Privacy Policy lapak99 — Malaysia Personal Data Protection

Lapak99 collects personal information from members through several different methods. Understanding the types of data we collect is the first step in understanding how we protect your privacy.

Information provided directly during registration:

• Full name as it appears on your official Malaysian identification document (MyKad or passport).
• An active Malaysian mobile number for account verification purposes.
• A valid email address for account communications and important notifications.
• Date of birth for age verification, as Lapak99 requires all members to be a minimum of 18 years old.
• The password chosen by the member — stored in encrypted form and never visible to Lapak99 staff.

Financial information for transaction processing:

• EWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay) used for deposits and withdrawals.
• Bank account numbers for FPX transactions via Maybank2u or CIMB Clicks.
• A complete record of all deposit and withdrawal transactions conducted on Lapak99, denominated in Malaysian Ringgit (RM).

Technical information collected automatically:

• The IP address of the device used to access Lapak99.
• The type and version of your web browser and your device's operating system.
• Platform usage pattern data, including pages visited, games played, and session duration.
• Cookie data to improve the user experience and maintain login sessions.

Lapak99 uses members' personal information only for legitimate purposes that have been stated at the time of collection. Below is a full explanation of how your data is used in the operation of the Lapak99 platform:

Lapak99 does not use members' personal data to make automated decisions that carry legal or significant consequences for members, without human review in cases that require judgement. Any decision relating to account closure, bonus suspension or disciplinary action involves review by a qualified team at Lapak99.

Lapak99 understands that sharing personal data with third parties is a sensitive matter requiring full transparency. We do not sell, rent, or trade member personal information to any party for commercial purposes. However, there are limited situations in which lapak99 may need to share data with certain parties:

Technical service providers: Lapak99 uses carefully selected third-party technology service providers to carry out specific platform functions, including payment processing, cloud computing and performance analytics. All such providers are bound by strict confidentiality agreements and may only use data for the specific purposes designated by Lapak99.

Licensed game providers: To deliver a seamless gaming experience, a small amount of members' technical data (such as anonymised session IDs) may be shared with internationally licensed game providers such as Pragmatic Play, PG Soft and Evolution Gaming, solely for the purposes of ensuring game integrity and fraud detection.

Legal obligations: lapak99 will disclose member personal information to the relevant authorities when required under Malaysian law, including court orders, official investigation requests related to fraud or money laundering, and compliance reporting obligations. In such situations, lapak99 will notify the affected member unless prohibited from doing so by law.

Lapak99 uses cookies and similar tracking technologies to improve the platform experience. Cookies are small text files stored on your device when you visit the Lapak99 website. They help the platform remember your preferences, maintain your login session, and deliver a more personalised experience.

Types of cookies used by Lapak99:

• Essential cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are essential to keeping your account secure.
• Performance cookies: We collect anonymised data on how visitors use the Lapak99 platform to help us identify slow-loading pages or technical issues that need fixing.
• Functional cookies: Saves your preferences such as language, theme, and display settings so you don't have to reconfigure them each time you use lapak99.

You can control or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality and security of your Lapak99 account. Lapak99 does not use cookies to track your activity on other websites or for third-party advertising purposes.

Lapak99 members' personal data is stored in a secure server environment with multi-layered access controls. Only staff with a specific operational need who have passed the required security screening may access member information — and every instance of access is automatically logged for audit purposes.

Lapak99 retains members' personal data for as long as the account remains active and for the required period following account closure to meet legal obligations. As a general guide:

• Financial transaction records in Malaysian Ringgit (RM) are retained for a minimum of 7 years in accordance with Malaysia's accounting and tax legal requirements.
• Identity verification information is retained for 5 years after account closure for anti-money laundering (AML) compliance purposes.
• Customer support communications data is retained for 2 years for reference and dispute resolution purposes.
• Technical data and access logs are retained for 12 months for security and platform analytics purposes.

