Privacy Policy — Lambor68

1 Introduction

Lambor68 (hereinafter "Lambor68", "we", "us", "the Company") operates the online gaming and sports betting platform accessible at https://lambor68.cam. This Privacy Policy (hereinafter "Policy") sets out how we collect, use, disclose, store, and protect the personal data of all users (hereinafter "Player", "User", "you") of our Platform.

This Policy applies to all personal data processed in connection with your registration, use of gaming products, financial transactions, customer support interactions, and any other activity you conduct on or through the Lambor68 Platform. It applies equally whether you access the Platform via desktop browser or mobile device from Kuala Lumpur, Penang, Johor Bahru, Shah Alam, Petaling Jaya, or anywhere else in Malaysia.

This Policy should be read together with our Terms and Conditions and Responsible Gambling Policy, all of which govern your use of the Lambor68 Platform.

2 Definitions

For the purposes of this Policy, the following terms are defined as follows:

3 Data We Collect

Lambor68 collects the following categories of personal data from players:

3.1 Registration & Identity Data

• Full legal name (as it appears on your Malaysian IC / MyKad or passport)
• Date of birth
• Residential address
• Email address
• Mobile phone number
• Username and encrypted password

3.2 KYC & Verification Data

• Copies of government-issued photo identification (Malaysian IC / MyKad, passport, or driving licence)
• Proof of address documents (utility bills, bank statements dated within 3 months)
• Proof of payment method ownership (e-wallet registration screenshots, bank account confirmation letters)
• Selfie or liveness verification images where required

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records (amounts, dates, payment methods)
• Payment method details (e-wallet account identifiers, bank account details — no full card numbers are stored)
• Account balance history and bonus transaction logs

3.4 Gaming & Betting Activity Data

• Bet history (sports betting markets, casino game records, wager amounts, outcomes)
• Bonus usage and wagering requirement completion records
• Game session logs including duration and frequency

3.5 Technical & Device Data

• IP address and geolocation data (country and region level)
• Device type, operating system, and browser version
• Session timestamps and login history
• Cookie identifiers and similar tracking technologies

3.6 Communication Data

• Customer support chat transcripts and email correspondence
• Voluntary information provided in feedback forms or surveys
• Marketing preference settings (opt-in / opt-out records)

4 How We Collect Your Data

Lambor68 collects personal data through the following means:

• Directly from you — during account registration, KYC document submission, deposit and withdrawal requests, and customer support interactions.
• Automatically from your device — through cookies, web beacons, server logs, and similar tracking technologies when you access and use the Platform.
• From third-party payment processors — when you use DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or other Malaysian payment methods to fund your account. These processors share only the data necessary to verify and complete your transaction.
• From identity verification service providers — during the KYC process, our verification partners may provide supplemental identity confirmation data.
• From fraud detection services — technical risk signals used to identify suspicious activity on the Platform.

5 Data Processing & Purposes

Lambor68 processes your personal data for the following purposes:

6 Legal Basis for Processing

Lambor68 processes your personal data on one or more of the following legal bases:

• Contractual necessity — Processing is required to perform the contract between you and Lambor68 (i.e., your Account Terms and Conditions), including account management, payment processing, and gaming services.
• Legal obligation — Processing is required to comply with applicable laws and regulations, including KYC requirements, anti-money laundering (AML) obligations, and our licensing conditions.
• Legitimate interests — Processing is necessary for our legitimate interests in operating a secure, fair, and commercially viable gaming platform, including fraud prevention, security monitoring, and responsible gambling surveillance.
• Consent — Where we rely on consent (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Data Sharing & Disclosure

Lambor68 does not sell your personal data to any third party. We may share your data with the following categories of recipients only to the extent necessary:

• Payment service providers — Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and RHB, for the purpose of processing deposits and withdrawals.
• Identity verification and KYC service providers — Third-party providers engaged to assist with age and identity verification in compliance with our licensing obligations.
• Fraud prevention services — Technology partners that provide risk scoring and device fingerprinting services to help us detect and prevent fraudulent activity.
• Game software providers — Third-party studios whose games are integrated into the Lambor68 Platform. These providers receive only the game session data necessary to operate their games and calculate results.
• Regulatory and licensing authorities — Our international licensing authority and any competent regulatory body that legally compels disclosure.
• Law enforcement and government agencies — Where we are legally required or permitted to do so in response to a lawful request, court order, or to protect the rights and safety of others.
• Professional advisers — Lawyers, auditors, and accountants engaged to provide professional services to Lambor68, all of whom are bound by confidentiality obligations.

