Lapak44 Privacy Policy – Malaysian Player Personal Data Protection

This Privacy Policy applies to all users who register for or use Lapak44's services, regardless of how they access the platform — whether via desktop browser, mobile browser, or any other interface provided by Lapak44. It covers all categories of personal data we may collect in connection with the operation of our online casino and betting platform.

Lapak44 acts as the data controller for all personal data collected through our platform. This means we determine the purposes and means of processing your data. In situations where we engage third-party service providers such as game providers or payment processors, those parties act as data processors bound by strict data protection obligations under agreements we put in place.

Lapak44 only collects data that is genuinely necessary for the purposes defined. We do not collect excessive or irrelevant data beyond what is required to operate our platform. In general, the data we collect falls into three main categories:

Data you provide directly:

• Full name as shown on your official Malaysian identification document.
• Malaysian identity card number (MyKad number) or passport number for identity verification purposes.
• An active Malaysian mobile phone number.
• A valid and active email address.
• Account information for the payment method you use (Touch 'n Go eWallet, GrabPay, DuitNow, FPX via Maybank2u or CIMB Clicks, Boost, ShopeePay) — we only retain information necessary to process transactions and do not store your e-wallet password or PIN.
• Any information you provide when contacting our support team.

Data collected automatically when you use the platform:

• IP address and general geolocation data for location verification and fraud prevention.
• Device information — device type, operating system, model, and screen resolution.
• Browser data — browser type and version used.
• Gaming activity records — betting history, wins, losses, and session durations.
• Transaction log data — deposit history, withdrawals, and account balances.
• Cookie and similar tracking technology data (detailed in Section 6).

Data from third-party sources (in certain circumstances):

• Identity verification information from recognised verification agencies where required for AML compliance.
• Payment transaction data from the payment processors we work with.

Lapak44 processes your personal data on valid legal grounds under Malaysia's PDPA. Every use of your data has a clear and legitimate purpose. The following are the primary purposes for which your data is used:

1. Service provision and management — to create and manage your account, process deposits and withdrawals, and grant you access to all games on the Lapak44 platform, including Live Casino, Sports Betting, slots, and jackpots.
2. Identity verification and security — to verify that you are a legitimate user, prevent fraud, and comply with Know Your Customer (KYC) requirements.
3. Anti-money laundering (AML) compliance — Lapak44 is legally required to monitor and report suspicious transactions to the relevant authorities.
4. Customer Support — to respond to enquiries, resolve technical issues, and provide the support you need in Bahasa Melayu.
5. Platform Improvements — to analyze aggregated usage patterns for improving the performance, design, and user experience of the Lapak44 platform.
6. Account-related communications — to send important notifications about your account, transactions, security, or changes to our terms and policies.
7. Marketing (with your consent) — to send you information about Lapak44 promotions, bonuses, and special offers if you have agreed to receive marketing communications. You may withdraw this consent at any time through your account settings.
8. Responsible Gaming — to monitor playing patterns and identify users who may need responsible gambling support, as well as to enforce the limits and restrictions you have set yourself.

Lapak44 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. We take this principle seriously. That said, there are limited situations where we need to share your data with certain parties in order to operate our platform lawfully and securely:

• Gaming service providers — game providers such as Evolution Gaming and Pragmatic Play are required to receive the minimum session data needed to operate the games you play. They are bound by strict data confidentiality agreements.
• Payment processors — the payment processors we use to facilitate your deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay. Only the data necessary to process transactions is shared.
• Competent authorities — we are required under Malaysian law to disclose data requested by lawful authorities such as the police, courts, or financial regulatory agencies in the course of legitimate investigations.
• Identity verification services — recognised identity verification and KYC agencies to help us verify user identities and prevent fraud.
• Technical infrastructure providers — trusted cloud and hosting service providers that help us operate the platform securely and reliably.

All third parties that receive Lapak44 user data are bound by data processing agreements that require them to protect that data to the same standard we apply ourselves, and to use it only for permitted purposes.

