Privacy Policy lpk7 – How We Protect Your Personal Information in Malaysia

01Introduction & Scope of This Privacy Policy

lpk7 ("we", "platform", "lpk7") operates through the lpk7.best domain and acts as the data controller for all personal information collected from users of our platform in Malaysia. This Privacy Policy applies to all registered lpk7 members, website visitors, mobile app users, and any individual who interacts with the lpk7 platform in any capacity.

We are committed to ensuring that your privacy is protected and respected at all times. This Policy is formulated in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA), which governs how personal information of users in Malaysia is collected, processed, stored and disclosed by organisations engaged in commercial activities.

Lpk7 only collects data that is genuinely necessary for legitimate purposes – to provide the online betting services you use, maintain platform security, meet legal requirements, and continuously improve your experience. We never collect data in excess of what is needed, nor do we retain it longer than necessary.

02Personal Data We Collect

Lpk7 collects various types of personal data depending on how you interact with our platform. The following are the categories of data we collect:

Lpk7 may also receive your personal data from legitimate third-party sources, such as digital identity verification service providers or fraud prevention agencies – solely for the purposes of verifying your identity and preventing unlawful activity on the platform.

03How lpk7 Uses Your Personal Data

Personal data collected by lpk7 is used for the following purposes that are lawful under PDPA 2010:

• Account Management – To create, manage and maintain your lpk7 account, including identity verification, login and password recovery
• Transaction Processing – To process deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX, as well as withdrawals of winnings to your Malaysian bank account or e-wallet
• Service Provision – To allow you to play jackpot slots, place Sports Betting wagers, purchase lottery tickets, enjoy virtual sports, and access all lpk7 features you have registered for
• Security & Fraud Prevention – To detect, investigate and prevent unauthorized access, fraud, money laundering and platform abuse
• Legal Compliance – To comply with Malaysian legal requirements, including PDPA 2010 and reporting to regulatory authorities where required
• Service Communications – To send transaction notifications, security alerts, policy updates and other important account-related information
• Platform Improvements – To analyze aggregated usage patterns (without identifying individuals) in order to improve lpk7's design, performance and features
• Responsible Gaming – To monitor playing patterns and reach out to players who may need responsible gaming support in accordance with lpk7's policy

If lpk7 wishes to use your data for any purpose not stated above – for example, for marketing campaigns or sharing with new partners – we will first obtain your explicit consent through a clear opt-in mechanism. You may withdraw that consent at any time.

04Disclosure of Data to Third Parties

lpk7 does not sell, rent or disclose your personal data to third parties for their own marketing purposes under any circumstances. However, in the course of legitimate platform operations, lpk7 may share your personal data with the following categories of third parties within strict limitations:

• Payment Service Providers – Payment gateways processing DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay and FPX transactions receive only the data necessary to process your payment
• Identity Verification Providers – The KYC service we use to verify the identity of new members in compliance with anti-money laundering legislation
• Technology Service Providers – Server infrastructure and cloud service providers that host the lpk7 platform under strict data protection agreements
• Regulatory Bodies & Law Enforcement – Where ordered by a court or relevant authority in Malaysia, lpk7 will comply with such lawful directives

All third parties with whom we share data are required to uphold data protection standards equivalent to those of lpk7, and may only use that data for the specific purposes defined in our contractual agreements. lpk7 is not responsible for the privacy practices of third-party services you access independently outside our platform.

05Data Security – How lpk7 Protects Your Information

lpk7 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. These measures include:

• 256-bit SSL/TLS Encryption – All communications between your browser or app and lpk7's servers are encrypted using the latest TLS protocol with verified certificates
• Encryption of Stored Data – Sensitive data such as passwords are stored as one-way hashes that cannot be decrypted. Financial data is stored in encrypted form with separately managed keys
• Strict Access Controls – Only lpk7 staff who require access to perform their duties are permitted to access user data, and all such access is recorded in audit logs
• Intrusion Detection System – lpk7 uses continuous monitoring systems to detect suspicious activity and security threats in real time
• Regular Penetration Testing – lpk7's security infrastructure is regularly tested by independent security experts to identify and patch vulnerabilities before they can be exploited
• Disaster Recovery – User data is backed up regularly to a secure, separate location to ensure recovery in the event of an unexpected incident

While lpk7 takes all reasonable steps to protect your data, no security system is 100% impenetrable. In the event of a security incident involving your personal data, lpk7 will notify you within a reasonable timeframe and take the appropriate remedial action in line with the requirements of PDPA 2010.

