Privacy Policy

This Privacy Policy ("Policy") issued by Lepak88 ("the Company", "we", "us", "our") and applies to all personal data collected, processed, stored, and transmitted in connection with the operation of the Lepak88 online gaming platform, accessible at https://lepak88.cam and any associated mobile interfaces or applications (collectively, the "Platform").

This Policy is designed to inform you — the registered player or visitor ("you", "your",User") — about the nature of personal data that Lepak88 collects, the purposes for which it is processed, the parties with whom it may be shared, the security safeguards we apply, and the rights you hold in respect of your own personal information.

By registering an account on the Platform, depositing funds, or otherwise making use of the Services offered, you acknowledge that you have read, understood, and agree to the practices described in this Policy. This Policy is to be read in conjunction with our Terms and Conditions, which are available at lepak88.cam/terms-conditions.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers such as IP address or device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, disclosure, erasure, or destruction — whether automated or manual.
• "Data Controller" means Lepak88, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party engaged by Lepak88 to process personal data on our behalf, strictly in accordance with our documented instructions.
• "KYC" means Know Your Customer — identity verification procedures required by applicable anti-money laundering (AML) regulations before withdrawal or as otherwise mandated.
• "Cookies" means small text files placed on your device by the Platform to facilitate functionality, session management, and analytics.
• "Sensitive Personal Data" means a subset of personal data requiring heightened protection, including government-issued identity documents, financial account details, and records related to health or other legally protected categories.

Lepak88 collects personal data in the following categories, depending on your level of engagement with the Platform:

Account Registration Data

• Full legal name as per government-issued identification
• Date of birth (used to verify compliance with the21+ age requirement)
• Residential address, including postcode and state within Malaysia
• Email address and Malaysian mobile phone number
• Username and encrypted password
• Nationality and, where required, national identification number (MyKad number for Malaysian citizens)

Identity Verification (KYC) Data

• Copies of government-issued identity documents (e.g., MyKad, passport)
• Proof of residential address (e.g., utility bill, bank statement dated within 90 days)
• Selfie or liveness verification image where required by our compliance procedures
• Source of funds documentation for high-value transactions

Transaction & Financial Data

• Deposit and withdrawal transaction records, including amounts in MYR, timestamps, and payment method identifiers
• Bank account details, e-wallet identifiers (e.g., Touch 'n Go eWallet, Boost, GrabPay), or cryptocurrency wallet addresses used for transactions
• Bonus and promotional activity records

Technical & Usage Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser version
• Session duration, pages visited, and features accessed within the Platform
• Betting history and game activity logs

Communications Data

• Records of live chat conversations, email correspondence, and other interactions with our support team
• Feedback, survey responses, and any voluntary information you provide during Platform use

Lepak88 collects personal data through the following channels:

1. Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to surveys and promotions.
2. Automatically via the Platform — through server logs, cookies, and similar tracking technologies that record technical and usage data as you interact with the Platform. See Section 8 (Cookies & Tracking) for full details.
3. From third-party verification providers — where we engage KYC and AML screening services to verify your identity and assess risk, those providers may supply us with verification outcomes and associated data records.
4. From payment processors — transaction data is relayed to us by our integrated payment service providers, including banks, e-wallet operators (such as Touch 'n Go eWallet, Boost, and GrabPay), and FPX/DuitNow infrastructure providers.

Lepak88 processes your personal data for the following specific purposes:

• Account Administration: To create, maintain, and manage your player account, including authentication, account security, and profile updates.
• Transaction Processing: To facilitate MYR deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency channels.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML), counter-terrorist financing (CTF), and Know Your Customer (KYC) regulations, including the reporting of suspicious transactions to relevant authorities where required by law.
• Age Verification: To confirm that all players accessing the Platform are aged 21 or above, in compliance with our responsible gambling obligations and applicable international gaming standards.
• Customer Support: To investigate and resolve queries, complaints, and disputes raised through our live chat or email support channels.
• Responsible Gambling Monitoring: To identify and respond to indicators of problem gambling behaviour, including the enforcement of self-imposed limits and the proactive outreach to at-risk players.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct.
• Platform Improvement: To analyse aggregated usage patterns and improve the functionality, performance, and user experience of the Platform — using anonymised or pseudonymised data wherever practicable.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and news about new features. You may withdraw this consent at any time by updating your communication preferences in account settings or by contacting support.

Lepak88 processes your personal data one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract with you — namely, operating your account, processing wagers, and handling deposits and withdrawals — is carried out on the basis that it is necessary for the performance of our agreement with you.
• Legal Obligation: Certain processing activities — particularly identity verification, transaction monitoring, and the retention of financial records — are carried out to comply with applicable legal and regulatory requirements, including AML/CTF legislation.
• Legitimate Interests: We process technical and usage data for the purposes of platform security, fraud detection, and service improvement, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where no other legal basis applies — primarily in the context of direct marketing communications — we process your data on the basis of your explicit, freely given, and informed consent, which may be withdrawn at any time.

