Laga88 Privacy Policy – Malaysia Member Personal Data Protection

Laga88 values the privacy of every member who uses our platform. As an online entertainment platform operating for the Malaysian market, we understand how important your trust is to us, especially when it comes to your personal information.

This Privacy Policy is designed to transparently explain how we collect, store, use, share, and protect your personal data when you use the laga88 brand's website, mobile app, and all associated services.

This document applies to all registered members and visitors of the laga88 website, regardless of how you access our platform — whether via web browser, app, or any other digital channel. We encourage you to read this document carefully and contact our support team if anything is unclear.

Laga88 collects several categories of personal data depending on how you interact with our platform. Below are the full details of the data types we collect:

2.1 Data You Provide Directly

• Identity information: Full name, date of birth, gender, and ID card number.
• Contact information: Email address, phone number, and residential address.
• Financial information: Bank account details, bank name, and account number for deposit and withdrawal purposes.
• KYC verification documents: Copies of your identity card, passport, bank statement, or other identity verification documents.
• Account information: Username, password (stored in encrypted hash form), and account preferences.

2.2 Data Collected Automatically

• Technical data: IP address, browser type, operating system, screen resolution, and device information.
• Usage data: Pages visited, session duration, games played, login frequency, and navigation patterns.
• Transaction data: Deposit history, withdrawals, wagering activity, and all financial transactions within your account.
• Location data: General location information based on IP address for geographic verification and fraud prevention purposes.
• Cookie data: Session information, user preferences, and website performance data (see Section 6).

Every piece of data we collect has a clear and legitimate purpose. Below is a summary of how data is used at laga88:

For purposes marked as "Optional", you may withdraw your consent at any time without affecting the core services you receive from laga88.

Laga88 only processes your personal data on a lawful basis. The legal bases we rely on are as follows:

• Contract performance: Processing necessary to fulfill our contractual obligations to you as a registered member, including the provision of gaming services and transaction processing.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) requirements, KYC obligations, and reporting to competent authorities.
• Legitimate interests: Processing for the purposes of platform security, fraud prevention, risk management, and internal analysis that does not unreasonably affect your rights and freedoms.
• Consent: For marketing activities, promotional communications, and behavioral analytics, we will obtain your explicit consent beforehand. You may withdraw this consent at any time.

Laga88 does not sell or trade your personal data to third parties. However, in certain limited situations, we may need to share data with the following parties:

• Payment service providers: Banks and e-wallet providers that process your financial transactions. They are subject to strict confidentiality obligations.
• KYC service providers: Third-party identity verification companies that assist us in authenticating the documents you submit.
• Game software providers: Game content providers that may require minimum session information to deliver games correctly. Data sharing is limited and strictly controlled.
• Legal authority: Law enforcement agencies or regulatory bodies when required to do so by law, court order, or valid legal process.
• Cloud services and infrastructure: Technical infrastructure service providers that support our platform operations, subject to strict data processing agreements.

Laga88 uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. Below are the types of cookies we use:

• Session cookies (required): Required to maintain your login session and ensure the platform functions correctly. These cookies cannot be disabled.
• Preference cookies: Storing language preferences, display themes, and other personal settings to provide a more comfortable experience.
• Analytical cookies: Collecting information about how you use the platform to help us improve website performance and design. These cookies can be disabled through your browser settings.
• Security cookies: Helping to identify suspicious activity such as unauthorized login attempts or unusual usage patterns.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the laga88 platform. For more information on managing cookies, refer to your web browser's help documentation.

Laga88 retains your personal data only for as long as necessary to fulfill the original purpose of collection or to comply with legal requirements. Our data retention policy is as follows:

• Active account data: Retained for the duration your account is active and for a period following account closure as required by applicable law.
• Financial transaction records: Retained for a minimum of 7 years in accordance with financial compliance and anti-money laundering requirements.
• KYC documents: Retained for as long as required by law, typically between 5 and 10 years after the business relationship ends.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Analytics data: Deleted or anonymized after 24 months.

When your data is no longer needed, laga88 will securely delete or anonymize it using industry-recognized methods, ensuring it cannot be recovered or misused.

Laga88 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• Data encryption in transit: All communications are secured by TLS 1.3 protocol with 256-bit SSL encryption.
• Data encryption at rest: Sensitive data such as financial information and KYC documents are encrypted using AES-256 algorithms before storage.
• Role-based access control: laga88 staff can only access data relevant to their responsibilities. Access to sensitive data requires multi-layer authorization.
• Regular security audits: Our platform undergoes regular penetration testing and security audits conducted by independent third-party cybersecurity firms.
• 24/7 Monitoring: A real-time threat detection system monitors our platform around the clock to identify and respond to any suspicious activity.
• Two-factor authentication (2FA): We provide and encourage the use of 2FA for all member accounts as an additional layer of security.

As a data subject, you have the following rights regarding your personal data held by laga88. All requests can be submitted to our support team via Live Chat 24/7:

• Right to access: You may request a copy of the personal data we hold about you. We will provide this information in a readable format within a reasonable timeframe.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to request a correction. For basic information, you can update it directly through your account settings.
• Right to erasure: Under certain circumstances, you may request that we delete your personal data. Please note that this right is subject to legal obligations that may require us to retain certain data.
• Right to restrict processing: You may request that we restrict the processing of your data in certain situations, such as during a dispute about data accuracy.
• Right to object: You may object to the processing of your data for specific purposes such as direct marketing at any time.
• Right to data portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to withdraw consent: For consent-based processing, you may withdraw your consent at any time without affecting core services.

In some situations, your personal data may be transferred to or accessed from countries outside Malaysia. This occurs when we use cloud infrastructure providers or international technology partners.

Laga88 ensures that any international data transfers are conducted with adequate safeguards in place, including:

• Ensuring that the recipient country has a level of data protection equivalent to or higher than Malaysia.
• Implementing recognized standard contractual clauses to protect your rights.
• Ensuring that data recipients outside the country are bound by equivalent security and confidentiality obligations.

The laga88 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

If we discover that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the relevant account. If you have reason to believe we hold a child's personal data, please contact us immediately.

Laga88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any significant changes will be communicated to you via your registered email or in-platform notification.

The "Updated" date at the top of this document will always reflect the latest version. We encourage you to review this Privacy Policy periodically. Your continued use of the laga88 platform after any changes are posted constitutes your acceptance of the latest version of this policy.