Data Protection

Privacy Policy lucky10 —
Our Commitment to Your Data

At lucky10, user privacy is more than a legal obligation — it is a core value that shapes how we design our systems, store data, and interact with all members. Read this policy to fully understand your rights.

Updated: January 2026

How lucky10 Works Protecting Your Data

256-Bit SSL Encryption

All data transmitted between your device and lucky10 servers is protected by 256-bit SSL encryption — the same security standard used by major banks in Malaysia.

Secure Data Storage

Your personal data is stored on servers protected by strict access controls. Only authorised staff may access your sensitive information within the necessary work context.

No Data Selling

Lucky10 does not sell, rent, or trade users' personal data to third parties for marketing purposes. Your data belongs to you, not to us as a business asset.

Integrated & Secure KYC

The identity verification (KYC) process at lucky10 uses an integrated and secure system. Documents you upload are stored with full encryption and used solely for verification purposes.

Full User Control

You have full control over your data — including the right to view, amend, export, or request deletion of your personal data from Lucky10's systems at any time.

Transparent Cookie Management

Lucky10 uses cookies solely to improve user experience and for internal analytics. You can manage or disable non-essential cookies through your web browser settings.

1. Introduction

This Privacy Policy explains how lucky10 ("we", "Platform", "lucky10") collects, uses, stores, and protects your personal information when you use the lucky10.fun website, the lucky10 mobile app, and all related services.

We understand that privacy is a serious matter for Malaysian users. That is why we strive to be fully transparent about our data handling practices. No convoluted legal language here — we aim to explain everything in a way that is easy to understand.

By registering or using the lucky10 platform, you acknowledge that you have read and understood this Privacy Policy. If you have any questions, our support team is available 24/7.

Our commitment: lucky10 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices in all aspects of user information handling.

2. Data We Collect

Lucky10 collects several categories of information to provide you with a secure and personalised service. Below is a summary of the types of data we collect:

Data Categories Sample Information Purpose of Collection
Identity Data Full name, MyKad/passport number, date of birth Identity verification (KYC), fraud prevention
Contact Data Email address, phone number, residential address Account communications, statement delivery
Financial Data Bank account number (masked), transaction records Deposit and withdrawal processing
Usage Data Game records, betting history, active hours Service improvement, responsible gaming
Technical Data IP address, device type, browser version Account security, fraud detection

We do not collect more data than is necessary for a specific purpose. Each data category is collected based on legitimate requirements and reasonable business interests.

3. How We Use Your Data

Collected data is used exclusively for the following purposes:

  • Account verification and security: Verifying your identity, preventing unauthorised access, and detecting fraudulent activity
  • Transaction processing: Processing deposits, managing account balances, and executing withdrawals securely
  • Service provision: Enabling you to access games, bonuses, and all features of the lucky10 platform
  • Important communications: Sending account notifications, transaction information, and important security updates
  • Responsible gaming: Monitoring gameplay patterns to identify users who may need responsible gaming support
  • Platform improvement: Analysing usage data in aggregate (not individually) to improve user experience
  • Legal compliance: Fulfilling reporting obligations to relevant authorities when required by law

lucky10 does not use your personal data to make automated decisions that significantly affect you without human intervention, except in cases of fraud detection involving account security.

4. Data Sharing with Third Parties

Lucky10 takes a strict and limited approach to user data sharing. We do not sell or disclose your personal data to third parties for marketing or commercial purposes.

Data may only be shared in the following limited circumstances:

  • Service providers: Payment processing providers (such as banks and digital wallet operators), licensed game providers, and identity verification companies working on behalf of lucky10 — all subject to strict confidentiality agreements
  • Legal authority: Law enforcement bodies, courts, or government agencies when required by Malaysian law or a valid court order
  • Fraud prevention: In cases of serious suspected fraud, lucky10 may share information with other platforms within the industry's fraud prevention network
  • Business transfers: In the event of a merger, acquisition, or sale of lucky10 assets, user data may be transferred with appropriate notice given to the affected users.

All third parties granted access to lucky10 user data are required to comply with data protection standards equal to or higher than those we adhere to.

