Privacy Policy

LPK888 ("we", "us", "our", "the Platform") is an online gaming platform serving players across Malaysia, including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and nationwide. We take data privacy seriously. This Privacy Policy ("Policy") describes how LPK888 collects, processes, stores, and discloses personal data obtained from registered players and visitors to our platform.

This Policy applies to all personal data processed by LPK888 in connection with the operation of our website, mobile interface, player accounts, payment processing, customer support services, and marketing communications. It should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together govern the overall relationship between LPK888 and its players.

By registering an account on LPK888 or otherwise using our Services, you acknowledge that you have read, understood, and consented to the collection and processing of your personal data as described in this Policy. If you do not agree with any part of this Policy, you should not use the LPK888 platform.

The following definitions apply throughout this Privacy Policy:

LPK888 collects personal data that is necessary to operate player accounts, process transactions, comply with legal obligations, and deliver a high-quality gaming experience. The categories of personal data we collect are as follows:

We collect only the minimum data necessary for each stated purpose. We do not collect sensitive categories of data (such as health data, biometric data, or political opinions) unless you voluntarily provide such information in the context of a responsible gambling self-assessment.

LPK888 collects personal data through the following channels and mechanisms:

• Direct Collection: Information you provide when you register an account, complete identity verification, submit a support request, respond to a survey, or correspond with us via email or live chat.
• Automated Technical Collection: Data collected automatically when you access the LPK888 platform, including IP addresses, device identifiers, browser data, and session logs. This data is gathered through standard web server technology and analytics tools.
• Cookies and Tracking Technologies: Cookies, pixel tags, and similar technologies that are placed on your device when you visit the LPK888 website. For full details, see Section 10 (Cookies) below.
• Third-Party Sources: Identity verification providers used for KYC processes may supply confirmed personal data back to LPK888. Payment processors may transmit confirmation data relating to deposit and withdrawal transactions.
• Gameplay Activity: Data generated during gameplay sessions, including wager sizes, game selections, session durations, and win/loss records. This data is recorded automatically by the platform.

LPK888 processes your personal data for the following specific purposes. Each purpose is tied to a legitimate operational or legal need:

• Account Management: Creating and maintaining your player account, processing login requests, updating account information, and handling account closure requests.
• Transaction Processing: Processing deposits and withdrawals in MYR via Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and supported cryptocurrency channels. Verifying payment sources and confirming fund availability.
• Identity Verification: Conducting KYC checks to confirm player identity and age (21+). Complying with anti-money-laundering (AML) obligations and financial crime prevention requirements.
• Responsible Gambling: Monitoring gameplay patterns for indicators of problem gambling behaviour. Administering deposit limits, session controls, cooling-off periods, and self-exclusion tools. Communicating responsible gambling resources to players where appropriate.
• Customer Support: Responding to inquiries, resolving complaints, and maintaining records of correspondence for quality assurance and dispute resolution purposes.
• Security and Fraud Prevention: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Platform Improvement: Analysing aggregated usage data to improve game selection, interface design, payment processing, and overall platform performance.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out of marketing emails at any time.
• Legal and Regulatory Compliance: Meeting obligations under applicable laws and regulations, responding to lawful requests from regulatory or law enforcement authorities, and maintaining required records.

LPK888 processes your personal data on the basis of one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between LPK888 and you, including operating your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws, including AML obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out for LPK888's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — principally in respect of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

LPK888 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Your data may be shared with third parties only in the following specific and controlled circumstances:

• Payment Processors: We share necessary financial data with payment service providers including banks (Maybank, CIMB, Public Bank, Hong Leong Bank), e-wallet operators (Touch 'n Go, Boost, GrabPay), and DuitNow/FPX infrastructure operators to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML compliance service providers who assist in confirming player identity and age in accordance with applicable requirements.
• Game Providers: Licensed game studios and providers may receive limited technical data (such as session tokens) required to deliver game content. These providers do not receive full player profiles.
• Technology Infrastructure Partners: Cloud hosting, security, and analytics service providers who process data on our behalf under contractual data processing agreements.
• Legal and Regulatory Authorities: Competent authorities, regulators, or law enforcement agencies where disclosure is required by law, court order, or legitimate regulatory request. LPK888 will notify affected players where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or transfer of substantially all of LPK888's business assets, player data may be transferred as part of that transaction. Players will be notified in advance of any such transfer.

