Privacy Policy laju7 –
Our Commitment to Protecting Malaysian Players' Data

1 Introduction

Welcome to laju7's Privacy Policy page. laju7 is an online casino platform operating exclusively for Malaysian players, and we greatly value the trust you place in us every time you use this platform. This Privacy Policy ("Policy") explains in detail how laju7 collects, processes, stores, uses, and protects your personal information when you register, log in, make a deposit, play, or interact with any part of the laju7 platform.

By registering an account or using any laju7 service, you confirm that you have read and fully understood this Privacy Policy and agree to the data management practices described herein. This Policy forms an integral part of laju7's Terms & Conditions and should be read together with that document.

Laju7 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all other applicable legislation in force in Malaysia. We are committed to ensuring every aspect of how we handle your personal data meets or exceeds the standards set by Malaysian law.

2 Personal Data We Collect

Laju7 collects various types of personal information as you interact with our platform. Below is a comprehensive overview of the data categories we collect and their sources:

Laju7 does not collect sensitive categories of personal data such as health information, sexual orientation, religious beliefs, or political views, except in situations where it is explicitly relevant and you have provided clear written consent. We also do not collect data beyond what is necessary to provide our services to you.

3 How laju7 Uses Your Data

All personal information collected by laju7 is used for legitimate and specific purposes. Below is a complete list of the purposes for which your personal data is used at laju7:

• Account Management: Creating, verifying, and maintaining your laju7 account, including the login process and identity verification.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX, as well as withdrawals to local bank accounts such as Maybank, CIMB, and Public Bank.
• Provision of Gaming Services: Enabling you to play all games on laju7 — including slots, live casino, and table games — as well as storing your game history and winnings.
• Legal Compliance: Meeting Malaysian legal compliance requirements, including anti-money laundering (AML) measures and know your customer (KYC) obligations.
• Fraud Prevention: Identifying and preventing fraudulent activity, multiple account ownership, bonus abuse, and any conduct that violates laju7's Terms & Conditions.
• Marketing & Promotions: Sending you relevant information about laju7 promotions, bonuses, and special offers — subject to the marketing consent you have provided, which may be withdrawn at any time.
• Service Improvement: Analysing usage patterns on the laju7 platform to improve the user experience, optimise platform performance, and develop better new features.
• Customer Support: Providing effective technical assistance and customer support to laju7 members via live chat, email, and other support channels.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may benefit from responsible gaming support, and reaching out to them with appropriate resources.

4 Data Sharing & Disclosure

Laju7 does not sell, rent, trade, or disclose your personal information to third parties for marketing or any other commercial purposes. However, there are limited situations in which laju7 may need to share your information with trusted parties, as described below:

• Payment Service Providers: Information required to process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX, and Malaysian banking institutions is shared with the respective payment service providers solely for transaction processing purposes.
• Game Providers: Technical data required to ensure games such as slots and live casino run smoothly may be shared with laju7's game providers. These providers are bound by strict data protection agreements.
• Infrastructure Service Providers: Technology service providers that support the operation of the laju7 platform — such as cloud computing services and cybersecurity providers — may process your data on behalf of laju7 under strict confidentiality terms.
• Malaysian Authorities: laju7 will disclose members' personal information to Malaysian government authorities, law enforcement agencies, or regulatory bodies when required by law, a valid court order, or in connection with a relevant criminal investigation.
• Professional Advisors: Lawyers, accountants, auditors, and other professional consultants providing services to laju7 may have limited access to certain information within the scope of their engagement, subject to professional confidentiality obligations.

All third parties that receive your personal data from laju7 are bound by strict confidentiality obligations and are only permitted to use that information for purposes agreed upon with laju7. They are not allowed to use your data for any other purpose or share it with additional parties without explicit authorisation from laju7.

5 Security & Data Protection

Laju7 continually invests in best-in-class security infrastructure to ensure the personal and financial data of all members remains protected at all times. The technical and organisational security measures we implement include:

• 256-Bit SSL Encryption: All communications between your web browser or mobile app and laju7's servers are encrypted using 256-bit SSL/TLS, ensuring that any data transmitted cannot be intercepted or accessed by unauthorised parties.
• Stored Data Encryption: Personal and financial data stored in laju7's databases is also encrypted using robust encryption algorithms for an added layer of protection, even in highly unlikely scenarios such as physical breaches.
• Strict Access Controls: Internal access to laju7 members' personal data is restricted to staff who genuinely require it to perform their duties. All access is logged and continuously monitored.
• 24/7 Security Monitoring: laju7's automated security monitoring system operates around the clock to detect and respond to any threats or suspicious activity in real time.
• Regular Penetration Testing: laju7 conducts regular security testing and vulnerability assessments to identify and address any potential security weaknesses before they can be exploited.
• Staff Training: All laju7 staff who handle members' personal data receive comprehensive data protection training, which is regularly updated.

