Lawu88 Privacy Policy – Malaysia Player Personal Data Protection

Lawu88 collects your personal information through several different channels throughout your interactions with our platform. This collection is carried out transparently and covers only the data genuinely required to deliver the best service to you.

The categories of information we collect include:

• Identity information: Full name, date of birth, gender, national identity card number (MyKad) or passport number.
• Contact information: Email address, mobile number, and current residential address.
• Financial information: Bank account number, account holder name, digital wallet details (Touch 'n Go, DuitNow, etc.), and deposit and withdrawal transaction history.
• Verification information: Uploaded KYC documents including copies of identity card, passport, and proof of address.
• Usage data: Login details, IP address, device type, operating system, web browser type, pages visited, and gaming session duration.
• Behavioural data: Game history, betting patterns, game preferences, and interactions with promotional features.
• Communications: Records of conversations with our customer support team via live chat, email, or other channels.

Every piece of information we collect is used for specific and legitimate purposes. Lawu88 is committed to not using your data beyond the scope stated in this privacy policy without first obtaining additional consent from you.

We also use aggregated data that cannot be personally identified for analytics and service improvement purposes. This type of data cannot be re-linked to any individual.

Lawu88 processes your personal data based on one or more legal bases recognised under Malaysia's Personal Data Protection Act 2010 (PDPA). We do not process your data arbitrarily — every data processing action has a clear legal justification.

• Contractual compliance: Processing required to fulfil our obligations to you as a registered lawu88 user, including account management, payment processing, and the provision of gaming services.
• Legal obligation: Processing required to comply with legal obligations including anti-money laundering (AML) regulations, KYC requirements, and directives from competent authorities.
• Legitimate interest: Processing for fraud detection, platform security, abuse prevention, and service improvement that does not infringe upon your fundamental rights.
• Consent: Processing for marketing and promotional communications based on the explicit consent you provided during registration or through your account settings.

Lawu88 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in the course of operating the platform, we may need to share your data with certain categories of parties as described below:

• Technology service providers: Companies that provide server infrastructure, cloud services, and database management systems that run the lawu88 platform. All such providers are bound by strict data processing agreements.
• Payment gateway: FPX, DuitNow, Touch 'n Go eWallet providers, and payment card networks that process your financial transactions. These providers comply with PCI-DSS standards and maintain their own privacy policies.
• KYC service providers: A third-party identity verification platform that helps us authenticate your identification documents securely and efficiently.
• Game providers: Game development companies that require minimal data to enable game functions to operate correctly within the lawu88 platform.
• Legal Authority: Law enforcement agencies, regulatory bodies, or courts requiring data disclosure pursuant to a court order or valid legal obligation.

Lawu88 continuously invests in the latest security infrastructure to ensure your personal data is always protected against unauthorised access, accidental disclosure, alteration, or loss.

The technical security measures we implement include:

• 256-bit SSL/TLS Encryption for all data communications between your browser and lawu88's servers.
• Data at rest encryption for all sensitive information stored in our database using the AES-256 algorithm.
• Two-factor authentication (2FA) that is available and encouraged for all user accounts to add an extra layer of security.
• Intrusion Detection System (IDS) that monitors network traffic in real time to detect and block suspicious activity.
• Data segregation where financial and identity information is stored in a segregated environment with strict access controls.
• Regular security audits by independent third parties to identify and address any potential vulnerabilities.
• Internal access control policy that ensures only authorized personnel can access users' personal data, and only for legitimate work purposes.

Lawu88 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable laws and regulations. We do not retain data longer than necessary.

• Active account data: Retained for the duration your account remains active and for an additional 5 years following account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years after each transaction, in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• KYC documents: Retained for 5 years after the business relationship ends, in accordance with the requirements of the Anti-Money Laundering Act 2001.
• System logs and usage data: Retained for 12 months for operational and security purposes, then anonymised or deleted.
• Support communication records: Retained for 2 years from the date of last interaction.

Once the retention period expires, your data will be securely deleted or anonymised in a manner that can no longer be attributed to you as an individual.

Under Malaysia's PDPA and the lawu88 privacy policy, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Lawu88 uses cookies and other tracking technologies to enhance your experience on our platform, analyse usage patterns, and ensure security features run smoothly. The following are the types of cookies we use:

• Session cookies (required): These cookies are essential for the platform's core functions, such as maintaining login status and session security. They cannot be disabled without affecting platform functionality.
• Preference cookies: Store your settings and preferences such as language, preferred betting denominations, and interface layout for a more personalised experience.
• Analytics cookies: Help us understand how players interact with the platform for the purpose of continuous improvement. This data is processed in aggregate and without individual identification.
• Security cookies: Used to detect and prevent fraudulent activity, suspicious login attempts, and other security threats.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of the lawu88 platform.

The lawu88 platform is a service exclusively for individuals aged 18 years and above. We do not accept registrations from minors and do not knowingly collect any personal data from individuals under the age of majority.

Our automated age verification system is designed to screen registrations from individuals who do not meet the age requirement. Our KYC process also serves as an additional verification layer to ensure compliance with this policy.

If you believe a minor has registered on our platform without authorization, please contact our privacy team immediately so that appropriate action can be taken.

Lawu88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in how we protect your data.

Any material amendments will be communicated to you through:

• A prominent notice on the lawu88 platform homepage at least 7 days before any amendment takes effect.
• Email notifications to the address registered in your account for amendments that materially affect your privacy rights.
• Updates the "Last updated" date at the top of this page.

Your continued use of the lawu88 platform after any amendment takes effect constitutes your acceptance of the revised policy. If you do not agree with the changes made, you have the right to close your account and request data deletion in accordance with the established procedure.

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, the lawu88 privacy team is ready to assist you. We are committed to providing professional and timely responses.

For official data rights requests, please include your full name, registered email address, and a clear description of your request. We will verify your identity before processing any request to ensure the security of your data.