Lazawin Privacy Policy – Your Personal Data Protection

01 Introduction and Our Commitment

Lazawin deeply values the trust you place in us when you join our platform. This Privacy Policy is Lazawin's written commitment to protecting the personal data of every member who uses our online casino and wagering platform in Malaysia.

This document clearly and transparently outlines: the types of personal data we collect, the purposes for collecting that data, how we protect your information, which parties may have access to your data, and what your rights are as the data owner.

Lazawin complies with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and internationally recognised data security standards. We take every aspect of privacy protection seriously — not merely to satisfy legal requirements, but because it is the right thing to do for our members' interests.

This Privacy Policy applies to all users who access or use the lazawin website, our mobile app, and all related services. If you do not agree with the terms of this policy, please discontinue use of our platform.

02 Types of Personal Data We Collect

Lazawin only collects data that is strictly necessary to provide quality, safe, and responsible services to our members. The data we collect can be categorised as follows:

We never collect sensitive data such as health information, religious beliefs, or sexual orientation. Data collected during the registration and KYC verification process is stored securely and used solely for the purposes stated in this policy.

03 How We Use Your Personal Data

Every piece of data we collect is used for a clear and lawful purpose. lazawin will not use your data for unrelated purposes without first obtaining your consent. The following are the primary purposes for which member personal data is used:

• Account management: Creating, verifying, and maintaining your member account securely.
• Transaction processing: Processing deposits, withdrawals, and all other financial transactions accurately and promptly.
• Identity verification (KYC): Verifying your identity to comply with legal requirements and to prevent fraud and money laundering.
• Customer support: Helping you resolve any technical issues, enquiries, or complaints effectively.
• Platform communications: Sending important notifications relating to your account, transactions, promotions, and security updates.
• Platform security: Detecting and preventing fraudulent activity, unauthorised access, or other security breaches.
• Responsible gaming: Monitoring gameplay patterns to identify members who may need assistance or support.
• Product improvement: Analysing aggregated usage patterns to enhance the user experience on the platform.
• Legal compliance: Fulfilling reporting and regulatory compliance obligations to the relevant authorities when required.

Lazawin will not sell, rent, or transfer your personal data to any third party for marketing purposes without your explicit consent.

04 Data Encryption and Security Measures

Lazawin invests seriously in digital security infrastructure to ensure your personal and financial data remains protected at all times. The following are the security layers we have in place:

• 256-bit SSL/TLS encryption: All data transmitted between your device and lazawin servers is encrypted using 256-bit SSL/TLS protocol — the same standard adopted by the world's leading banking institutions.
• Data at-rest encryption: Sensitive data stored in our databases is also encrypted to prevent unauthorised access, even in unforeseen circumstances.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA for an additional layer of protection on their account login.
• 24/7 security monitoring: Our automated monitoring system operates around the clock to detect any suspicious or abnormal activity.
• Internal access controls: Only authorised lazawin staff with a legitimate operational need are permitted to access member personal data.
• Regular security audits: Our platform undergoes regular independent security audits by third-party experts to ensure data protection standards remain up to date.

While lazawin takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against cyber threats. We encourage you to also take personal precautions such as using a strong password and not sharing your account credentials.

05 Data Sharing with Third Parties

Lazawin understands that your personal data belongs to you. We do not share your personal information with external parties except in the following limited and controlled circumstances:

• Payment service providers: Approved payment partners such as FPX processors, e-wallet providers, and banks that assist in processing your financial transactions. They are bound by strict confidentiality agreements.
• Game software providers: Third-party gaming software companies that provide game content on the lazawin platform may receive the minimum technical data required for game operation.
• Authorities and regulatory bodies: Lazawin will disclose personal data when required to do so by law, court order, or lawful directive from a relevant law enforcement authority.
• Fraud prevention: In cases of suspected fraud or money laundering, relevant information may be shared with financial authorities or crime prevention agencies.
• Business continuity: In the event of a merger, acquisition, or business transfer, member data may be transferred as part of the business assets, subject to the same protections.

All third parties that receive data from lazawin are required to comply with data protection standards equal to or higher than our own. We have zero tolerance for any misuse of data by our business partners.

06 Cookies, Tracking Technology and Analytics Data

The lazawin platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyze usage patterns for continuous improvement.

Types of cookies we use:

• Essential cookies: Required for core platform operations such as login session verification and security. This cannot be disabled as it affects the platform's basic functionality.
• Performance cookies: Collecting information on how you use the platform — pages visited, time spent, and any errors encountered — to help us improve our services.
• Functional cookies: Storing your personal preferences such as preferred language, display settings, and game preferences so you do not need to reconfigure them each time.
• Analytics cookies: Aggregated and anonymised usage data that helps our technical team understand overall platform usage patterns to make better development decisions.

You can manage and delete cookies through your web browser settings at any time. However, disabling essential cookies may affect certain functions of the lazawin platform.

07 Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act 2010 and international privacy principles, you have the following rights regarding your personal data held by lazawin:

To exercise any of the above rights, please contact the lazawin customer support team via Live Chat. We will process your request within 14 business days. Please note that some requests may be subject to identity verification requirements beforehand.

08 Data Retention Period

Lazawin retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or for as long as required by applicable law.

• Active account data: Retained for the duration of your active account and for an additional period after account closure to meet audit and legal compliance requirements.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysia's financial and taxation legal requirements.
• Support communication logs: Retained for two (2) years from the date of the last interaction for reference and service quality assurance purposes.
• Technical data and security logs: Retained for 90 days for technical diagnostics and security investigation purposes.
• KYC Documents: Retained for the duration of the active account plus five (5) years after account closure in accordance with anti-money laundering legal requirements.

Once the retention period has expired, your data will be securely deleted or anonymized using approved procedures. Anonymized data can no longer be linked to any specific individual and may be used for general statistical analysis.

09 Links to Third-Party Platforms

The lazawin platform may contain links or integrations to third-party services such as game providers, payment platforms, or social media channels. It is important that you understand the following:

• Lazawin is not responsible for the privacy practices or content of any third-party websites or services.
• Each third-party platform has its own privacy policy separate from ours.
• We encourage you to read the privacy policy of every platform you visit or use.
• Your interactions with third-party platforms are outside the scope of protection offered by this lazawin Privacy Policy.

Third-party game providers operating within the Lazawin platform are bound by strict data protection agreements and receive only the minimum technical data required to deliver the gaming experience to you.

10 Policy Updates and How to Contact Us

Lazawin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any material changes will be communicated to members via in-platform notifications or their registered email.

The "Last Updated" date shown at the top of this page reflects the latest version of the policy currently in effect. Continued use of the lazawin platform after any changes take effect constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us via:

• Live Chat: Available 24/7 directly within the lazawin platform
• Support Email: [email protected]
• Telegram: Through official Lazawin channels

Our team is committed to responding to all privacy-related enquiries within three (3) business days. For urgent matters involving account security or data misuse, please use Live Chat for a faster response.