6 Cookies & Tracking Technologies

Laju7 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure the platform functions correctly, and analyse how our members use the platform. The following are the types of cookies laju7 uses:

• Essential Cookies: These cookies are strictly necessary for the laju7 platform to function properly. Without them, you will not be able to log in to your laju7 account, make deposits, or play any games. These cookies do not store any personally identifiable information.
• Functional Cookies: These cookies allow laju7 to remember your preferences — such as your chosen language, display settings, and login details (if you opt to save them) — to make your experience smoother on future visits.
• Analytics Cookies: laju7 uses analytics cookies to understand how members interact with our platform — which pages are visited most frequently, how long gaming sessions last, and what technical issues are encountered. This information helps us continuously improve the laju7 platform.
• Session Cookies: These cookies are temporary and are automatically deleted when you close your web browser. They are used to maintain your active session while you play at laju7.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the laju7 platform and your gaming experience. For more information on managing cookies in your browser, refer to your web browser's help documentation.

7 Data Retention & Deletion

Laju7 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required under applicable Malaysian law. Below is a guide to laju7's data retention periods:

• Active Account Data: For as long as your laju7 account remains active, all associated personal information will be retained to ensure uninterrupted service delivery.
• Financial Transaction Data: Records of deposit and withdrawal transactions in MYR are retained for a minimum of 7 years from the date of the transaction, in accordance with Malaysian financial and tax legal requirements.
• Inactive Account Data: A laju7 account that shows no activity for 24 consecutive months is considered inactive. Data related to inactive accounts is retained for the period required by law before being securely deleted.
• Customer Support Data: Customer support interaction records are retained for 3 years for reference and service improvement purposes.
• Data Following Account Closure: When a laju7 account is closed at your request, we will delete or anonymise your personal data within 30 days, except for data that must be retained for legal or regulatory compliance reasons.

When personal data is no longer required, laju7 ensures it is securely deleted or anonymised using methods that meet industry standards for irreversible data disposal.

8 Your Rights Regarding Personal Data

As a laju7 member and data subject under Malaysian law, you have the following rights regarding your personal data that we hold:

• Right to Access: You have the right to request and receive a copy of all personal data laju7 holds about you. Your request will be processed within 14 business days.
• Right to Rectification: If you find that any personal information laju7 holds about you is inaccurate or out of date, you have the right to request an immediate correction. You can update most information directly through the "My Account" section on laju7.
• Right to Erasure: Under certain circumstances, you may request that laju7 delete your personal data. However, such requests may not be fully fulfilled if the data is still required to comply with laju7's legal obligations.
• Right to Withdraw Consent: If you have previously given laju7 consent to process your data for specific purposes (such as marketing), you may withdraw that consent at any time without affecting the validity of any processing that took place prior to the withdrawal.
• Right to Object to Direct Marketing: You may object at any time to the processing of your personal data for direct marketing purposes, including profiling related to such marketing. An unsubscribe option is included in every laju7 marketing email.
• Right to Data Portability: In certain circumstances, you may request to receive your personal data in a machine-readable format for transfer to another service provider.

To exercise any of the above rights, please contact the laju7 privacy team at [email protected] with the email subject line "Privacy Rights Request", along with your full name and the Malaysian phone number registered to your laju7 account. We will respond within 14 business days.

9 Children's Data & Minor Protection

Laju7 is an online casino platform strictly limited to individuals aged 18 and above. laju7 does not knowingly collect, process, or store any personal data from individuals under the age of 18.

All new registrants at laju7 are required to confirm that they are 18 years of age or older at the point of registration. laju7 employs multiple verification mechanisms to ensure compliance with this minimum age requirement, including Malaysian phone number verification and, where necessary, identity document verification.

10 Changes to This Privacy Policy

Laju7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, changes in applicable Malaysian law, or changes in the services laju7 offers. When this Privacy Policy is amended, laju7 will:

• Updating the "Last Updated" date displayed at the top of this page.
• Displaying a prominent notice on the laju7 homepage for at least 14 days following any changes.
• Sending email notifications to all active laju7 members for any material changes.

Your continued use of the laju7 platform after any amendment takes effect will be considered your acceptance of the revised Privacy Policy. If you do not agree with the changes made, you have the right to close your laju7 account by contacting our support team.

We encourage you to review this Privacy Policy periodically — at least every 6 months — to stay informed about how laju7 manages your personal data.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how laju7 handles your personal data, you are welcome to contact us through the following channels:

• Privacy Email: [email protected] (Please state "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24/7 directly on the laju7 platform for immediate responses in Bahasa Malaysia
• Response Time: laju7 is committed to responding to all privacy enquiries within 3 business days and resolving more complex issues within 14 business days