laju44 Privacy Policy

1. Data Controller

laju44 is the data controller responsible for the personal data collected through laju44.win and all associated platform services. laju44 is operated under an international gaming authority licence and is subject to the data protection obligations imposed by that licensing framework, as well as applicable data protection principles including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

Questions or requests relating to the processing of your personal data by laju44 should be directed to the laju44 support team. Contact details are provided in Section 12 of this Policy.

2. Personal Data We Collect

laju44 collects personal data from members through a number of channels — directly when you register, deposit, or interact with support, and automatically as you use the platform. The categories of personal data laju44 collects are as follows:

2.1 Data You Are Not Required to Provide

laju44 does not require members to provide sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or biometric data as a condition of using the platform. Where members voluntarily provide information beyond what is required, it is processed only to the extent necessary for the purposes described in this Policy.

3. How laju44 Uses Your Personal Data

laju44 processes member personal data for the following specific purposes:

• Account Administration: To create, maintain, and manage your laju44 account, verify your identity and age (21+), and process your deposits and withdrawals in MYR.
• Service Delivery: To provide access to laju44's full product suite including Live Casino, Slots, Sportsbook, and Arcade, and to personalise your experience based on your game history and preferences.
• Regulatory Compliance: To fulfil laju44's obligations under its international gaming authority licence, including age verification, KYC checks, anti-money laundering (AML) screening, and responsible gaming monitoring.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, and other security threats to laju44 and its members.
• Customer Support: To respond to your queries, complaints, and requests through the laju44 support team.
• Marketing Communications: To send you information about laju44 promotions, bonuses, and new platform features — subject to your communication preferences. You may opt out of marketing communications at any time through your account settings.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the performance, usability, and content of the laju44 platform.

4. Legal Basis for Processing

laju44 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between laju44 and you as a registered member — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and our international gaming authority licensing obligations — including KYC verification, AML compliance, and age verification.
• Legitimate Interests: Processing carried out for laju44's legitimate business interests where those interests are not overridden by your data protection rights — including fraud prevention, platform security, and analytics.
• Consent: Processing for marketing communications, where laju44 relies on your explicit opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Third-Party Disclosure

laju44 does not sell your personal data to any third party. laju44 may share your personal data with the following categories of recipients in the circumstances described:

• Payment Service Providers: Processing entities such as Touch 'n Go, Boost, Maybank2u, CIMB Clicks, and FPX network providers, for the purpose of facilitating your deposits and withdrawals. These providers receive only the data required to process the specific transaction.
• Game Content Providers: Third-party game studios (including PG Soft, Pragmatic Play, and others) that supply content to the laju44 platform. Game history data is shared with relevant providers only to the extent required for game delivery, fairness auditing, and progressive jackpot administration.
• Regulatory and Licensing Authorities: laju44's international gaming authority licensing body and other competent regulatory authorities as required by law or by the conditions of our licence.
• Identity Verification and AML Service Providers: Third-party KYC and AML screening providers used to verify member identity and detect suspicious financial activity.
• Law Enforcement: Where laju44 is required by law, court order, or regulatory direction to disclose member data to law enforcement or government authorities.

6. Cookies and Tracking Technologies

laju44 uses cookies and similar tracking technologies on laju44.win to ensure the platform functions correctly and to improve the member experience. The categories of cookies deployed by laju44 are as follows:

• Strictly Necessary Cookies: Required for the platform to operate, including session authentication, load balancing, and security tokens. These cannot be disabled without materially impairing platform functionality.
• Functional Cookies: Used to remember your preferences — such as preferred language or game lobby filter settings — between sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how members navigate and use laju44, allowing the platform team to identify areas for improvement. Analytics data is not used to identify individual members.
• Marketing Cookies: Where consent has been obtained, used to deliver relevant promotional content about laju44 features and offers.

You may manage your cookie preferences through your browser settings at any time. Note that disabling cookies beyond the strictly necessary category may affect some platform features.

7. Data Retention

laju44 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The general retention principles applied by laju44 are as follows:

• Active Account Data: Retained for the duration of your active laju44 membership.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with AML regulatory requirements applicable under laju44's international gaming authority licence.
• Identity Verification Documents: Retained for a minimum of five (5) years from the date of account closure or the last activity on the account, whichever is later.
• Support Communications: Retained for three (3) years from the date of the most recent interaction, unless the matter relates to a regulatory investigation or legal proceeding, in which case data is retained for the duration of that matter.
• Marketing Preference Records: Retained for five (5) years from the date your consent was recorded or withdrawn, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with laju44's data disposal procedures.

8. Security Measures

laju44 implements appropriate technical and organisational security measures to protect member personal data against unauthorised access, accidental loss, destruction, and disclosure. Measures in place include:

• 256-bit TLS encryption on all pages of laju44.win and all data transmitted between member devices and laju44 servers;
• Secure, encrypted storage of passwords — laju44 does not store passwords in plain text;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Regular internal security assessments and penetration testing of the laju44 platform;
• Incident response procedures for the prompt identification, containment, and notification of any personal data breach.

While laju44 maintains robust security practices, no online platform can guarantee absolute security. Members are encouraged to maintain strong, unique passwords for their laju44 account and to enable two-factor authentication as an additional layer of protection.

9. Your Data Protection Rights

Subject to applicable law and the conditions of laju44's licensing framework, members have the following rights in respect of their personal data held by laju44:

• Right of Access: You may request a copy of the personal data laju44 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to laju44's legal obligations to retain certain records.
• Right to Restrict Processing: You may request that laju44 restrict its processing of your personal data in certain circumstances.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a machine-readable copy of personal data you have provided to laju44.
• Right to Object: You may object to laju44 processing your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the laju44 support team as described in Section 12. laju44 will respond to verified requests within thirty (30) days of receipt, or notify you if additional time is required.

10. Children and Minors

laju44 does not knowingly collect or process personal data from individuals under 21 years of age. The platform enforces strict age verification during the registration process and at subsequent intervals. If laju44 becomes aware that personal data has been collected from a person below the minimum age of 21, the affected account will be closed immediately, all deposits returned, and the associated personal data deleted without undue delay.

If you have reason to believe that a minor has registered a laju44 account, please contact the support team immediately.

11. Updates to This Privacy Policy

laju44 reserves the right to update this Privacy Policy from time to time to reflect changes in applicable law, our licensing obligations, or our data processing practices. Where changes are material, laju44 will provide advance notice to registered members via the email address on file or through a prominent notice on the platform. Continued use of laju44 following the effective date of a revised Policy constitutes acceptance of the updated terms.

The current version of this Policy, including its effective date, is always accessible on this page. laju44 recommends that members review this page periodically.

12. Contact and Data Enquiries

For any enquiry, request, or complaint relating to the processing of your personal data by laju44, please contact the support team using the following details:

laju44 will acknowledge receipt of your request within three (3) business days and aims to resolve all data-related enquiries within thirty (30) days. Complex requests or those requiring liaison with third-party service providers may take longer, in which case laju44 will keep you informed of progress.

If you are not satisfied with laju44's response to a data protection complaint, you may escalate the matter to the relevant supervisory authority under laju44's international gaming authority licensing framework.