Privacy Policy lv99 — Your Data, Our Responsibility

1Introduction & Scope of Privacy Policy

Welcome to the lv99 Privacy Policy. This document is the official agreement between you as a platform user and lv99 as the responsible data controller. We understand that your trust is our most valuable asset, and we are committed to protecting your privacy with full accountability.

This Privacy Policy applies to all users who access the lv99 website at lv99.bar, using the lv99 mobile app, or interacting with any services offered by our platform. This includes casual visitors, players who register an account, and any individual who contacts our customer support team.

Lv99 operates in accordance with Malaysia Personal Data Protection Act 2010 (PDPA) that governs how organisations collect, process and store individuals' personal data. We regard compliance with this law not merely as an obligation, but as part of our commitment to the safety and well-being of every player.

By registering an account with lv99 or continuing to use this platform, you are deemed to have read, understood, and agreed to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, you may close your account and stop using lv99 services at any time.

2Information We Collect

Lv99 collects various types of information to ensure the platform runs smoothly, meet identity verification requirements and deliver the best gaming experience to you. We only collect data that is strictly necessary and nothing more.

2.1 Information You Provide Directly

• Registration information: Full name, date of birth, mobile number, email address and password chosen when creating your account.
• KYC verification documents: A copy of your Malaysian identity card (MyKad), passport, or other valid identification document when requested for the identity verification process.
• Financial information: Bank account number, bank name and digital wallet details submitted for deposit and withdrawal purposes.
• Support communications: Any messages, complaints, or enquiries you submit to the lv99 customer support team via live chat or other communication channels.

2.2 Information Collected Automatically

• Device data: Device type, operating system, phone or computer model, screen resolution and unique device identifier.
• Network data: IP address, browser type, internet service provider (ISP), and country or region of access.
• Activity data: Pages visited, time spent per session, games played, wagering amounts and transaction records.
• Cookie data: Session information, language preferences, personal settings and analytics data collected via cookies and similar technologies.

2.3 Summary of Data Types Collected

3How We Use Your Information

Every piece of information we collect is used for clear and lawful purposes. lv99 does not use your data for purposes unrelated to platform operations or that could compromise your interests.

• Identity verification and KYC: To ensure all players meet the minimum age requirement of 18 years and to prevent identity fraud.
• Transaction processing: To accurately and securely process deposits, withdrawals, and all financial transactions through trusted channels.
• Account management: To provide access to your account, manage profile settings, game history and transaction records.
• Security and fraud prevention: To detect suspicious activity, prevent unauthorised access, and protect the integrity of the platform.
• Customer support: To resolve inquiries, complaints and provide effective technical support to players.
• Service improvement: To analyse aggregated usage patterns in order to improve the user experience and develop new features.
• Legal compliance: To fulfil the reporting and compliance obligations set by relevant authorities, including anti-money laundering (AML) requirements.
• Marketing communications: To send information about promotions, bonuses, and special offers — only to players who have consented to receive them.

Lv99 will not use your data to make automated decisions that could significantly affect your rights without appropriate human intervention.

4Data Sharing & Disclosure

Lv99 does not sell, rent or trade your personal data to any third party for marketing purposes. However, in certain limited and controlled situations, we may share your information with the following parties:

• Payment service providers: Required transaction information is shared with banks, FPX providers, Touch 'n Go, GrabPay and other digital wallet providers to process your deposits and withdrawals.
• Game software providers: Basic game data is shared with licensed game providers that supply casino, slots, and sports game content for legitimate game processing purposes.
• Identity verification services: KYC information is shared with approved third-party identity verification service providers to verify the authenticity of your documents.
• Legal authorities: When required by law, court order, or a valid request from a law enforcement agency, lv99 will disclose the necessary information.
• Auditors and consultants: Third parties lawfully appointed to conduct financial audits, compliance reviews, or security assessments are bound by strict confidentiality agreements.

5Data Security & Encryption

The security of your personal data is lv99's highest priority. We continuously invest in cutting-edge security infrastructure to ensure your information is always protected against unauthorised access, loss or misuse.

• 256-bit SSL/TLS encryption: All data transmitted between your browser and lv99 servers is encrypted using bank-grade industry-standard security protocols. This means every detail you enter on our platform — from passwords to banking details — is sent in a form that cannot be read by third parties.
• Hashed password storage: Your password is never stored in plain text. We use strong cryptographic hashing algorithms so that even in the event of a data breach, your password cannot be recovered.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA to add an extra layer of protection to their account, ensuring only you can log in even if your password becomes known to others.
• 24/7 activity monitoring: Our systems continuously monitor for any unusual or suspicious activity around the clock. Any unauthorised access attempts will be detected and blocked immediately.
• Protected servers: Player data is stored in secure data centres with strict physical access controls, regular backup systems, and tested disaster recovery procedures.

Although lv99 takes every reasonable step to protect your data, no system can be guaranteed 100% secure. You also play an important role by ensuring your password is strong, not shared with anyone, and that your device is always updated with the latest security patches.

6Cookies & Tracking Technologies

Lv99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

You can manage or delete cookies through your browser settings at any time. Please note, however, that removing essential cookies may affect certain features of the lv99 platform, including the ability to stay logged in or save your personal preferences.

7Your Rights as a Player

As a trusted lv99 player, you have certain rights regarding your personal data under Malaysia's PDPA. lv99 fully respects and facilitates the exercise of these rights.

To exercise any of the above rights, contact the lv99 customer support team via in-platform live chat. We will process your request within 14 business days and may require identity verification before responding.

8Data Retention & Deletion

Lv99 retains your personal data for as long as your account is active or as long as necessary to provide services to you. After account closure, we may need to retain certain records for a longer period in accordance with applicable legal and regulatory obligations.

• Financial transaction records: Retained for a minimum of 7 years after the transaction date, in line with Malaysia's financial and taxation legal requirements.
• KYC documents: Retained for a minimum of 5 years after the business relationship ends, in line with anti-money laundering requirements.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Game and activity data: Retained for 3 years for audit, compliance and security analysis purposes.
• Marketing data: Deleted within 30 days after you unsubscribe or close your account, whichever comes first.

Once the retention period expires or when data is no longer required, lv99 will securely delete or anonymise your personal data using methods that ensure the information cannot be recovered.

9Privacy Policy Changes

Lv99 reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, industry practices or our business operations. We are committed to informing players of any significant changes.

When we make material changes to this policy, we will:

• Displaying a clear notice on the platform's home page for at least 7 days before the changes take effect.
• Sending a notification to your registered email address for changes that materially affect your rights.
• Updating the "Last Updated" date at the top of this document as an indication that a revision has been made.

Your continued use of the lv99 platform after the effective date of any changes constitutes your acceptance of the updated policy. We encourage you to revisit this page periodically to stay informed about how we protect your information.

10Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how lv99 handles your personal data, our team is ready to assist you at any time.

• Live Chat: The fastest way to get help — available 24 hours a day, 7 days a week, directly within the lv99 platform.
• Support email: [email protected] — for written inquiries requiring a more detailed response.
• Response time: Privacy-related requests are typically processed within 3 to 14 business days, depending on the complexity of the case.

For data rights requests such as access, correction or deletion, please include your account information and the type of request clearly so we can process it faster. Identity verification may be required before we respond to sensitive requests.