Privacy Policy

Lepak88 Privacy Policy – Personal Data Protection for Malaysian Players

At lepak88, your privacy is more than a legal obligation — it is a responsibility we take seriously. This document clearly explains what data we collect, why we need it, how we protect it, and what rights you have as a user of our platform.

Updated: 2026 Bahasa Melayu (ms-MY)
Privacy Commitment

Lepak88's Six Privacy Commitments to Malaysian Players

This is not just a marketing statement — it is a concrete commitment you can verify and test for yourself in every interaction with the lepak88 platform.

Banking-Grade 256-bit SSL Encryption

All data transmitted between your device and lepak88's servers is protected by 256-bit SSL encryption — the same security technology used by Maybank, CIMB, and Malaysia's major banks. This means that even if someone were to intercept your network traffic, the data they obtain would be unreadable without the decryption key held exclusively by lepak88's systems.

Your Data Is Never Sold or Rented

Lepak88 has never and will never sell, rent, or commercialise your personal data to advertisers, data brokers, or any third party for marketing purposes. Your data is used solely to operate your account, process financial transactions, and comply with applicable Malaysian legal requirements — nothing more.

Full Control in Your Hands

You have the right to access, correct, transfer, or request the deletion of your personal data held by lepak88 at any time. Requests can be submitted by email to support@lepak88.click, and we are required to respond within the timeframe stipulated by Malaysia's Personal Data Protection Act 2010 (PDPA).

Passwords Are Never Stored in Plain Text

Your lepak88 account password is stored as an irreversible cryptographic hash — meaning even lepak88 staff cannot view your actual password. If you forget your password, the system can only issue a new one; it cannot display the original, as no plaintext version is stored in any of our databases.

Payment Information Is Not Stored

Lepak88 does not store your bank account number, card number, or full e-wallet details in our systems. All financial transactions are processed through certified third-party payment gateways such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX — each of which maintains its own PCI DSS security standards.

Malaysia PDPA Compliance

The lepak88 Privacy Policy is drawn up in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means we have clear legal obligations in handling your personal data, and you have rights protected under Malaysian law to ensure your data is managed properly and responsibly.

1

Introduction & Policy Scope

This Privacy Policy ("Policy") describes how lepak88 ("Platform", "we", "us") collects, uses, stores, discloses, and protects your personal information when you use the lepak88 online betting platform accessible at lepak88.click.

This policy applies to all users of the lepak88 platform in Malaysia, including visitors who browse the website without registering an account, registered members who actively use our services, and any individuals who interact with lepak88 through customer support channels. By using the lepak88 platform, you fully agree to the terms of this Privacy Policy.

Lepak88 acts as the data controller under Malaysia's Personal Data Protection Act 2010 (PDPA) — meaning we are responsible for determining the purposes and means by which your personal data is processed, and we bear the associated legal obligations in relation to the protection of that data.

Definition of "Personal Data" in the Context of This Policy

"Personal Data" refers to any information that can identify you directly or indirectly — including your name, phone number, email address, identification number, IP address, location data, and financial transaction details. Data that has been fully anonymised and cannot be re-linked to any specific individual falls outside this definition.


2

Data We Collect

Lepak88 only collects data that is strictly necessary to operate our services safely and efficiently. Below is a comprehensive overview of the types of data we collect and the context in which they are collected:

Data Categories Specific Data Examples How It Is Collected
Identity Data Full name, ID card number, date of birth Account registration, KYC verification
Contact Data Malaysian phone number, email address Account registration
Financial Data Deposit records, withdrawal records, transaction history In-platform activity
Technical Data IP address, device type, browser version, operating system Automated system logs
Usage Data Games played, session duration, login frequency In-platform activity
Communication Data Live chat records, support emails, help tickets Support interactions
Cookie Data Session cookies, language preferences, display settings Your web browser / device

Lepak88 does not collect sensitive data such as health information, religious beliefs, political views, or biometric data, except in highly limited circumstances where it is directly required to meet specific legal obligations — such as identity verification for accounts involving high-value transactions — and only with your explicit consent.

