Data Protection

Lkb8 Privacy Policy — Malaysia Personal Data Protection

Lkb8 is committed to protecting the privacy and personal data of every member in Malaysia. This policy clearly explains what we collect, how we use it, and your rights as an lkb8 member.

Updated: 1 January 2026
Applicable in: Malaysia
PDPA 2010
256-bit SSL

Lkb8's Privacy Commitment to Malaysian Members

Six core principles that guide how lkb8 handles your personal data.

Full PDPA 2010 Compliance

Lkb8 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing how organisations in Malaysia collect, process, and store personal data. Every data-handling process at lkb8 is designed with PDPA requirements built in from the ground up.

Full 256-Bit SSL Encryption

All data transmitted between your device and lkb8 servers is protected with 256-bit SSL encryption — the same encryption technology used by Malaysia's major banks such as Maybank and CIMB. This means your personal information and financial transactions cannot be read by any third party during transmission.

No Sale of Data to Third Parties

Lkb8 never sells, rents, or transfers members' personal data to any third party for marketing or commercial purposes. Your data belongs to you, and we use it solely to provide lkb8 services to you — not for the benefit of others.

Full Control in Your Hands

As an lkb8 member, you have the right to access, correct, and request the deletion of your personal data at any time. lkb8 provides a straightforward and transparent process for exercising these rights without having to navigate burdensome bureaucratic procedures.

Secure Data Storage

Lkb8 member data is stored on servers protected by strict access controls — only specifically authorised staff can access particular information based on their job requirements. Member passwords are stored as cryptographic hashes that are unreadable by anyone.

Timely Notification in the Event of an Incident

In the event of any data security incident that may affect members' personal information, lkb8 is committed to notifying the affected members within the timeframe stipulated by PDPA and taking immediate remedial action to minimise the impact on members.

Data Type Purpose of Collection Retention Period
Identity Information (name, MyKad) Account verification & KYC 5 years after account closure
Phone Number & Email Service & security communications Throughout the active account period + 2 years
Financial Transaction Records Processing deposits/withdrawals, legal compliance 7 years (legal requirement)
Gaming Activity History Account management & responsible gambling 3 years after account closure
IP Address & Device Data Security & fraud prevention 90 rolling days
Cookies & Browsing Data User experience & platform analytics Up to 24 months
Last updated: 1 January 2026 • Version 2.4

Lkb8 Full Privacy Policy

This document sets out in detail how lkb8 collects, uses, stores, and protects the personal data of our members in Malaysia. This policy is legally binding on lkb8 under Malaysia's Personal Data Protection Act 2010 (PDPA).

1

Introduction & Scope of This Policy

Lkb8 is an online entertainment platform built for the Malaysian market, offering Sports Betting, Live Casino, slots, poker, lottery, and e-sports services to registered members. In delivering these services, lkb8 needs to collect and process certain personal data from our members.

This Privacy Policy applies to all personal data you provide to lkb8 during registration, platform use, and interactions with our customer support team. It also applies to data we collect automatically when you use the lkb8 platform, such as server log data and device information.

By registering an lkb8 account or continuing to use our platform after being notified of updates to this Privacy Policy, you consent to the processing of your personal data in accordance with the terms set out in this document. This consent is voluntary; however, without it, lkb8 will be unable to provide our services to you.

Legal Basis: lkb8 processes your personal data on the basis of contractual necessity (to provide the services you have requested), legal obligation (compliance with PDPA 2010 and regulatory requirements), lkb8's legitimate interests (fraud prevention and platform security), and your consent where applicable (such as for marketing communications).

2

Personal Data We Collect

Lkb8 collects various types of personal data depending on how you interact with our platform. The following are the categories of data we collect:

Data you provide directly:

  • Identity information: Full name as per MyKad, MyKad number (for KYC verification), date of birth, and gender
  • Contact information: Malaysian mobile number, email address, and mailing address where applicable
  • Account information: Your chosen username, hashed password, and language and communication preferences
  • Financial information: Your bank account or e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) used for deposits and withdrawals. lkb8 does not store your credit card numbers or e-wallet passwords
  • Verification documents: A copy of your MyKad or other identity document requested during the KYC process

Automatically collected data:

  • Technical data: IP address, browser type, operating system, device model, and screen resolution
  • Usage data: Pages you visit on the lkb8 platform, time spent, searches made, and navigation patterns
  • Gaming activity data: Betting records, game history, total deposits and withdrawals, and account activity statistics
  • Location data: General geographic location based on IP address (country and state) — lkb8 does not track your precise GPS location

Important Note: lkb8 does not collect biometric data, health data, or any other sensitive information not required for platform operations. We collect only the minimum data necessary to provide a secure, fair service that meets legal requirements.

