Lb33 Privacy Policy – Our Commitment to Protecting the Personal Data of Every Malaysian Member

Lb33 is an online betting platform used by hundreds of thousands of members across Malaysia — from Perlis to Sabah and Sarawak. In operating a platform of this scale, we collect and process certain personal data necessary to ensure services run smoothly, securely, and in accordance with applicable Malaysian law.

We understand that your trust is lb33's most valuable asset. That trust is built not only through competitive odds, fast withdrawals, or 24/7 customer support – but also through the responsible, transparent, and respectful way we handle your most personal information.

This lb33 Privacy Policy has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices. This document supersedes all previous versions of the lb33 Privacy Policy and takes effect from the update date stated at the top of this document.

Lb33 only collects data that is genuinely necessary to operate the platform effectively and comply with applicable legal requirements. We do not collect excessive data or data that is irrelevant to the services we provide to you.

Lb33 processes your personal data only for legitimate and reasonable purposes. We do not process your data for purposes you are unaware of or that are unrelated to the services you use. Every data processing purpose has a clear legal basis under Malaysia's PDPA.

• Account management: Creating, verifying, and managing your lb33 account, including the KYC (Know Your Customer) process required by law for digital financial platforms in Malaysia. This covers verification of your age, identity, and the legitimacy of your payment methods.
• Financial transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to the same methods. Your financial data is required to ensure every transaction reaches the correct destination securely and within the promised timeframe.
• Delivery of betting services: Providing access to Sports Betting markets for the Malaysia Super League and EPL, Malaysia Open and Thomas Cup badminton, Live Casino, poker, lottery, and all other games available on the lb33 platform.
• Fraud prevention and anti-money laundering: lb33 is required under Malaysian law to monitor suspicious activity for compliance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA 2001). This includes monitoring unusual transaction patterns and betting activity.
• Customer support: Handling enquiries, complaints, and support requests submitted via live chat, email, or WhatsApp lb33. Communication records are retained to ensure service continuity and as evidence of resolution in the event of a dispute.
• Platform improvements: Aggregated and anonymised usage data is analysed to understand how members use the lb33 platform and to identify areas for improvement. This data does not identify you personally – it is used to make better product decisions for the benefit of all users.
• Marketing communications: Information about lb33's latest promotions, bonuses, and offers is sent to you via email or in-app notifications – but only if you have given your consent to receive marketing communications. You may withdraw this consent at any time through your profile settings.
• Legal compliance: Maintaining transaction records and account data as required by Malaysian law for the prescribed period, and providing information to authorities when required by a valid court order or regulatory directive.

Protecting member personal data is not merely a legal obligation for lb33 – it is a moral commitment we take very seriously. We consistently invest in security infrastructure, staff training, and third-party audits to ensure our data protection standards remain at the highest achievable level.

• Data encryption in transit: All communications between your device and lb33's servers are encrypted using TLS 1.3 protocol with 256-bit SSL certificates. This ensures that no party between you and lb33 can read or alter data in transit – including your login credentials, financial data, and personal information.
• Encryption of data at rest: Sensitive data stored in lb33's databases — including passwords, MyKad numbers, and payment information — is encrypted using AES-256 encryption standards. Your password is not stored in its original form; it is processed through a one-way hashing function that cannot be reversed.
• Layered access controls: lb33's system operates on multi-tier access control. Only staff who require access for specific duties are granted access to particular data categories, and all access is logged for audit purposes. Different managers have different access levels depending on their roles.
• Regular security audits: lb33 conducts regular penetration testing and security audits carried out by certified independent cybersecurity firms. Any vulnerabilities identified are remediated as quickly as possible in accordance with our incident response protocol.
• Real-time threat monitoring: lb33's security monitoring system operates 24/7 to detect and respond to unauthorised access attempts, cyberattacks, or suspicious activity related to member accounts as swiftly as possible.
• Staff training: All lb33 staff with access to member data receive comprehensive, regularly updated data protection training. They are also bound by strict non-disclosure agreements (NDAs) as a condition of their employment.

Lb33 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is a commitment we do not compromise on. That said, there are limited situations where sharing data with certain parties is necessary to operate our platform or to comply with Malaysian legal requirements.

• Trusted service providers: lb33 engages trusted third-party service providers for specific functions such as payment processing (payment gateways for Touch 'n Go, GrabPay, DuitNow, FPX), cloud services, and analytics tools. These providers receive only the minimum data necessary to deliver their services and are bound by strict data protection agreements with lb33. They are not permitted to use your data for any purpose other than fulfilling the tasks directed by lb33.
• Malaysian legal compliance: lb33 will disclose your personal data to Malaysian authorities – including the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or the courts – where required by a valid court order, search warrant, or lawful regulatory directive under Malaysian law. We will not disclose your data based on informal requests or without a solid legal basis.
• Industry fraud prevention: In cases involving serious fraud or criminal activity, lb33 may share limited information with other platforms or relevant industry associations for prevention purposes and to protect all parties involved. This is done only when strictly necessary and in accordance with stringent protocols.
• Business transfer: If lb33 is involved in any merger, acquisition, or business asset transfer, members' personal data may be transferred as part of those assets. In such circumstances, you will be notified in advance and the receiving entity will be bound by a privacy policy at least equivalent to this one.