06Personal Data Retention Period

lpk7 only retains your personal data for as long as necessary for the purpose it was collected, or for as long as required by Malaysian law. The following are our data retention guidelines:

• Active Account Data – Retained for the duration your account remains active with lpk7 and for two years following account closure, for record-keeping and compliance purposes
• Financial Transaction Records – Retained for seven years in accordance with financial reporting requirements and Malaysia's anti-money laundering laws
• KYC Verification Documents – Retained for five years after account closure in accordance with legal requirements
• Support Communication Logs – Retained for three years for reference and dispute resolution purposes
• Security & Activity Log – Retained for 12 months for security investigation and fraud detection purposes
• Non-Essential Cookies Data – Deleted once the session ends or in accordance with your browser settings

Once the applicable retention period has elapsed, lpk7 will securely and irreversibly delete or anonymise your personal data. Should you request early account deletion, we will honour that request in accordance with your rights under PDPA 2010, subject to any minimum retention obligations imposed by law.

07Cookies & Tracking Technologies

Platform lpk7 uses cookies and similar technologies to enhance your user experience. The following are the types of cookies we use:

You can manage your cookie settings through your web browser settings at any time. Please note that deleting or blocking essential cookies may affect the functionality of certain parts of the lpk7 platform. lpk7 does not use third-party tracking cookies for targeted advertising purposes.

08Your Rights Under Malaysia's PDPA 2010

As an lpk7 user in Malaysia, you have the following rights under the Personal Data Protection Act 2010, which lpk7 fully respects and facilitates:

To exercise any of the rights above, submit a written request to lpk7 via email at support@lpk7.best with the subject line "Privacy Rights Request – [your name]". We may require identity verification before processing your request to ensure the security of your data.

09Children's Data & Young User Protection

Platform lpk7 is intended solely for adults aged 18 and above. lpk7 does not knowingly collect, process, or store the personal data of any individual under the age of 18.

During the registration process, lpk7 carries out age verification to ensure that only adults can sign up and use the platform. If we discover that we have inadvertently collected personal data belonging to a child, we will delete that information and close the relevant account immediately.

If you are a parent or guardian and believe that your child has accessed or registered an lpk7 account, please contact us immediately at support@lpk7.best so that we can take the appropriate action without delay.

10Cross-Border Data Transfers

In the course of operating the platform lpk7, some of your personal data may be transferred to or processed in countries outside Malaysia – for example through the use of international cloud services or technology providers operating globally.

When your personal data is transferred outside Malaysia, lpk7 ensures that such transfers are carried out with adequate safeguards through one of the following mechanisms:

• Transfers to countries approved by the Minister under PDPA 2010 as providing an adequate level of data protection
• A binding Data Processing Agreement that guarantees protections equivalent to those required under Malaysia's PDPA
• With your explicit consent after you have been informed of the risks that may arise from such a transfer

Lpk7 does not transfer personal data to countries or territories that lack adequate data protection without putting appropriate additional safeguards in place. If you would like to know more about the cross-border data transfers we carry out, please contact us at the email address provided in the Contact Us section.

11Amendments to This Privacy Policy

lpk7 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new operational needs. Each updated version will display a new "Updated" date at the top of this page.

For material amendments – those that substantially change how we collect or use your personal data – lpk7 will endeavour to provide at least 14 days' advance notice before the amendment takes effect, via email or in-platform notification on lpk7.

Continued use of the lpk7 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to discontinue use of the platform and request account closure in accordance with the procedure set out in Terms & Conditions lpk7.

12Contact the lpk7 Privacy Officer

For any enquiries, concerns or requests relating to this Privacy Policy and the protection of your personal data at lpk7, please contact us via:

• Email: support@lpk7.best with the email subject line "Privacy Policy Enquiry"
• Live Chat: Via the Live Chat feature within the lpk7 platform – available 24 hours a day, 7 days a week

Our Malay-speaking team will respond to your privacy enquiries within 5 business days. For urgent data security issues – such as if you suspect your account has been compromised – please use live chat for immediate assistance.

For information on how to use the lpk7 platform, please check Frequently Asked Questions us. For the full terms governing use of the platform, please refer to Terms & Conditions lpk7. For information on responsible gaming tools, visit Responsible Gaming.