All third parties with whom LPK888 shares personal data are required to handle that data in accordance with applicable data protection principles and are prohibited from using it for any purpose beyond the scope agreed with LPK888.

LPK888 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

LPK888 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following measures:

• Encryption: All data transmitted between your device and LPK888's servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data within LPK888's systems is restricted on a strict need-to-know basis. Staff who handle personal data are trained in data protection principles and are bound by confidentiality obligations.
• Two-Factor Authentication: Player accounts are protected by two-factor authentication (2FA) options to reduce the risk of unauthorised access resulting from compromised credentials.
• Intrusion Detection: LPK888 operates real-time intrusion detection and monitoring systems that alert our security team to suspicious activity on the platform or its infrastructure.
• Data Breach Response: In the event of a data breach that poses a risk to player rights and freedoms, LPK888 will notify affected individuals and relevant authorities within the timeframes required by applicable law.

While LPK888 takes all reasonable steps to protect your data, no system is entirely impenetrable. You are responsible for maintaining the security of your own account credentials. If you suspect your account has been compromised, please contact our support team immediately.

LPK888 uses cookies and similar tracking technologies on our website to enhance the user experience, maintain session continuity, analyse traffic patterns, and support security functions. The types of cookies we use are as follows:

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair platform functionality and prevent you from accessing certain features of LPK888. LPK888 does not use cookies to serve third-party advertising.

As a data subject, you have rights in respect of your personal data held by LPK888. We are committed to facilitating the exercise of these rights promptly and without unnecessary obstacles. The rights available to you include:

• Right of Access: You may request a copy of the personal data LPK888 holds about you, together with information about how that data is processed. We will respond to valid access requests within 30 days.
• Right to Rectification: If personal data we hold is inaccurate or incomplete, you may request that it be corrected. You may also update certain information directly within your account settings.
• Right to Erasure: You may request deletion of personal data we hold about you where there is no lawful basis for continued processing, subject to overriding legal retention obligations (see Section 8).
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is disputed or where you have objected to processing.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including the use of your data for marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We may require identity verification before processing your request. There is no charge for exercising your rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

The LPK888 platform may contain references to third-party services, payment providers, or partner platforms. LPK888 is not responsible for the privacy practices of any third-party service, and this Policy does not apply to any external website or service that you access independently of LPK888.

We encourage you to review the privacy policies of any third-party services you interact with, particularly payment processors and e-wallet providers such as Touch 'n Go, Boost, and GrabPay. LPK888 has no control over the data practices of these independent services beyond the data processing agreements in place between us and those providers.

LPK888 operates an online gaming platform restricted to players aged 21 years and above. We do not knowingly collect, process, or retain personal data of individuals under the age of 21. If we become aware that personal data has been submitted by or in relation to a person under 21, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor may have provided personal data to LPK888, please contact us immediately at [email protected] so that we may investigate and take appropriate action. We take the protection of younger Malaysians from exposure to gambling very seriously.

LPK888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or operational requirements. The "Last Updated" date at the top of this document will be revised whenever material changes are made.

Where changes are material, we will notify registered players via email or by displaying a prominent notice on the LPK888 platform no less than 7 days before the updated Policy takes effect, except where immediate changes are required for legal, security, or regulatory reasons.

Your continued use of the LPK888 platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should cease using the platform and request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by LPK888, please contact us through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Support Availability: 24 hours a day, 7 days a week, 365 days a year
• Players Served: Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and all of Malaysia

When contacting us about a data rights request or privacy concern, please include your registered email address and the nature of your request. We will respond within the timeframes set out in Section 11 of this Policy.

For responsible gambling queries, self-exclusion requests, or account closure, please indicate the nature of your request clearly and your message will be directed to the appropriate specialist team.