Your privacy is our priority. This document transparently explains how 999 Lucky collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to keeping your information secure and using it only for the purposes you have consented to.
The six core principles that form the foundation of how 999 Lucky handling your personal data.
All data communications between your device and the 999 Lucky encrypted using 256-bit SSL encryption — the same standard used by major Malaysian financial institutions such as Maybank and CIMB. No third party can intercept or read your data in transit.
Member personal data 999 Lucky is accessible only to staff who require it to perform their duties. All access is logged and audited on a regular basis. Our role-based access control (RBAC) system ensures no staff member can view data beyond the scope of their role.
999 Lucky is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure data collection is minimal and relevant, obtain valid consent before processing sensitive data, and respect your rights to access, correct, and delete your data.
999 Lucky has never and will never sell, rent, or trade members' personal data to any third party for their own commercial purposes. Your data belongs to you — we are merely its custodian, not its owner.
In the event of any data breach affecting your personal information, 999 Lucky committed to notifying affected members within the timeframe required by law and taking immediate steps to contain and remediate the situation.
You have the full right to access, correct, or request deletion of your personal data at 999 Lucky at any time. You may also withdraw consent for marketing communications without affecting your account.
999 Lucky ("we", "platform", or "company") is fully committed to protecting the privacy of every member and visitor to our website. This Privacy Policy clearly outlines our data handling practices in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using the platform 999 Lucky, you agree to the collection and use of information as described in this document.
999 Lucky collects your personal data only when it is necessary to provide our services effectively and securely. We do not collect data beyond what is operationally required. Below are the categories of information we may collect:
| Data Category | Sample Information | Purpose of Collection |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad number, gender | Identity verification (KYC), legal compliance |
| Contact Data | Email address, phone number, residential address | Account communications and notification delivery |
| Financial Data | Payment methods (TNG, GrabPay, FPX), transaction history | Deposit & withdrawal processing, fraud prevention |
| Gaming Data | Betting history, account balance, game preferences | Service provision, responsible gaming |
| Technical Data | IP address, device type, web browser, access logs | Security, fraud prevention, and technical improvements |
| Usage Data | Pages visited, session duration, clicks, navigation patterns | User experience improvement, platform analytics |
999 Lucky never collects sensitive personal data such as health information, religious beliefs, or political views unless specifically required by law (for example, for AML compliance purposes).
The majority of this data is collected directly from you during account registration, platform use, or interactions with our support team. Technical data is collected automatically through standard tracking technologies such as cookies and server logs when you visit our website or use the 999 Lucky.
999 Lucky processes your personal data on one or more valid legal bases under Malaysia's PDPA — including contract performance, legal obligations, legitimate interests, or your consent. Below are the specific purposes for which your data is used:
We only use your data for the purposes stated above. Should we wish to use your data for a new purpose that differs from the original, we will inform you in advance and obtain your consent where required by law.
999 Lucky does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are specific circumstances where data sharing is necessary and legally permitted:
Trusted Service Providers
We share necessary data with third parties that help us operate the platform, including:
All third-party providers are bound by data protection agreements that prohibit them from using your data for any purpose other than those specified.
Legal Requirements
We may disclose your personal data to Malaysian government authorities or law enforcement agencies when:
999 Lucky will not disclose your data to any party outside the scenarios stated above without your explicit consent. Should we receive a request to disclose your data, we will endeavour to notify you in advance unless prohibited from doing so by law.
Data security is our top priority 999 Lucky. We continuously invest in the latest security technologies and procedures to ensure your personal data is protected from all threats. The technical and organisational security measures we implement include:
While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We recommend taking precautions on your end as well — use a strong password, enable 2FA, and never share your login credentials with anyone, including those claiming to be staff of 999 Lucky.
In the event of a data breach that may affect your personal information, 999 Lucky will notify you and the relevant authorities within the timeframe stipulated by Malaysian law, and will take immediate action to contain and remediate the situation.
Under Malaysia's PDPA 2010, you have specific rights regarding your personal data held by 999 Lucky. We fully respect and uphold these rights:
You have the right to request a copy of the personal data we hold about you. Data access requests will be processed within 21 working days. A reasonable fee may be charged for requests involving a large number of records.
If any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request a correction. Log in to your account 999 Lucky you or contact support to update your information.
