lkb8 Privacy Policy

1 Introduction

lkb8 ("we", "our", "us") operates the online casino and sports betting platform accessible at lkb8.cam (the "Platform"). We are committed to safeguarding the privacy and personal data of every individual who interacts with our Platform, whether as a registered player, a visitor, or otherwise. This Privacy Policy ("Policy") sets out how lkb8 collects, uses, discloses, stores, and protects personal data in connection with the operation of the Platform.

This Policy applies to all personal data we process in relation to individuals located in Malaysia and elsewhere. By accessing the Platform or registering an account with lkb8, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data in the manner described herein.

lkb8 is committed to processing personal data in a lawful, fair, and transparent manner, consistent with applicable data protection principles and frameworks. We collect only the minimum data necessary to operate the Platform, fulfil our regulatory obligations, and provide a high-quality service to players across Malaysia including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam.

2 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

3 Data Controller Identity

lkb8 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, lkb8 is responsible for determining the purposes for which your Personal Data is processed and the means by which such processing is carried out. Where lkb8 engages third-party service providers to process Personal Data on its behalf, those parties act as Data Processors and are contractually bound to process data only in accordance with lkb8's instructions and applicable data protection law.

For all privacy-related enquiries, data subject requests, or concerns, you may contact lkb8 using the contact details provided in Section 16 of this Policy.

4 Categories of Personal Data We Collect

lkb8 collects the following categories of Personal Data from users of the Platform:

4.1 Identity Data

Full legal name, date of birth, nationality, and copies of government-issued identification documents (Malaysian NRIC / MyKad, Driver's Licence, or Passport) provided during registration or as part of the KYC verification process.

4.2 Contact Data

Email address, mobile phone number, and residential address (including city, state, and postcode). Malaysian players typically provide addresses in locations such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam.

4.3 Financial Data

Payment method details including bank account information (Maybank, CIMB, Public Bank, Hong Leong), e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), FX transaction references, DuitNow identifiers, and cryptocurrency wallet addresses (BTC, ETH, USDT, LTC) used for deposits or withdrawals. Full card numbers or complete bank account credentials are never stored directly by lkb8 — financial data is processed through secure, tokenised payment channels.

4.4 Account & Gaming Data

Username, account balance, deposit and withdrawal history, betting and gaming transaction records, game session data (including game titles played, stakes, outcomes, and RTP), bonus claim history, and responsible gambling tool settings.

4.5 Technical & Device Data

IP address, device type, operating system, browser type and version, screen resolution, time zone, session duration, pages visited, click-path data, and referring URL. This data is collected automatically when you access the Platform.

4.6 Communications Data

Records of any communications between you and lkb8, including live chat transcripts, support ticket submissions, and email correspondence. Communications are retained for quality assurance and compliance purposes.

4.7 Verification & Compliance Data

Documentation submitted in connection with KYC verification, source-of-funds enquiries, and any additional due diligence required under anti-money laundering (AML) obligations.

5 How We Collect Personal Data

lkb8 collects Personal Data through the following means:

• Directly from you: During account registration, the KYC verification process, deposit and withdrawal transactions, completion of contact or support forms, and communications with our support team;
• Automatically: Via cookies, web beacons, server logs, and analytics tools when you access or interact with the Platform;
• From third parties: From identity verification service providers, payment processors, fraud prevention services, and analytics partners in each case subject to those parties' own privacy practices and contractual obligations to lkb8;
• From publicly available sources: Where applicable, from publicly accessible databases used for fraud prevention and AML compliance checks.

