LPK88 Privacy Policy — Protecting Your Personal Data in Malaysia

1 Personal Information We Collect

LPK88 collects various types of personal information from members to enable us to provide a safe, seamless, and responsible betting experience. The information collected falls into two main categories:

A. Information You Provide Directly:

• Full name as shown on your official identification document.
• National identity card number (MyKad) or passport number for KYC identity verification purposes.
• An active email address and a Malaysian phone number.
• Date of birth for age verification (18 years and above).
• Payment method details such as bank account numbers, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or DuitNow numbers linked to your account.
• Any additional information you provide when contacting the LPK88 support team.

B. Information Collected Automatically:

• IP address and general geolocation data (state within Malaysia).
• Your web browser type and version, as well as your device's operating system.
• Session data includes pages visited, time of visit, and navigation patterns within the LPK88 platform.
• Transaction data including deposit history, withdrawals, and betting records.
• Account login records and security activity logs.
• Cookie data and similar tracking technologies (see Section 7).

2 Purpose of Use of Personal Information

LPK88 uses collected personal information solely for legitimate and transparent purposes. Below is a detailed table of data usage purposes and their corresponding legal bases:

LPK88 will not use your personal information for any other purpose without first obtaining your consent. If we intend to process your data for a new purpose, you will be informed and given the option to agree or decline.

3 Information Sharing & Disclosure

LPK88 does not sell, rent, or trade members' personal information to any third party for commercial purposes. However, under certain circumstances, we may need to share your personal information with the following parties:

• Payment Service Provider: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers need to receive the necessary transaction information to process your deposits and withdrawals.
• KYC Service Provider: Third-party identity verification companies that assist LPK88 in meeting KYC and anti-money laundering (AML) requirements.
• Game Software Provider: Live casino, slots, and sports game providers operating under valid licences may receive minimum session data necessary to deliver the gaming experience.
• Malaysian Authority: LPK88 will disclose personal information if required by Malaysian law, court order, or a lawful request from law enforcement authorities.
• Technical Partners: Cloud service and technical infrastructure providers bound by strict confidentiality and data protection agreements with LPK88.

4 Data Retention Period

LPK88 retains members' personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. LPK88's data retention schedule is as follows:

• Active account data: Retained for the duration of the active account period and three years after account closure.
• Financial transaction records: Retained for seven years in line with Malaysian financial regulatory requirements.
• KYC identity verification documents: Retained for five years after the business relationship ends, in line with AML requirements.
• Customer support communication logs: Retained for two years for reference and dispute resolution purposes.
• Access and security logs: Retained for 12 months for security and digital forensics purposes.
• Cookie and analytics data: Retained according to the specific retention period of each cookie (see Section 7).

Once a retention period expires, LPK88 will securely delete or anonymise your personal data using industry-standard methods. In specific cases where data must be retained longer due to legal requirements or ongoing disputes, you will be notified.

5 Your Privacy Rights Under PDPA 2010

As an LPK88 member residing in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA):

To exercise any of the above rights, please contact LPK88's Data Protection Officer (DPO) by email at privacy@lpk88.net including your LPK88 account number and a brief description of your request. LPK88 will process your request within 30 business days.

In some cases, LPK88 may be unable to fulfil a deletion request in full if the data in question is still required to meet legal obligations, such as AML record-keeping mandated by Bank Negara Malaysia. You will be informed if this applies to your request.

6 Data Security & Protection Measures

LPK88 continuously invests in security infrastructure to ensure members' personal data remains protected at all times. Key security measures we have implemented include:

• Data encryption in transit: All communications between your browser and LPK88's servers are protected using TLS 1.3 protocol and 256-bit SSL certificates.
• Data encryption at rest: Sensitive data such as passwords (hashed with bcrypt) and payment information are stored in encrypted form using AES-256.
• Strict access controls: Access to LPK88 members' personal data within internal systems is restricted to staff who require it to carry out their duties only (least privilege principle).
• Continuous security monitoring: Our Intrusion Detection and Prevention System (IDS/IPS) monitors LPK88's infrastructure 24 hours a day, seven days a week.
• Regular penetration testing: LPK88 conducts third-party independent security testing (penetration testing) at least once a year.
• Data backup: Members' personal data is securely backed up across redundant data centres to ensure continuity of service.

In the event of a data breach affecting your personal information, LPK88 will notify you within 72 hours of becoming aware of it, in line with industry best practices and the guidelines of the Malaysian Communications and Multimedia Commission (MCMC).

7 Cookie Policy

LPK88 uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and understand how members use our services. The types of cookies used are as follows:

Essential cookies cannot be disabled as they are required for the basic operation of the LPK88 platform. For analytics and marketing cookies, you can manage your preferences through:

• Cookie settings that appear upon your first visit to lpk88.net.
• Your LPK88 account settings under the Privacy & Cookies section.
• Your web browser settings (Chrome, Firefox, Safari) to block or delete cookies.

Please note that disabling certain cookies may affect the functionality of some sections of the LPK88 platform, including game preference reminders and personalised promotional displays.

8 Cross-Border Data Transfers

Under normal operations, LPK88 processes and stores members' personal data on servers located in Malaysia and the Asia-Pacific region. In specific cases where data needs to be transferred outside Malaysia (e.g., for global cloud services or international gaming software providers), LPK88 ensures that:

• Data transfers are only made to countries or organisations that provide a level of data protection equivalent to Malaysia's PDPA.
• Appropriate data transfer agreements (such as Standard Contractual Clauses) are put in place before any transfer takes place.
• Only the minimum information necessary for the relevant service purpose is transferred.
• Members will be notified of any significant international transfers through updates to this Privacy Policy.

9 Child and Youth Protection

The LPK88 platform is strictly limited to individuals aged 18 and above. LPK88 does not knowingly collect or process personal information from anyone under the age of 18.

If LPK88 finds that we have collected personal information from a minor without appropriate age verification, we will take immediate steps to delete that information and close the account in question. Parents or guardians who believe their child has registered an LPK88 account without authorisation should contact us immediately at privacy@lpk88.net.

10 Links to Third-Party Websites

The LPK88 platform may contain links to or integrations with third-party services in the course of normal operations (e.g., live game providers, payment channels). LPK88's Privacy Policy applies only to data collected directly through the LPK88 platform itself.

LPK88 is not responsible for the privacy practices of third-party websites or services outside our control. We encourage you to read the privacy policy of any third party before providing them with your personal information.

11 Privacy Policy Amendments

LPK88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform improvements. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a prominent notice on the lpk88.net homepage for a minimum of 14 days.
• Sending notification emails to all active members for significant changes.

Continued use of the LPK88 platform after the effective date of any amendment will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your LPK88 account by contacting our support team.