Reference

How lucky118 Handles Your Personal Information

We built this page to be straight with you about what data we collect when you open an account, make a deposit, or contact support — and exactly what we do with it.

Account data kept securePayment activity handled separatelyYour rights, clearly statedContact path always openAvailable where local law permits
lucky118 How lucky118 Handles Your Personal Information
REACH OUR TEAM

How to Contact Us About Your Data

If you want to review, correct, or request deletion of your personal data, our support team handles these requests directly. Use live chat for the fastest response, or send a written request by email with your account username and the specific data action you need. Players in Subang Jaya and across Malaysia reach us through the same channels — no region-specific queue.

Team online

Live Chat

Open the chat widget from any page on lucky118. Identify yourself with your registered username and describe your data request clearly.

Email Support

Send a written data request to our support address. Include your account username and the action you need — review, correction or deletion.

Account Settings

Some data updates — like your contact number or linked e-wallet — can be handled directly inside your account settings without contacting support.

HOW WE PROTECT IT

Data Handling, Cookies and Account Security

We apply layered security across your account — from the moment you log in with your OTP to how your payment records from Boost or GrabPay are stored. Cookies help us remember your session and keep the lobby responsive; you can manage non-essential cookies through your browser settings at any time. Retention periods and your rights under applicable law are set out below.

Encryption in Transit

All data exchanged between your device and lucky118 travels over SSL. This covers login, account updates, and every payment confirmation from Touch 'n Go eWallet or Boost.

Cookie Management

We use session cookies to maintain your login state and analytics cookies to see which parts of the lobby you visit. Non-essential cookies can be turned off in your browser without affecting account access.

Data Retention

Account records are kept while your account is active and for a period after closure as required by applicable law. You can request a copy of your data at any point via live chat.

Access Control

Only verified support staff with a specific need can access your account record. OTP authentication at login adds a second check that no one else can access your account from an unrecognised device.

Privacy Policy Questions Answered

These are the questions we hear most often about how your data is handled at lucky118. If something is not covered here, live chat connects you to a support agent who can address your specific account situation.

We collect your name, email, contact number and identity verification details. If you deposit via GrabPay or Touch 'n Go eWallet, we also log the transaction reference — not your wallet credentials.

We do not sell your data. We share it only with payment processors needed to complete your transaction and with service providers who operate under strict data handling agreements on our behalf.

Contact support via live chat or email with your registered username. State that you want a data summary and we will process the request in line with applicable law and respond to you directly.

You can request deletion. Where legal or fraud-prevention obligations require us to retain certain records for a minimum period, we will tell you which records those are and when they can be removed.

Session cookies keep you logged in. Analytics cookies help us see lobby usage patterns. You can block non-essential cookies in your browser settings; this will not lock you out of your account.

We store transaction references and amounts for reconciliation, not your PIN or banking credentials. Boost, DuitNow and FPX transactions pass through their own secure processors before the reference reaches us.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.