Under certain circumstances, you have the right to request deletion of your personal data. However, we may be required to retain certain data for periods prescribed by Malaysian law, particularly financial records and transaction history.
You may withdraw your consent to receive marketing communications from 999 Lucky at any time via the "unsubscribe" link in our emails or by contacting our support team. Opting out does not affect essential service communications.
In certain situations, such as during a data dispute investigation, you may request that we restrict the processing of your data while the matter is being resolved.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or contact the privacy team at 999 Lucky directly at support@999lucky.onl.
To exercise any of the rights above, please send a written request to support@999lucky.onl with the subject line "Privacy Rights Request". We will verify your identity before processing your request to ensure data security.
Platform 999 Lucky uses cookies and similar tracking technologies to enhance your experience, ensure the platform functions correctly, and collect analytics data that helps us improve our services. Below are the types of cookies we use:
| Cookie Types | Purpose | Duration |
|---|---|---|
Session Cookies |
Maintains your login session, ensures session security, and prevents CSRF attacks. These cookies cannot be disabled. | Expires when the browser is closed |
Preference Cookies |
Remembers your language settings, time zone, and display preferences for a better experience. | 1 year |
Analytics Cookies |
Aggregates data on how users interact with the platform to help us improve performance and user experience. | 2 years |
Marketing Cookies |
Allows us to show you more relevant ads and offers based on your interests. Only active with your consent. | 90 days |
You can manage cookies through your browser settings. Disabling essential cookies may affect the platform's functionality 999 Lucky. Analytics and marketing cookies can be disabled without affecting the platform's core functionality. Please refer to your browser's help guide for instructions on managing cookies.
Beyond cookies, we may use similar technologies such as web beacons, pixel tags, and device fingerprinting for security and fraud prevention purposes — these are essential for protecting your account against unauthorised access.
999 Lucky retains your personal data only for as long as necessary for the purposes it was collected, or as required under Malaysian law. Our data retention policy is as follows:
When data is no longer needed and there is no legal obligation to retain it, 999 Lucky will securely and irreversibly delete or anonymise the data. Data held in backup systems will also be purged in accordance with the scheduled backup deletion policy.
All data is stored in data centres located in jurisdictions that comply with applicable data protection laws. We ensure that any transfer of data outside Malaysia (where applicable for cloud storage purposes) is subject to adequate protections in accordance with the PDPA.
Platform 999 Lucky is strictly intended for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.
If we discover that we have collected personal data from an individual under the age of 18, we will promptly take steps to delete that data and close the relevant account. If you believe a minor has registered on our platform, please contact us immediately at support@999lucky.onl.
Parents and guardians are responsible for monitoring their children's online activity and ensuring they do not access gambling platforms such as 999 Lucky. We support the use of parental control software to assist in this effort.
Platform 999 Lucky may contain links or integrations with third-party services such as payment providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX), game providers, or verification services. It is important that you understand the following:
Reputable Malaysian payment providers such as Touch 'n Go eWallet, GrabPay, and DuitNow have their own privacy and data protection policies that comply with Malaysian law. We only work with providers that have a proven track record of high security standards.
If you have any questions, concerns, or requests regarding this Privacy Policy or how 999 Lucky handling your personal data, please contact our privacy team through the following channels:
We are committed to addressing all privacy-related enquiries seriously and within the stipulated timeframe. If you are not satisfied with our response, you have the right to file a formal complaint with Malaysia's Department of Personal Data Protection (JPDP).
999 Lucky reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. The latest version will always be available on our website with a clearly displayed "Updated" date.
When we make material changes that affect how we process your data, we will notify you through:
Continued use of the platform 999 Lucky after any amendments to the Privacy Policy take effect will be considered your acceptance of the revised policy. If you do not agree with the changes, please stop using the platform and contact us for assistance with account closure and data management.
This Privacy Policy was last updated on 1 January 2026. This version supersedes all previous versions in their entirety. For any enquiries regarding this policy, please contact us at support@999lucky.onl.
Expanded answers to the privacy questions most frequently asked by our Malaysian members.
Also read other important documents that complement this Privacy Policy.
Register for free today and enjoy the casino & Sports Betting experience at 999 Lucky — a platform that not only delivers great entertainment, but also genuinely safeguards your privacy and data security.
256-bit SSL protection. Malaysia PDPA compliant. Your data is never sold to anyone.