Privacy Policy LBC22 – How We Protecting Your Data

This Privacy Policy ("Policy") is published by LBC22 (lbc22.best) and describes how we collect, use, store, protect, and in certain circumstances disclose your personal information when you use the LBC22 platform.

By registering an LBC22 account, making your first deposit or simply browsing our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the LBC22 platform and contact us to close your account if you have already registered.

LBC22 takes our obligations under Personal Data Protection Act 2010 (PDPA) Malaysia. We ensure that all personal data processing is carried out lawfully, fairly and transparently in accordance with the principles set out in that Act. This policy is also made available in Bahasa Melayu to facilitate understanding for Malaysian users.

LBC22 only collects data that is strictly necessary to deliver the platform's services to you. Below are the categories of data we may collect:

Personal Identification Data:

Identity Verification (KYC) Data: To meet AML/KYC legal compliance requirements, LBC22 may request identity verification documents such as:

• Copy of Malaysian Identity Card (MyKad) – front and back
• Bank statement or utility bill as proof of address (not more than 3 months old)
• Additional documents if required to verify large transactions

Technical & Usage Data:

This technical data is necessary to maintain account security, detect fraudulent activity, and deliver an optimal user experience. It also helps us meet our applicable legal compliance reporting obligations.

LBC22 processes your personal data for the following lawful purposes:

• Account Management: To create, verify, and maintain your account on the LBC22 platform. This includes the login process, two-factor authentication, and password recovery.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost and ShopeePay, as well as managing withdrawals to registered accounts.
• Legal Compliance (KYC/AML): To fulfil our obligations under anti-money laundering legislation, verify player age (minimum 18 years), and ensure compliance with applicable licensing requirements.
• Platform Security: Detecting and preventing fraud, duplicate registrations, bonus abuse and any activity that violates LBC22's Terms & Conditions.
• Customer Service: Providing effective customer support in Bahasa Melayu, including resolving complaints and disputes related to games or transactions.
• Product Improvement: Analysing usage patterns on an aggregate (not individual) basis to improve the platform interface, add in-demand games and enhance the overall user experience.
• Promotional Communications: To send you information about LBC22 promotions, bonuses, and the latest offers — only where you have given your consent to receive such communications at the time of registration.

LBC22 will not process your data for any purpose other than those stated above without first obtaining your additional consent.

LBC22 understands that your trust depends on how we manage who can access your data. Our policy is clear: we do not sell, rent or trade your personal data to any third party for commercial or marketing purposes.

However, there are limited situations where LBC22 may need to share your data with certain parties:

• Payment Service Providers: Only the transaction details required (such as the amount and reference number) are shared with the payment gateway needed to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Game Providers: To enable games to function properly, basic session data (such as a player ID without the full name) may be shared with game providers such as Pragmatic Play or Evolution Gaming for technical purposes.
• Legal Authorities: LBC22 may be required to disclose certain data if compelled by a valid court order, directive from a Malaysian authority, or legally mandated AML reporting obligations. In such cases, LBC22 will disclose only the minimum data necessary.
• Independent Auditors: Audit bodies such as eCOGRA or iTech Labs may require access to limited technical data for game fairness auditing purposes — without access to any personally identifiable player information.

All third parties with whom LBC22 shares data are subject to strict confidentiality and data protection agreements. They are permitted to use shared data only for the specific agreed purpose and may not process it for their own ends.

This is the area that tends to cause the most concern among Malaysian players — and understandably so. Here is exactly how LBC22 handles your financial data:

Data LBC22 Does Not Store: Your full e-wallet details (account number, password, access token), bank card numbers, bank account numbers, and any login credentials for payment platforms never enter or are stored in LBC22's systems. When you click "Deposit" and select a payment method, you will be redirected to a secure third-party payment gateway to complete the transaction.

What We Retain: LBC22 only retains transaction records required for accounting and compliance purposes, including:

• Transaction amount in Malaysian Ringgit (RM)
• Transaction date and time
• Transaction status (successful / failed / in progress)
• Transaction reference number from the payment gateway
• Type of payment method used (e.g., "Touch 'n Go eWallet") — without account details

These transaction records are retained for a minimum of 7 years as required under Malaysia's accounting laws and AML compliance obligations, after which they will be securely disposed of.