Lepak88 does not sell, rent, or trade your personal data. However, your data may be shared with the following categories of third parties in limited, controlled circumstances:

• Payment Service Providers: Banks, e-wallet operators, and payment gateway providers involved in processing your deposits and withdrawals. These include, but are not limited to, providers operating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank infrastructure. Data shared is limited to what is necessary to complete the transaction.
• KYC & Identity Verification Providers: Third-party providers engaged to verify your identity, age, and address in compliance with our regulatory obligations. These providers are contractually bound to process your data solely for the purposes of identity verification and to maintain appropriate security standards.
• Regulatory Authorities & Law Enforcement: Where required by applicable law, court order, or regulatory mandate, we may be required to disclose personal data to government authorities, law enforcement agencies, or our licensing regulator without prior notice to you.
• Technology & Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers who support the operation of the Platform. All such providers operate under data processing agreements that restrict their use of your data to provision of services on our behalf.
• Professional Advisors: Legal, compliance, and financial advisors engaged by Lepak88 in connection with disputes, audits, or regulatory proceedings, subject to professional confidentiality obligations.

The Lepak88 Platform uses cookies and similar tracking technologies to provide core functionality, manage user sessions, and gather aggregated analytics data. The following categories of cookies are in use:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies manage your login session, maintain your account authentication state, and enable core security features. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your preferences — such as language settings, preferred payment method, and display options — so that the Platform behaves consistently across sessions.
• Analytics Cookies: Collect anonymised data about how users interact with the Platform — including pages visited, session duration, and navigation paths — to help us improve the user experience. This data is processed in aggregate and does not identify individual users.
• Security Cookies: Used to detect and prevent fraudulent logins, bot activity, and other security threats including cross-site request forgery (CSRF) protection.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality or performance of the Platform. Continued use of the Platform following acceptance of our cookie notice constitutes consent to the use of cookies as described above.

Lepak88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, as required by applicable law, or as necessary to defend against legal claims. The following general retention periods apply:

• Account Data: Retained for the duration of your account's active status, plus a minimum of five (5) years following account closure, in accordance with standard AML record-keeping obligations.
• Transaction Records: Retained for a minimum of seven (7) years following the transaction date, consistent with applicable financial record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following the completion of verification or account closure, whichever is later.
• Customer Support Records: Retained for two (2) years following the resolution of a support case, unless the case involves a dispute or regulatory matter requiring longer retention.
• Technical & Usage Logs: Generally retained for 90 days to 12 months for security and performance analysis purposes, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any identifiable individual.

Lepak88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and our servers
• AES-256 encryption for sensitive data stored at rest, including financial records and identity documents
• Multi-factor authentication options for player accounts and mandatory two-factor authentication for all internal administrative access
• Real-time intrusion detection and automated alerting systems monitoring for anomalous access patterns
• Regular independent penetration testing and security audits conducted by qualified third-party security professionals
• Strict role-based access controls ensuring that internal staff can access personal data only to the extent required for their specific function
• Comprehensive employee data protection training and confidentiality obligations binding all staff handling personal data

While we apply industry-leading security practices, no system is entirely immune to breach. In the event of a data breach that poses a risk to your rights or interests, Lepak88 will notify affected players in accordance with applicable notification obligations and will take immediate remedial action.

Subject to applicable law and any overiding legal obligations, you hold the following rights in respect of your personal data held by Lepak88. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days.

The Lepak88 Platform is strictly intended for adults aged21 years and above. We do not knowingly collect personal data from individuals below this age. Age verification is a mandatory step in the account registration and KYC process.

If Lepak88 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. We will also investigate how the underage registration occurred and implement measures to prevent recurrence.

If you believe that a minor has registered on the Platform or that a minor is accessing gambling content through your account, please contact our support team immediately so that we may take appropriate action without delay.

Lepak88 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via the email address on file and/or via a prominent notice on the Platform, fewer than seven (7) days before the amended Policy takes effect — except where immediate amendment is required by law.

The effective date at the top of this document will be updated to reflect the date of the most recent revision. Your continued use of the Platform following the effective date of an amended Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how your personal data is protected.

If you wish to exercise your data rights, have a question about this Privacy Policy, or wish to raise a data protection concern, please contact the Lepak88 privacy team using the details below. We take all data rights requests and privacy concerns seriously and will respond promptly and in good faith.

• Email: [email protected] — Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 via the support widget on the Platform homepage
• Response Time: All privacy enquiries are acknowledged within 5 business days and substantively responded to within 30 calendar days

Lepak88 serves players across Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and throughout Malaysia. We are committed to upholding the highest standards of personal data protection for every player who trusts us with their information.