Privacy Policy

LK88 collects the following categories of personal data from users of the Platform:

3.1 Registration & Account Data

• Full legal name
• Date of birth (for age verification purposes)
• Malaysian mobile number or international equivalent
• Email address
• Residential address (including postcode, city, state)
• Username and encrypted password
• Preferred language and account currency (MYR)

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (Malaysian MyKad, passport, or equivalent)
• Proof of residential address (utility bill, bank statement, or equivalent dated within 3 months)
• Proof of payment method ownership (e.g., screenshot of registered e-wallet account, bank statement showing account holder name)
• Selfie or live photo for identity confirmation where required

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records (amounts, timestamps, method status)
• Payment method identifiers (e-wallet account reference, bank account last 4 digits, cryptocurrency wallet address)
• Account balance history
• Bonus claim and wagering activity records

3.4 Gameplay & Betting Data

• Game session logs (game type, session start/end, stake, result)
• Sports betting history (event, market, odds, stake, settlement)
• Win/loss records and net gaming revenue figures
• In-game behaviour patterns for responsible gambling monitoring

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and duration
• Referring URL and on-site navigation paths
• Cookie identifiers and similar tracking data (see Section 8)

3.6 Communications Data

• Live chat transcripts with our customer support team
• Email correspondence with lk88 support
• Records of marketing communications sent to you and your opt-in/opt-out preferences

LK88 collects personal data through the following means:

4.1 Directly From You

The majority of personal data we hold is provided directly by you during the account registration process, when completing KYC verification, when making deposits or withdrawal requests, when contacting our support team, or when completing any profile update on the Platform.

4.2 Automatically Through Platform Use

When you access lk88.cam, our web servers and analytics systems automatically record certain technical information about your device and session. This includes your IP address, browser type, operating system, session timestamps, and page navigation data. This data is collected via server logs, cookies, and similar tracking technologies (detailed in Section 8).

4.3 From Third-Party Service Providers

In limited circumstances, lk88 may receive personal data about you from third-party providers, including:

• Payment processors: Confirmation of transaction status, payment method verification results, and fraud screening flags from providers including Touch'n Go eWallet, Boost, GrabPay, DuitNow, and FPX-connected banking institutions.
• Identity verification services: Results from automated document verification or anti-money laundering (AML) screening services used as part of the KYC process.
• Fraud detection systems: Risk scores or flaging alerts from third-party fraud prevention and responsible gambling monitoring platforms.

LK88 processes your personal data for the following specific purposes:

LK88 does not use your personal data to make fully automated decisions that produce significant legal effects on you without the possibility of human review where required by applicable law.

LK88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you, i.e., to operate your account, process deposits and withdrawals, and provide access to the Platform's games and betting services.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and any other mandatory regulatory obligations applicable to online gaming operators.
• Legitimate Interests: Processing conducted in pursuit of our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, customer support quality assurance, and internal analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent — specifically for the sending of direct marketing communications — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team.

LK88 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We may share your data with the following categories of recipients, strictly as necessary to provide our services or meet our legal obligations:

7.1 Payment Service Providers

To process your deposits and withdrawals, we share necessary transaction data with Malaysian payment processors including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency network processors. These providers act as data processors under contractual data protection agreements with lk88.

7.2 Identity Verification Providers

KYC documents and personal identification data may be shared with third-party identity verification and AML screening service providers, who process this data solely on our instruction for the purpose of verifying your identity and meeting our regulatory obligations.

7.3 Game and Platform Technology Providers

Third-party game studios and live casino streaming providers that supply games on the lk88 Platform may receive certain session and account identifiers necessary for game operation. These providers are contractually prohibited from using player data for any purpose beyond service delivery.

7.4 Legal and Regulatory Disclosure

lk88 may disclose personal data to competent governmental authorities, regulators, law enforcement agencies, or courts where required or permitted to do so by applicable law — including in connection with investigations into fraud, money laundering, or other criminal activity.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of lk88's business assets, personal data held by lk88 may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer via a notice on the Platform and, where required, by direct communication.

LK88 uses cookies and similar tracking technologies on lk88.cam to enhance your experience, maintain session continuity, and gather analytics data that helps us improve the Platform.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in and security cookies that help prevent cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and notification settings, so you do not need to re-enter them on every visit.
• Analytical Cookies: Allow us to understand how users interact with lk88 — which pages are visited most, where users encounter errors, and how long sessions last. This data is aggregated and anonymised where possible.
• Security and Fraud Prevention Cookies: Help us identify unusual or potentially fraudulent login patterns by recording device fingerprinting attributes and IP consistency data across sessions.