5. Data Security

Lucky10 continually invests in data security infrastructure to ensure your personal information is always protected. The security measures we implement include:

  • Data encryption in transit: All communication between your device and lucky10 servers is secured with TLS 1.3 protocol and 256-bit encryption.
  • Data encryption at rest: Sensitive data such as financial information and KYC documents is encrypted at rest in our database
  • Internal access controls: Access to user data is restricted to staff who genuinely require it, with all access logged and audited
  • Threat monitoring: An intrusion detection system operates 24/7 to identify and respond to security threats.
  • Regular security testing: lucky10 conducts regular penetration testing and security audits by independent parties

Important note: While we take all reasonable steps to protect your data, no security system is 100% foolproof. In the event of a data security breach involving your information, lucky10 is committed to notifying you within the timeframe required by law.

6. Cookies & Tracking Technologies

Lucky10 uses cookies and similar tracking technologies to enhance your platform experience. There are several types of cookies we use:

  • Essential cookies: Required for core platform functions such as login session authentication and security — these cookies cannot be disabled
  • Preference cookies: Remembering your preferences such as language and display settings for your convenience
  • Analytics cookies: Helping us understand how users interact with the platform in aggregate — no individual user is identified
  • Performance cookies: Used to optimise the speed and performance of the lucky10 platform

You can manage or disable non-essential cookies through your web browser settings. Please note that disabling essential cookies may affect platform functionality.

7. Your Rights Over Personal Data

As a lucky10 user, you have the following rights regarding your personal data, in accordance with Malaysia's Personal Data Protection Act 2010:

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Request correction of inaccurate or outdated data in our records.

Right to Erasure

Request deletion of your personal data subject to legal obligations.

Right to Portability

Request an export of your data in a machine-readable format.

Right to Restrict Processing

Request restrictions on how we use your data in certain circumstances.

Right to Object

Object to the processing of your data for direct marketing purposes.

To exercise any of the above rights, contact the lucky10 support team via email or live chat. We will process your request within 30 business days.

8. Data Retention Period

Lucky10 only retains your personal data for as long as necessary for the purposes stated in this policy or as required by applicable law.

  • Active account data: Retained for the duration your account remains active with lucky10
  • Financial transaction records: Retained for a minimum of 7 years for legal compliance and financial audit purposes
  • KYC documents: Retained for a minimum of 5 years following account termination in accordance with anti-money laundering legal requirements
  • Communication logs: Retained for 3 years for dispute resolution purposes
  • Cookie and analytics data: Retained for a maximum of 13 months from the date of collection

When data is no longer needed and there is no legal obligation to retain it, Lucky10 will securely delete or anonymise the data in question.

9. Children's Privacy

The lucky10 platform is strictly for adult users aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18.

If we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and terminate the relevant account.

If you are a parent or guardian who believes your child may have registered with lucky10, please contact our support team immediately for follow-up action.

10. Links to External Sites

The lucky10 platform may occasionally contain links to third-party websites or services, such as game provider sites or regulatory bodies. This Privacy Policy applies solely to the lucky10 platform.

Lucky10 is not responsible for the privacy practices of third-party websites. We encourage you to read the privacy policy of every website you visit to understand how they handle your personal data.

11. Changes to This Privacy Policy

Lucky10 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new technologies. When significant changes are made, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending notifications to the email address registered to your account
  • Displaying update notices within the lucky10 platform

We encourage you to review this page periodically. Continued use of the lucky10 platform after changes are published means you accept the updated policy.

12. Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or lucky10's handling of your personal data, please contact us via:

  • Data protection email: [email protected]
  • General support email: [email protected]
  • Live Chat: Available 24/7 via the lucky10 platform
  • Frequently asked questions: Visit page FAQ us for a quick response

Our team will process all privacy-related enquiries within 5 business days. For more complex data rights requests, processing may take up to 30 business days. We are committed to being transparent and responsive in all matters relating to your data privacy.

Your Data Is Safe at lucky10 — Join Us Today

Create your lucky10 account with confidence — a platform that takes your privacy seriously, uses bank-grade encryption, and never sells your data to third parties.

Already have an account? Login here

Bahasa Melayu