LK988 Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by LK988 ("Company", "We", "Us", "Our"), the operator of the online casino and sports betting platform accessible at lk988.cam. This Policy describes in detail how LK988 collects, uses, stores, shares, and protects personal data relating to registered members, prospective users, and visitors to our platform ("You", "User", "Data Subject").

LK988 is committed to handling personal data responsibly and in accordance with applicable data protection principles. Our platform is designed primarily to serve users in Malaysia, and we process Malaysian Ringgit (MYR) transactions through a range of local payment channels including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank. The processing of payment-related data is an inherent part of operating these services and is governed by this Policy.

By registering an account on LK988, depositing funds, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. If you do not agree with the terms of this Policy, you should not use the LK988 platform.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Data Controller Identity

LK988 is the data controller in respect of all personal data collected through the lk988.cam platform. As data controller, LK988 is responsible for determining the purposes for which your personal data is used and ensuring that it is handled in accordance with this Policy.

LK988 operates under an international gaming licence. Our platform infrastructure is maintained by LK988's technical operations team, with certain processing activities delegated to vetted third-party data processors under binding data processing agreements. All data processors engaged by LK988 are subject to contractual obligations that are no less protective than those set out in this Policy.

For all data protection enquiries, access requests, and complaints, please contact us using the details provided in Section 17 of this Policy.

Personal Data We Collect

4.1 Registration Data

When you create an LK988 account, we collect the personal information you provide during the registration process, which includes:

• Full legal name;
• Date of birth (for age verification purposes — minimum age 21 years);
• Email address;
• Mobile telephone number;
• Country of residence;
• Preferred currency (MYR by default for Malaysian users).

4.2 KYC Verification Data

To comply with our licensing obligations and to verify your identity and age, we may collect and process the following documentation:

• Copy of government-issued photo identification (Malaysian IC / MyKad, passport, or driving licence);
• Proof of residential address (utility bill, bank statement from Maybank, CIMB, Public Bank, or other recognised institution, dated within three months);
• Proof of payment method ownership (screenshot or statement of DuitNow-registered bank account, Touch 'n Go eWallet profile, or similar);
• Source of funds information in cases where enhanced due diligence is required.

4.3 Transaction Data

For every deposit and withdrawal transaction processed through your account, we record:

• Transaction date, time, and amount (in MYR);
• Payment method used (FPX, DuitNow, Touch 'n Go eWallet, Maybank, CIMB, BTC, USDT, etc.);
• Transaction reference number and status;
• Account balance before and after the transaction.

4.4 Gaming Activity Data

We log all gaming activity on your account, including bet placement records, game outcomes, session timestamps, wager amounts, and participation in bonus programmes. This data is used for account management, dispute resolution, responsible gambling monitoring, and regulatory compliance.

4.5 Technical and Device Data

When you access the LK988 platform, our servers and analytics systems automatically collect certain technical information, including:

• IP address;
• Device type, operating system, and browser version;
• Pages visited, time spent on each page, and navigation path;
• Referring URL (if you arrived via a link from another website);
• Session duration and frequency of visits.

4.6 Communications Data

If you contact our customer support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the subject matter of your enquiry, for quality assurance, training, and dispute resolution purposes.

How We Collect Personal Data

LK988 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion;
• Automatically — through cookies, server logs, and analytics tools as you browse and use the platform;
• From third-party payment providers — confirmation data from FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency processors relating to transactions you initiate;
• From identity verification partners — in cases where we use a third-party KYC service to assist with document verification, that partner may share verification outcomes and supplementary identity data with us;
• From fraud prevention services — risk signals and device fingerprinting data used to detect and prevent fraudulent account activity.

Data Processing & Purposes of Use

LK988 processes your personal data exclusively for the following defined purposes:

Legal Basis for Processing

LK988 processes your personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered member — including account management, payment processing, and service delivery;
• Legitimate Interests: Processing necessary to pursue our legitimate business interests — including fraud prevention, platform security, and platform improvement — provided those interests are not overridden by your fundamental rights and freedoms;
• Legal Obligation: Processing required to comply with applicable laws, regulatory requirements, or the terms of our international gaming licence — including KYC, AML, and responsible gambling monitoring obligations;
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Third-Party Disclosure

8.1 When We Share Your Data

LK988 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following defined circumstances:

• Payment Service Providers: We share transaction data with the payment providers you use (FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency processors) to the extent necessary to process your deposits and withdrawals;
• KYC and Identity Verification Partners: We may share identity documentation with third-party verification service providers engaged to assist with KYC compliance. These providers are contractually bound to use the data solely for verification purposes;
• Fraud Prevention Services: We share relevant technical data with fraud detection partners to identify and prevent fraudulent account activity;
• Regulatory and Law Enforcement Authorities: We may disclose personal data to competent authorities where required by law, court order, or our licensing regulator;
• Professional Advisors: We may share data with our legal, financial, or compliance advisors on a strictly confidential basis where necessary to seek professional advice.

