Lancar138 Privacy Policy – Our Commitment to Protecting Malaysian Players' Data

1Introduction

Lancar138 understands that privacy matters deeply to every player. When you register and play on the Lancar138 platform, you are entrusting us with your personal information — and we take that trust seriously.

This Privacy Policy is provided to give you full transparency on how Lancar138 handles players' personal data — from collection and processing to storage and deletion. This document is written in plain language rather than dense legal jargon, because we believe every player deserves to know exactly what happens with their information.

Lancar138 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We regularly review our privacy practices to ensure they remain current with legal and technological developments.

2Data We Collect

Lancar138 collects various types of information depending on how you interact with our platform. Below is a detailed breakdown of the data categories we collect:

2.1 Information You Provide Directly

• Registration Information: Full name, Malaysian identity card number (MyKad), date of birth, mobile phone number, email address and password (stored in encrypted form).
• KYC Verification Information: A copy of your MyKad or passport, proof of address (utility bill or bank statement), and proof of ownership of the payment method used.
• Profile Information: Your preferred display name and any preferences you have configured in your account.
• Communications: The content of messages you send to the Lancar138 support team via live chat or email.

2.2 Automatically Collected Information

• Transaction Data: Records of all deposits (including payment methods — Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX), withdrawals, and winnings.
• Game Data: Your game history, bets placed, and results received.
• Technical Data: IP address, web browser type, device operating system, screen resolution, and device identifier.
• Session Data: Login times, session duration, pages visited within the platform, and navigation patterns.
• Cookie Data: Information collected through cookies and similar tracking technologies (see Section 6 for details).

3How We Use Your Data

Lancar138 uses players' personal data for the following purposes, all within a lawful and necessary scope for platform operations:

• Account Management: Creating and managing your account, verifying your identity, and ensuring account security.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX, as well as managing your winnings withdrawals.
• Gaming Services Provision: Running the slots, Live Casino, lottery, blackjack, and Sports Betting games you choose to play.
• Customer Support: Responding to inquiries, resolving technical issues, and addressing complaints you have submitted.
• Security & Fraud Prevention: Detecting and preventing suspicious activity, money laundering, fraud, and violations of our Terms & Conditions.
• Legal Compliance: Meeting applicable legal and regulatory obligations, including KYC requirements and record-keeping.
• Platform Improvements: Analyzing usage patterns to improve the performance, design, and user experience of the Lancar138 platform.
• Service Communications: Sending important notices relating to your account, policy changes, or relevant security information.
• Marketing (with consent): Sending you information about new Lancar138 promotions and bonuses — only if you have agreed to receive such communications. You may withdraw this consent at any time.

4Sharing Data with Third Parties

Lancar138 does not sell, rent, or trade players' personal data. However, there are limited situations where we need to share data with carefully selected third parties in order to provide our services to you:

4.1 Service Providers

We share necessary data with service providers who help us operate the platform, including:

• Gaming Providers: Licensed game studios such as Evolution Gaming, Pragmatic Play, and PG Soft receive the session data required to operate live casino games and slots. This data is limited to the minimum necessary for game functionality only.
• Payment Processors: Payment service providers such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX receive the transaction information necessary to process your deposits and withdrawals.
• Security Services: Identity verification and fraud prevention service providers that help us detect suspicious activity.
• Technical Infrastructure: Server hosting and cloud computing service providers that store platform data to strict security standards.

All third parties are bound by strict data protection agreements and are only permitted to use shared data for the specified service purposes.

4.2 Legal Requirements

Lancar138 may be required to disclose players' personal data to the relevant authorities when mandated by law or a valid court order, including for the purposes of crime prevention, fraud investigation, or regulatory compliance.

5Data Security

Lancar138 implements comprehensive technical and organisational security measures to protect players' personal data against unauthorised access, alteration, disclosure, or destruction.