We do not target, collect, or process data from children or individuals under the age of 18. Should we discover that data from an underage individual has been collected inadvertently, it will be deleted immediately and the associated account will be closed.


3

How We Use Your Data

Lepak88 uses your personal data for lawful and limited purposes. Our core principle is that data is only used for purposes directly related to the services you use — we do not use your data in ways you would not expect or have not agreed to.

  • Account Management: Creating and managing your member account, verifying your identity at login, and processing requests to update account information.
  • Transaction Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX Maybank2u, or CIMB Clicks, as well as processing winnings withdrawals to your account.
  • Security & Fraud Prevention: Detecting suspicious activity, preventing unauthorised access, and identifying attempts at fraud or money laundering.
  • Legal Compliance: Fulfilling the requirements of the Anti-Money Laundering Act (AMLA), KYC (Know Your Customer), and other financial reporting obligations stipulated under Malaysian law.
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and reaching out to players who may need help or support.
  • Customer Support: Resolving technical issues, responding to enquiries, and handling complaints submitted through lepak88's support channels.
  • Platform Improvements: Analysing usage patterns in aggregate and anonymised form to identify technical issues and opportunities to improve the user experience.
  • Service Communications: Sending important notifications about your account, terms changes, security information, and relevant service updates.
Marketing Communications: The Choice Is Yours

Lepak88 may send you promotional information and bonus offers via email or platform notifications, but only if you have given your consent to receive them. You may withdraw this consent at any time through your account notification settings or by contacting support@lepak88.click. Withdrawing marketing consent does not affect essential service communications related to your account.


4

Data Sharing with Third Parties

Lepak88 does not sell or rent your personal data to any third party. However, in the course of operating our services, we work with carefully selected third parties and must share certain data with them for specific purposes. All such data sharing is governed by data processing agreements that require those third parties to handle your data to the same security standards upheld by lepak88.

Payment Processors

The payment gateways that process your transactions — DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX, and CIMB Clicks — receive only the information required to process your specific transaction. They do not receive your full user profile.

Game Providers

Slot, Live Casino, and lottery providers receive anonymised account identifiers necessary to manage game sessions and verify winnings. They do not receive your real name or contact information.

Malaysian Authorities

Lepak88 fully complies with court orders, subpoenas, and lawful requests from Malaysian authorities such as the PDRM, SPRM, and Bank Negara Malaysia. Disclosure to authorities occurs only when required by law.

Security & KYC Services

Third-party identity verification services that help us confirm the age and identity of new members for compliance purposes. The data shared is the minimum necessary for verification — nothing more.

In all of the data-sharing scenarios above, lepak88 ensures that only data that is strictly necessary is shared (data minimisation principle), that recipients are bound by confidentiality agreements and rigorous security standards, and that the data is not used by recipients for any purpose other than what is agreed upon in their service contract with lepak88.


5

Security & Data Protection

Protecting your personal data is one of the most significant technical investments lepak88 makes. We take a layered approach to data security — meaning multiple levels of protection are built into every tier of our systems, so there is no single point of failure that could compromise your data as a whole.

lepak88 Infrastructure Security Layers
  • 256-bit SSL/TLS encryption for all communication between your browser and our servers — any data in transit is fully protected.
  • Data-at-rest encryption for all sensitive information stored in our databases using AES-256.
  • Two-factor authentication (2FA) is available for member accounts as an additional login security layer.
  • Internal network segregation ensuring that the payment system, user data, and gaming systems operate within separate, isolated environments.
  • Round-the-clock monitoring by an intrusion detection system (IDS) that is regularly updated with the latest threat signatures.
  • Regular security audits by independent specialists to identify and address vulnerabilities before they can be exploited.
  • Role-based access control (RBAC) ensuring that lepak88 staff can only access the data required for their specific job functions.
  • Encrypted data backups stored separately to enable data recovery in the event of an unexpected system failure.
Data Breach Notification Procedure

Despite all the security measures in place, no system can be guaranteed 100% secure. If lepak88 detects or suspects a data breach that affects your personal data, we will notify you via email or an in-platform notification within the timeframe required by Malaysian law, explaining the nature of the breach, the data potentially involved, the steps we have taken, and the actions you can take to protect yourself. We believe transparency in such situations is a moral and legal obligation that cannot be compromised.


