lambor88 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by lambor88 ("lambor88", "we", "us", "our") and applies to all personal data collected through the lambor88 website at lambor88.club, including all associated services, features, and communications (collectively, the "Platform"). lambor88 is committed to protecting the privacy of all users, including Malaysian players, in accordance with applicable data protection laws and the data handling requirements of its international online gaming licence.

By registering an account or continuing to use the lambor88 Platform, you acknowledge that you have read, understood, and consented to the collection and use of your personal data as described in this Policy. If you do not agree with this Policy, you should not use the Platform.

2. Data Controller Information

lambor88 operates as the data controller in respect of personal data collected through the Platform. As data controller, lambor88 determines the purposes and means of processing your personal data. For all data-related enquiries, including exercising your data subject rights, please contact our Data Protection team via the support channels listed in Section 14 of this Policy.

3. Personal Data We Collect

lambor88 collects the following categories of personal data:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and country of residence provided at account creation;
• Identity verification data: Government-issued identification documents (MyKad, passport), proof of address (utility bills, bank statements), and selfie/liveness verification images where required under KYC procedures;
• Financial data: Payment method details (e-wallet account numbers, bank account details for verification purposes), deposit and withdrawal transaction history, and bonus redemption records. lambor88 does not store full payment card numbers; card data is tokenised by our payment processors;
• Betting and gaming activity: All wagers placed, games played, session durations, win/loss records, and in-platform behavioural data relevant to responsible gaming monitoring;
• Technical and device data: IP address, device type, operating system, browser type and version, screen resolution, time zone, and referring URL collected automatically when you access the Platform;
• Communications data: Records of live chat conversations, support emails, and feedback submissions directed to the lambor88 support team;
• Responsible gaming data: Self-imposed limits, cooling-off periods, self-exclusion requests, and any responsible gaming assessments conducted during your use of the Platform.

4. Legal Basis for Processing

lambor88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and operate your lambor88 account, process deposits and withdrawals, and provide the betting and gaming services you have requested;
• Legal obligation: Processing required to comply with Anti-Money Laundering (AML) laws, Know Your Customer (KYC) requirements, and reporting obligations under our international gaming licence;
• Legitimate interests: Processing undertaken to detect and prevent fraud, maintain Platform security, conduct internal analytics for service improvement, and enforce our Terms & Conditions;
• Consent: Processing for marketing communications (promotional emails, bonus notifications). You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. How We Use Your Personal Data

lambor88 uses your personal data for the following purposes:

• Creating, verifying, and managing your lambor88 player account;
• Processing deposits and withdrawals via Touch n Go eWallet, GrabPay, Boost, Malaysian bank transfers, and other supported payment methods;
• Conducting identity verification and ongoing due diligence under KYC and AML obligations;
• Detecting and investigating fraud, bonus abuse, money laundering, and other prohibited activities as defined in our Terms & Conditions;
• Providing customer support, resolving disputes, and responding to account enquiries;
• Administering bonuses, promotions, and loyalty programmes, including verification of eligibility;
• Monitoring player behaviour for responsible gaming purposes, including identifying indicators of problem gambling and triggering intervention protocols;
• Sending transactional communications (account alerts, deposit confirmations, withdrawal status updates) via email and SMS;
• Sending promotional communications where you have provided consent;
• Improving Platform features, fixing technical issues, and conducting internal performance analytics on an anonymised or aggregated basis.

6. Disclosure of Personal Data to Third Parties

lambor88 does not sell, rent, or trade your personal data to any third party. We disclose personal data only in the following circumstances:

• Payment processors: Transaction data is shared with payment service providers (including e-wallet operators and banking institutions) solely to facilitate deposits and withdrawals. These providers process data under their own privacy policies and applicable financial regulations;
• Identity verification providers: KYC data (identity documents, liveness images) is shared with licensed identity verification services for the purpose of regulatory compliance;
• Game content providers: Technical session data (player ID, stake amounts, game outcomes) is shared with licensed game studios and aggregators solely to facilitate game play and RNG integrity auditing;
• Regulatory and licensing authorities: lambor88 discloses data to its licensing authority and to law enforcement or regulatory bodies when required by law, court order, or in response to a legitimate legal process;
• Fraud prevention networks: Anonymised fraud signals and device fingerprint data may be shared with industry fraud prevention consortia to protect the integrity of the Platform and the broader gaming industry;
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of lambor88's assets, personal data may be transferred to the acquiring entity, provided that entity assumes the data protection obligations set out in this Policy.

