laju99 Privacy Policy

This Privacy Policy ("Policy") is issued by laju99 ("laju99", "we", "us", "our"), the operator of the online gaming platform accessible at laju99.co ("the Platform"). It describes how we collect, use, process, store and disclose personal information relating to individuals who register accounts on, visit or otherwise interact with the Platform ("you", "Player", "User").

By registering an account on laju99 or by continuing to use the Platform, you acknowledge that you have read and understood this Policy. This Policy forms part of the laju99 Terms & Conditions and should be read alongside them. Defined terms used but not defined here carry the meaning given to them in the laju99 Terms & Conditions.

1. About This Policy

1.1 laju99 is committed to handling personal information responsibly, transparently and in accordance with applicable data protection principles. This Policy applies to all personal data collected through the Platform, through our customer support channels and through any other interaction with laju99 as a business entity.

1.2 This Policy does not apply to third-party websites or services that may be referenced within the Platform. laju99 is not responsible for the privacy practices of third parties, including game studios, payment processors or other external service providers, who maintain their own independent privacy policies.

2. Data We Collect

2.1 Registration Data. When you create a laju99 account, we collect: your full legal name; date of birth; email address; Malaysian mobile telephone number; and a password (stored in hashed, non-readable form). This information is necessary to create and operate your account.

2.2 Identity Verification Data (KYC). To comply with our licensing authority's Know Your Customer obligations and to verify that you are 21 or above, laju99 may request: a copy of a government-issued identity document (MyKad, passport or driving licence); proof of address (utility bill, bank statement); and, in some cases, source of funds documentation. This data is collected only when required by our compliance obligations.

2.3 Financial Data. We collect information about deposits and withdrawals, including transaction amounts, timestamps, payment method identifiers and transaction reference numbers. laju99 does not store full bank card numbers. Where card payments are processed, tokenisation is handled by our licensed payment service providers.

2.4 Gaming Activity Data. We maintain records of your Gaming Activity on the Platform, including game session data, bet histories, stake amounts, outcomes and account balance changes. This data is held for regulatory compliance, dispute resolution and responsible gaming monitoring purposes.

2.5 Technical & Device Data. When you use the Platform, we automatically collect certain technical information: IP address; browser type and version; device type and operating system; session timestamps; pages visited; and referring URLs. This data is used for security monitoring, fraud prevention and Platform optimisation.

2.6 Communications Data. If you contact laju99 support via live chat or email, we retain records of those communications for quality assurance, training and dispute resolution purposes.

2.7 Responsible Gaming Data. Where you use laju99's responsible gaming tools — including deposit limits, cool-off periods or self-exclusion — we maintain records of those elections and their effective dates. This data is used to enforce your chosen protections and to comply with our licensing obligations.

3. How We Use Your Data

laju99 uses the personal data described above for the following purposes:

• Creating and administering your Account, verifying your identity and age, and operating the gaming services you request;
• Processing deposits and withdrawals and maintaining accurate financial records;
• Complying with our licensing authority's requirements, including KYC verification, anti-money laundering checks, responsible gaming obligations and regulatory reporting;
• Detecting, investigating and preventing fraud, cheating, money laundering and other illegal activity on the Platform;
• Providing customer support and resolving disputes;
• Enforcing the laju99 Terms & Conditions and other applicable policies;
• Sending essential service communications (account alerts, security notifications, significant Terms changes) — these cannot be opted out of while your account is active;
• Sending promotional communications where you have provided consent, including information about bonuses, promotions and new laju99 products;
• Monitoring and improving Platform performance, security and user experience;
• Fulfilling any other purpose for which data was collected, as disclosed to you at the point of collection.

4. Legal Bases for Processing

4.1 Contract Performance. The majority of personal data processing by laju99 is necessary for the performance of the contract between you and laju99 — specifically, the provision of your Account and gaming services as governed by the Terms & Conditions.

4.2 Legal Obligation. laju99 is required by its licensing authority and applicable laws to conduct KYC verification, maintain transaction records and perform AML monitoring. Processing for these purposes is mandatory and cannot be opted out of while you hold an account.

4.3 Legitimate Interests. laju99 processes certain technical and security data on the basis of its legitimate interest in operating a secure, fraud-free platform and protecting the integrity of the gaming environment for all players.

