Your privacy is more than a legal obligation to mrlucy — it is a genuine commitment. This document clearly explains what data we collect, why it is needed, how it is used, and your rights as the owner of that data.
Every decision relating to your data is made based on these principles, which we never compromise.
All data transmitted between your device and mrlucy servers is protected with 256-bit SSL encryption — the same standard used by Malaysian banking institutions.
Mrlucy only collects data that is genuinely necessary to provide its services. We do not collect irrelevant or excessive information without clear justification.
You have the right to access, amend, or request deletion of your personal data at any time. Requests are processed within 7 working days at no charge.
Mrlucy does not sell, rent, or share your personal data with any third party for marketing purposes without your explicit consent.
All data management practices at mrlucy comply with the Malaysia Personal Data Protection Act 2010 (PDPA) and relevant international standards.
In the event of any data security breach affecting your information, mrlucy will notify you within 72 hours of detecting the incident.
This Privacy Policy explains how mrlucy.net ("mrlucy", "we", "Platform") collects, uses, stores, and protects your personal data when you use our website or the mrlucy mobile app. By registering or using the platform, you agree to the practices described in this policy. If you do not agree, please discontinue use and contact us to close your account.
Mrlucy collects various types of information needed to deliver a secure, fair, and fully functioning service. We divide this data into two main categories: data you provide directly and data collected automatically while you use the platform.
Why KYC Is Required: Identity verification is a legal requirement under anti-money laundering (AML) regulations and consumer protection rules. It also protects you from unauthorized use of your account by irresponsible parties.
Every piece of information we collect has a specific purpose and is not used for any other purpose without your consent. Below is a full list of data usage purposes on the mrlucy platform:
Mrlucy only sends marketing communications if you have opted in to receive them. You can unsubscribe at any time through the notification settings in your account.
Mrlucy does not sell or rent your personal data to any third party for marketing or commercial gain. However, there are limited situations where data sharing is necessary and legally permitted.
| Data Recipients | Purpose of Sharing | Legal Basis |
|---|---|---|
| Payment Providers | Processing FPX, DuitNow, and e-wallet deposits and withdrawals | Contractual requirements |
| KYC Providers | Secure automated identity verification | Legal obligation |
| Game Providers | Anonymous player ID for game session management | Service requirements |
| Authorities | Compliance with court orders or official investigations | Legal obligation |
| Cloud / Infrastructure Providers | Secure data storage backed by data protection agreements | Technical requirements |
Our Commitment: All third parties we work with are required to uphold the same data protection standards as mrlucy and are not permitted to use your data for any purpose other than those stated.
The security of your data is a responsibility that mrlucy takes very seriously. Our security infrastructure is built in layers to ensure your data is protected from every possible angle.
Your personal data is retained for as long as necessary to fulfil the purposes stated in this policy — typically 5 years after account closure to meet financial oversight requirements, or longer if required by law.
Mrlucy uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.
You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect the functionality of the mrlucy platform. For cookie management instructions by browser type, refer to your browser's help section.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and mrlucy's policy, you have several important rights regarding your personal data that you may exercise at any time.
Request a copy of all personal data we hold about you in a readable format.
Request correction of inaccurate or incomplete data in your account records.
Request deletion of your personal data when it is no longer needed, subject to legal obligations.
Object to the processing of your data for direct marketing purposes at any time.
Request your data in a structured, portable format that can be transferred to another platform.
Request restriction of your data processing in specific situations provided for by law.
To exercise any of the above rights, contact the mrlucy data protection team via live chat customer support or email at [email protected]. Requests will be processed within 7 working days.
The mrlucy platform is an adult service intended solely for users aged 21 and above. mrlucy does not knowingly collect personal data from individuals below the specified age.
Child Protection: If you believe that someone under the age of 21 has registered an account on the mrlucy platform, please contact us immediately at [email protected]. We will investigate and close the account, and promptly delete all associated data.
Mrlucy reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or user feedback. Any significant amendments will be communicated to you via:
Continued use of the platform after any amendment takes effect constitutes acceptance of the latest version of the Privacy Policy. If you do not agree with the changes, you may close your account and request deletion of your data.
If you have any questions, concerns, or requests regarding this Privacy Policy or how mrlucy handles your personal data, our team is ready to assist through the following channels:
Response Time: All privacy-related inquiries will be answered within 3 business days. More complex requests such as data access or account deletion are resolved within 7 business days.