Once the applicable retention period has ended, data will be permanently deleted or anonymised using industry-recognised procedures. Lapak99 does not retain data longer than is necessary for the stated purposes.

Lapak99 continually invests in security infrastructure to protect member personal data from unauthorised access, alteration, disclosure, or destruction. Our technical and organisational security measures include:

• Data transmission encryption: All data transmitted between members' devices and Lapak99's servers uses TLS 1.3 protocol with 256-bit SSL encryption — making it virtually impossible for unauthorised parties to intercept.
• Encryption of data at rest: Sensitive data such as passwords and financial details are stored in encrypted form using industry-standard algorithms. Member passwords are stored as irreversible hashes — meaning no one, including Lapak99 staff, can view your password in its original form.
• Multi-layered access controls: A role-based access control system ensures that each Lapak99 staff member can only access the data required for their specific role. Access to sensitive member data requires multi-level authorisation.
• Continuous security monitoring: An automated 24/7 monitoring system detects and flags any suspicious activity on the lapak99 platform, including failed login attempts, unusual transaction patterns, or access from unrecognised locations.
• Regular penetration testing: Lapak99 undergoes regular security testing (penetration testing) by independent security experts to identify and close any vulnerabilities that may exist in our systems.

While Lapak99 takes all reasonable steps to protect your data, no security system can be guaranteed 100% foolproof. You also play an important role in keeping your own data safe — use a strong password, never share your login credentials, and contact us immediately if you suspect your account has been compromised.

As a Lapak99 member and an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

To exercise any of the rights above, please contact the lapak99 privacy team by email at support@lapak99.bid with the subject line "Data Privacy Rights Request", or via our 24-hour customer support live chat. We will verify your identity before processing your request to protect the security of your account.

Lapak99 pays close attention to the privacy and security of members' financial information, given that real money in Malaysian Ringgit (RM) is involved. All payment methods accepted by lapak99 — DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX via Maybank2u or CIMB Clicks — are Malaysian financial platforms recognised and regulated by Bank Negara Malaysia.

Members' financial information is protected through several additional layers of security beyond standard encryption. Lapak99 operates on a strict need-to-know basis when handling financial information — only staff from the finance department who have undergone comprehensive background checks may access detailed member financial records.

All financial transaction records on Lapak99 are stored securely and can be made available to members upon request. This includes a complete history of deposits, withdrawals, bets, winnings and bonus activity — all in Malaysian Ringgit (RM) with precise timestamps. These records are useful for members who wish to review their account activity or for personal tax purposes.

Lapak99 strictly prohibits the use of its platform by anyone under the age of 18. We do not knowingly collect or process personal data from minors. Should we become aware that a child's or minor's personal data has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the associated account.

Lapak99 employs multiple mechanisms to detect and prevent registration by underage individuals, including date-of-birth verification during sign-up and the right to request age verification documents (Malaysian MyKad or passport) at any time. If you are aware that someone under 18 may have used or attempted to use the lapak99 platform, please contact us immediately at support@lapak99.bid.

Lapak99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes in how we operate the platform. Any material changes to this Privacy Policy will be communicated to members via their registered email and/or a prominent notice within the platform at least 14 days before the changes take effect.

The "updated" date at the top of this document indicates when this Privacy Policy was last reviewed. We encourage members to check this page periodically to stay informed about how your data is managed by Lapak99.

If you have any questions, concerns, or complaints regarding the privacy of your data at lapak99, please reach out to us through the following channels:

• Email: support@lapak99.bid (use the subject line "Data Privacy Inquiry" for priority processing)
• Live Chat: Available 24/7 within the Lapak99 platform — response within minutes
• WhatsApp: Available for privacy and security enquiries that require a more detailed explanation

Our Bahasa Malaysia-speaking team is ready to explain any aspect of this Privacy Policy in plain, easy-to-understand language. We are committed to resolving all privacy-related inquiries and complaints within 10 business days.