Lucky8 Privacy Policy – Our Commitment Protecting Your Data

1Introduction and Scope of This Policy

Lucky8 ("we", "our platform") is committed to protecting the privacy of all users of the lucky8.bz platform. This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect your personal information when you use the lucky8 platform.

This policy applies to all users of the lucky8 platform, including registered players, website visitors and any individuals who interact with our services through any channel, including the website, mobile app or electronic communications.

We update this Policy from time to time to reflect changes in our practices or legal requirements. The current version is always available on this page, and the "updated" date at the top indicates when the Policy was last reviewed. We encourage you to check this page periodically.

2Types of Personal Data We Collect

Lucky8 collects various categories of personal data depending on how you interact with our platform. Below is a summary of the data we collect:

We may also collect data you voluntarily provide through feedback forms, customer support chat or email communications. This data is used solely to respond to your enquiries and improve our services.

3Purpose of Personal Data Use

Lucky8 uses the personal data we collect for the following purposes, and only for these purposes:

• Account Management: Creating and managing your account, verifying your identity and processing service requests.
• Payment Processing: Securely processing deposits and withdrawals, preventing fraud and ensuring legitimate transactions.
• Legal Compliance: Fulfilling legal and regulatory obligations including anti-money laundering (AML), KYC verification and reporting to relevant authorities.
• Platform Security: Detecting and preventing fraud, illegal activity or security breaches that could affect other players or the platform.
• Customer Support: Responding to enquiries and complaints, resolving disputes and providing technical support.
• Responsible Gaming: Monitoring gameplay patterns to detect signs of risk and providing appropriate self-control tools.
• Platform Improvement: Analysing usage patterns to improve the user experience, test new features and optimise platform performance.
• Service Communications: Sending important notifications related to your account, security and policy changes.

We will not use your data for any other purpose without prior notice and, where required by law, your consent.

4Data Sharing with Third Parties

Lucky8 does not sell your personal data to anyone. However, in the course of operating the platform, we may share data with a limited number of third parties in the following circumstances:

• Payment Service Providers: Payment processors and financial institutions required to complete your deposit and withdrawal transactions.
• Identity Verification Providers: Third parties that assist with KYC processing and age verification to ensure legal compliance.
• Gaming Service Providers: Companies providing games on the lucky8 platform may receive minimal, anonymized gameplay data required for game functionality.
• Legal Authorities: Law enforcement agencies, regulatory bodies or courts where required by law or a valid court order.
• Professional Advice: Lawyers, auditors or other professional consultants who require access to specific information to provide services to lucky8, subject to strict confidentiality obligations.

All third parties we share data with are required to comply with data protection standards equal to or stricter than our own, and may only use that data for purposes we have authorized.

5Data Security Measures

Lucky8 invests seriously in security infrastructure to protect your personal data from unauthorized access, loss, misuse, or disclosure. The security measures we implement include:

• 256-bit SSL/TLS Encryption: All data communications between your browser and lucky8 servers are encrypted using the highest industry security standards.
• Strict Access Controls: Access to players' personal data is restricted to lucky8 staff who require it to perform their duties, based on the principle of least privilege.
• Continuous Monitoring: Our systems are monitored 24/7 to detect and respond to any security threats or unauthorized access attempts.
• Stored Data Encryption: Sensitive data stored in our databases, including financial information and identity documents, is stored in encrypted format.
• Regular Security Testing: lucky8 conducts regular penetration testing and security audits by independent parties to identify and address any vulnerabilities.
• Two-Factor Authentication (2FA): lucky8 supports and encourages the use of 2FA on all accounts to add an extra layer of security.

While we take all reasonable steps to protect your data, no security system is one hundred percent perfect. You also play an important role by keeping your password and account details confidential. Contact the lucky8 support team immediately if you suspect any suspicious activity on your account.

6Cookies and Tracking Technologies

Lucky8 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functionality, including login sessions and account security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helping us understand how players use the platform by collecting anonymous statistical information about pages visited and features used.
• Preference Cookies: Saving your preferences such as language, interface theme and display settings to deliver a more personalised experience.
• Security Cookies: Helping identify and prevent fraudulent activity by comparing current usage patterns against stored historical records.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect your experience on the lucky8 platform. Please refer to your browser's documentation for guidance on managing cookies.

7Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 and applicable data protection laws, you have the following rights regarding your personal data held by lucky8:

To exercise any of the above rights, contact the lucky8 data protection team via live chat or our support email. We will respond within 30 days of receiving your request. Please note that certain rights may be limited in specific circumstances, such as when data retention is required by law.

8International Data Transfers

In operating the lucky8 platform, your personal data may be stored or processed on servers located outside Malaysia. This includes processing carried out by our third-party service providers who may operate in other jurisdictions.

When your personal data is transferred outside Malaysia, lucky8 ensures that:

• The destination country or region provides an equivalent or higher level of data protection
• Appropriate contractual agreements are in place to protect your data during transfer and processing
• The recipient service provider complies with strict security and privacy standards

By using the lucky8 platform, you agree to data transfers as described above. If you have concerns about data transfers, please contact our data protection team.

9Protection of Children and Young Individuals

Lucky8 takes child protection very seriously. The lucky8 platform is not directed at or designed for use by individuals under the age of 18.

Lucky8 does not intentionally collect personal data from individuals under the age of 18. If we discover that such data has been collected unintentionally, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and discover that your child under 18 has registered or used the lucky8 platform, please contact our support team immediately. We will process data deletion requests with high priority.

10How to Contact Us for Privacy Matters

If you have any questions, concerns or requests regarding this Privacy Policy or how lucky8 handles your personal data, you can reach us through the following channels:

• Live Chat Platform: The fastest way to get a response — available 24/7 at the bottom right of the lucky8 page
• Support Email: [email protected] — for more detailed written inquiries
• FAQ Page: Check FAQ page for answers to the most frequently asked privacy questions

The lucky8 data protection team will endeavour to respond to all privacy-related enquiries within three (3) business days for routine requests, and within 24 hours for urgent security issues.

If you are not satisfied with our response after going through lucky8's internal complaints procedure, you have the right to appeal to the Personal Data Protection Commissioner of Malaysia or the relevant regulatory body in your jurisdiction.

Effective Date: 1 January 2026  |  Version: 3.1