Rujukan Laman

How 118lucky Handles Your Personal Data

At 118lucky, your personal data is collected only for the purposes of running your account, processing transactions via Touch 'n Go, GrabPay, Boost dan FPX, and keeping your…

Data collected with your consentSecure account storageYour right to access and correctRetention limits appliedContact us to request changes
118lucky How 118lucky Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to access, correct or delete your personal data held by 118lucky, our team is available through the channels below.

Live Chat Start a live chat session directly from the 118lucky site. Our support team can log your data request and confirm receipt in real time, any day of the week.
Email Support Send your data access or correction request to our dedicated privacy email. Include your registered account details so we can locate and verify your record promptly.
Help Centre Visit the Help Centre on 118lucky.com for step-by-step instructions on submitting a data request, updating your contact details, or asking about our retention schedule.
HOW WE PROTECT YOUR DATA

Data Handling, Cookies and Account Security at 118lucky

We apply layered security measures across every part of the account lifecycle — from the moment you register to each withdrawal you request.

Data Collection

We collect only what is necessary: your name, contact details, payment method identifiers, and session data. Nothing beyond what is needed to run your account and process transactions is stored.

Cookie Use

Cookies on 118lucky.com are used for session management, fraud detection, and measuring which pages you visit. You can adjust non-essential cookie preferences through the cookie banner on your first visit.

Account Security

Accounts are protected with encrypted passwords and optional two-step verification. Suspicious login attempts trigger an automatic review before access is granted, keeping your account data safe.

Data Retention

We keep your account data for as long as your account is active and for the period required by Malaysian financial regulations after closure. Data outside those windows is deleted on a scheduled basis.

Who to Contact

Our privacy contact handles all requests related to data access, correction, and deletion. You can reach them via live chat or the privacy email listed in our Help Centre on 118lucky.com.

Requesting Changes

To update or remove your personal data, submit a written request through live chat or email. We verify your identity first, then process the change and confirm completion within seven working days.

Your Privacy Policy Questions, Addressed

These are the questions we hear most often about how 118lucky collects and manages personal data. If your question is not covered here, our support team can help directly.

We collect your name, email address, phone number, payment method identifiers such as those linked to Touch 'n Go or GrabPay, and device or session data used to verify your identity and secure your account.

Payment identifiers are collected to process deposits and withdrawals through Touch 'n Go, GrabPay, Boost dan FPX, and to meet anti-fraud and regulatory requirements under Malaysian law. We do not store full card numbers.

Yes. Submit a written request via live chat or our privacy email and we will provide a summary of the data we hold on your account. We aim to respond within seven working days of verifying your identity.

Contact our support team through live chat or email with the details you want corrected. After verifying your identity, we update the record and send you a confirmation once the change has been applied.

We retain account data for the period required by Malaysian financial and regulatory rules after account closure. Once that retention window closes, your data is deleted from our systems on a scheduled basis.

We do not sell your personal data. Data may be shared with payment processors like Touch 'n Go or GrabPay and with regulatory bodies when required by law. All third-party sharing is governed by data processing agreements.

Send a deletion request in writing via our privacy email or live chat. We will verify your identity, check whether any regulatory retention obligation applies, and confirm the outcome within seven working days.