Laju8 Privacy Policy – Personal Data Protection for Malaysia Members

This Privacy Policy is issued by laju8 ("we", "the laju8 platform") and applies to all members who register and use our online betting and casino platform at laju8.click. This document clearly sets out our practices regarding the collection, use, storage, protection and disclosure of your personal data — in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By registering a laju8 account or using any of our services — including Sports Betting, Live Casino games such as baccarat, roulette, blackjack and dragon tiger, jackpot slots, or simply browsing laju8.click — you acknowledge that you have read and understood this Privacy Policy and agree to the way we handle your personal data as described herein.

Laju8 acts as the Data Controller under Malaysia's PDPA 2010 — meaning we determine the purposes and means by which members' personal data is processed. For certain specific functions, we may engage third-party data processors who act solely under our instruction and are bound by strict confidentiality agreements.

Laju8 collects various types of personal data based on your interactions with our platform. The following are the categories of data we may collect:

Laju8 only collects data that is strictly necessary for the stated purposes — a data minimisation principle we firmly uphold. We do not collect excessive data that is irrelevant to the operation of our platform.

Laju8 uses collected personal data solely for legitimate purposes directly related to the operation of our platform. These purposes are:

• Account Management: Creating and managing your laju8 member account, processing registrations, verifying identity, and managing your password and account security
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX (Maybank2u, CIMB Clicks), as well as withdrawal of winnings to payment methods registered under the member's name
• Betting & Gaming Services Provision: Giving you access to all games and betting markets on laju8, including Live Casino, slots, Malaysia Super League and EPL football betting, BWF badminton, cricket, and esports.
• Fraud Prevention & Security: To identify, prevent, and investigate fraudulent activity, money laundering, multiple account ownership, and any other misuse of the laju8 platform
• Regulatory Compliance: Fulfilling legal compliance obligations, including KYC (Know Your Customer), AML (Anti-Money Laundering) requirements, and reporting to the relevant authorities when required by law.
• Customer Support: To provide quality 24-hour technical support and customer service to every laju8 member
• Platform Improvements: Analysing usage patterns in aggregate form (without identifying individuals) to improve the user experience, enhance platform features and develop new games relevant to Malaysian members
• Marketing Communications: Sending information about laju8 promotions, new bonuses, tournaments and exclusive offers to members who have given explicit consent to receive such communications

Laju8 does not sell or disclose members' personal data to third parties for their own marketing purposes. However, there are limited situations where laju8 needs to share personal data with certain parties to keep the platform running properly:

• Licensed Payment Providers: laju8 shares the necessary transaction information with licensed payment providers in Malaysia, including DuitNow operators, FPX, and approved digital wallets (TNG eWallet, GrabPay, Boost, ShopeePay), to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements and are regulated by Bank Negara Malaysia
• Game Providers (Casino Studios): For live casino games on laju8 such as baccarat, roulette, and blackjack, minimal technical information may be shared with studio providers such as Evolution Gaming, Pragmatic Play Live, and SA Gaming solely for game operation purposes
• Technology Service Providers: laju8 works with several third-party technology service providers for CDN infrastructure, cybersecurity, and platform analytics. All these providers act as data processors under our instruction and are bound by strict data processing agreements.
• Legal Authority: laju8 may disclose personal data to Malaysian authorities — such as the police, courts or financial regulators — when required by law, court order, or to prevent serious financial crime

Laju8 invests seriously in security technology and procedures to ensure members' personal data is always protected against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Transit Encryption: All communications between your browser and the laju8 platform are encrypted using TLS 1.3 with a 256-bit SSL certificate that is regularly renewed
• Storage Encryption: Sensitive data stored in laju8's databases is encrypted using AES-256 encryption — meaning the data remains unreadable even in the event of a server breach
• Role-Based Access Control: Only laju8 staff with a legitimate business need are granted access to specific member data. Access is determined by job role and is regularly monitored and audited
• Two-Factor Authentication (2FA): All laju8 staff access to internal systems containing member data requires two-factor authentication to prevent the misuse of stolen credentials
• Continuous Monitoring: laju8's cybersecurity team monitors the platform infrastructure 24 hours a day, 365 days a year to detect and respond to any suspicious activity in real time.
• Regular Security Testing: laju8 conducts regular penetration testing and independent security audits to identify and address any vulnerabilities before they can be exploited

In the event of any security incident that may affect the personal data of laju8 members, we will notify the affected members and the relevant authorities within the timeframe stipulated by law, in accordance with Malaysia's PDPA data breach notification requirements.

Laju8 does not retain members' personal data for longer than is necessary for the purpose for which it was collected, or as required under Malaysian law. The following are general guidelines for our data retention periods:

• Active Account Data: For as long as your laju8 account remains active, your personal data is retained to enable continued service delivery
• After Account Closure: laju8 retains transaction data and account records for a minimum of 7 years after account closure to meet Malaysia's anti-money laundering (AML) and tax reporting legal requirements
• KYC Records (Identity Verification): Identity verification documents are retained for 5 years after the business relationship ends, in line with regulatory compliance requirements
• Security & Technical Logs: System logs containing IP addresses and login activity are retained for 12 months for security and fraud investigation purposes
• Support Communication Records: laju8 customer support chats and emails are retained for 2 years for reference and quality training purposes

Once the retention period has expired or the data is no longer needed, laju8 will delete or anonymise it securely to prevent unauthorised recovery.

The laju8 platform uses cookies and similar tracking technologies to enhance your experience, ensure the platform functions correctly, and understand how members interact with our website. The following are the types of cookies used by laju8:

You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect certain laju8 platform features, including login functionality and account security.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a laju8 member have the following rights regarding your personal data:

To submit any request relating to the above data rights, please contact the laju8 Privacy Officer by email at support@laju8.click by stating the type of request, your laju8 account number, and the required identity verification details. laju8 is committed to responding to your request within the timeframe stipulated under PDPA 2010.

Laju8 services are exclusively available to individuals who are 18 years of age and above only. laju8 does not knowingly collect, store or process the personal data of individuals under the age of 18.

Parents and guardians with concerns about a child in their care accessing the laju8 platform are encouraged to contact our support team promptly at support@laju8.click.

Laju8 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes in platform operations. When we make material changes to this Privacy Policy:

• The "Updated" date at the top of this page will be revised to reflect the date of the latest amendment
• For changes that materially affect your rights, laju8 will send a notification to the email address registered to your account at least 14 days before the changes take effect
• For minor changes that do not affect your fundamental rights, notice may only be displayed on this page

If you have any questions, concerns or complaints regarding how laju8 handles your personal data, or if you wish to submit a request relating to your data rights under PDPA 2010, you may contact laju8's Privacy Officer via:

You also have the right to file a complaint with Malaysia's Department of Personal Data Protection (JPDP) if you are not satisfied with how laju8 has handled your privacy complaint after contacting us directly first.