Lfc8 Privacy Policy – Personal Data Protection for Malaysian Players

This Privacy Policy ("Policy") is published by lfc8, an online betting and casino platform operating under the domain lfc8.best. It describes our privacy practices regarding the collection, use, disclosure, and protection of personal information belonging to lfc8 platform users in Malaysia.

Lfc8 understands that player trust depends not only on game quality or withdrawal speed — but also on how we handle their personal data. From day one, privacy protection has been a core value that lfc8 has never compromised on. We do not regard player data as a business asset — we treat it as a responsibility to be handled with the utmost respect.

This policy applies to all users who register an account, browse the website, or use any lfc8 services. By using the lfc8 platform, you agree to the practices described in this Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

Lfc8 collects personal information from various sources as part of our platform's operations. Below are the categories of information we collect:

A. Information You Provide Directly

• Full name as stated on your Malaysian identification document
• MyKad number or passport number
• Date of birth and gender
• An active Malaysian mobile number
• Email address
• Malaysian residential address
• Bank account or eWallet details (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) for transaction purposes
• Identity verification documents during the KYC (Know Your Customer) process

B. Information Collected Automatically

• The IP address of your device when accessing the lfc8 platform
• Device type, operating system, and web browser used
• In-platform activity log data including the dates, times, and pages visited
• Betting history, game activity, deposits, and withdrawals in your account
• Cookie data and similar tracking technologies
• General geolocation data based on IP address (country and state only)

C. Information from Third Parties

• Identity verification from lfc8's appointed KYC service provider
• Transaction data from Malaysian payment providers such as FPX and Maybank2u
• Information relating to the gambling self-exclusion programme where applicable

Lfc8 uses collected personal information for legitimate and transparent purposes, including the following:

Lfc8 does not use your personal information for any purpose beyond those stated above without first obtaining your consent. For promotional and marketing communications, you may withdraw your consent at any time via your account settings or by contacting our support team.

Lfc8 does not sell, rent, or disclose your personal information to third parties for marketing purposes. However, there are limited circumstances in which lfc8 may need to share your information:

Appointed Service Providers

Lfc8 engages selected third-party service providers to support platform operations, including payment processors such as FPX, Maybank2u, and CIMB Clicks; KYC and identity verification service providers; IT infrastructure providers; and platform analytics providers. All service providers are bound by strict confidentiality agreements and are only permitted to use your information for the specific purposes contracted. They are not authorised to use your data for any other purpose.

Legal Requirements and Regulatory Authorities

Lfc8 may be required to disclose your personal information where mandated by Malaysian law or a valid court order, to law enforcement authorities in the course of a legitimate criminal investigation, to relevant regulatory bodies for licensing compliance and audit purposes, or to fulfil anti-money laundering (AML) and counter-terrorism financing (CFT) obligations in accordance with Malaysian law.

Business Transfers

In the event of a merger, acquisition, or transfer of lfc8's business assets, users' personal information may be transferred to the new entity as part of those assets. Users will be notified before any such transfer takes place and will have the right to opt out if they do not consent.

Lfc8 continually invests in its cybersecurity infrastructure to ensure that Malaysian players' personal data is protected to the highest standard. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All data transmitted between your device and lfc8's servers is encrypted using 256-bit TLS/SSL protocol — the same standard used by leading banking institutions in Malaysia.
• Static Data Encryption: Sensitive information such as passwords and financial details is stored in encrypted form using strong cryptographic algorithms in the lfc8 database.
• Strict Access Controls: Only lfc8 staff with specific authorisation may access players' personal information, and every access is logged for audit purposes.
• 24/7 Monitoring: lfc8's security systems are monitored around the clock to detect any suspicious activity or attempts to breach data.
• Periodic Penetration Testing: lfc8 conducts regular security penetration testing to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Players are encouraged to enable two-factor authentication on their lfc8 account as an additional layer of security.
• Secure Servers: Player data is stored in data centres equipped with high-grade physical and digital security, supported by multi-layered backup systems to prevent data loss.