6 Data Processing — Purposes of Use

lkb8 processes your Personal Data for the following specific purposes:

7 Legal Basis for Processing

lkb8 processes your Personal Data on the following legal bases:

• Performance of a contract: Processing necessary to register your account, provide access to the Platform, process transactions, and fulfil our obligations under the Terms & Conditions;
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and regulatory reporting duties;
• Legitimate interests: Processing undertaken in pursuit of lkb8's legitimate business interests, including fraud prevention, security monitoring, responsible gambling oversight, and Platform improvement, where such interests are not overridden by your rights and freedoms;
• Consent: Where we rely on consent for processing — for example, for the sending of direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

8 Data Sharing & Disclosure

lkb8 may share your Personal Data with the following categories of third parties, solely to the extent necessary for the purposes described in this Policy:

• Payment processors and financial institutions: Including operators of Malaysian payment channels (Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong) and cryptocurrency networks, for the purpose of processing deposit and withdrawal transactions;
• Identity verification providers: Third-party KYC service providers engaged to verify the identity and age of registered players as required under our compliance obligations;
• Fraud prevention and AML service providers: Specialist third-party platforms used to screen transactions and accounts against known fraud patterns and sanctions lists;
• IT and infrastructure service providers: Cloud hosting, platform maintenance, and cybersecurity partners who process data solely in accordance with lkb8's instructions;
• Analytics providers: Providers of web and application analytics tools used to understand how users interact with the Platform, in aggregated or anonymised form where possible;
• Regulatory authorities and law enforcement: Where lkb8 is legally required or permitted to disclose information to a government body, regulator, or law enforcement agency in connection with a legal proceding, regulatory investigation, or compliance obligation;
• Professional advisers: Legal counsel, auditors, and compliance consultants bound by professional duties of confidentiality.

9 International Data Transfers

In the course of providing its services, lkb8 may transfer your Personal Data to, or process it in, jurisdictions outside of Malaysia. Where such transfers occur, lkb8 takes appropriate steps to ensure that your Personal Data receives a level of protection equivalent to that provided under applicable Malaysian data protection law, including through the use of contractual safeguards with recipient parties.

If you have questions about the safeguards applied to international transfers of your Personal Data, you may contact lkb8 at the address provided in Section 16 of this Policy.

10 Data Retention

lkb8 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Account data: Retained for the duration of the account and for a minimum of five (5) years following account closure, in accordance with AML and regulatory requirements;
• Financial transaction records: Retained for a minimum of five (5) to seven (7) years from the date of the transaction, consistent with financial record-keeping obligations;
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the completion of the customer relationship;
• Support communications: Retained for a minimum of two (2) years from the date of communication;
• Marketing consent records: Retained until consent is withdrawn or for a period of three (3) years from the date of last interaction, whichever is earlier.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in manner that prevents recovery or re-identification.

11 Cookies & Tracking Technologies

The lkb8 Platform uses cookies and similar tracking technologies to enhance your user experience, maintain session continuity, and collect analytics data. The following categories of cookies are used:

• Strictly necessary cookies: Essential to the operation of the Platform, including session authentication and security functions. These cannot be disabled without affecting core functionality;
• Functional cookies: Store your preferences (such as language settings and display options) to provide a personalised experience across sessions;
• Analytics cookies: Used to collect anonymised information about how users navigate and interact with the Platform, enabling lkb8 to identify improvement opportunities;
• Security cookies: Assist in detecting and preventing fraudulent activity, unauthorised access, and other security threats.

You may configure your browser to refuse or delete cookies. Please note that disabling certain cookies may impact the functionality of the Platform. lkb8 does not use cookies to deliver third-party advertising or to track your activity across unrelated websites.

12 Data Security

lkb8 implements a comprehensive suite of technical and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, loss, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmissions between your device and the Platform;
• Encryption at rest for sensitive data stored on lkb8's systems;
• Two-factor authentication (2FA) available for all registered accounts;
• Regular third-party penetration testing and security audits;
• Access controls limiting internal access to Personal Data to authorised personnel only, on a need-to-know basis;
• Real-time intrusion detection and monitoring systems;
• Staff training on data protection obligations and security best practices.

13 Your Rights as a Data Subject

Subject to applicable data protection law and certain exceptions, you have the following rights with respect to your Personal Data held by lkb8. To exercise any of these rights, please contact using the details set out in Section 16.