mrluky complies with Malaysia's Personal Data Protection Act 2010 (PDPA) — your privacy is our priority.

Why Your Data Is Safe with mrluky

We invest in the latest security systems to ensure your personal information is protected at all times.

High-Level Data Encryption

All data transmitted between your device and mrluky servers is protected by 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia.

Secure & Isolated Servers

Your personal data is stored on servers protected by multi-layered firewalls and an intrusion detection system (IDS) active 24 hours a day, 7 days a week.

Restricted Staff Access

Only authorised staff with a legitimate business need may access your data. All access is logged and regularly audited by our internal security team.

PCI DSS Payment Security

Mrluky does not directly store credit card or bank account information. All financial transactions are handled by payment providers with full PCI DSS certification.

Malaysia PDPA Compliance

The mrluky privacy policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We respect and adhere to all applicable data protection legal provisions.

Periodic Review & Updates

This privacy policy is reviewed and updated periodically to ensure it remains aligned with industry best practices and any relevant changes in applicable law.

01Information We Collect

When you use the mrluky platform, we collect several types of information to ensure our services run smoothly and securely. This information falls into two main categories:

Information You Provide Directly:

  • Full name, date of birth, and gender upon account registration.
  • Active email address and mobile phone number.
  • A copy of your identity document (MyKad or passport) for the KYC process.
  • Bank account or digital wallet details for withdrawal purposes.
  • Any communications you send to our support team.

Automatically Collected Information:

  • IP address, device type, operating system, and web browser used.
  • Session data including pages visited, time spent, and actions taken within the platform.
  • General location data based on IP address (state or country only, not precise GPS location).
  • Game activity logs, financial transactions, and login records.
  • Cookie data and similar tracking technologies (see Section 04).
Note: mrluky does not collect your GPS or precise location information. Location data we collect is limited to general information derived from your IP address for security and compliance purposes only.

02How We Use Your Data

The information we collect is used for the following purposes, and we will not use it beyond the stated scope without your prior consent:

Purpose of Use Legal Basis
Account Management & Identity Verification (KYC) Contractual requirement & legal obligation
Deposit & Withdrawal Processing Contractual requirement
Fraud Prevention & Platform Security Legitimate interest & legal obligation
Customer Support & Communications Contractual requirement
Platform Improvement & Analytics Legitimate interest
Promotional Offers & Bonuses (with consent) Consent
Legal Compliance & Reporting Legal obligation

Mrluky will not sell, rent, or commercialise your personal data to any third party for their own marketing purposes. Any data sharing is strictly limited to operational needs and legal compliance.

03Information Sharing with Third Parties

Mrluky only shares your personal data with third parties in the following limited circumstances:

  • Payment Service Providers: Information required to process deposits and withdrawals is shared with licensed payment providers such as TNG eWallet, DuitNow, and local banks. They are bound by strict confidentiality agreements.
  • Game Software Providers: Some session data is shared with licensed game providers to ensure game integrity and a seamless experience.
  • Regulatory Authority: mrluky will disclose required information to the relevant authorities when mandated by law, such as the Inland Revenue Board (LHDN) or law enforcement agencies.
  • Identity Verification Services: KYC data is shared with recognised third-party identity verification service providers to authenticate your documents.
Our Commitment: All third parties that receive your data are required to sign a Data Processing Agreement (DPA) that prohibits them from using your information for any purpose other than those specified.

Mrluky does not share your personal data with advertisers, data brokers, or third-party marketing companies for targeted advertising purposes without your explicit consent.

04Cookies & Tracking Technologies

Mrluky uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
  • Preference Cookies: Saving your preferences such as language, display theme, and other settings for a more personalized experience.
  • Analytics Cookies: Help us understand how users interact with the platform for improvement purposes. This data is collected anonymously.
  • Security Cookies: Help detect suspicious activity, unauthorized login attempts, and other security threats.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the mrluky platform and you may be unable to log in or use some features properly.

Third-Party Cookies: Some third-party service providers, such as analytics vendors, may also set cookies in your browser. The use of these cookies is subject to the respective provider's privacy policy.

05Data Security Measures

Mrluky implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, or misuse:

  • Encryption in Transit: All communications between your device and mrluky servers are encrypted using TLS 1.3 protocol with 256-bit encryption.
  • Encryption at Rest: Sensitive data stored in our databases is encrypted using AES-256.
  • Two-Factor Authentication (2FA): We encourage all users to enable 2FA for an added layer of protection on their accounts.
  • Regular Security Audits: Penetration testing and security audits are conducted regularly by independent cybersecurity firms.
  • 24/7 Monitoring: Our automated monitoring system detects and responds to security threats around the clock.
Incident Response: In the event of a data breach affecting your information, mrluky will notify you within 72 hours of becoming aware of it, in line with industry best practices and applicable legal requirements.

06Data Retention Period

Mrluky retains your personal data only for as long as it is needed for the purposes stated in this policy or as required by applicable law:

  • Active Account Data: Retained for the duration your account is active and for a reasonable period following account closure.
  • Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's anti-money laundering (AML) legal requirements.
  • KYC Records: Retained for the period prescribed by law, typically no less than 5 years after the business relationship ends.
  • Support Communication Logs: Retained for 2 years for reference and service improvement purposes.
  • Anonymous Analytics Data: May be retained indefinitely as it cannot be linked to any specific individual.

Once the retention period expires, your data will be securely deleted or permanently anonymised. Early deletion requests may be submitted, subject to our legal obligations.

07Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mrluky:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 working days.

Right to Rectification

If your data is inaccurate or outdated, you may request a correction through your account settings or by contacting our support team.

Right to Erasure

You may request deletion of your data, subject to our legal obligations to retain certain records.

Right to Object

You may object to the processing of your data for specific purposes such as direct marketing at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another service provider.

Right to Restrict Processing

You may request that we restrict how we process your data in certain circumstances provided for by law.

08Children's Data

The mrluky platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

All account registrations require age verification through a strict KYC process. If we find that personal data of an individual under 18 years of age has been collected inadvertently, we will take immediate action to delete that data and close the account in question.

Child-Related Complaints: If you believe a minor has registered on our platform, please contact the mrluky support team immediately at [email protected] for immediate action.

09Changes to the Privacy Policy

Mrluky reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When material changes are made, we will:

  • Sending an email notification to the address registered to your account at least 14 days before the changes take effect.
  • Displaying a clear notice on the platform's home page during the notice period.
  • Updating the "Last Updated" date at the top of this document.

Continued use of the mrluky platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account before they take effect.

We recommend checking this page periodically to stay informed about how we protect your information.

10Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, please contact the mrluky Privacy Officer through the following channels:

  • Email: [email protected] — We aim to respond within 24–48 business hours.
  • Live Chat: Available 24/7 via the chat icon at the bottom right of the platform.

For enquiries related to data access rights, corrections, or deletion, please include your account username and a brief description of your request so we can process it more quickly and accurately.

Response Time Commitment: mrluky is committed to responding to all privacy-related enquiries within 3 business days and resolving data rights requests within 21 business days from the date the request is received.

Your Privacy Is Protected. Play with Peace of Mind!

Mrluky is built on trust. Your data is kept secure, your identity is protected, and your gaming experience is always safeguarded. Register now and feel the difference.

Platform for players aged 18 and above only. Play responsibly. Read Responsible Gaming Policy us.

Bahasa Melayu