6

Cookies & Tracking Technologies

Lepak88 uses cookies and similar tracking technologies to keep the platform functioning properly, enhance the user experience, and analyse usage patterns in aggregate. The following explains the types of cookies we use:

You can manage your cookie settings through your web browser. Most modern browsers allow you to view, delete, or block cookies from specific websites. Please note that blocking essential cookies may affect the functionality of the lepak88 platform — you may be unable to log in or use certain features properly if session or security cookies are blocked.


7

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data processed by lepak88. These rights may be exercised by submitting a written request to us at support@lepak88.click:

Right of Access

You have the right to request a copy of the personal data we hold about you — including the type of data, the purpose of processing, and any parties that may have received your data. We will fulfil this request within 21 working days from the date the request is received.

Right to Rectification

If any personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request a correction. For straightforward details such as your email address or phone number, you can update these directly through your account profile settings without needing to contact support.

Right to Erasure ("Right to Be Forgotten")

You may request the deletion of your personal data when it is no longer needed for the purpose it was collected, when you withdraw your consent, or when there is no other valid legal basis for continued processing. Please note that certain data may need to be retained for a specified period to meet legal obligations such as AML laws and financial record-keeping requirements.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, provided you supply reasons relevant to your particular situation.

Right to Data Portability

You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON), and to transfer it to another data controller. This right applies to data you have provided to us directly and that we process on the basis of your consent.

Right to Restriction of Processing

In certain circumstances, you have the right to request that we temporarily restrict the processing of your personal data — for example, while we investigate a dispute regarding data accuracy, or while you have raised an objection to processing and we are considering it.

How to Exercise Your Data Rights

To exercise any of the rights above, send an email to support@lepak88.click with the subject line "Personal Data Rights Request" and specify which right you wish to exercise along with a brief explanation. We may require identity verification before processing your request to ensure your data is released only to you. We will respond within 14 business days and resolve the request within the timeframe set out under Malaysia's PDPA.


8

Data Retention & Deletion

Lepak88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Retention periods vary by data type:

Data Type Retention Period Legal Basis
Financial Transaction Records 7 years after the transaction AMLA & Companies Act
KYC / Identity Verification Documents 5 years after account closure AML compliance requirements
Customer Support Records 3 years after case closure Dispute resolution
Account Activity Log 2 years Security & investigations
Technical Logs & IP 90 days Technical security
Analytics Cookies Up to 13 months Platform improvement
Marketing Data (with consent) Until consent is withdrawn User consent

Once the retention period expires, data is securely deleted from our systems using methods that meet international security standards — ensuring it cannot be recovered after deletion. For data stored on physical media (where applicable), secure physical destruction procedures are used.

Note on Inactive Accounts

A lepak88 account with no login activity for 24 consecutive months may be classified as inactive. lepak88 will send a notice to the registered email address before taking any action. Any remaining balance in an inactive account will be preserved in accordance with established procedures and can be reclaimed by contacting our support team through the standard identity verification process.


9

Cross-Border Data Transfers

In the course of operating the lepak88 platform, some of your personal data may be processed or stored on servers located outside Malaysia — specifically in relation to international game providers, cloud infrastructure, and cybersecurity services that we use.

When your personal data is transferred outside Malaysia, lepak88 ensures that such transfers only take place where the recipient country offers a level of data protection that is equivalent to or higher than that required under Malaysia's PDPA, or where appropriate contractual agreements are in place between lepak88 and the receiving entity, binding them to the required data protection standards.

