Privacy Policy luxky8 – Malaysia User Data Protection

01Introduction & Scope of This Policy

This Privacy Policy is published by luxky8 and applies to all users who access or use our platform, including the website, mobile app, and any related services we provide. It describes our practices for collecting, using, disclosing, and protecting your personal information.

We understand that your trust in luxky8 depends largely on how we manage your personal data. That is why we take a fully transparent approach in this document — no confusing legal language, just clear and honest explanations.

By using luxky8 services, you agree to the practices described in this Privacy Policy. If you do not agree, please stop using the platform and contact us to close your account.

02Types of Personal Data We Collect

Luxky8 only collects data necessary to provide, improve, and protect our services. This data falls into three main categories:

We never collect sensitive information such as biometric data, health information or political affiliations without your explicit prior consent.

03How We Use Your Data

The personal data we collect is used exclusively for the following purposes and will not be used outside this scope without prior notice:

• Account management — Securely creates, verifies, and maintains your user account.
• Transaction processing — Manages deposits, withdrawals, and all financial transactions on the platform.
• KYC Compliance — Meets the identity verification requirements mandated by regulatory bodies.
• Platform security — Detects and prevents fraud, hacking, and account abuse.
• Customer Support — Enables the support team to understand your context and provide accurate, timely assistance.
• Service improvement — Analyses usage patterns in aggregate to improve the platform's design and functionality.
• Communication — Sends important notifications related to your account, security, and promotions you have subscribed to.

We do not use your data to make automated decisions that could materially affect your rights without human review. Every significant decision involving your account is reviewed by our team.

04Third-Party Data Sharing & Disclosure

Luxky8 does not sell, rent, or trade users' personal data to any third party for commercial purposes. However, there are limited situations where we may need to share information:

• Payment service providers — Payment gateways and banks that process your deposits and withdrawals require relevant transaction information to complete the transactions.
• Technical service providers — Cloud infrastructure and hosting services that manage the platform's technical operations are all bound by strict confidentiality agreements.
• Regulatory authority — When required by law, court order, or direction from a relevant authority, we will disclose the necessary information.
• Third-party identity verification — KYC services that help us verify user identities, subject to strict data protection agreements.

All third parties we work with are contractually bound to protect user data to the same or higher standards that we ourselves apply. We conduct regular reviews of our partners' privacy practices.

05luxky8 Data Security Measures

We continuously invest in our security infrastructure to ensure your personal data remains protected at all times. The security measures we implement include:

• Data encryption in transit — All communications between your device and luxky8 servers are protected with TLS 1.3 protocol and 256-bit SSL encryption.
• Data encryption at rest — Sensitive information such as passwords is stored in a non-reversible hashed format, while financial data is fully encrypted.
• Internal access controls — Only staff with a legitimate business need are permitted to access user data, and every access is automatically logged.
• Two-factor authentication (2FA) — Available for all user accounts and mandatory for internal staff accounts.
• Continuous threat monitoring — Automated monitoring systems operate 24/7 to detect suspicious activity and block cyber threats.
• Regular Penetration Testing — Security audits by independent experts are conducted regularly to identify and address any system vulnerabilities.

06Use of Cookies & Tracking Technologies

Luxky8 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. There are four categories of cookies we use:

• Essential cookies — Required for core platform operations such as Login authentication and session security. Cannot be disabled.
• Functional cookies — Remembers your preferences such as language selection and display settings to streamline repeat visits.
• Analytics cookies — Collects usage data anonymously to help us understand how users interact with the platform. This data is processed in aggregate.
• Performance cookies — Helps us identify pages or features with technical issues so they can be resolved quickly.

You can manage your cookie settings through your browser settings. However, disabling essential cookies may affect certain functions of the luxky8 platform.

07User Rights Regarding Personal Data

As a luxky8 user, you have the following rights regarding your personal data. We respect and facilitate the exercise of each right:

08Data Retention Period

Luxky8 does not retain your personal data longer than necessary for the purpose it was collected, or as required by applicable law. Our data retention guidelines are as follows:

• Active account data — Retained for the duration your account remains active and for a period of 5 years after account closure for legal compliance purposes.
• Financial transaction records — Retained for a minimum of 7 years in line with accounting and anti-money laundering legal requirements.
• Communication data — Support chat logs and emails are retained for 2 years for customer service reference.
• Technical data and system logs — Retained for 90 days for security and technical debugging purposes.
• Cookies and session data — Active sessions automatically expire after a period of inactivity and analytics cookies are deleted after 13 months.

Once the specified retention period has elapsed, data will be securely deleted using methods that ensure it cannot be recovered.

09Protection of Underage Users

The luxky8 platform is strictly for users aged 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that personal data of an underage individual has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who find that their child has registered on this platform are requested to contact our support team immediately.

We also actively conduct age verification during the registration and KYC process to ensure all users meet the minimum age requirement.

10Amendments to This Privacy Policy

Luxky8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, or applicable legal requirements.

When we make material changes, we will:

• Updating the "Effective Date" at the top of this document.
• Posting a clear notice on the platform's home page at least 14 days before the changes take effect.
• Sending email notifications to all active registered users.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the platform after an amendment's effective date indicates your acceptance of the latest version of this policy.

11Contact Us About Privacy

If you have any questions, concerns, or wish to submit a request regarding your personal data, our team is ready to assist through the following channels:

• In-app live chat — The fastest way to get a response, available 24 hours a day, 7 days a week.
• Support email — For more detailed enquiries or those requiring documentation, email [email protected]
• Account Settings — For data access, correction, or deletion requests, you can initiate the process directly through the "Privacy" section in your luxky8 account settings.

All privacy-related enquiries will be handled by our experienced Data Protection Officer (DPO), who is well-versed in applicable data protection laws.