All third-party Data Processors engaged by Lambor68 are required to process your data only as instructed by us, to maintain adequate security standards, and to comply with applicable data protection laws.

8 Data Retention

Lambor68 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations.

• Active account data — Retained for the duration of your account's active status plus a minimum of five (5) years after account closure, in accordance with AML and gaming licence record-keeping requirements.
• KYC and identity verification documents — Retained for a minimum of five (5) years from the date of last transaction, in compliance with financial crime prevention obligations.
• Financial transaction records — Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications — Retained for two (2) years from the date of the last interaction.
• Technical log data — Retained for up to twelve (12) months from collection, after which it is anonymised or deleted.

Once the applicable retention period has expired and there is no other legal basis to retain your data, Lambor68 will securely delete or anonymise your personal data.

9 Data Security

Lambor68 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption — All data transmitted between your device and our servers is encrypted in transit.
• Encryption at rest — Sensitive data stored in our systems is encrypted using industry-standard algorithms.
• Access controls — Access to personal data is restricted to Lambor68 personnel who have a legitimate need to access it for operational purposes, governed by role-based access policies.
• Two-factor authentication (2FA) — Available and recommended for all player accounts to provide an additional security layer.
• Regular security audits — Penetration testing and vulnerability assessments are conducted periodically by qualified security professionals.
• Segregated player funds — Financial assets held on behalf of players are maintained in accounts that are strictly separate from Lambor68's operational funds.

10 Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the Lambor68 Platform. They allow us to recognise your device, remember your preferences, and collect information about how you use the Platform.

10.2 Types of Cookies We Use

• Strictly necessary cookies — Essential for the Platform to function. These include session cookies that maintain your logged-in state and security tokens. These cannot be disabled.
• Functional cookies — Remember your preferences such as language settings, preferred betting markets, and display options to personalise your experience.
• Analytics cookies — Allow us to understand how players use the Platform — which pages are visited most often, which games are played, and where users encounter difficulties — so we can improve the experience. Data collected is aggregated and anonymised.
• Security cookies — Help us detect and prevent fraudulent login attempts, session hijacking, and other security threats.

10.3 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies may prevent you from logging into your account or using certain Platform features. Analytics and functional cookies can be disabled without affecting core functionality.

11 Your Data Rights

Lambor68 respects your rights as a data subject. Depending on applicable law, you may have the following rights with respect to your personal data:

To exercise any of the above rights, please contact Lambor68's data protection contact at [email protected]. We will respond to all valid requests within 30 calendar days. In certain circumstances, we may be required to retain data despite a deletion request — for example, where retention is mandated by our licensing obligations or applicable law.

12 Minors & Age Policy

The Lambor68 Platform is intended exclusively for adults aged 21 years and above. We do not knowingly collect or process personal data relating to persons under the age of 21.

As part of our KYC process, all registered players are required to verify that they meet the minimum age requirement by submitting government-issued identification. Accounts found to have been registered by individuals under the age of 21 will be suspended immediately and all associated data will be deleted or anonymised as required by applicable law.

If you believe that a minor has registered on our Platform or that we hold data relating to a minor, please contact us immediately at [email protected].

13 International Data Transfers

Lambor68 operates as an internationally licensed gaming platform. Your personal data may be transferred to, stored in, or processed by our service providers or licensing authority infrastructure located outside of Malaysia.

Where personal data is transferred internationally, Lambor68 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to what you would receive under the data protection laws applicable in your jurisdiction. Such safeguards include contractual data processing agreements with all third-party processors.

By creating an account and using the Lambor68 Platform, you acknowledge and consent to the transfer of your personal data outside Malaysia where necessary for the purposes described in this Policy.

14 Policy Amendments

Lambor68 reserves the right to amend this Privacy Policy at any time. When material changes are made to this Policy, we will notify registered players via the email address associated with their Account and display a prominent notice on the Platform.

The "Last Updated" date at the top of this Policy reflects when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, your personal data, or your data rights, please contact Lambor68 through the following channels:

• Data Protection Contact Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week on the Platform
• Response Time: We aim to respond to all data-related requests within 30 calendar days

Our support team serves players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all regions of Malaysia.

For general platform support, bonus queries, or responsible gambling assistance, the same contact details apply. You may also visit our FAQ page for answers to common questions.