The technical security measures we employ include:

• 256-bit SSL/TLS Encryption for all communications between your browser and Lancar138's servers — meaning all data in transit is unreadable to any party that intercepts it.
• Encryption of data at rest for all sensitive information stored in our databases, including passwords (stored in irreversible hashed form) and identification details.
• Role-based access control ensuring that only authorised staff have access to player data, and only to the data required for their specific role.
• Continuous security monitoring through a Security Information and Event Management (SIEM) system that detects and alerts on suspicious access patterns in real time.
• Regular penetration testing by independent security experts to identify and address vulnerabilities before they can be exploited.
• Encrypted data backups stored at geographically separate locations to ensure service continuity in the event of a disaster.

While Lancar138 takes all reasonable steps to protect your data, no security system is 100% impenetrable. We also encourage you to take protective measures on your own end — such as using a strong and unique password, enabling two-factor authentication, and not sharing your login credentials.

6Cookies & Tracking Technologies

Lancar138 uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and understand how players use our services. The following are the types of cookies we use:

6.1 Necessary Cookies (Required)

These cookies are essential for the core functionality of the platform and cannot be disabled. They include login session cookies that identify you as a verified user, and security cookies to prevent cross-site request forgery (CSRF), and cookies that store your language preferences and platform settings.

6.2 Performance & Analytics Cookies

These cookies help us understand how players interact with the Lancar138 platform — which pages are visited most, where players encounter difficulties, and how long the average session lasts. This information is used to continuously improve the platform. Data collected through these cookies is aggregated and does not identify individual players.

6.3 Managing Your Cookies

You can manage or disable non-essential cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some areas of the Lancar138 platform. More information on managing cookies is available in your browser's help documentation.

7Data Retention & Deletion Period

Lancar138 retains players' personal data for as long as necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations. General data retention guidelines are as follows:

• Active Account Data: For as long as your account remains active with Lancar138, we retain all your profile data, gaming history, and transaction records.
• After Account Closure: Transaction records and KYC information are retained for a minimum of 5 years following account closure, as required under Malaysia's anti-money laundering legislation.
• Support Communication Records: Customer support conversation history is retained for 2 years after the last interaction.
• Technical Logs: Access logs and system security logs are retained for 12 months for security audit purposes.
• Marketing Data: If you withdraw consent to receive marketing communications, your marketing data will be deleted within 30 days.

Once the designated retention period has ended and there is no legal obligation to retain the data further, Lancar138 will securely delete or anonymise the data using methods that ensure it cannot be recovered.

8Your Rights Regarding Personal Data

As a Lancar138 player, you have the following rights regarding the personal data we hold about you, in accordance with Malaysia's Personal Data Protection Act 2010:

To exercise any of the rights above, please contact the Lancar138 data protection team by email at support@lancar138.best, clearly stating your request. We may need to verify your identity before processing the request. We will respond within 21 days of receiving your request.

9Children's Data

The Lancar138 platform is strictly for individuals aged 18 years and above. We do not provide services to minors and we do not knowingly collect any personal information from individuals under the age of 18.

If you are a parent or guardian and have reason to believe that your child under the age of 18 has registered for or used the Lancar138 platform, please contact us immediately at support@lancar138.best. We will take prompt action to investigate and, if confirmed, delete all related data and close the account.

10Amendments to the Privacy Policy

Lancar138 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes to this policy, we will:

• Updating the "Last Updated" date shown at the top of this document.
• Displaying notices within the Lancar138 platform to inform players of changes that have been made.
• Sending email notices for highly material changes that significantly affect players' rights.

We recommend reviewing this Privacy Policy page periodically to stay informed about our latest practices. Your continued use of the Lancar138 platform after any amendments have been made constitutes your acceptance of the updated Privacy Policy.

11Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how Lancar138 handles your personal data, you may reach us through the following channels:

Our team will respond to privacy-related inquiries within 3 business days. For formal rights exercise requests (such as data access or deletion requests), the response time is up to 21 business days from the date of receipt of a complete request.

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the relevant data protection authority in Malaysia — the Department of Personal Data Protection under the Ministry of Communications Malaysia.