lvking Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how lvking ("lvking", "we", "us" or "our"), the operator of the platform available at https://lvking.cam, collects, uses, stores, shares and protects the personal data of individuals ("you", "your" or "Member") who register for an account, access any service or otherwise interact with the Platform.

lvking is committed to handling personal data responsibly and in a manner consistent with applicable data protection principles. This Policy should be read in conjunction with the lvking Terms and Conditions and Responsible Gambling Policy, which together form the complete contractual and regulatory framework governing use of the Platform.

By creating a lvking account or using any platform service, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use and request account closure via the contact details in Clause 15.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure or destruction.
• "Controller" means lvking as the entity that determines the purposes and means of Processing Personal Data.
• "Processor" means a third party that processes Personal Data on behalf of lvking under a written data processing agreement.
• "KYC" means Know Your Customer — the identity and payment verification process required by lvking before any withdrawal is released.
• "Cookies" means small text files placed on your device by a web server to store session, preference or analytical data.
• "MYR" means Malaysian Ringgit, the account denomination used on the Platform.

3 Data We Collect

lvking collects Personal Data in the following categories depending on how you interact with the Platform:

Category	Examples	Collection point
Identity data	Full name, date of birth, MyKad or passport number, nationality	Registration and KYC verification
Contact data	Email address, mobile number, residential address (including city — Kuala Lumpur, Penang, Johor Bahru, etc.)	Account registration and support
Financial data	Deposit and withdrawal amounts in MYR, payment method type (e.g. Touch 'n Go eWallet, DuitNow, Maybank), transaction references	Deposit and withdrawal processing
Technical data	IP address, browser type and version, operating system, device identifiers, time zone	Automatic collection during platform use
Usage data	Pages visited, games accessed, session duration, bet history, bonus redemptions	Automatic collection via logs and analytics
Communication data	Support chat transcripts, email correspondence, complaint records	Customer support interactions
Responsible gambling data	Self-exclusion elections, deposit limit settings, session limit configurations	Responsible gambling tools in account settings

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership or biometric data unless this is strictly required for legally mandated identity verification purposes and only to the minimum extent necessary.

4 How We Process Data

lvking processes your Personal Data for the following purposes:

5 Legal Basis for Processing

lvking processes your Personal Data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the Terms and Conditions, including account management, payment processing and KYC verification.
• Legal obligation: Processing required to comply with applicable anti-money laundering, know-your-customer and data retention regulations.
• Legitimate interests: Processing carried out for fraud prevention, platform security and responsible gambling monitoring where these interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and certain non-essential cookies, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without affecting prior lawful processing.

6 Sharing & Disclosure

lvking does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. We may share your data in the following limited circumstances:

• Payment processors: Financial data shared with verified Malaysian payment partners (DuitNow, FPX, e-wallet providers, participating banks) strictly for transaction completion.
• Identity verification providers: Identity documents shared with accredited KYC service providers under data processing agreements.
• Fraud prevention services: Technical and usage data may be shared with fraud detection platforms to protect the Platform and its members.
• Regulatory and law enforcement authorities: Personal Data may be disclosed to relevant authorities in Malaysia or internationally where required by law, court order or regulatory demand.
• Group entities and service providers: Data may be shared within the lvking group or with contracted service providers (e.g. cloud hosting, analytics) operating under appropriate data processing agreements.
• Business transfers: In the event of a merger, acquisition or asset sale, Personal Data may be transferred as part of that transaction, subject to equivalent privacy protections.

7 Data Retention

lvking retains Personal Data for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law. General retention guidelines are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five years after account closure to satisfy anti-money laundering record-keeping obligations.
• Transaction records: Financial transaction data retained for a minimum of seven years in accordance with standard accounting and regulatory requirements.
• KYC documents: Identity verification documents retained for the period required by applicable regulations, typically five to seven years from the date of collection or account closure.
• Support communications: Customer support records retained for a minimum of two years from the date of the interaction.
• Marketing consent records: Consent logs retained for as long as marketing communications are sent and for a reasonable period thereafter to demonstrate compliance.
• Technical and usage data: Anonymised or aggregated analytical data may be retained indefinitely for platform improvement purposes.

When Personal Data is no longer required, lvking will securely delete or anonymise it in manner that prevents reconstruction.

8 Security Measures

lvking implements a range of technical and organisational measures designed to protect Personal Data against unauthorised access, loss, misuse, alteration or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and lvking servers.
• Encryption of sensitive data at rest, including identity documents and payment information.
• Role-based access controls ensuring that only authorised personnel can access Personal Data relevant to their function.
• Regular internal security assessments and penetration testing of platform infrastructure.
• Two-factor or multi-factor authentication options available to Members for account access.
• Staff training on data handling responsibilities and the consequences of data breaches.

While lvking takes reasonable and proportionate steps to secure your data, no internet transmission or electronic storage method is entirely risk-free. If you suspect that your account has been compromised, please contact lvking support immediately.

9 Cookies Policy

The lvking Platform uses cookies and similar tracking technologies to deliver a functional, secure and personalised experience. The main categories of cookies used are:

10 Minors & Age Verification

The lvking Platform is strictly prohibited for individuals under the age of 21. This is a non-negotiable eligibility requirement. As part of our KYC process, all Members are required to submit identity documents confirming that they meet the minimum age requirement before any withdrawal is released.

lvking does not knowingly collect, process or retain Personal Data from individuals under 21. If we become aware that Personal Data has been collected from a person who does not meet the age requirement, we will immediately suspend the relevant account, investigate the circumstances and delete or anonymise the associated data in accordance with applicable law.

If you are a parent or guardian and believe a person under your care has created a lvking account, please contact support immediately using the details in Clause 15.

11 International Data Transfers

lvking may transfer Personal Data to service providers, verification partners or group entities located in jurisdictions outside Malaysia. Where such transfers occur, lvking ensures that appropriate safeguards are in place, which may include:

• Contractual data processing agreements incorporating standard data protection clauses.
• Transfers to jurisdictions that provide an adequate level of data protection as recognised by relevant authorities.
• Binding corporate rules where transfers occur within the lvking group structure.

lvking will not transfer Personal Data to any jurisdiction where adequate protection cannot be guaranteed without your prior informed consent.

12 Your Data Rights

Subject to applicable law and any overiding regulatory retention obligations, you have the following rights in relation to the Personal Data lvking holds about you:

To exercise any of these rights, please submit a written request to the contact address in Clause 15. lvking will respond within a reasonable period consistent with applicable law. We may need to verify your identity before processing a rights request to prevent unauthorised disclosure.

13 Complaints

If you have concerns about how lvking has handled your Personal Data and you are not satisfied with our response to a direct complaint, you have the right to lodge a complaint with the relevant data protection authority in the jurisdiction applicable to your situation.

We encourage you to contact lvking directly in the first instance, as we aim to resolve all privacy concerns promptly and fairly before escalation becomes necessary.

14 Amendments to This Policy

lvking reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations or platform services. Where amendments are material, we will provide reasonable advance notice via a prominent notice on the Platform or by email to your registered address.

The "Last updated" date at the top of this document indicates when the most recent revision took effect. Your continued use of the Platform after an amendment constitutes acceptance of the revised Policy. If you do not agree with any amendment, please cease using the Platform and request account closure.

15 Contact Us

For any questions, concerns or requests regarding this Privacy Policy or the processing of your Personal Data, please contact the lvking Data & Privacy team using the details below. Do not include your account password, full payment card number or OTP codes in any correspondence.