Privacy Policy

Introduction

This Privacy Policy (hereinafter referred to as "the Policy") sets out how lepak44 (hereinafter referred to as "the Platform", "we", "us" or "our"), accessible athttps://lepak44.cam, collects, processes, stores and protects the personal information of individuals (hereinafter referred to as "User", "you" or "your") who interact with our platform.

lepak44 is an English-language online entertainment information platform serving Malaysian adults. We recognise that personal privacy is a fundamental right. This Policy reflects our commitment to processing data fairly, transparently and only to the extent necessary for legitimate operational purposes.

By registering an account, visiting the lepak44 website or using any of our services, you acknowledge that you have read, understood and agreed to the data practices described in this Policy. If you do not agree with any part of this Policy, you must refrain from using the lepak44 platform.

This Policy should be read alongside the lepak44 Terms and Conditions and our Responsible Gambling policy, both of which are incorporated by reference where applicable.

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings assigned below:

Information We Collect

lepak44 collects personal data in the following categories, depending on the nature of your interaction with the Platform:

3.1 Registration and Account Data

• Full legal name as it appears on official identification
• Date of birth (to verify the21+ age requirement)
• Email address and account username
• Residential address (city, state, postcode — including Malaysian addresses in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and elsewhere)
• Phone number, where provided voluntarily

3.2 Identity Verification (KYC) Data

• Malaysian National Identity Card (MyKad) number or passport details
• Scanned copies or photographs of government-issued identity documents
• Proof of address documents (utility bills, bank statements)
• Payment method verification documents (bank account or e-wallet confirmation)

3.3 Financial and Transaction Data

• Deposit and withdrawal amounts in MYR or supported cryptocurrency equivalents
• Payment method details — FPX bank references, DuitNow transfer IDs, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), Maybank, CIMB, Public Bank, Hong Leong account references
• Transaction history, timestamps and reference numbers
• Bonus claim and wagering activity records

3.4 Technical and Device Data

• IP address and approximate geolocation
• Browser type and version, operating system
• Device identifiers and screen resolution
• Session duration, pages visited and interaction logs

3.5 Communications Data

• Records of correspondence between the User and lepak44 support
• Responsible-gambling requests, account restriction instructions and dispute records
• Feedback or enquiry submissions

How We Use Your Information

lepak44 processes personal data for the following purposes. Each purpose is matched to a corresponding legal basis in Section 5.

Legal Bases for Processing

lepak44 relies on the following legal bases when processing personal data:

• Contractual necessity: Processing required to fulfil the lepak44 Terms and Conditions, including account setup, payment processing and bonus administration.
• Legitimate interests: Processing necessary to protect the platform's integrity, detect fraud, prevent abuse of promotional offers and ensure the security of other users' data.
• Legal obligation: Processing required to comply with applicable laws, regulatory instructions or lawful requests from competent authorities.
• Consent: Where lepak44 relies on consent as a basis for processing — example, optional marketing communications — consent may be withdrawn at any time by contacting lepak44 support. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

Data Sharing and Disclosure

lepak44 does not sell, rent or exchange personal data with third parties for marketing purposes. We may share data in the following limited circumstances:

• Payment service providers: FPX operators, DuitNow network participants, e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), and banking institutions (Maybank, CIMB, Public Bank, RHB, Hong Leong) receive only the data necessary to process your transactions.
• KYC and identity verification services: Third-party providers engaged to verify government-issued identification documents receive identity data under strict contractual data-processing obligations.
• Fraud and security services: External systems used to detect suspicious transactions or platform abuse may receive technical and transaction data in anonymised or pseudonymised form where possible.
• Legal authorities: lepak44 will disclose personal data to law enforcement agencies, regulators or courts when required by a valid legal obligation, warrant or court order.
• Business successors: In the event of a merger, acquisition or asset sale involving the lepak44 platform, user data may be transferred to a successor entity, subject to equivalent data protection obligations.

