laju44 Privacy Policy

This Privacy Policy ("Policy") describes how laju44 ("laju44", "we", "us", "our") collects, processes, stores, shares, and protects personal data provided by or collected from users ("you", "User", "Player") who access or use the laju44 online gaming platform at https://laju44.cam and all associated sub-domains, pages, and services (collectively, the "Platform").

laju44 is committed to maintaining the highest standards of data privacy and security for all players, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia. This Policy has been prepared in accordance with applicable data protection legislation and reflects our ongoing commitment to transparency in data handling.

By creating an account or using any services on the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue your use of the Platform immediately.

The following terms have specific meanings within this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, location data, or online identifiers.
• "Data Controller" means laju44, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third-party entity that processes personal data on behalf of laju44 and under laju44's instructions, including payment service providers and KYC verification partners.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, alteration, or deletion.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, track usage patterns, and support analytics.
• "KYC" means Know Your Customer — the identity verification process required by laju44 for anti-money laundering compliance and account security.
• "Sensitive Data" means a subset of personal data warranting heightened protection, including financial information, identity document details, and data relating to problem gambling self-disclosures.

laju44 collects only the personal data necessary to deliver, operate, and improve the Platform and associated services. The following categories of data are collected:

3.1 Registration & Account Data

When you create a laju44 account, we collect your full legal name, date of birth, email address, username, and password (stored in encrypted form). This data is essential for account creation, authentication, and identity management.

3.2 KYC & Verification Data

To comply with anti-money laundering regulations and platform security standards, we may collect copies of government-issued identification documents (e.g., Malaysian MyKad or passport), proof of address, and payment method verification materials. This data is processed and stored with the highest level of security controls.

3.3 Financial & Transaction Data

We collect records of all deposits, withdrawals, and in-platform transactions, including the payment method used (e.g., Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, GrabPay, Boost), transaction amounts in MYR, timestamps, and transaction identifiers. Full payment card or bank account details are not stored by laju44 — they are processed exclusively by our certified payment service providers.

3.4 Gaming & Behaviour Data

We collect data about your activity on the Platform, including games played, session durations, betting patterns, bonus usage, and win/loss records. This data is used to personalise your experience, detect unusual activity, and support responsible gambling monitoring.

3.5 Technical & Device Data

We automatically collect technical data when you access the Platform, including your IP address, device type, operating system, browser type and version, screen resolution, and general geographic location derived from your IP address.

3.6 Communications Data

Records of communications between you and laju44 — including live chat transcripts, email correspondence, and support tickets — are retained for quality assurance, dispute resolution, and legal compliance purposes.

laju44 uses personal data for the following purposes, all of which are integral to the lawful and effective operation of the Platform:

• To create, maintain, and manage your player account and authenticate your identity on login;
• To process deposits and withdrawals via Malaysian payment channels including DuitNow, FPX, and Touch 'n Go eWallet, and to maintain accurate financial records;
• To verify your identity and age (21+) in compliance with KYC and anti-money laundering obligations;
• To deliver the gaming and sports betting services you have requested, including personalising game recommendations and promotional offers relevant to your activity;
• To monitor gaming patterns and support our Responsible Gambling programme, including detecting indicators of problem gambling behaviour and activating protective measures where appropriate;
• To communicate with you regarding your account, transactions, promotions, and any changes to our terms or policies;
• To detect, investigate, and prevent fraud, cheating, multi-accounting, money laundering, and other prohibited conduct on the Platform;
• To analyse Platform usage and performance data in aggregate form to improve the quality and reliability of our services;
• To comply with applicable legal and regulatory obligations, including responding to lawful requests from regulatory authorities.

laju44 processes personal data only where a valid legal basis exists. The applicable legal bases for our processing activities are as follows:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions, including account management, payment processing, and service delivery;
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, anti-money laundering obligations, and responding to lawful authority requests;
• Legitimate Interests: Processing necessary for laju44's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and freedoms;
• Consent: Where we rely on your consent as the legal basis for processing — particularly for direct marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing already carried out.