In all cases of cross-border data transfers, data is transmitted in fully encrypted form and the receiving party is not permitted to use it for any purpose other than providing the contracted services to lepak88. If you would like more information about the specific protections we have in place for cross-border data transfers, please contact us at support@lepak88.click.


10

Privacy Policy Amendments

Lepak88 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. The latest version of the Privacy Policy is always available on this page, with the date of the most recent update displayed at the top of the document.

For material changes to how we use or share your personal data, lepak88 will send a notice to the email address registered with your account at least 14 days before the changes take effect. This gives you sufficient time to review the changes and take appropriate action if you disagree — including closing your account and withdrawing your remaining funds if necessary.

Your continued use of the lepak88 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any amendment, please discontinue use of the platform and contact us to close your account.

For any questions, concerns, or complaints regarding this Privacy Policy or the way lepak88 handles your personal data, please contact our Data Privacy Officer at support@lepak88.click. We are committed to addressing every privacy-related enquiry seriously and within a reasonable timeframe.

This Privacy Policy was last updated in 2026. This version supersedes all previous versions of the Privacy Policy. In the event of any conflict between a translated version and the original Malay version, the Malay version shall prevail.

FAQs

Privacy Data FAQs at lepak88

Absolutely not. lepak88 does not share, sell, or rent your personal data to any other betting platforms, competitors, or unrelated entities. Your data is shared only with third parties directly involved in delivering lepak88's services to you — such as payment processors and game providers — and only the minimum information necessary is shared. All such third parties are bound by strict confidentiality agreements.

Banks and e-wallet processors such as Touch 'n Go eWallet, GrabPay, and DuitNow only see basic financial transaction details — the amount, date, transaction reference, and merchant name. They do not receive any information about which games you played, how much you won or lost, or any other activity within the lepak88 platform. This is standard payment processing practice, not something specific to lepak88.

To close your account and request deletion of your personal data, send an email to support@lepak88.click with the subject line "Account Closure and Data Deletion Request." Include your registered phone number and a brief confirmation of your identity. Our team will process the account closure and return any eligible balance within 7 business days. Please note that certain data such as financial transaction records must be retained for a specified period under Malaysian law — this is a legal obligation that cannot be waived even upon a request for full deletion.

Accounts inactive for 24 months will be classified as inactive. lepak88 will send an email notice before taking any action. Your data is not automatically deleted due to inactivity — it remains securely stored and can be accessed again once you log back in. However, if you wish to actively delete your data, you may do so by submitting a request to support@lepak88.click as outlined in Section 7 of this policy.

No. lepak88 does not use your personal data for ad targeting on other platforms such as social media or third-party advertising networks. We do not share your user profile with any advertising platform. If you come across lepak88 ads on other platforms, this is the result of general marketing strategies that are unrelated to your personal data — it does not mean we have shared your data with those platforms.

The easiest way is to click the "Unsubscribe" link found at the bottom of every marketing email you receive from lepak88 — this processes your request immediately. You can also manage your communication preferences through the Notification Settings section in your lepak88 account, or send an email to support@lepak88.click to opt out of all marketing communications. Please note that important service emails — such as account security notices, transaction confirmations, and terms change notifications — will continue to be sent as they are directly related to the management of your account.
Join lepak88 with Confidence

Your Data Is Protected — Play at lepak88 with Peace of Mind

With bank-grade encryption, no data sales, and full Malaysia PDPA compliance, you can enjoy over 1,500 games at lepak88 with complete peace of mind about your privacy.

256-bit SSL Encryption Your data is never sold to anyone Malaysia PDPA Compliance Data control in your hands

By registering, you confirm that you have read and agreed to the Terms & Conditions, Privacy Policy and Responsible Gaming Policy lepak88. This platform is strictly for individuals aged 18 and above.

Bahasa Melayu