Laju8 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Players

This Privacy Policy explains how Laju8 ("We", "Platform", or "Company"), which operates an online casino platform at laju8.my, collect, use, store, protect and, in certain circumstances, share your personal information ("Personal Data") when you use our services.

This policy applies to all users of the Laju8, including unregistered visitors, registered members, and active players. It covers all interactions with our platform — including account registration, deposits via Touch 'n Go eWallet, GrabPay or DuitNow, gaming activity, use of customer support services, and any communications with our team.

Laju8 operates as a data controller under Personal Data Protection Act 2010 (PDPA) Malaysia. This means we bear full responsibility for ensuring that your personal data is processed in accordance with the principles set out in the Act — including the general principle, notice and choice principle, disclosure principle, security principle, retention principle, data integrity principle, access principle, and accountability principle.

Laju8 only collects data that is strictly necessary to provide you with a safe, fair and effective service. We do not collect data excessively, nor do we retain information that is irrelevant to the platform's operations. The following are the categories of data we collect:

Personal Identification Data

• Full name as shown on your MyKad or Malaysian passport.
• Date of birth for verification of the 18+ age requirement.
• Identity card number (MyKad) or passport number — collected during the KYC (Know Your Customer) process only.
• A selfie or photo of an identity document when required for identity verification.

Contact Data

• An active Malaysian mobile phone number.
• The email address used for account communications.
• Residential address (required for certain verification purposes).

Financial Data

• E-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay) used for deposits and withdrawals.
• Registered Malaysian bank account numbers used via FPX (Maybank2u, CIMB Clicks).
• Records of deposit transactions, withdrawals, and betting activity within the platform.
• Note: laju8 does not store credit or debit card numbers. All payments are processed through secure payment gateways.

Technical & Usage Data

• Your device's IP address.
• Device type, operating system and web browser used.
• Gaming activity logs including login times, games played, and betting records.
• Cookie data and other tracking technologies (see Section 7).
• Records of communications with the customer support team Laju8.

Every piece of data that Laju8 collected has a clear and lawful purpose. We do not use your data for any purpose not stated below without first obtaining your additional consent.

You may withdraw your consent to marketing communications at any time by updating your preferences in your account settings Laju8 you or by contacting our support team. Withdrawing your marketing consent will not affect your ability to use the platform or receive communications related to your account and transactions.

Laju8 does not sell, rent or disclose your personal data to third parties for their commercial marketing purposes. However, in the course of operating the platform lawfully and securely, there are limited circumstances in which your data may be shared with the following parties:

Laju8 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law. The following are our data retention guidelines:

• Active account data: Retained for the duration of your membership and no longer than seven (7) years after account closure — in compliance with Malaysia's anti-money laundering legal requirements.
• Financial transaction records: Retained for seven (7) years in accordance with Malaysian accounting and tax legal requirements.
• Customer support communication records: Retained for two (2) years from the date of the last communication for reference and dispute resolution purposes.
• Technical log data: Retained for ninety (90) days for technical diagnostic purposes and detection of suspicious activity.
• Cookie data: Depending on the cookie type — from the current session up to a maximum of two (2) years (see Section 7).

When data is no longer needed and there is no legal obligation to retain it, Laju8 will delete or destroy that data using secure, non-recoverable methods. All data servers Laju8 are housed in secure data centres with strict physical and digital access controls.

Laju8 continuously invests in security infrastructure to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The following are the security layers we have in place:

• 256-bit SSL/TLS Encryption: All communications between your device and laju8 servers are fully encrypted using 256-bit SSL/TLS protocol — the same security standard used by leading financial institutions and banks.
• Data-at-Rest Encryption: Personal data stored in our databases is encrypted using AES-256 encryption — meaning that even if someone were to gain access to the database, the data cannot be read without the appropriate encryption key.
• Two-Factor Authentication (2FA): We recommend all players Laju8 to enable 2FA on their account. With 2FA active, even if someone knows your password, they will be unable to log in without the verification code sent to your mobile phone.
• Least-Privilege Access Control: Staff Laju8 are only granted access to the data they genuinely need to carry out their responsibilities. Access to sensitive player data is restricted to designated personnel and is fully logged.
• Regular Penetration Testing: We conduct regular security assessments carried out by independent third-party experts to identify and remediate any vulnerabilities before they can be exploited.
• Intrusion Detection System (IDS): Our automated systems monitor network traffic and account activity in real time to detect any suspicious patterns and respond immediately.

Laju8 uses cookies and similar tracking technologies to enhance the user experience, safeguard account security, and understand how players interact with our platform. The following are the types of cookies we use:

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality or security of the platform Laju8. For information on how to manage cookies in your browser, please refer to the help section of your browser.

Under Personal Data Protection Act 2010 (PDPA) Malaysia, you as a player Laju8 have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of all these rights:

To exercise any of the above rights, please contact our privacy team Laju8 at [email protected] with the email subject line "Data Privacy Rights Request". We will respond within three (3) business days and resolve the request within a reasonable timeframe.

Laju8 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect, store or process the personal data of any individual under the age of 18.

All new registrations go through a rigorous age verification process. If we discover that someone under the age of 18 has successfully registered an account, we will suspend that account immediately, delete all data relating to that individual, and refund any associated funds in accordance with the appropriate procedures.

If you are a parent or guardian who believes your underage child has registered an account with Laju8, please contact us immediately at [email protected]. We will take immediate action to resolve the situation effectively and delete all related data.

Laju8 may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements or platform improvements. Whenever we make material changes to this policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending email notifications to all registered players at least seven (7) days before the changes take effect.
• Displaying clear notices within the platform Laju8 during the notice period.
• In the case of highly material changes, we may require you to reconfirm your consent before you can continue using the platform.

Continued use of the platform Laju8 after the effective date will be deemed as acceptance of the updated policy. If you do not agree with the changes made, you may close your account before the effective date by contacting our support team.

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your information. The latest version is always available on this page.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Laju8 handles your personal data, please reach out to us through the following channels:

• Privacy Email: [email protected] (use the subject line "Data Privacy Enquiry" for priority processing)
• Live Chat: Available 24/7 on the platform Laju8 — our agents can assist in Bahasa Melayu
• Response Time: We are committed to responding to all privacy enquiries within three (3) business days

If you are not satisfied with how we handle your privacy enquiry, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia which falls under the Malaysian Ministry of Communications and Digital.

Laju8 takes all privacy enquiries and complaints seriously. We are committed to resolving every issue promptly, fairly and transparently — because we know your trust is the most valuable asset we have.