laju99 Privacy Policy

1. Data Controller

The data controller responsible for the personal information of laju99 Members and visitors is the operator of the laju99 platform at laju99.win. References to "laju99", "we", "us", or "our" throughout this Privacy Policy refer to this entity. Any questions regarding the processing of your personal data may be directed to our support team via the 24/7 live chat on the Platform.

2. Personal Data We Collect

laju99 collects the following categories of personal data from Members and, in some cases, from unregistered visitors to the Platform:

3. How We Collect Your Data

laju99 collects personal data through the following means:

• Direct submission — information you provide when registering a laju99 Account, completing identity verification, making deposits, requesting withdrawals, or contacting our support team.
• Automated technologies — technical and usage data collected automatically via cookies, server logs, and similar tracking mechanisms when you access laju99.win.
• Third-party payment providers — financial verification data shared by payment processors (Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and others) when you initiate transactions on the laju99 Platform.
• Identity verification services — information returned from third-party KYC (Know Your Customer) providers when laju99 verifies your identity prior to withdrawal processing.

4. Purposes and Legal Bases for Processing

laju99 processes your personal data for the following purposes and on the following legal bases:

• Account creation and management — processing is necessary to perform the contract between you and laju99, enabling you to access the Platform, place wagers, and receive winnings.
• Identity verification and fraud prevention — processing is necessary to comply with legal obligations (anti-money laundering, age verification) and to protect laju99's legitimate interests in preventing fraud and financial crime.
• Payment processing — processing is necessary to perform the contract with you, including facilitating deposits from and withdrawals to your nominated Malaysian payment accounts.
• Customer support — processing is carried out in our legitimate interest in providing timely and effective support to Members contacting laju99 via live chat or other channels.
• Responsible gaming monitoring — processing is carried out in our legitimate interest and legal obligation to identify and assist Members showing indicators of problem gambling.
• Marketing communications — where you have provided explicit consent, laju99 may send promotional communications about new games, bonus offers, or CNY seasonal promotions. You may withdraw consent at any time by contacting our support team.
• Platform improvement and analytics — processing aggregated and anonymised usage data is carried out in our legitimate interest to improve the laju99 user experience.

5. Data Retention

laju99 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law and regulation. Specifically:

• Account and identity data is retained for the duration of your laju99 Account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Financial transaction data is retained for a minimum of seven (7) years from the date of the transaction.
• Support communications are retained for up to three (3) years from the date of the interaction.
• Technical and usage data collected via cookies and server logs is typically retained for up to thirteen (13) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with industry standards.

6. Sharing Your Data with Third Parties

laju99 does not sell your personal data to third parties. We may share your data in the following limited circumstances:

• Payment processors — financial data is shared with your chosen payment provider (e.g., Touch 'n Go eWallet, Maybank) solely to process your deposit or withdrawal transaction.
• KYC and fraud prevention providers — identity data may be shared with third-party verification services to fulfil our age verification and anti-fraud obligations.
• Game software providers — minimal technical data may be shared with our certified game providers (e.g., Pragmatic Play, PG Soft) to enable gameplay functionality.
• Regulatory and law enforcement authorities — laju99 may be required by law or regulation to disclose certain personal data to governmental, regulatory, or law enforcement bodies. We will only make such disclosures where legally compelled to do so.
• Professional advisers — lawyers, auditors, and insurers who are bound by professional confidentiality obligations, where disclosure is necessary for the conduct of laju99's business.

All third-party processors engaged by laju99 are contractually required to process personal data only on laju99's documented instructions and to implement appropriate technical and organisational security measures.

7. Cookies and Tracking Technologies

laju99 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and improve user experience. The categories of cookies used include:

• Strictly necessary cookies — essential to the operation of the laju99 login session, wallet, and game functionality. These cannot be disabled without significantly impairing Platform use.
• Performance and analytics cookies — used to collect anonymised data about how visitors interact with laju99, enabling us to identify and fix issues and improve page performance.
• Functional cookies — used to remember your preferences (such as language settings) across laju99 sessions.

You may control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the laju99 Platform, including your ability to log in and maintain a session.

8. Data Security

laju99 implements a layered security architecture to protect your personal and financial data. Measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and laju99 servers.
• Encrypted storage of sensitive personal and financial data at rest.
• Access controls limiting personal data access to authorised personnel on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.

9. Your Rights as a Data Subject

Subject to applicable law, you hold the following rights with respect to your personal data held by laju99:

• Right of access — you may request a copy of the personal data laju99 holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data, subject to laju99's legal retention obligations.
• Right to restriction of processing — you may request that laju99 restrict certain uses of your data in specified circumstances.
• Right to object — you may object to processing of your data carried out on the basis of laju99's legitimate interests, including direct marketing.
• Right to data portability — you may request that laju99 provide your data in a structured, machine-readable format.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the laju99 support team via the 24/7 live chat. laju99 will respond to data subject requests within the timeframes required by applicable law.

10. Children and Minors

The laju99 Platform is strictly intended for individuals aged 21 years and above. laju99 does not knowingly collect or process personal data from individuals under the age of 21. If laju99 becomes aware that personal data has been collected from a minor, the relevant Account will be suspended immediately, and all associated personal data will be deleted without delay.

If you are a parent or guardian and believe your child has registered a laju99 Account, please contact our support team immediately via the 24/7 live chat.

11. Responsible Gaming and Data

laju99 processes responsible gaming data — including deposit limits, self-exclusion status, and problem gambling indicators — in the legitimate interest of protecting the wellbeing of our Members. This data is used solely to administer responsible gaming tools and support services. It is treated with the highest level of confidentiality and is not used for marketing purposes.

If you have set a self-exclusion on your laju99 Account, we will retain your contact details on a restricted list to prevent future re-registration for the duration of the exclusion period. This processing is carried out in your interest and in compliance with responsible gaming obligations.

For more information on responsible gaming tools available on laju99, please visit our Responsible Gaming page.

12. Amendments to this Policy

laju99 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Members via email or a notice posted prominently on the Platform prior to the changes taking effect. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of the laju99 Platform following notification of changes constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or laju99's processing of your personal data, please contact us through any of the following channels: