lepak7 Privacy Policy

1. Introduction

lepak7 ("lepak7", "we", "us", "our") is committed to protecting the privacy and personal data of all Users of the lepak7 platform at lepak7.app. This Privacy Policy describes how lepak7 collects, uses, discloses, stores, and protects personal data in connection with the operation of our online betting and casino services.

This Privacy Policy applies to all individuals who access or use the lepak7 platform, including registered account holders, visitors browsing lepak7.app without an account, and individuals who interact with lepak7 through customer support channels.

By registering a lepak7 account or using any lepak7 service, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the lepak7 platform.

2. Data Controller

lepak7 is the data controller responsible for your personal data processed in connection with your use of the lepak7 platform and services. For all privacy-related enquiries, including data subject rights requests, you may contact us at:

• Email: [email protected]
• Subject Line: Privacy / Data Request

All data subject rights requests will be acknowledged within 5 business days and substantively responded to within 30 calendar days of receipt.

3. Personal Data We Collect

3.1 Registration and Account Data

When you register a lepak7 account, we collect the personal data you provide, including your full name, date of birth, nationality, residential address, email address, and phone number. This information is required to create and maintain your account and to verify your identity in accordance with our legal obligations.

3.2 Identity Verification Data

lepak7 is required to verify the identity of all account holders in accordance with applicable anti-money laundering and know-your-customer regulations. Accordingly, we may collect copies of government-issued identity documents (such as MyKad or passport), proof of address documentation, and in some cases selfie photographs or video verification recordings.

3.3 Financial and Transaction Data

We collect data relating to all financial transactions conducted through the lepak7 platform, including deposit and withdrawal amounts, payment method details (bank account numbers, e-wallet identifiers), transaction timestamps, and transaction reference numbers. Full payment card numbers are never stored by lepak7 — card processing is handled by our regulated payment service providers.

3.4 Betting and Gaming Activity Data

We collect comprehensive records of your betting and gaming activity on the lepak7 platform, including bets placed, game sessions, wager amounts, outcomes, and bonus usage. This data is used for account management, regulatory reporting, responsible gaming monitoring, and customer support purposes.

3.5 Device and Technical Data

When you access lepak7, we automatically collect certain technical data including your IP address, browser type and version, device type and operating system, session duration, pages visited, and referring URLs. This data is used for security, fraud prevention, and platform optimisation purposes.

3.6 Communications Data

We retain records of all communications between you and the lepak7 customer support team, including live chat transcripts, email correspondence, and any attachments. These records are maintained for quality assurance, dispute resolution, and regulatory compliance purposes.

4. How We Use Your Personal Data

lepak7 uses your personal data for the following purposes:

• Account Management: To create, operate, and maintain your lepak7 account, including processing your deposits and withdrawals and crediting winnings.
• Identity Verification: To verify your identity, confirm your age (21+), and satisfy our know-your-customer obligations in accordance with applicable regulations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, unauthorised account access, and other prohibited activities on the lepak7 platform.
• Regulatory Compliance: To comply with applicable anti-money laundering regulations, reporting obligations to regulatory and law enforcement authorities, and international gaming authority requirements.
• Responsible Gaming: To monitor your gambling activity for indicators of problem gambling and to administer any responsible gaming tools you have activated on your account, including deposit limits, self-exclusion, and session controls.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide account assistance.
• Marketing Communications: Where you have provided explicit consent, to send you promotional communications about lepak7 offers, bonuses, and new features. You may withdraw your marketing consent at any time by contacting [email protected].
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the lepak7 platform's performance, usability, and product offering.

5. Legal Basis for Processing

lepak7 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil lepak7's obligations under the Terms & Conditions you accepted at registration, including operating your account and processing transactions.
• Legal Obligation: Processing required to comply with applicable anti-money laundering legislation, identity verification requirements, and regulatory reporting obligations.
• Legitimate Interests: Processing carried out for lepak7's legitimate business interests, including fraud prevention, platform security, and customer support, where those interests are not overridden by your data protection rights.
• Consent: Processing of personal data for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Disclosure and Sharing of Personal Data

lepak7 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may disclose your personal data to the following categories of recipients:

• Payment Service Providers: Regulated payment processors and e-wallet operators (including FPX, Maybank, CIMB, Public Bank, Touch n Go, and Boost) for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML service providers engaged to verify your identity and screen against sanctions and politically exposed person databases.
• Technology and Infrastructure Providers: Cloud hosting, database management, and IT security providers who process data on lepak7's behalf under contractual data processing agreements.
• Legal and Regulatory Authorities: Regulators, law enforcement agencies, and courts where lepak7 is required or permitted by law to disclose your data, including in connection with AML reporting obligations.
• Professional Advisors: Legal counsel, auditors, and compliance consultants where necessary for the conduct of lepak7's regulated business activities, subject to professional confidentiality obligations.

All third-party service providers engaged by lepak7 are required to process personal data only in accordance with lepak7's instructions and in compliance with applicable data protection standards.

7. Data Retention

lepak7 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active lepak7 account data is retained for the duration of your account relationship with lepak7.
• Following account closure, personal data is retained for a minimum of five (5) years to satisfy anti-money laundering regulatory requirements and to resolve any pending disputes or legal claims.
• Transaction records and betting history are retained for a minimum of five (5) years from the date of the relevant transaction.
• Customer support correspondence is retained for three (3) years from the date of the last communication.
• Marketing consent records are retained for the duration of the consent and for a reasonable period thereafter as evidence of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents identification of the data subject.

8. Data Security

lepak7 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, and disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and the lepak7 platform.
• Encryption of sensitive data at rest, including payment information and identity documents.
• Role-based access controls limiting employee access to personal data to those with a need to know.
• Regular security assessments and penetration testing of lepak7 systems.
• Incident response procedures for detecting and managing data security events.

While lepak7 takes all reasonable precautions, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. You are responsible for maintaining the security of your lepak7 account credentials.

9. Cookies and Tracking Technologies

lepak7 uses cookies and similar tracking technologies on the lepak7.app website. A cookie is a small text file placed on your device when you visit a website.

9.1 Essential Cookies

Essential cookies are strictly necessary for the operation of the lepak7 platform, including maintaining your login session, preventing cross-site request forgery, and enabling core platform functionality. These cookies cannot be disabled without impairing your use of lepak7.

9.2 Analytical Cookies

With your consent, lepak7 uses analytical cookies to collect aggregated, anonymised data about how visitors use the lepak7 platform. This data helps us understand user behaviour patterns and improve the platform's performance and usability. No personally identifiable information is collected through analytical cookies.

9.3 Managing Your Cookie Preferences

You may manage your cookie preferences at any time through your browser settings. Disabling essential cookies will impair your ability to use the lepak7 platform. Disabling analytical cookies will not affect your ability to access or use any lepak7 service.

10. Your Data Subject Rights

Subject to applicable law, you have the following rights with respect to your personal data held by lepak7:

• Right of Access: The right to request a copy of the personal data lepak7 holds about you.
• Right of Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to lepak7's legal retention obligations.
• Right to Restriction: The right to request that lepak7 restrict processing of your personal data in certain circumstances.
• Right to Data Portability: The right to receive your personal data in a structured, machine-readable format where processing is based on your consent or a contract.
• Right to Object: The right to object to processing of your personal data carried out on the basis of legitimate interests.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Rights Request". lepak7 will verify your identity before processing any rights request and will respond substantively within 30 calendar days.

11. Children's Privacy

The lepak7 platform is strictly prohibited for individuals under the age of 21. lepak7 does not knowingly collect personal data from persons under 21. If lepak7 discovers that an account has been registered by an individual under 21, the account will be immediately suspended, all balances will be reviewed, and any personal data collected will be deleted in accordance with our retention policy.

If you believe that lepak7 has inadvertently collected personal data from an individual under 21, please notify us immediately at [email protected] and we will take prompt action.

12. International Data Transfers

lepak7's primary data processing infrastructure is operated to serve Malaysian users. Where personal data is transferred to service providers or infrastructure located outside Malaysia, lepak7 ensures that such transfers are conducted in accordance with applicable data protection standards, including through the implementation of appropriate contractual safeguards with receiving parties.

By using the lepak7 platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia where data protection laws may differ from those applicable in Malaysia.

13. Updates to This Privacy Policy

lepak7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. When material changes are made, lepak7 will notify active account holders via the email address registered to their lepak7 account and update the "Last Updated" date at the top of this page.

Your continued use of the lepak7 platform following notification of changes to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the revised policy, you must close your lepak7 account and cease using the platform.

14. Contact Us

For all privacy-related enquiries, data subject rights requests, or concerns about lepak7's handling of your personal data, please contact us using the details below:

• Email: [email protected] — Subject: Privacy / Data Request
• Live Chat: Available 24/7 at lepak7.app — response under 2 minutes

All formal data subject rights requests must be submitted in writing to [email protected]. We will acknowledge receipt within 5 business days and respond substantively within 30 calendar days.