LBC22 implements multiple layers of security to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• Encryption in Transit: All communications between your browser or app and LBC22's servers use HTTPS with TLS 1.3 encryption (256-bit SSL). This ensures that data in transit cannot be intercepted or read by third parties.
• Encryption at Rest: Sensitive data stored in LBC22's databases is encrypted using strong encryption algorithms, ensuring it remains unreadable even to unauthorised internal staff.
• Strict Access Controls: Only LBC22 staff who require access to personal data to carry out their authorized job duties are permitted to do so, and only to the extent necessary.
• 24/7 Monitoring: Our systems are continuously monitored to detect suspicious activity, intrusion attempts, and abnormal access patterns.
• Two-Factor Authentication: LBC22 offers two-factor authentication to protect your account from unauthorised access, even in the event your password is compromised.
• Regular Security Audits: The LBC22 platform undergoes regular penetration testing by independent security experts to identify and address any vulnerabilities.

Despite all these measures, no system can be guaranteed 100% secure. We encourage you to take protective steps on your end as well – use a strong and unique password for your LBC22 account, never share your login credentials with anyone, and contact us immediately if you suspect any suspicious activity in your account.

LBC22 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session, remembering language preferences, and processing transactions securely. These cookies cannot be disabled without affecting core platform functionality.
• Performance Cookies: Used to analyse how players use the LBC22 platform — such as which pages are visited most frequently and where players encounter issues. This data is collected anonymously and in aggregate, used solely to improve the platform.
• Functional Cookies: Allows the platform to remember your preferences — such as favourite games, display settings, and language selection — to deliver a more personalized experience.

You can manage or disable cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the LBC22 platform. All data collected via cookies is processed in accordance with the principles set out in this Privacy Policy.

LBC22 does not retain your personal data longer than necessary. Retention periods vary depending on the type of data and applicable legal requirements:

Once the designated retention period expires, data is securely disposed of using methods that ensure it cannot be recovered or accessed again.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and LBC22's policies, you have the following rights regarding your personal data:

LBC22 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) – the primary legislation governing the collection, processing, and storage of personal data in Malaysia.

Seven core PDPA principles we uphold in every data processing operation:

• General Principles: Personal data must be processed lawfully and must not cause harm to the data subject.
• Notice & Choice Principle: Users must be informed about the data collected and the purpose of collection, and must be given the option to opt out.
• Disclosure Principles: Data may not be disclosed without user consent, except in situations provided for by law.
• Security Principle: Appropriate security measures must be implemented to protect data against foreseeable risks.
• Integrity Principle: Data must be accurate, complete, not misleading, and updated whenever necessary.
• Access Principles: Users must be given access to their own data and may correct any inaccurate information.
• Retention Principles: Data must not be retained for longer than is necessary for the purpose for which it was collected.

If you would like to learn more about Malaysia's PDPA or your rights under the Act, official information is available through the Department of Personal Data Protection Malaysia.

The LBC22 platform is strictly for individuals aged 18 and above. LBC22 does not knowingly collect or process any personal data from individuals under the age of 18.

During registration, we require date of birth verification and reserve the right to request age verification via official documents at any time. Should LBC22 discover or become aware that we have inadvertently collected data from an individual under the age of 18, we will take immediate steps to:

• Closing the associated account immediately
• Deleting all personal data of the individual concerned from our systems
• Returning any remaining real money balance in the account to the original deposit method
• Voiding all winnings earned and rejecting any pending withdrawals

If you become aware that someone under the age of 18 has registered or is using the LBC22 platform, please contact us immediately at support@lbc22.best so that we may take appropriate action.

LBC22 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements or feedback from our player community.

For any significant or material changes to this policy, LBC22 will:

• Updating the "Last Updated" date at the top of this page
• Sending notifications to all registered users via email
• Displaying an in-platform notice on LBC22 for at least 30 days before the changes take effect

Your continued use of the LBC22 platform after any changes take effect constitutes your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account before they take effect by contacting our support team.

Contact LBC22's Privacy Officer:

• Privacy Email: privacy@lbc22.best
• General Support: support@lbc22.best
• Live Chat: Available within the LBC22 platform, 24 hours a day, 7 days a week