8.2 No Sale of Data

LK988 categorically does not sell personal data to advertising networks, data brokers, or any commercial third party for their own marketing or profiling purposes. All data sharing arrangements are subject to binding contractual protections.

Your Data Rights

As a user of the LK988 platform, you hold the following rights in respect of your personal data. Requests to exercise any of these rights should be submitted to our data protection contact (see Section 17). We will respond to all valid requests within 30 calendar days.

Data Retention

LK988 retains personal data for no longer than is necessary for the purposes for which it was collected. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

Cookies & Tracking Technologies

11.1 What Cookies We Use

LK988 uses the following categories of cookies on our platform:

• Strictly Necessary Cookies: Essential for the platform to function. These maintain your logged-in session, remember your language preference, and facilitate payment flows. These cannot be disabled without impairing core functionality.
• Functional Cookies: Store your non-essential preferences such as display settings and notification preferences, to personalise your experience on return visits.
• Analytics Cookies: Used to collect anonymised data on how visitors navigate and interact with our platform, allowing us to improve usability and performance. Data collected through analytics cookies does not identify individual users.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and credential stuffing attacks.

11.2 What We Do Not Do With Cookies

LK988 does not use advertising or third-party tracking cookies that follow your activity across other websites. We do not share cookie-derived data with advertising networks or social media platforms for targeting purposes.

11.3 Managing Your Cookie Preferences

You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the platform. Instructions for managing cookies are available in the help documentation for your specific browser.

Data Security Measures

LK988 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit TLS/SSL Encryption: All data transmitted between your device and our servers is encrypted using transport layer security at 256-bit strength — the same standard used by major Malaysian banks including Maybank and CIMB;
• Data-at-Rest Encryption: Sensitive personal data stored in our databases is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff members are granted the minimum level of access required to perform their assigned functions;
• Two-Factor Authentication: Privileged system access requires multi-factor authentication for all staff;
• Regular Security Audits: Our platform and data processing infrastructure are subject to periodic third-party security assessments and penetration testing;
• 24/7 Monitoring: Automated intrusion detection systems and security operations monitoring operate around the clock to identify and respond to potential security incidents.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, LK988 will notify affected individuals and relevant authorities in accordance with applicable requirements, without undue delay.

International Data Transfers

LK988 operates under international licensing and may process or store personal data on servers located outside Malaysia. Where personal data is transferred to third countries, LK988 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards for international transfers may include contractual data processing agreements incorporating standard contractual clauses, or reliance on the adequacy of data protection standards in the recipient jurisdiction. Details of the specific safeguards applicable to a particular transfer are available upon request by contacting us at the address in Section 17.

Children & Minors

The LK988 platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is conducted as part of the account registration and KYC process.

If LK988 becomes aware that personal data has been collected from a person under the age of 21 — whether through our own identification or through notification from a third party — we will immediately suspend the relevant account, delete all associated personal data, and report the matter to our licensing authority as required.

If you have reason to believe that a minor is using or has registered an account on the LK988 platform, please contact our support team immediately via live chat so that prompt action can be taken.

Third-Party Links & Services

The LK988 platform may reference or display content associated with third-party payment providers (such as Touch 'n Go eWallet, DuitNow, Boost, GrabPay, FPX, and others) as part of our payment interface. These third-party services are governed by their own independent privacy policies, over which LK988 has no control.

LK988 is not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any payment provider you use in connection with your LK988 account. By initiating a transaction through a third-party payment channel, you accept that your data will be processed by that provider in accordance with their terms.

Amendments to This Privacy Policy

LK988 reserves the right to update or amend this Privacy Policy at any time. Material changes — including changes to the categories of data collected, the purposes for which data is used, or the circumstances under which data is shared — will be communicated to registered members via email notification to the address associated with your account, or through a prominent notice on the platform.

The "Last updated" date displayed at the top of this document will be revised whenever a change is made. We encourage you to review this Policy periodically to remain informed of how your personal data is being handled. Continued use of the LK988 platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

If you object to any change to this Privacy Policy, you must cease using the LK988 platform and may request account closure and data deletion in accordance with Section 9.

Contact Us — Data Protection Enquiries

For all enquiries relating to this Privacy Policy, including requests to exercise your data rights, data access requests, correction requests, or complaints about how your personal data has been handled, please contact LK988 through the following channels. Note that all email addresses below are displayed as plain text and are not clickable links:

• Live Chat: Available 24 hours a day, 7 days a week via the LK988 website. This is the recommended channel for time-sensitive enquiries relating to account data.
• Email: [email protected] — for formal data access requests, erasure requests, and written complaints. Please include "Data Protection Request" in the subject line along with your registered username.

LK988 aims to acknowledge all formal data protection requests within 5 business days and to provide a substantive response within 30 calendar days. In cases involving complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

If you are dissatisfied with our response to a data protection complaint, you may have the right to refer the matter to the relevant supervisory authority in your jurisdiction. Malaysian users may wish to seek independent legal advice regarding the application of Malaysia's Personal Data Protection Act 2010 to their specific circumstances.