Privacy Policy Last updated: June 2026

1. Controller Identity

For the purposes of applicable data protection law, the data controller responsible for your personal data is the operator of lambor68.asia ("lambor68," "we," "us," "our"). lambor68 is licensed under an international gaming regulatory framework. Questions or requests relating to data protection may be directed to our support team via the contact details in Section 16.

2. Scope of This Policy

This Privacy Policy applies to all personal data collected through:

• The lambor68.asia website and mobile web application;
• Account registration, KYC verification, and account management processes;
• Deposit, withdrawal, and payment processing transactions;
• Customer support interactions conducted via live chat or email;
• Promotional participation, surveys, or feedback submissions;
• Cookies and analytics tools described in Section 6.

This Policy applies to all users of the Platform regardless of location, though players in Malaysia should note that the Personal Data Protection Act 2010 (PDPA) sets out specific rights applicable to Malaysian residents, which are reflected in the rights described in Section 11.

3. Data We Collect

3.1 Registration Data

When you create a lambor68 account, we collect: full legal name, date of birth, residential address, email address, mobile phone number, and chosen username. This information is necessary to establish and administer your account.

3.2 Identity Verification (KYC) Data

Prior to processing withdrawals, we collect copies of government-issued identity documents (such as Malaysian MyKad or passport), proof of address documentation, and in certain circumstances, source-of-funds documentation. This data is required to comply with our anti-money-laundering obligations under our international gaming licence.

3.3 Financial & Transaction Data

We collect details of all deposits, withdrawals, and in-platform transactions including amounts, timestamps, payment method identifiers (e-wallet account references, bank account details where applicable), and transaction outcomes. We do not store full payment card numbers — card-based transactions are processed through PCI-DSS compliant third-party payment processors.

3.4 Gaming Activity Data

We collect records of all gaming activity on the Platform, including games played, bets placed, outcomes, session durations, and responsible gaming tool usage. This data is used for account management, dispute resolution, regulatory reporting, and — in anonymised and aggregated form — product improvement.

3.5 Technical & Device Data

We automatically collect technical data including your IP address, device type and operating system, browser type and version, referral URL, pages visited, and session duration. This data is collected to ensure platform security, prevent fraud, and improve the player experience.

3.6 Communications Data

If you contact lambor68 support via live chat or email, we retain records of those communications, including content, timestamps, and resolution outcomes, for service quality and dispute resolution purposes.

3.7 Marketing Preferences

Where you have consented to receive marketing communications, we record that consent together with the method and timestamp of consent. We also record any subsequent opt-out requests.

4. How We Use Your Data

lambor68 uses your personal data for the following purposes:

• Account administration: Creating, verifying, and managing your lambor68 account;
• Service delivery: Enabling you to access games, place bets, and process financial transactions;
• Identity verification: Conducting KYC checks as required under our licensing obligations;
• Fraud & AML prevention: Detecting and preventing fraudulent activity, money laundering, and other prohibited conduct;
• Responsible gaming: Monitoring gaming behaviour to identify indicators of problem gambling and to administer player-requested responsible gaming tools;
• Customer support: Responding to and resolving support inquiries and disputes;
• Regulatory compliance: Meeting reporting and record-keeping obligations under our international gaming licence;
• Service improvement: Analysing aggregated, anonymised usage data to improve platform features and user experience;
• Marketing: Sending promotional communications where you have provided consent, subject to your right to opt out at any time.

5. Legal Basis for Processing

lambor68 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing necessary to fulfil the account agreement between you and lambor68, including service delivery and transaction processing;
• Legal obligation: Processing required to comply with our licensing obligations, including KYC, AML, and regulatory reporting requirements;
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing communications, where you have provided explicit consent and retain the right to withdraw it at any time.

6. Cookies & Tracking Technologies

lambor68.asia uses cookies and similar tracking technologies to operate the Platform and improve user experience. The categories of cookies we use are:

• Strictly necessary cookies: Required for the Platform to function, including session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core functionality.
• Functional cookies: Used to remember your preferences, such as language settings and game lobby filters.
• Analytics cookies: Used in anonymised and aggregated form to understand how players navigate the Platform, which pages are visited most frequently, and where usability improvements are needed.
• Security cookies: Used to detect and prevent fraudulent access attempts, including device fingerprinting for login anomaly detection.

We do not use third-party advertising or behavioural tracking cookies that profile you for external advertising networks. You may manage your browser's cookie settings at any time, though disabling strictly necessary cookies will impair your ability to log in and use the Platform.

