Lego138 Privacy Policy – Player Data Protection Malaysia

01 Information We Collect

Lego138 collects various types of information from players to ensure a smooth, secure, and reliable service. The information we collect can be divided into two main categories:

Information You Provide Directly:

• Full name as shown on your official identity document.
• Date of birth for minimum age verification of 18 years.
• An active email address for account communications and security notices.
• Phone number for two-factor authentication and support communications.
• Bank account or digital wallet details for processing deposits and withdrawals.
• A copy of your identity document (MyKad or passport) during the KYC process.

Information Collected Automatically:

• IP address and device information used to access the platform.
• Usage data including pages visited, time spent, and navigation patterns.
• Cookie data and similar tracking technologies to enhance the user experience.
• Transaction logs including wagering history, deposits, and withdrawals.

02 Purpose of Data Use

The personal information we collect is used solely for legitimate and necessary purposes. Below is the complete list of how player data is used at lego138:

Lego138 will not use your personal data for any purpose other than those stated above without first obtaining your explicit consent. You may withdraw consent for marketing communications at any time through your account settings or by contacting our support team.

03 Data Sharing and Disclosure

Lego138 takes an extremely cautious approach to the sharing of player data. We do not sell, rent, or trade players' personal information to any third party for commercial purposes.

Player data may only be shared in the following limited circumstances:

• Payment Service Providers: Information required to process deposits and withdrawals is shared with certified payment providers bound by strict confidentiality agreements.
• Technical Service Providers: Third parties that assist in the technical operations of the platform, such as cloud and cybersecurity services, are subject to strict data processing agreements.
• Legal Requirements: lego138 will comply with any valid court orders or requests from relevant government authorities when required by law.
• Fraud Prevention: In cases involving suspected fraud or money laundering activities, relevant information may be shared with regulatory bodies or law enforcement agencies.

04 Cookies & Tracking Technology

Lego138 uses cookies and similar tracking technologies to enhance the user experience, analyze usage patterns, and ensure account security. The following are the types of cookies we use:

• Essential Cookies: Required for basic platform operations such as account login and session verification. These cookies cannot be disabled.
• Functional Cookies: Saves your personal preferences such as language, display settings, and browsing history for a seamless ongoing experience.
• Analytics Cookies: Helps us understand how players use the platform so we can make meaningful improvements. This data is aggregated and does not directly identify individuals.
• Security Cookies: Detects suspicious activity and protects your account from unauthorized access.

You can manage cookie settings through your browser settings. However, disabling certain cookies may affect the functionality of some parts of the lego138 platform. Session cookies are automatically deleted when you log out or close your browser.

05 Data Retention Period

Lego138 retains players' personal data for the period necessary to fulfill the purposes for which it was collected and to comply with applicable legal requirements. The following are our data retention guidelines:

• Active Account Data: Retained for the duration your account is active, plus three (3) years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for seven (7) years in accordance with applicable taxation and financial legal requirements in Malaysia.
• Security Log: Retained for twelve (12) months for security investigation and fraud detection purposes.
• Support Communication Data: Customer support conversation records are retained for two (2) years to ensure service consistency.
• KYC Documents: Retained for the period required by applicable anti-money laundering regulations.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered by any party.

06 Player Rights Over Personal Data

As a lego138 player, you have clear rights over your personal data under Malaysia's PDPA. These rights may be exercised at any time by contacting our support team:

To exercise any of the above rights, please contact the lego138 support team via live chat or email. Requests will be processed within 14 working days from the date of receipt.

07 Account Security and Player Responsibilities

While lego138 implements comprehensive technical security measures, account security also depends on the actions of players themselves. The following are security practices we recommend to all players:

• Use a strong, unique password that is not used on any other platform. A strong password contains a combination of uppercase and lowercase letters, numbers, and symbols.
• Enable two-factor authentication (2FA) through your account settings for an additional layer of security.
• Do not share your account login credentials with anyone, including family members.
• Log out of your account when using a public or shared device.
• Review your account activity regularly and report any unrecognized transactions immediately.
• Ensure the device you use to access lego138 is always updated with the latest security patches.

Lego138 will never ask for your password or OTP via email, chat, or phone. If you receive any such request claiming to be from lego138, please report it to our support team immediately as it may be a fraudulent attempt.

08 Privacy Policy Amendments

Lego138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in business practices, legal requirements, or the technologies we use. Any changes will take effect immediately upon publication on the official lego138 website.

For significant changes, lego138 will endeavour to notify players via an on-site notice or email notification. However, it remains the player's own responsibility to review this Privacy Policy periodically.

The effective date of the latest version of this Privacy Policy is as shown at the top of this page. Continued use of the lego138 platform after any changes are published will be considered acceptance of the amended terms. If you do not agree with the changes made, please discontinue use of the platform and contact our support team to close your account.

For any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the lego138 Data Protection Officer via our official email. We are committed to addressing every inquiry carefully and in a timely manner.