Cookies and Tracking Technologies

lepak44 uses cookies and similar technologies (including local storage objects and session tokens) to provide a functional, secure and coherent user experience. The following cookie categories are in use:

• Strictly necessary cookies: Required for session authentication, account security and core platform functionality. These cannot be disabled without preventing the platform from operating correctly.
• Performance and analytics cookies: Used to measure page performance, session duration and navigation patterns. Data collected is aggregated and used to improve the lepak44 platform experience.
• Functional cookies: Preserve user preferences such as language settings, display preferences and responsible-gambling tool configurations between sessions.
• Third-party cookies: Where lepak44 integrates third-party payment or verification services, those providers may set their own cookies subject to their own privacy policies. lepak44 does not control third-party cookie behaviour.

You may manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies may affect your ability to access authenticated areas of the lepak44 platform.

Data Retention

lepak44 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce agreements. Specific retention guidelines are as follows:

• Account and KYC data: Retained for a minimum of five (5) years after Account closure to satisfy anti-moneylaundering and regulatory recordkeeping requirements.
• Transaction data: Financial records including deposit and withdrawal history are retained for a minimum of seven (7) years in accordance with standard financial record obligations.
• Support and communications records: Retained for three (3) years from the date of the most recent communication, or longer if required for an active dispute or legal proceeding.
• Technical and session logs: Generally retained for up to twelve (12) months for security monitoring and fraud investigation purposes, after which they are anonymised or deleted.

Where data is no longer required, lepak44 will ensure it is securely deleted or anonymised in way that prevents re-identification.

Data Security

lepak44 implements a range of technical and organisational security measures to protect personal data against unauthorised access, misuse, alteration or loss. These measures include, but are not limited to:

• Encrypted data transmission using industry-standard TLS protocols for all connections to the lepak44 platform
• Access controls and role-based permissions that limit employee access to personal data on a need-to-know basis
• Secure storage of sensitive identity and financial documents with restricted system access
• Regular internal reviews of data handling processes, system configurations and access logs
• Contractual obligations placed on third-party service providers to maintain equivalent security standards

While lepak44 takes all reasonable steps to protect your personal data, no online system is entirely risk-free. Users are responsible for maintaining the confidentiality of their own account credentials and for notifying lepak44 support promptly if they suspect any unauthorised access to their account.

User Rights

Subject to applicable data protection law and certain operational limitations, registered lepak44 users have the following rights in respect of their personal data:

To exercise any of these rights, please contact lepak44 via the support email listed in Section 15. Requests will be acknowledged within two (2) business days and resolved within a reasonable period depending on the nature and complexity of the request. In certain cases, lepak44 may need to verify your identity before processing a data rights request.

Third-Party Services and Links

The lepak44 platform may integrate or reference third-party services — including payment gateways, KYC verification tools and game content providers — that operate under their own privacy frameworks. Where a User interacts with a third-party service through the lepak44 interface, that service's own privacy policy governs the data collected during that interaction.

lepak44 is not responsible for the privacy practices or content of third-party services. We encourage users to review the privacy documentation of any external service they interact with in course of using the platform.

Children and Minors

The lepak44 platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process or retain personal data from individuals under the age of 21. If we become aware that a minor has accessed the platform or provided personal data, the relevant account will be immediately suspended, the data will be deleted and the incident will be reviewed in accordance with our responsible-gambling obligations.

Parents or guardians who believe a minor may have accessed the lepak44 platform are encouraged to contact lepak44 support immediately using the details in Section 15.

International Data Transfers

lepak44 operates under an international licensing framework. Personal data collected through the platform may be transferred to, stored in or processed in countries outside Malaysia where our operational or hosting infrastructure is located. Such transfers are carried out with appropriate safeguards in place — including contractual data-protection clauses between lepak44 and relevant third-party processors — to ensure that your data is protected to a standard consistent with applicable data-protection principles regardless of where processing takes place.

Amendments to This Policy

lepak44 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or platform operations. Material amendments will be communicated through a notice on the lepak44 platform with reasonable advance notice where practicable. The effective date at the top of this document will be updated to reflect the date of the latest revision.

Continued use of the lepak44 platform following the effective date of any updated Policy constitutes acceptance of the revised terms. If you do not agree to the updated Policy, you should cease use of the platform and may request Account closure.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the way lepak44 processes your personal data, please contact our support team using the details below. We aim to acknowledge all correspondence within two (2) business days.