. We also go further than what the law requires — because protecting your data is a core value of ours, not merely a legal obligation.
Lucky 8 only collects data that is genuinely necessary to provide you with a secure, lawful, and high-quality service. The following are the categories of data we may collect:
Full name, MyKad or passport number, date of birth, gender. Collected during account registration and the KYC (Know Your Customer) verification process as required by law.
Email address, mobile number, and preferred communication language. Used for account verification, transaction notifications, and customer support.
Information related to the payment methods you use, such as Touch 'n Go eWallet, GrabPay, DuitNow, Maybank2u, or CIMB Clicks. Account numbers are not stored directly — only the information necessary to process valid RM transactions.
Betting records, game history, wins and losses, sport preferences (football, badminton, e-sports, slots, live casino), and platform usage patterns. This data helps us detect unusual activity and ensure regulatory compliance.
IP address, web browser type, operating system, device information, and access log data. Used for account security and suspicious activity detection.
Every piece of data we collect has a clear and legitimate purpose. Lucky 8 uses your personal data for the following:
Lucky 8 does not sell or rent your personal data to any third party. However, in certain limited situations, we may need to share your data with the following parties:
Lucky 8 continually invests in security infrastructure to ensure your personal data is always protected. The technical and organisational security measures we employ include:
All data transmitted between your device and Lucky 8's servers is fully encrypted using the same 256-bit SSL standard adopted by Malaysia's major banks.
Sensitive data stored in our databases is also encrypted — not just during transmission. Passwords are stored using bcrypt hashing, which cannot be decrypted.
Lucky 8 supports two-factor authentication (2FA) for your account as an additional layer of protection beyond your password. Strongly recommended for all members.
Only Lucky 8 staff with a legitimate business need are permitted to access your personal data, and all access is logged and actively monitored.
Lucky 8 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable Malaysian law.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account data | Throughout active account | Service management |
| Financial transaction records | 7 years after transaction | PDPA & AML Requirements |
| Security & access logs | 2 years | Fraud detection |
| Support communication records | 3 years | Complaint resolution |
| Data after account closure | 5–7 years | Legal compliance |
Once the relevant retention period has lapsed, your data will be securely deleted or anonymised in a manner that can no longer be linked back to you personally.
Malaysia's Personal Data Protection Act 2010 grants you certain rights in relation to your personal data. Lucky 8 fully respects and facilitates the exercise of these rights:
Request a copy of all personal data we hold about you
Correct data that is inaccurate or incomplete
Request data deletion under specific circumstances permitted by law
Object to data processing for direct marketing purposes
Receive your data in a structured, machine-readable format
File a complaint with the Department of Personal Data Protection Malaysia
Lucky 8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our website.
| Cookie Type | Purpose | Duration | Opt-Out? |
|---|---|---|---|
Sessions & Security |
Maintaining login sessions, preventing CSRF, 2FA verification | Session / 30 days | No (required for core functionality) |
Preferences |
Saves your language preference, theme, and betting limits you have set | 1 year | Yes (your preferences will be lost) |
Performance |
Understand how users interact with the platform to drive improvements | 90 days | Yes (via cookie settings) |
You can manage cookies through your web browser settings. Please note that disabling all cookies may affect certain Lucky 8 platform features, such as staying logged in and your saved preferences.
Lucky 8 reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, technology, or our business practices. You will be notified of any material changes through:
We encourage you to review this page periodically, especially before sharing any new personal data with us. Your continued use of the Lucky 8 platform after any amendments constitutes your acceptance of the updated terms.
Lucky 8 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy and PDPA 2010. If you have any questions, concerns, or complaints regarding your data privacy, please contact us:
Six ways Lucky 8 protects the privacy and personal data of every Malaysian member, every day.
The same 256-bit SSL technology used by Maybank, CIMB, and Malaysia's leading banks protects every bit of data travelling between your device and Lucky 8's servers. Your information cannot be read by any unauthorised party.
Lucky 8 fully complies with Malaysia's Personal Data Protection Act 2010 — the primary law safeguarding the privacy rights of Malaysians. We conduct regular internal compliance reviews to ensure we remain up to date with the latest legal requirements.
This is not a cliché — it is Lucky 8's firm policy. Your personal data is never sold, rented, or traded to advertisers, data brokers, or any third party for marketing purposes. The only exception is the limited sharing required to process your MYR transactions.
Lucky 8 has a dedicated Data Protection Officer (DPO) whose sole responsibility is ensuring your privacy rights are upheld. This is not merely a title on paper — our DPO actively monitors data practices and can be reached directly at privacy@lucky8-jit.com.
You have the right to access, correct, delete, or transfer your data under PDPA 2010. Lucky 8 provides clear, responsive channels for you to exercise these rights — not a bureaucratic maze designed to make things difficult.
Lucky 8 has written this Privacy Policy in Bahasa Malaysia — fully comprehensible to all Malaysians — and not merely an auto-translated version of an English document. We believe you deserve to understand exactly how your data is managed, in your own language.
Lucky 8 safeguards your privacy with best-in-class technology and transparent policies. Bet on football, badminton, or play Live Casino — all with the peace of mind that your data is handled responsibly.
By registering, you agree to the Terms & Conditions & Lucky 8 Privacy Policy · For users aged 18 and above