In all legitimate data-sharing instances, lb33 ensures that equivalent levels of protection are applied by the receiving party. We do not transfer Malaysian members' personal data to countries with inadequate data protection without appropriate additional safeguards in place.

The lb33 platform uses cookies and similar tracking technologies to enhance the user experience, maintain security functions, and understand how members use our platform. We want you to have a clear understanding of what cookies are, why we use them, and the choices available to you regarding their use.

• Strictly necessary cookies (required): These cookies are essential for the core functionality of the lb33 platform — including maintaining your login session, saving your language preferences and display settings, and ensuring the security of each session. Without these cookies, the lb33 platform will not function properly. You cannot disable this category of cookies without affecting your ability to use the platform.
• Functional cookies: These cookies allow the lb33 platform to remember your preferences – such as the betting markets you visit most, your preferred odds display format, and your notification settings. This makes your experience more personalised and efficient each time you log in to your lb33 account.
• Analytics cookies: lb33 uses aggregated, anonymised analytics data to understand overall platform usage patterns – which pages are most visited, which football or badminton matches attract the most interest, and where users encounter navigation difficulties. This information is used to improve the experience for all lb33 users.
• Cookie controls: You can manage your cookie settings through your browser settings at any time. Please note that disabling certain types of cookies may affect the functionality or your overall experience on the lb33 platform. For guidance on managing cookies in popular browsers, refer to your browser's help documentation.

Lb33 does not use third-party cookies for advertising or cross-site tracking purposes. We do not participate in retargeting advertising networks that track your activity on other websites based on your use of the lb33 platform.

Under Malaysia's Personal Data Protection Act 2010, you have several important rights regarding the personal data lb33 holds about you. We are committed to respecting and facilitating the exercise of these rights within a reasonable timeframe.

To exercise any of the above rights, you may contact lb33's privacy officer by email at support@lb33.xyz with the subject line "PDPA Data Rights Request", or via the "Privacy" section in your account settings. We may require identity verification before processing your request to protect your account from unauthorised submissions.

Lb33 retains your personal data only for as long as is necessary for the purposes set out in this privacy policy. Once data is no longer needed, it is deleted or anonymised in accordance with secure and controlled data disposal procedures. The following is a general guide to our data retention periods.

• Active account data: For as long as your lb33 account remains active, we retain all data necessary to manage your account and provide services to you. "Active" is defined as an account that has logged in or made a transaction within the past 12 months.
• Data after account closure: After an lb33 account is closed for any reason, we retain data required for Malaysian legal compliance for a minimum of 7 years from the date of closure. This includes financial transaction records, KYC records, and communication records related to complaints or disputes. After this period, data is securely deleted.
• Financial transaction data: Deposit and withdrawal records are retained for a minimum of 7 years in compliance with Malaysian legal requirements, including AMLATFPUAA 2001 and financial reporting obligations. These records may be required for audit purposes, dispute resolution, or regulatory investigations.
• Customer support record data: Live chat session records, emails, and support tickets are retained for 3 years to ensure service continuity and as evidence in the event of any disputes arising within that period.
• Security log data: System logs related to security and account activity are retained for 2 years to support investigations into security incidents that may be identified at a later date.

The data privacy landscape is constantly evolving — changes in legislation, advances in technology, and developments in industry best practices may from time to time require lb33 to update this Privacy Policy. We are committed to doing so in a transparent manner that respects our members' interests.

• Notice of material amendments: For significant changes to how we collect or use your data – particularly those that directly affect your rights – lb33 will send a notice at least 14 days before the amendment takes effect, via email to the address registered to your account. The notice will clearly explain what has changed and why.
• Notice for minor amendments: For minor amendments that do not affect members' fundamental rights — such as grammar corrections, clearer explanations, or updates to contact details — lb33 may update this policy without prior notice. The update date at the top of the document will be revised accordingly.
• Consent through continued use: Your continued use of the lb33 platform after the effective date of any amendments constitutes your acceptance of the revised policy. If you do not agree with the changes, you have the right to close your account before the effective date without any penalty.
• Archive of previous versions: lb33 maintains an archive of all previous versions of its Privacy Policy. If you require a copy of an earlier version for reference purposes, please contact our privacy officer with a written request.

We encourage you to review this Privacy Policy periodically – at least twice a year – to stay informed about how we manage your data. The most recent update date is always displayed at the top of this document for easy reference.

Lb33 has appointed a Data Protection Officer responsible for ensuring compliance with the PDPA and lb33's internal privacy policies. If you have any questions, concerns, or requests regarding your privacy and personal data at lb33, you may reach us through the following channels.

We encourage you to contact lb33 first regarding any privacy concerns before escalating the matter to the relevant authorities. In most cases, we can resolve concerns directly in a faster and more efficient manner. However, your right to lodge a complaint with the JPDP is an absolute right that does not require lb33's consent.