Privacy Policy Lobi89 – Your Personal Data Protection

1 Personal Information We Collect

Lobi89 collects your personal information transparently and responsibly. We only collect data that is genuinely necessary to provide you with the best possible service. The following are the categories of information we collect:

We collect this information through several channels: online registration forms, your interactions with the platform during daily use, documents submitted during the KYC process, and technical information collected automatically via cookies and similar technologies.

Lobi89 does not collect sensitive data such as health information, religious beliefs, or political views. All data collection is carried out with your consent given at the time of account registration.

2 How We Use Your Personal Information

Every piece of data we collect has a clear and legitimate purpose. lobi89 uses your personal information for the following purposes:

• Account Management: Creating, verifying, and maintaining your Lobi89 account so you can log in and use all platform features seamlessly.
• Transaction Processing: Verifying and processing all deposits and withdrawals securely and promptly, including verification via your preferred payment method.
• Identity Verification (KYC): Ensuring every member is a genuine individual who meets the minimum age requirement of 18 years, in line with industry compliance standards.
• Security and Fraud Prevention: Detecting and investigating any suspicious activity, unauthorised access attempts, or behaviour that violates the platform's terms of use.
• Service Communications: Sending important account notifications, service updates, security alerts, and relevant promotional information.
• Platform Improvements: Analysing usage patterns in aggregate and anonymised form to improve user experience, technical performance, and game offerings.
• Legal Compliance: Fulfilling legal obligations, regulations, and directives from relevant regulatory bodies, including anti-money laundering (AML) reporting requirements.

3 Information Sharing and Disclosure

Lobi89 does not sell or rent your personal data to any third party. However, in the course of operating the platform, we share certain information with the following categories of recipients based on legitimate necessity:

• Payment Service Providers: Transaction details are shared with our integrated FPX, DuitNow, Touch 'n Go eWallet, GrabPay, and crypto payment processors solely for the purpose of processing your payments.
• Game Providers: Third-party game software providers may receive player identifiers that cannot be directly identified, for technical purposes of game session management.
• Identity Verification Providers: Our certified KYC partner receives your verification documents solely for standard industry identity verification purposes.
• Legal Authority: Lobi89 may disclose required information to the relevant authorities — such as the police, courts, or regulatory bodies — when mandated by Malaysian law.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred to the new entity with prior notice given to all affected members.

All third parties that receive lobi89 user data are required to uphold data protection standards equal to or higher than our own privacy policy. Binding data processing agreements are signed with each of our partners.

4 Security and Data Protection

Lobi89 continuously invests in enterprise-grade security infrastructure to protect your personal data from unauthorised access, loss, misuse, or accidental disclosure. Key security measures we employ include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of sensitive data in databases using industry-recognised encryption algorithms
• Role-based access control (RBAC) ensuring only authorised personnel can access specific data
• Two-factor authentication (2FA) for platform administrative access
• 24/7 security monitoring with rapid incident response
• Periodic security audits by experienced independent cybersecurity firms
• Regular data backups with tested disaster recovery procedures
• Network traffic filtering with advanced intrusion prevention systems (IPS)

Despite all the security measures we have in place, no system can be guaranteed 100% free from cyber threats. lobi89 is committed to responding swiftly to any security incidents and notifying affected members in accordance with applicable legal requirements.

You also play an important role in keeping your account secure. Always use a strong, unique password for your Lobi89 account, never share your login credentials with anyone, and contact us immediately if you suspect any suspicious activity.

5 Cookies & Tracking Technologies

Lobi89 uses cookies and similar tracking technologies to enhance your experience on our platform. Understanding how we use cookies helps you make more informed decisions about your privacy.

The following are the types of cookies we use:

• Strictly Necessary Cookies: These cookies are required for the platform's core operations, including login authentication and session security. The platform cannot function properly without them.
• Preference Cookies: These cookies store your personal settings — such as preferred language and display preferences — to deliver a more personalised experience.
• Analytics Cookies: We use aggregated analytics data to understand how members use the platform and identify areas for improvement.
• Functional Cookies: These cookies enable advanced platform features such as secure password memory and recent activity records.

You can control and manage cookie settings through your browser at any time. Please note that disabling certain cookies may affect the functionality or user experience on the Lobi89 platform. Session cookies are automatically deleted when you close your browser, while persistent cookies remain stored until you delete them or they expire.

6 Your Rights Under PDPA

As a lobi89 member and data subject under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our privacy team via live chat or our support email. We will process your request within 14 business days. Some requests may require identity verification before processing to protect your account security.

7 Data Retention Period

Lobi89 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by law. The following are our data retention period guidelines:

• Active Account Data: For the duration of your active account plus the minimum period required by law following account closure.
• Financial Transaction Records: Minimum 7 years after the transaction occurs, in accordance with Malaysian financial and anti-money laundering legal requirements.
• KYC Documents: For the lifetime of the account and a minimum of 5 years after account closure in accordance with industry compliance requirements.
• Security Logs: 12 months for standard access logs; security incident-related logs are retained longer as required by investigation needs.
• Communication Data: Customer support communication records are retained for 3 years for service quality and dispute resolution purposes.

Once the retention period expires or the data is no longer needed, lobi89 will securely delete or anonymize it using industry-recognized methods. You may contact us for more details on the specific data retention periods applicable to your account.

8 International Data Transfers

In certain situations, your personal data may be processed or stored outside Malaysia, for example by our cloud service providers or international technology partners. Lobi89 ensures that any such data transfers are carried out with adequate safeguards through:

• Standard data transfer agreements that meet equivalent data protection requirements
• Comprehensive security assessments of all international partners prior to any data sharing
• Use of binding contractual protection mechanisms for all overseas data recipients
• Selection of partners operating in jurisdictions with robust data protection laws

9 Children's Privacy

Lobi89 is a platform exclusively dedicated to adults aged 18 and above. We do not intentionally collect, store, or process any personal data from individuals under the age of 18.

If you are a parent or guardian and discover that your underage child has registered an account on Lobi89, please contact us immediately. We will take the following actions without delay:

• Suspending the account in question while an investigation is conducted
• Deleting all personal data associated with that individual
• Returning any funds that may have been deposited
• Permanently closing the account

Lobi89 employs age verification technology and a rigorous KYC process to prevent underage individuals from registering. However, we rely on the cooperation of all parties to ensure this platform remains safe and exclusive for adult users.

10 Changes to This Privacy Policy

Lobi89 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer.

When we make significant changes to this policy, we will notify you through one or more of the following methods:

• Prominent notification on the Lobi89 platform homepage
• An email will be sent to your registered email address at least 7 days before the changes take effect
• In-account notification upon your next login

The "Last Updated" date at the top of this policy always reflects the latest version currently in effect. Continued use of the lobi89 platform after any policy change takes effect will be considered your acceptance of the updated terms.

11 Contact Us About Privacy

Lobi89 takes every privacy-related enquiry and concern seriously. If you have any questions about this Privacy Policy, how we handle your personal data, or wish to exercise any of your privacy rights, please contact our privacy team through the following channels:

• Live Chat 24/7: The fastest way to get immediate assistance — our support team is available around the clock.
• Privacy Email: [email protected] — for more detailed privacy inquiries or data-related requests.

We are committed to responding to all privacy-related enquiries within 3 business days. More complex data rights requests such as data deletion or data portability will be resolved within 14 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.