7. Data Sharing & Disclosure

lambor68 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients only as necessary:

• Payment service providers: To process deposits and withdrawals via Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and other payment methods. These providers act as data processors under contractual data protection obligations.
• KYC/AML verification providers: To conduct automated or manual identity verification checks required under our licensing obligations.
• Game content providers: Game providers may receive anonymised session data for game performance monitoring. No personally identifiable data is shared with game providers beyond what is strictly required to deliver the game service.
• Customer support tools: Live chat and support ticketing system providers process support interaction data under contractual data processor agreements.
• Regulatory authorities: We may be required to disclose certain player data to our licensing authority, law enforcement agencies, or other regulatory bodies in response to lawful requests, court orders, or as required to comply with our licensing obligations.
• Professional advisers: Legal advisers, auditors, and compliance consultants may have access to personal data as necessary for the provision of their professional services, subject to professional confidentiality obligations.

8. International Data Transfers

lambor68's servers and some of our third-party service providers may be located outside Malaysia. Where personal data is transferred internationally, we take appropriate steps to ensure that the transfer is subject to adequate data protection safeguards, including contractual data protection clauses in our agreements with service providers. By using the lambor68 Platform, you acknowledge that your data may be processed in jurisdictions outside Malaysia.

9. Data Retention

lambor68 retains personal data for the following periods:

• Account data: For the duration of the account relationship and for a minimum of five (5) years following account closure, to comply with AML regulatory requirements.
• KYC documents: For a minimum of five (5) years from the date of verification, as required under our international licensing obligations.
• Transaction records: For a minimum of five (5) years from the date of each transaction.
• Support communications: For a minimum of two (2) years from the date of the interaction, or longer where a dispute remains unresolved.
• Marketing consent records: For the duration of the account relationship and for one (1) year following opt-out, to demonstrate compliance with consent requirements.

Data retained beyond account closure is maintained in secure, restricted-access archives and is not used for any commercial purpose.

10. Security Measures

lambor68 implements technical and organisational security measures proportionate to the risk of processing your personal data. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption at rest for sensitive data including KYC documents and financial records;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Multi-factor authentication for internal administrative access to player data systems;
• Regular penetration testing and security audits by independent third parties;
• Intrusion detection systems and real-time security monitoring;
• Staff training on data protection obligations and security practices.

In the event of a personal data breach that poses a risk to your rights and freedoms, lambor68 will notify affected players and relevant regulatory authorities in accordance with our obligations under applicable data protection law and our international gaming licence conditions.

11. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by lambor68:

• Right of access: To request a copy of the personal data we hold about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data, subject to our regulatory retention obligations which may require us to retain certain data;
• Right to restriction: To request that we limit the processing of your personal data in certain circumstances;
• Right to object: To object to processing based on our legitimate interests, including direct marketing;
• Right to data portability: To receive a structured, machine-readable copy of personal data you have provided to us, where processing is based on consent or contract;
• Right to withdraw consent: To withdraw consent for marketing at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact lambor68 via live chat or email (see Section 16). We will respond to verified requests within 30 calendar days. We may ask you to verify your identity before processing a data rights request.

12. Children & Minors

The lambor68 Platform is strictly restricted to individuals aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account and delete the data concerned, subject to any retention obligations that may apply. If you believe a minor has registered an account on the Platform, please notify us immediately via live chat.

13. Responsible Gaming & Data Processing

lambor68 uses gaming activity data as part of our responsible gaming obligations. This includes automated monitoring for behavioural patterns associated with problem gambling — such as rapid escalation in bet size, extended session duration, or frequency of deposit top-ups immediately following losses. Where such patterns are detected, lambor68 may take proactive measures including sending responsible gaming reminders or, in certain circumstances, reaching out to the player directly.

Responsible gaming intervention data is processed on the basis of our legitimate interests in preventing gambling-related harm and complying with our licensing obligations. This data is not used for any commercial purpose and is handled with particular sensitivity. Players may access information about our responsible gaming tools at any time by visiting our Responsible Gaming page.

14. Links to Other Sites

The lambor68 Platform does not include links to external third-party websites for commercial purposes. Where links to regulatory or responsible gaming resources are provided, those websites operate under their own privacy policies, which lambor68 has no control over. Your use of any linked third-party site is governed by that site's own terms and privacy policy.

15. Policy Updates

lambor68 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. Where changes are material, we will provide notice to registered players via email or prominent notice on the Platform at least 7 days prior to the effective date. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy. We recommend reviewing this Policy periodically. The "Last updated" date at the top of this page reflects the most recent revision.

16. Contact & Complaints

For any questions, data rights requests, or concerns about this Privacy Policy or lambor68's data practices, please contact our support team via 24/7 live chat on the Platform. For written correspondence, you may also reach us at the email address shown below (plain text only — not a clickable link):

[email protected]

If you are not satisfied with our response to a data protection concern, you have the right to lodge a complaint with the relevant data protection authority. Malaysian residents may contact the Department of Personal Data Protection (PDPD) under the Personal Data Protection Act 2010 for matters relating to personal data processed in connection with Malaysian data subjects.