laju44 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data may be shared with carefully selected third parties only in the following circumstances:

• Payment Service Providers: Financial institutions and payment processors (including providers of DuitNow, FPX, Touch 'n Go eWallet, Maybank, CIMB, and Public Bank integrations) to facilitate transactions. These entities process data under strict contractual data processing agreements;
• KYC & Identity Verification Partners: Accredited identity verification service providers that process document data on our behalf to satisfy AML obligations;
• Gaming Content Providers: Licensed game studios and platform providers who may receive necessary technical data to deliver their gaming products through our Platform;
• IT Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers operating under binding contractual data protection obligations;
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or regulatory mandate, laju44 will disclose personal data to competent authorities;
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

laju44 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management, login authentication, and security functions. These cookies cannot be disabled;
• Functional Cookies: Enable enhanced personalisation features such as language preferences, display settings, and session history;
• Analytical Cookies: Used to collect anonymised and aggregated data about Platform usage patterns to help us understand how players navigate and use our services, enabling continuous improvement;
• Security Cookies: Support fraud detection, bot prevention, and session integrity mechanisms.

You may configure your browser to refuse certain cookies or to notify you when cookies are being placed. However, disabling strictly necessary cookies may impair your ability to use core Platform features including login and payment processing.

laju44 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. Retention periods are determined based on the category and sensitivity of the data and the purpose for which it was collected.

• Account registration data is retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations;
• KYC and identity verification documents are retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later;
• Transaction records are retained for a minimum of seven (7) years to comply with financial regulatory requirements;
• Communication records (support chats, emails) are retained for three (3) years from the date of the communication;
• Technical and device data is retained for up to twelve (12) months in an identifiable form, after which it may be retained in anonymised aggregate form indefinitely.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with laju44's internal data management procedures.

laju44 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Role-based access controls ensuring that personal data is accessible only to staff with a legitimate operational need;
• Multi-factor authentication requirements for all internal administrative system access;
• Continuous security monitoring, intrusion detection systems, and regular penetration testing conducted by qualified security professionals;
• Formal data breach response procedures, including prompt notification to affected Users and relevant authorities where required by law.

In order to deliver our services, laju44 may transfer your personal data to servers or service providers located outside Malaysia. Such transfers may occur in connection with cloud hosting infrastructure, game content delivery, or KYC verification processing.

Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in Malaysia, laju44 ensures that appropriate safeguards are in place. These safeguards include contractual data processing agreements incorporating standard data protection clauses, and where applicable, reliance on adequacy decisions issued by competent data protection authorities.

By using the Platform and providing your personal data, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia as described in this section, subject to the safeguards described above.

As a data subject, you hold a number of rights over your personal data held by laju44. These rights are summarised below. To exercise any of these rights, please contact our Data Protection team at the address provided in Section 15.

laju44 will respond to all valid data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, with notification provided to you. We reserve the right to verify your identity before processing any data rights request.

The laju44 Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. The collection of personal data from any underage individual is a breach of our Terms & Conditions and this Privacy Policy.

The laju44 Platform does not contain links to external third-party websites as a matter of deliberate policy. However, game content delivered through embedded game providers may contain incidental references or content from third-party studios. laju44 is not responsible for the privacy practices or content of any third-party game studio or service, and your interactions with those providers are subject to their own privacy policies.

laju44 reserves the right to amend or update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our internal data processing practices. When material changes are made, we will notify registered users via the email address on file or by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Continued use of the Platform following any update constitutes your acceptance of the revised Policy. If you do not agree to the revised terms, you must cease using the Platform and may request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by laju44, please contact our Data Protection team through the following channels:

We will acknowledge receipt of all data-related enquiries within 48 hours and provide a substantive response within thirty (30) calendar days. For formal data rights requests, we will request identity verification before processing the request to protect the security of your account.