3

How lkb8 Uses Your Data

Lkb8 uses your personal data solely for the following purposes, which are directly related to the provision of platform services to you:

  • Account management: Creating and maintaining your lkb8 account, processing registration, verifying your identity, and enabling secure login
  • Financial transaction processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, FPX, and other methods, as well as processing withdrawal requests to your bank account or e-wallet
  • Provision of gaming services: Enabling you to access and use all features of the lkb8 platform, including Sports Betting on the Malaysia Super League and EPL, Live Casino, slots, poker, lottery, and e-sports
  • Security & fraud prevention: Identifying and preventing fraudulent activity, money laundering, multi-account usage, and other security threats to the platform and its members
  • Legal Compliance: Fulfilling lkb8's obligations under PDPA 2010, anti-money laundering (AML) requirements, and directives from lawful authorities in Malaysia
  • Customer support: Handling enquiries, complaints, and support requests submitted via live chat or email to support@lkb8.xyz
  • Responsible gambling: Monitoring activity patterns to identify signs of problem gambling and to enable deposit limits, loss limits, and self-exclusion tools to function effectively
  • Platform improvements: Analysing aggregated and anonymised usage data to understand how members use the platform and identify opportunities to improve the user experience
  • Service communications: Sending important notifications about your account, changes to terms, and relevant security information
  • Marketing (with consent): Sending information about lkb8 promotions, new bonuses, and special offers — but only if you have opted in to receive marketing communications during registration or through your account settings

Lkb8 will not use your data for any purpose not listed above without first obtaining your renewed consent.

4

Data Sharing with Third Parties

Lkb8 does not sell, does not rent, and does not transfer members' personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, lkb8 may need to share certain personal data with the following categories of third parties:

  • Payment processors: Payment service providers that process your deposit and withdrawal transactions (e.g., FPX payment gateway providers, DuitNow transaction processors). Such sharing is strictly limited to the information necessary to complete the transaction
  • Technology service providers: Companies that provide technical infrastructure, server hosting, and cybersecurity services for the lkb8 platform. All such providers are bound by strict confidentiality agreements and may only use data for purposes specified by lkb8
  • Game providers: Companies that provide slots, Live Casino, and poker games for the lkb8 platform (such as internationally accredited game providers). Data sharing is minimal and limited to the game session information required to operate the games
  • Governing authority: Government agencies, law enforcement bodies, and courts in Malaysia where lkb8 is legally required to do so by law or a valid court order
  • Professional advisors: Lawyers, accountants, or auditors who require access to specific information as part of their professional duties — all of whom are bound by professional confidentiality obligations

Contractual Protection: All third parties who receive lkb8 members' personal data are required to sign a data processing agreement that prohibits them from using such data for any purpose other than those permitted by lkb8, and obligates them to maintain security standards equivalent to those of lkb8.

5

Lkb8 Data Security Measures

The security of members' personal data is among lkb8's highest technical priorities. We continually invest in security infrastructure to keep your data safe against the ever-evolving threats in today's cyber landscape. Our security measures include:

  • Encryption in transit: All communications between your browser or app and lkb8 servers are encrypted using TLS 1.3 with a 256-bit SSL certificate
  • Encryption at rest: Sensitive data such as MyKad numbers and financial details are stored in encrypted form within the lkb8 database
  • Password hashing: lkb8 account passwords are never stored in plain text — passwords are hashed using a robust cryptographic algorithm (bcrypt) that makes them practically irrecoverable
  • Role-based access control: Access to member data within lkb8's internal systems is restricted based on role and job necessity. All access is automatically logged and audited
  • Regular security audits: lkb8 conducts regular penetration testing and security audits by independent third-party cybersecurity firms to identify and address vulnerabilities before they can be exploited
  • Real-time threat monitoring: An automated monitoring system operates 24/7 to detect unusual activity that may indicate unauthorised access attempts or cyberattacks
  • Two-factor authentication (2FA): lkb8 members can enable 2FA from their account settings for an additional layer of security at login

While lkb8 takes all reasonable steps to protect your data, no security system is 100% impenetrable. In the event of any material data security incident, lkb8 will notify the affected members and relevant authorities in accordance with the requirements of PDPA 2010 within the timeframe prescribed by law.

6

Cookies & Tracking Technologies

Lkb8 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how members use our services. The following are the types of cookies we use:

You can manage your cookie settings through your browser settings. However, disabling essential cookies may affect your ability to use the lkb8 platform to its full extent. lkb8 does not use third-party cookies for advertising purposes that track you across other websites.

7

Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by lkb8:

Right of Access

You have the right to request a copy of the personal data lkb8 holds about you. Such requests will be processed within 21 working days.

Right to Rectification

If any personal data in lkb8's records is inaccurate or out of date, you have the right to request a correction. Some changes can be made directly from your account settings.

Right to Erasure

You may request the deletion of your personal data, subject to lkb8's legal retention obligations. Such requests are processed once all legal obligations have been fulfilled.

Right to Object

You may object to the processing of your data for marketing purposes at any time and without giving a reason, simply by updating your communication preferences in your account settings.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format so that it can be transferred to another service provider upon your request.

Right to Restrict Processing

In certain circumstances, you may request that lkb8 temporarily restrict the processing of your data while a dispute or correction request is being resolved.

