Privacy Policy Lepak33 – Personal Data Protection for Malaysian Players

1. Introduction

This Privacy Policy is published by Lepak33 ("we", "platform", "company") and applies to all users of our online casino platform at lepak33.com. This document outlines our personal data processing practices and your rights as a data subject.

At Lepak33, we understand that trust is the foundation of our relationship with every player. Malaysian players who choose Lepak33 for entertainment deserve to know exactly what happens to their information – from their username to their transaction records. We don't believe in vague answers or deliberately confusing legal language. This document is written as clearly and plainly as possible.

This policy covers all Lepak33 services, including Live Casino, Baccarat, slots, table games, Sports Betting, e-sports, virtual sports, jackpots, and all other platform features. It also applies to all customer support interactions, email communications, and activity on our mobile platform.

2. Personal Data We Collect

Lepak33 collects various types of personal data depending on how you interact with our platform. Below is a full breakdown of the data we collect and its sources:

2.1 Data You Provide Directly to Us

• Registration information: Username, Malaysian phone number, email address, and password (stored in encrypted hash form – we do not store your actual password).
• Identity verification (KYC) information: Full name as per identification card, IC or passport number, date of birth, Malaysian residential address, and a copy of the relevant identification document.
• Payment information: Registered phone numbers for Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or DuitNow; bank account numbers for FPX (Maybank2u, CIMB Clicks). We do not store full credit or debit card numbers – only the last few digits for reference purposes.
• Support communications: The content of live chat conversations, emails, and any files you attach when contacting the lepak33 support team.

2.2 Automatically Collected Data

• Platform usage data: Gaming history, types of games played (slots, Baccarat, Live Casino, EPL or Malaysia Super League Sports Betting, etc.), total wagers, winnings, and losses.
• Technical data: IP address, device type (Android, iOS, desktop), browser model, operating system, screen resolution, and time zone.
• Session data: Login and logout times, play session duration, pages visited within the platform, and actions taken during each session.
• Transaction data: A complete record of all deposits and withdrawals, including date, time, amount in MYR, payment method used, and transaction status.

2.3 Data from Third-Party Sources

In certain circumstances, Lepak33 may receive your personal data from other legitimate sources, including:

• The identity verification service provider we use for the KYC process.
• Payment providers for transaction verification (only the minimum information necessary to confirm whether a transaction was successful or failed).
• Law enforcement agencies or legal authorities when Lepak33 is legally required to disclose such information.

3. How We Use Your Personal Data

Lepak33 uses the personal data collected solely for the following purposes. We will not use your data for any other purpose without first informing you and obtaining the appropriate consent:

Lepak33 uses gameplay history to detect patterns that may indicate signs of problem gambling, and will reach out to affected players with relevant information and support resources where such signs are identified. This is part of our commitment to responsible gaming.

4. Legal Basis for Data Processing

Lepak33 processes your personal data on the basis of one or more recognised legal grounds. We do not process data without a valid and defensible basis:

• Contract performance: Most data processing at lepak33 is necessary to fulfil the service agreement between you and us — including account management, payment processing, and the delivery of gaming services.
• Legal obligation: Lepak33 is legally required to maintain certain transaction records, conduct anti-money laundering (AML) checks, and comply with directives from competent authorities.
• Legitimate interest: We process certain data on the basis of the company's legitimate interests – such as fraud prevention, platform security, and service improvement – where these interests do not override your fundamental rights.
• Consent: For direct marketing activities such as promotional emails or SMS notifications about the latest bonuses, we require your explicit consent, which may be withdrawn at any time through your account settings or by contacting us.

5. Sharing Data with Third Parties

Lepak33 does not sell players' personal data. Full stop. That said, in the course of operating our platform, we may share necessary data with the following limited and regulated categories of third parties:

5.1 Technical Service Providers

We work with third-party service providers who act as data processors on our behalf — including cloud infrastructure providers, customer management systems, and internal analytics tools. All such providers are contractually bound to process data solely in accordance with our instructions and are not permitted to use your data for any other purpose.

5.2 Game Providers

To deliver Live Casino, slots, and table games, lepak33 works with internationally licensed game providers such as Evolution Gaming, Pragmatic Play Live, and NetEnt Live. These providers may receive the minimum technical data required to stream games to you — such as session IDs and device information — but will not receive your full financial or personal identity details.

5.3 Payment Providers

To process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks), we are required to share minimum transaction details with the respective payment providers. This is strictly the data needed to complete the transaction and is governed by each provider's own privacy policy.

5.4 Legal Authorities

Lepak33 will disclose personal data to legal authorities, enforcement agencies, or competent tribunals when required by law, court order, or valid legal process. We will not voluntarily disclose such information without a clear legal obligation to do so.