While lfc8 takes all reasonable steps to protect your data, no security system is 100% foolproof. We therefore encourage you to take personal precautions as well — such as using a strong and unique password for your lfc8 account, never sharing your login credentials with anyone, and notifying us immediately if you suspect any unauthorised activity on your account.

Lfc8 retains your personal information for as long as your account is active or as long as necessary to provide services to you. However, certain legal and regulatory requirements oblige lfc8 to retain specific records for defined periods:

• Financial Transaction Records: Retained for a minimum of 7 years in accordance with the requirements of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA).
• KYC Documents: Retained for a minimum of 6 years after the business relationship ends.
• Gaming Activity Logs: Retained for 3 years for audit and dispute resolution purposes.
• Support Communication Data: Retained for 2 years for reference and service improvement purposes.
• General Account Information: Retained for the duration of the active account and 1 year after account closure.

Once the defined retention period has ended and there is no legal requirement to keep the data, lfc8 will securely delete or anonymise it in accordance with established procedures.

As an lfc8 user residing in Malaysia, you have several rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA) and lfc8's own policies:

To exercise any of the rights above, contact the lfc8 privacy team by emailing support@lfc8.best, stating the right you wish to exercise along with your account details. lfc8 may need to verify your identity before processing the request in order to keep your account secure.

Lfc8 uses cookies and similar tracking technologies to enhance your experience and keep the platform running at its best. Here are the types of cookies we use:

You can manage cookies through your web browser settings or via the cookie settings panel in your lfc8 account. Please note that disabling essential cookies may affect the platform's functionality.

As an online platform, some lfc8 player data may be stored or processed on servers located outside Malaysia, particularly in relation to cloud computing infrastructure and technical services. However, lfc8 ensures that:

• Any transfer of data outside Malaysia is carried out only with service providers that have signed strict data processing agreements and comply with data protection standards equivalent to or higher than Malaysia's PDPA.
• The most sensitive financial data and KYC information is prioritised for storage on servers operating within high-security zones.
• All cross-border data transfers are carried out through fully encrypted communication channels.
• Lfc8 continuously monitors third-party service providers to ensure ongoing compliance with the required security standards.

Lfc8 uses player data for purposes that go beyond day-to-day business operations — we use it to safeguard the wellbeing of our players. Our lfc8 Responsible Gaming relies on data analysis to:

• Identifying betting patterns that may indicate signs of addiction or financial distress, and proactively reaching out to players who may need support.
• Enforcing deposit limits and session time limits set by players themselves.
• Processing self-exclusion requests promptly and ensuring they are enforced across all sections of the lfc8 platform.
• Ensuring that players who have requested a temporary break cannot access the platform during the designated period.

Data used for responsible gaming purposes is not used for marketing and is not disclosed to third parties unless required by law or to obtain professional assistance with the player's consent.

Lfc8 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements to the way we handle players' personal data.

When any material changes are made to this Policy, lfc8 will:

• Updating the "Last Updated" date at the top of this document.
• Displaying in-platform notifications to inform all active users of changes that have been made.
• Sending an email to all registered lfc8 members for material changes that significantly affect their privacy rights.
• Providing clear, easy-to-understand summaries of changes, rather than simply replacing the old document with a new one.

Your continued use of the lfc8 platform after changes are published constitutes your acceptance of the updated policy. Previous versions of this policy are archived and can be requested via support@lfc8.best for reference purposes.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how lfc8 handles your personal data, please reach out to us through the following channels:

• Privacy Email: support@lfc8.best (please state "Privacy Enquiry" in the email subject line)
• 24/7 Live Chat: Accessible directly within the lfc8 platform after logging in
• Response Time: We aim to respond to all privacy enquiries within 5 business days
• Service Language: Bahasa Melayu and English

Privacy complaints will be investigated thoroughly, and we will provide a written response outlining our findings and the steps taken. If you are not satisfied with lfc8's response, you have the right to escalate your complaint to the Department of Personal Data Protection Malaysia or the relevant regulatory authority.