4.4 Consent. Where laju99 relies on your consent — for example, to send marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing & Disclosure

5.1 laju99 does not sell personal data. We do not share personal data with third-party advertising networks or data brokers. Personal data is shared only in the following circumstances:

• Service Providers. laju99 engages third-party providers to support Platform operations, including payment processors (for deposit and withdrawal handling), identity verification services (for KYC), cloud infrastructure providers and game content studios. These parties process data only as instructed by laju99 and under contractual data protection obligations.
• Regulatory Authorities. laju99 may be required to disclose personal data to its licensing authority, financial intelligence units or law enforcement agencies under applicable law. Such disclosures will be made in compliance with legal requirements and, where permitted, laju99 will endeavour to notify you.
• Business Transfers. In the event of a merger, acquisition or sale of all or part of laju99's business, personal data held by laju99 may be transferred to the acquiring entity. Affected players will be notified in accordance with applicable law.
• With Your Consent. laju99 may share personal data with third parties where you have given your explicit consent to such sharing.

6. International Transfers

6.1 laju99 is an internationally operated platform and personal data may be processed in jurisdictions outside Malaysia. Where personal data is transferred internationally, laju99 ensures that appropriate safeguards are in place, including contractual protections equivalent to applicable data protection standards.

6.2 By using the laju99 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as Malaysia.

7. Data Retention

7.1 laju99 retains personal data for as long as your account is active and for a further period after account closure as required by our licensing authority and applicable financial record-keeping regulations. In most cases, transactional and identity data is retained for a minimum of five years following account closure.

7.2 Gaming Activity logs are retained for a minimum period determined by laju99's regulatory obligations and dispute resolution requirements. Responsible gaming records — including any self-exclusion elections — are retained for a period sufficient to enforce those protections.

7.3 Data held solely for marketing purposes will be deleted promptly following withdrawal of consent.

8. Cookies & Tracking Technologies

8.1 laju99 uses cookies and similar technologies (local storage, session storage) to: maintain your authenticated session; remember your Platform preferences; detect and prevent fraud; and gather aggregate statistical data about Platform usage.

8.2 laju99 does not deploy third-party advertising cookies or tracking technologies that share your browsing behaviour with external advertising networks. Any analytics tools used by laju99 operate under contractual data protection agreements and do not identify individual players to external parties.

8.3 You may configure your browser to block or delete cookies. Note that blocking essential session cookies will prevent you from logging into your laju99 account, as session management relies on cookie-based authentication tokens.

9. Security Measures

9.1 laju99 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These include: TLS encryption for all data in transit; hashed storage of passwords; role-based access controls limiting employee access to personal data; regular security assessments; and monitoring of Platform access for suspicious activity.

9.2 In the event of a personal data breach that is likely to result in a risk to players' rights and freedoms, laju99 will take appropriate steps to contain the breach, assess its impact and notify affected individuals and relevant authorities as required under applicable law.

9.3 No security system is impenetrable. laju99 cannot guarantee absolute security against all possible threats. Players are encouraged to maintain strong, unique passwords for their laju99 account and to enable two-factor authentication as an additional protective measure.

10. Your Rights

10.1 Subject to applicable law and laju99's legal obligations, you have the following rights in respect of your personal data held by laju99:

• Right of Access — to request a copy of the personal data laju99 holds about you;
• Right to Rectification — to request correction of inaccurate or incomplete personal data;
• Right to Erasure — to request deletion of your personal data, subject to our legal retention obligations;
• Right to Restriction — to request that laju99 restrict processing of your data in certain circumstances;
• Right to Object — to object to processing based on legitimate interests, or to processing for direct marketing purposes;
• Right to Withdraw Consent — where processing is based on consent, to withdraw that consent at any time.

10.2 To exercise any of the above rights, contact laju99 support via live chat (8am–2am MYT daily) or by email at [email protected]. We will respond within 30 calendar days. laju99 may require identity verification before processing a data rights request.

11. Children & Minors

11.1 The laju99 Platform is strictly restricted to persons aged 21 and above. laju99 does not knowingly collect personal data from individuals under 21 years of age. If laju99 becomes aware that personal data has been collected from a person under 21, the associated account will be closed immediately and any data collected will be deleted, except where retention is required for legal or regulatory purposes.

11.2 If you believe a minor has registered or attempted to register a laju99 account, please report this to support immediately at [email protected].

12. Changes to This Policy

12.1 laju99 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or business operations. Where changes are material, we will notify registered players via email or in-platform notification. The most current version of this Policy is always published at laju99.co/privacy-policy, with the effective date indicated at the top of the document.

12.2 Your continued use of the laju99 Platform following notification of material changes constitutes your acceptance of the revised Policy.

13. Contact Us

13.1 If you have any questions, concerns or complaints about this Privacy Policy or laju99's data protection practices, please contact our support team via live chat available daily from 8am to 2am Malaysia Time (MYT), or by email at [email protected].

13.2 laju99 aims to acknowledge all privacy-related enquiries within 48 hours and to respond substantively within 30 calendar days.