Lapak44 continually invests in security technology and processes to ensure your personal data is always protected to the highest standard. Key security measures we have implemented include:

• 256-bit SSL Encryption — all data transmitted between your browser and Lapak44's servers is encrypted using TLS/SSL protocol with 256-bit keys, the same standard used by Malaysian banking institutions such as Maybank and CIMB.
• Encryption of stored data — sensitive data such as payment information and identification details is stored in encrypted form, not as plain text that can be read directly.
• Strict access controls — only Lapak44 staff with a legitimate business need are permitted to access user data, and all access is logged for audit purposes.
• 24/7 security monitoring — our automated monitoring system continuously analyzes suspicious activity and responds to identified security threats.
• Regular Security Audits — Lapak44 conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.
• Two-factor authentication (2FA) — we recommend and enable two-factor authentication for user accounts as an additional layer of security.

While we take all reasonable steps to protect your data, no security system in the world is one hundred percent impenetrable. Lapak44 is committed to notifying affected users within a reasonable timeframe in the event of any material data breach, in accordance with the requirements of Malaysia's PDPA.

Lapak44 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how the platform is used. The following are the types of cookies we use:

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect your ability to use certain features of the Lapak44 platform properly.

Lapak44 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. The following are general guidelines on retention periods:

• Active account information — retained for as long as your account remains active on the Lapak44 platform.
• Financial transaction records — retained for a minimum of 7 years from the date of transaction, in accordance with Malaysian financial and tax legislation.
• KYC verification records — retained for a minimum of 5 years after account closure, in accordance with applicable AML requirements.
• Gaming activity records — retained for 5 years for dispute resolution and legal compliance purposes.
• Customer support communication logs — retained for 3 years following case resolution.
• Marketing data (where you have given consent) — retained until you withdraw your consent.

Once the prescribed retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you. Our data deletion process uses methods that ensure deleted data cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the international privacy principles we follow, you have the following rights regarding your personal data that we hold. All rights requests may be submitted via support@lapak44.click:

• Right of Access — you have the right to request a copy of the personal data we hold about you, including account information, transaction records, and gaming activity history.
• Right to Rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request a correction within a reasonable timeframe.
• Right to Erasure — under certain circumstances, you may request the deletion of your personal data. However, this right is subject to our legal obligations to retain certain records for prescribed periods.
• Right to Restriction of Processing — you may ask us to restrict the processing of your data in certain situations, such as when there is a dispute regarding the accuracy of the data.
• Right to Withdraw Consent — for any data processing that relies on your consent, you may withdraw that consent at any time — including consent for marketing communications.
• Right to Lodge a Complaint — if you believe we have processed your data in a manner that violates data protection law, you have the right to lodge a complaint with the relevant authority in Malaysia.

The lapak44 platform is a service exclusively intended for individuals who are of age 18 years and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If Lapak44 discovers that we have inadvertently collected data from individuals under the age of 18, we will take immediate steps to delete that data and close the account in question. We encourage parents and guardians to monitor their children's online activity and make use of appropriate parental control tools.

If you become aware that a person under the age of 18 has registered for or is using the Lapak44 platform, please notify us immediately at support@lapak44.click so that appropriate action can be taken without delay.

Lapak44 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements in how we protect user data. The latest version of this Privacy Policy will always be available at lapak44.click/privacy-policy.

For material amendments — that is, changes that significantly alter the way we collect or use your personal data — Lapak44 will endeavor to provide reasonable notice via email or in-platform notification at least 14 days before the amendment takes effect. For minor changes or those required for urgent legal compliance, amendments may take effect earlier.

Your continued use of the lapak44 platform after any amendments take effect will be considered your acceptance of the revised Privacy Policy. We recommend checking this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the lapak44 privacy team through the following channels:

• Email: support@lapak44.click — please include "Privacy Enquiry" in your subject line to ensure your message is routed to the right team promptly.
• Live Chat: available 24 hours a day, 7 days a week within the Lapak44 platform — the fastest option for urgent privacy enquiries.

Our privacy team is committed to responding to all enquiries within 5 business days. For formal data rights requests, we will respond within 30 calendar days from the date the request is received. If we require additional time due to the complexity of the request, we will notify you within that initial 30-day window.

Lapak44 takes every privacy enquiry and complaint seriously and will thoroughly investigate each case before providing a complete and meaningful response. Your trust is the asset we value most.