6. Data Storage & Retention Periods

Lepak33 does not retain your personal data for longer than is necessary for the stated purposes. The following are our general data retention guidelines:

• Active account data: Retained for the duration of your active account and for 5 years after final account closure, in compliance with legal recordkeeping and anti-money laundering requirements.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in line with Malaysian accounting and anti-money laundering legal requirements.
• Support communication logs: Retained for 3 years from the date of last interaction for reference and dispute resolution purposes.
• Anonymised analytics & usage data: May be retained indefinitely, as this data can no longer be linked back to you individually once anonymised.
• Security & audit logs: Retained for 2 years for security investigation and digital forensics purposes if required.

When data is no longer needed and there is no legal requirement to retain it, Lepak33 will securely delete or anonymise that data using methods that ensure it cannot be recovered.

7. Data Security Measures

Lepak33 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

7.1 Technical Security

• 256-bit SSL/TLS Encryption for all communications between your device and Lepak33's servers.
• Data encryption at rest (at-rest encryption) for all personal and financial data stored in our databases.
• Role-based access control (RBAC) – only staff with a legitimate job requirement are permitted to access player data, and all access is logged.
• Two-factor authentication (2FA) for all internal administrative access to systems storing player data.
• Vulnerability scanning and regular penetration testing conducted by independent third parties.
• Intrusion detection system (IDS/IPS) that monitors network traffic 24/7 for suspicious activity.

7.2 Organisational Security

• Mandatory privacy and data security training for all Lepak33 staff with access to player data.
• Strict non-disclosure agreements (NDAs) for all staff and contractors.
• A clear data incident response procedure that is tested on a regular basis.
• Regular security reviews of all third-party providers with access to lepak33 data.

While we take every reasonable measure to protect your data, no system can guarantee 100% security. You also play an important role by keeping your Lepak33 account password confidential and not sharing it with anyone.

8. Your Rights as a Data Subject

As a Lepak33 player, you have important rights regarding your personal data. We are committed to making it easy to exercise these rights without unnecessary obstacles:

8.1 Right of Access

You have the right to request a copy of all personal data that lepak33 holds about you. We will provide this copy in a readable format within 30 days of receiving your request, free of charge.

8.2 Right to Rectification

If you find that the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Basic details such as your phone number and email address can be updated directly through your account settings. For corrections to more sensitive identity data, please contact our support team.

8.3 Right to Erasure ("Right to be Forgotten")

In certain circumstances, you have the right to request the deletion of your personal data. However, this right may be limited where Lepak33 has a legal obligation to retain that data – such as financial records required under anti-money laundering laws.

8.4 Right to Withdraw Consent

For data processing based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting your right to continue using the lepak33 platform. You can unsubscribe from marketing emails via the "Unsubscribe" link in any email or through your account notification settings.

8.5 How to Exercise Your Rights

To exercise any of the rights above, please submit a written request to support@lepak33.com stating your account number, the type of request, and any relevant additional information. We will verify your identity before processing the request in order to protect your privacy.

9. Cookies & Tracking Technologies

Lepak33 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how players interact with our services. Cookies are small text files stored in your web browser when you visit the lepak33 platform.

Categories of Cookies We Use

• Strictly necessary cookies: Required for core platform functions — login, session management, and security. Cannot be disabled without significantly affecting platform functionality.
• Performance & analytics cookies: Helping us understand how users navigate the platform — which pages are visited most, time spent, and where users exit. This data is anonymised and used solely for platform improvement.
• Functional cookies: Saving your personal preferences such as language, display limits, and game view settings so you do not have to reconfigure them at the start of every session.
• Security cookies: Used to detect and prevent fraudulent activity, suspicious login attempts, and other security threats to your account.

You can manage or delete cookies through your browser settings. However, disabling strictly necessary cookies may affect the functionality of the Lepak33 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

10. Protection of Children's Data

The Lepak33 platform is for individuals aged 18 and above only. We do not knowingly collect, process, or store personal data from individuals under the age of 18. Should we discover that personal data of a minor has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and have discovered that your minor child has registered an account with Lepak33, please contact us immediately at support@lepak33.com. We will treat this as a matter of the highest priority.

11. Amendments to the Privacy Policy

Lepak33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or newly introduced platform features. For material amendments — those that significantly change how we collect or use your data — we will provide at least 14 days' notice before the changes take effect, via your registered email or an in-platform notification.

The "Updated" date at the top of this document will always reflect the date of the most recent amendment. We encourage you to review this Privacy Policy from time to time. Your continued use of the Lepak33 platform after any amendment takes effect will be considered acceptance of the revised Privacy Policy.

12. Contact Us About Privacy

For any enquiries, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Lepak33, please reach us through the following channels:

• Email: support@lepak33.com – for privacy enquiries requiring a written or detailed response. We aim to reply within 5 business days.
• Live Chat: Available 24/7 directly on the Lepak33 platform – for general privacy enquiries that require a quick response.

When contacting us regarding privacy matters, please include your Lepak33 account number, the nature of your request or enquiry, and any relevant additional information. This allows us to process your request more efficiently and accurately. All privacy-related communications will be handled in strict confidence.