7. International Data Transfers

lambor88 operates under an international online gaming licence and may store or process your data on servers located outside Malaysia. When personal data is transferred across borders, lambor88 ensures that appropriate safeguards are in place — including contractual data transfer agreements with receiving parties — to provide a level of data protection equivalent to that which would be provided within jurisdictions with established data protection frameworks. By using the Platform, you consent to the transfer of your data internationally as described in this section.

8. Cookies and Tracking Technologies

lambor88 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the Platform, maintain your login session, remember your preferences, and collect usage analytics. The following categories of cookies are used:

• Strictly necessary cookies: Required for Platform operation. These cannot be disabled without affecting core functionality such as maintaining your logged-in session;
• Functional cookies: Store your language preference, display settings, and responsible gaming limit configurations;
• Analytics cookies: Collect anonymised data about how players navigate and use the Platform, used to improve performance and identify technical issues. lambor88 uses self-hosted analytics and does not share this data with advertising networks;
• Security cookies: Support fraud detection and session integrity verification.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform.

9. Data Security

lambor88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for data at rest, access controls and role-based permissions for internal systems, regular penetration testing and security audits, and multi-factor authentication on administrative systems. Despite these measures, no security system is completely impenetrable. lambor88 will notify affected users and relevant authorities of data breaches in accordance with applicable legal requirements.

10. Data Retention

lambor88 retains your personal data for as long as your account remains active and for a minimum period of five (5) years after the date of account closure or the last transaction on your account, whichever is later. This retention period reflects the AML record-keeping requirements associated with lambor88's international gaming licence. Identity verification documents are retained for at least seven (7) years. After the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data may be retained indefinitely for analytical and statistical purposes.

11. Your Rights as a Data Subject

Subject to applicable law and certain limitations arising from our legal obligations (including AML and KYC retention requirements), you hold the following rights in respect of your personal data held by lambor88:

• Right of access: Request a copy of the personal data lambor88 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations;
• Right to restriction of processing: Request that lambor88 restrict processing of your data in certain circumstances (e.g., while a data accuracy dispute is under review);
• Right to data portability: Request your personal data in a structured, machine-readable format for transfer to another service provider;
• Right to withdraw consent: Withdraw consent to marketing communications at any time via the unsubscribe link in any promotional email or by contacting support;
• Right to object: Object to processing based on legitimate interests where you believe your rights and interests outweigh those interests.

To exercise any of these rights, please contact the lambor88 Data Protection team (see Section 14). Requests will be acknowledged within 5 business days and fully processed within 14 business days wherever possible.

12. Children and Minors

lambor88 strictly prohibits access to the Platform by any person under the age of 21. lambor88 does not knowingly collect personal data from anyone under 21. If lambor88 discovers that personal data has been collected from a person under the age of 21, that account will be immediately closed, all deposits will be returned, all winnings will be forfeited, and the data will be securely deleted. If you believe a minor has created a lambor88 account, please contact our support team immediately.

13. Changes to This Policy

lambor88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or our Platform's features. When material changes are made, lambor88 will notify registered users via email or via a prominent notice on the Platform at least 7 days before the changes take effect. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of that revised Policy.

14. Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or lambor88's handling of your personal data, please contact our support team via:

• Live chat: Available 24/7 from within your lambor88 account (English and Malay);
• Email: support@lambor88.club — please include "Privacy Request" in the subject line for data subject requests.

If you are not satisfied with lambor88's response to a data privacy concern, you have the right to escalate your complaint to the relevant data protection authority in the jurisdiction of lambor88's licensing authority.