8.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Disabling cookies may affect the functionality of certain features on lk88. Please note that strictly necessary cookies cannot be disabled, as they are required for secure session management. Refer to your browser's help documentation for instructions on how to manage cookie preferences on your specific device.

LK88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention schedules apply:

Upon expiry of the applicable retention period, personal data is either securely deleted or rendered permanently anonymous such that it can no longer be associated with any individual.

The security of your personal data is a core operational priority for lk88. We implement a comprehensive set of technical and organisational security measures to protect your data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All communications between your browser and lk88.cam are encrypted using TLS 1.2 or higher (HTTPS). This ensures that data transmitted — including login credentials, KYC documents, and financial information — cannot be intercepted by third parties during transmission.
• Encryption at Rest: Sensitive personal data stored in lk88's databases is encrypted at rest using AES-256 encryption. This applies to all stored KYC documents, financial records, and account credentials.
• Access Controls: Access to personal data systems is restricted on a strict need-to-know basis. All internal access is subject to role-based access controls, multi-factor authentication, and comprehensive audit logging.
• Password Hashing: User passwords are never stored in plain text. We use strong cryptographic hashing with salting to protect stored password data.
• Regular Security Assessments: lk88 conducts periodic vulnerability assessments and penetration testing of its platform infrastructure to identify and remediate security weaknesses proactively.
• Incident Response: lk88 maintains a documented data breach incident response procedure. In the event of a confirmed data breach that is likely to result in a risk to your rights, we will notify affected users and relevant authorities in accordance with applicable legal requirements.

As a user of lk88, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Privacy team at the contact details provided in Section 14.

11.1 Right of Access

You have the right to request a copy of the personal data that lk88 holds about you, along with information about how it is being used. We will respond to valid access requests within 30 calendar days of receipt.

11.2 Right to Rectification

If any personal data lk88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Many basic account details (such as contact email and phone number) can be updated directly through your account settings.

11.3 Right to Erasure

You may request deletion of your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose it was collected, or if you have withdrawn your consent and no other legal basis exists for continued processing. Please note that we may be required to retain certain data for legal, regulatory, or contractual reasons even following a valid erasure request, and we will inform you of any such restrictions at the time of your request.

11.4 Right to Restrict Processing

In certain circumstances, you have the right to request that lk88 restricts the processing of your personal data — for example, while a dispute about data accuracy is being resolved. Restricted data will continue to be stored but will not be actively used.

11.5 Right to Object

You have the right to object to the processing of your personal data where lk88 relies on legitimate interests as its legal basis. You also have an absolute right to object to the processing of your personal data for direct marketing purposes. We will cease direct marketing communications upon receipt of a valid objection.

11.6 Right to Data Portability

Where technically feasible and legally applicable, you may request a copy of the personal data you have provided to lk88 in a structured, commonly used, and machine-readable format.

11.7 Right to Withdraw Consent

Where lk88 processes your data on the basis of your consent (primarily for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

The lk88 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our account registration and KYC process, and we take all reasonable steps to ensure that minors do not access our Platform.

If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will immediately take steps to delete that data and close the associated account. If you have reason to believe that a minor has registered an account on lk88, please contact our support team immediately.

LK88 reserves the right to update or modify this Privacy Policy at any time, in order to reflect changes in our data processing practices, applicable law, or operational requirements. When we make changes, we will update the "Last Updated" date at the top of this page.

Where changes are material — that is, where they significantly affect how we use your personal data or rights in relation to that data — we will provide advance notice via your registered email address or via a prominent notice displayed when you next log into lk88. Where required by applicable law, we will seek your renewed consent to the updated Policy before continuing to process your data under the new terms.

We encourage you to review this Privacy Policy periodically to stay informed about how lk88 is protecting your information. Your continued use of the Platform following the effective date of any update constitutes your acknowledgement of the revised Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which lk88 processes your personal data, please contact our support team through any of the following channels:

• Email (Data Privacy): [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" for prompt routing to the correct team member.
• Live Chat: Available24/7 directly on lk88.cam. For data rights requests, please request to be escalated to a Data Privacy handler.
• Response Timeframe: We aim to acknowledge all privacy-related enquiries within 3 business days and provide a substantive response within 30 calendar days.

Our customer support team operates in English, Bahasa Melayu, and Mandarin, seven days a week including Malaysian public holidays such as Hari Merdeka, Hari Malaysia, and Hari Raya Aidilfitri.