To exercise any of the above rights, please contact us by email at support@lkb8.xyz with the subject line "Personal Data Rights Request", along with your full name and lkb8 account number. lkb8 will verify your identity before processing the request to ensure the security of your data.

8

Special Protection for Minors

Lkb8 is an online entertainment platform intended exclusively for individuals aged 18 years and above only. lkb8 does not knowingly collect or process the personal data of individuals under the age of 18.

If you are a parent or guardian and believe that your minor child has registered an lkb8 account or provided us with their personal data without your consent, please contact our support team immediately at support@lkb8.xyz. lkb8 will take immediate action to verify the report, and if confirmed, close the account and delete all associated data.

Protection Measures: lkb8 has an age verification process in place during registration and as part of the KYC process. Nevertheless, we encourage parents to use parental control software on devices accessed by children to prevent unintended access to online betting platforms.

9

Amendments to the Privacy Policy

Lkb8 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, applicable laws in Malaysia, or relevant technological developments.

When we make material changes to this Privacy Policy, lkb8 will:

  • Updating the "last updated" date at the top of this document
  • Sending notifications to all active members via their registered email at least 14 days before the changes take effect
  • Displaying a prominent change notice on the lkb8 platform homepage for a minimum period of 30 days

For minor changes that do not materially affect how we collect or use your personal data — such as grammar corrections or clarifications in wording — lkb8 may not send a specific notification, but will update the date on this document.

You are encouraged to review this Privacy Policy periodically to stay informed about how lkb8 protects your data. Continued use of the lkb8 platform after the effective date of an updated Privacy Policy will be considered acceptance of those changes.

Related Documents

This Privacy Policy should be read together with the Terms & Conditions lkb8 and the page Responsible Gaming us, together forming a comprehensive data protection framework for lkb8 Malaysia members.

10

Contact lkb8's Privacy Officer

Lkb8 has appointed a Data Protection Officer responsible for ensuring PDPA 2010 compliance and handling all enquiries and complaints relating to member data privacy.

For any enquiries, concerns, or complaints relating to this Privacy Policy or how lkb8 handles your personal data, please contact us via:

  • Email (recommended for privacy matters): support@lkb8.xyz — use the subject line "Data Privacy Enquiry"
  • Live Chat: Available on the lkb8 platform — 24 hours a day, 7 days a week for general enquiries

Lkb8 will acknowledge receipt of your privacy complaint within 3 business days and provide a full response within 21 working days depending on the complexity of the issue reported. If you are not satisfied with how lkb8 has handled your privacy complaint after going through our internal process, you have the right to refer the matter to the Department of Personal Data Protection Malaysia (JPDP).

FAQs — lkb8 Privacy Policy

The most frequently asked questions about data privacy at lkb8.

No. lkb8 does not store your bank card number, debit/credit card number, or e-wallet passwords (such as your Touch 'n Go, GrabPay, or Boost passwords). All payment transactions are processed through third-party payment gateways that comply with PCI-DSS standards — your sensitive payment information never passes through or is stored on lkb8's servers. We only retain transaction records (amount, date, and type of payment method used) for account management and legal compliance purposes. This means that in the event of a security incident on lkb8's end, your bank card data will not be exposed.

Yes, you may request deletion of your personal data by contacting us at support@lkb8.xyz. However, this right is not absolute — certain data that lkb8 is legally required to retain will not be deleted even upon request. For example, financial transaction records must be kept for the period prescribed under Malaysian anti-money laundering and tax laws. Data needed to resolve ongoing disputes or complaints also cannot be deleted until those matters are fully resolved. lkb8 will inform you which data can be deleted and which must be retained, along with the legal basis for doing so.

Some data may be processed by cloud service or technology providers operating outside Malaysia as part of normal platform operations. Any such data transfers are subject to contractual safeguards ensuring that security and privacy standards equivalent to or exceeding Malaysia's PDPA 2010 requirements are upheld by the receiving party. lkb8 only works with service providers that have a strong track record of data protection compliance and are bound by strict data processing agreements. If you have specific concerns about cross-border data transfers, please contact us for more information.

There are several ways to stop receiving marketing communications from lkb8. The easiest is to log in to your lkb8 account, go to Account Settings, and select "Communication Preferences", where you can disable any type of marketing communication you no longer wish to receive. You can also click the "unsubscribe" link found at the bottom of any marketing email sent by lkb8 — changes made this way will take effect within 48 hours. A third option is to contact the lkb8 support team via live chat or by emailing support@lkb8.xyz and requesting to be removed from our marketing mailing list. Please note that even after opting out of marketing emails, lkb8 may still send you essential service communications such as account security alerts, transaction confirmations, and terms updates — these are not marketing messages and are necessary for the security of your account.
Play Safe & With Confidence

Your Data Is Safe with lkb8

Register a free lkb8 account today with confidence — your privacy is fully protected with 256-bit SSL encryption, PDPA 2010 compliance, and our commitment to never selling your data to third parties.

18+ only. Play responsibly. Your data is protected in accordance with lkb8's Privacy Policy and PDPA 2010.

Bahasa Melayu