At Laju99, protecting your personal data is a fundamental part of how we operate. This Privacy Policy explains in clear terms what information we collect, how we use it, who we share it with, how long we keep it, and what rights you have over your own data. Please read this document carefully.
This Privacy Policy ("Policy") is published by Laju99 ("Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://laju99.cam (the "Platform"). This Policy applies to all Members, visitors, and users of the Platform, regardless of the device or location from which the Platform is accessed.
Laju99 is committed to handling your personal data responsibly, lawfully, and transparently. We process personal data in accordance with the principles of data minimisation, purpose limitation, accuracy, storage limitation, and integrity and confidentiality — consistent with international data protection best practices and the obligations imposed by our gaming licence.
By registering an Account on Laju99 or otherwise using the Platform, you acknowledge that you have read and understood this Policy, and that you consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.
For the purposes of this Privacy Policy, the following definitions shall apply:
Laju99 collects the minimum amount of personal data necessary to provide you with a secure, compliant, and functional gaming experience. The categories of data we collect include:
When you create an Account on Laju99, we collect your full legal name, date of birth, residential address, email address, mobile phone number, and chosen username. This information is used to establish and manage your Account and to verify your eligibility to use the Platform.
To comply with our gaming licence obligations and anti-money laundering requirements, we may collect copies of government-issued identity documents (such as your Malaysian MyKad or passport), proof of residential address, and proof of payment method. This data is collected securely and processed only for verification purposes.
We collect information about your deposits, withdrawals, and gaming transactions, including payment method details (such as your DuitNow account, Touch'n Go eWallet registration, FPX bank details, or cryptocurrency wallet address), transaction amounts in Malaysian Ringgit (MYR), and transaction timestamps. We do not store full payment card numbers on our systems.
When you access the Platform, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type (mobile, desktop, tablet), screen resolution, time zone, and session duration. This data is used for security monitoring, fraud detection, and Platform optimisation.
We collect data about your gaming activity on the Platform, including the games you play, betting history, session frequency and duration, bonus usage, and win/loss patterns. This data is used to provide you with a personalised experience, to administer responsible gambling tools, and to comply with our licensing obligations.
We retain records of your communications with our customer support team, including live chat transcripts and email correspondence. This data is used to resolve disputes, improve our service, and maintain an accurate record of support interactions.
Laju99 collects your personal data through the following channels:
The table below summarises the primary purposes for which Laju99 processes your personal data:
| Purpose of Processing | Categories of Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Registration data, device data | Contract performance |
| Identity verification (KYC) | KYC data, registration data | Legal obligation / Legitimate interest |
| Processing deposits and withdrawals | Financial data, registration data | Contract performance |
| Fraud prevention and AML monitoring | Financial data, device behavioural data | Legal obligation / Legitimate interest |
| Responsible gambling monitoring | Behavioural data, communications data | Legal obligation / Legitimate interest |
| Customer support and dispute resolution | Communications data, account data | Contract performance / Legitimate interest |
| Platform security and technical monitoring | Device data, technical data | Legitimate interest |
| Marketing communications (opted-in only) | Registration data, behavioural data | Consent |
| Legal and regulatory compliance | All applicable categories | Legal obligation |
Laju99 processes your personal data on the following legal bases, which are consistent with international data protection frameworks:
Laju99 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited and controlled circumstances:
To process your deposits and withdrawals, we share the minimum necessary transaction data with our payment processing partners, including Touch 'n Go eWallet, Boost, DuitNow, FPX providers, Maybank, CIMB Bank, Public Bank, Hong Leong Bank, and cryptocurrency payment gateways. These parties are contractually bound to process your data only for the purpose of completing your transaction.
We share KYC documentation with licensed third-party identity verification service providers for the purpose of verifying your identity in accordance with our licensing requirements. These providers process your data strictly as Data Processors acting on Laju99's instructions.
Our third-party game providers receive limited technical session data necessary to deliver games and record game outcomes. These providers do not receive your full personal profile and are contractually restricted from using any shared data for their own purposes.
Laju99 may be required to disclose your personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where such disclosure is required by applicable law, court order, or regulatory instruction. We will disclose only the minimum information necessary to comply with such requirements.
In the event of a merger, acquisition, corporate restructuring, or sale of all or part of Laju99's business, your personal data may be transferred to the successor entity, subject to equivalent data protection obligations being imposed on that entity.
Laju99 operates internationally, and your personal data may be transferred to and processed in countries outside of Malaysia. In such cases, Laju99 ensures that appropriate safeguards are in place to protect your personal data, including contractual data transfer agreements with recipient entities that impose data protection standards consistent with international best practices.
Where data is transferred to our payment processing partners within Malaysia — such as for transactions processed via DuitNow, FPX, or local bank transfers through Maybank, CIMB, or Public Bank — such transfers are subject to Malaysian banking and data protection standards.
Laju99 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention principles apply:
Following the applicable retention period, personal data is securely deleted or anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes where it can no longer be associated with an identifiable individual.
Laju99 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and gather analytical data to improve our services. By continuing to use the Platform after being presented with a cookie notice, you consent to the use of cookies as described in this section.
Laju99 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
Whilst Laju99 employs industry-standard security practices, no data transmission or storage system is completely impenetrable. In the unlikely event of a data security incident affecting your personal data, Laju99 will notify affected Members and relevant authorities in accordance with applicable notification obligations.
As a data subject, you have the following rights in relation to your personal data held by Laju99. These rights may be subject to limitations in certain circumstances, such as where processing is required to fulfil a legal obligation or to protect the vital interests of another person.
You have the right to request a copy of the personal data that Laju99 holds about you, together with information about how that data is processed. We will respond to access requests within thirty (30) days of receipt.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may update certain account details directly through your Account settings; for other corrections, please contact our support team.
You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected and no overiding legal obligation requires its retention. Please note that KYC, transaction, and AML-related records are subject to mandatory minimum retention periods under our licensing obligations, and cannot be deleted before those periods expire.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you prefer restriction to erasure.
Where processing is based on your consent or on contract performance, you have the right to receive a structured, machine-readable copy of your personal data for the purpose of transfering it to another service provider.
You have the right to object to the processing of your personal data where that processing is based on Laju99's legitimate interests. You also have the right to object at any time to the processing of your data for direct marketing purposes.
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for marketing communications can be effected by contacting our support team.
To exercise any of the above rights, please contact our Data Protection team at [email protected] (plain text — not a clickable link) or via live chat. We will respond within thirty (30) days of receiving your verified request.
The Laju99 Platform is strictly intended for persons aged twenty-one (21) years and above. We do not knowingly collect personal data from individuals under the age of 21. If you believe that a person under 21 has created an Account or provided personal data to Laju99, please notify us immediately at [email protected] (plain text — not a clickable link) and we will investigate and take appropriate action, including Account closure and data deletion where permissible.
Laju99 implements age verification checks as part of the Account registration process and during KYC verification to prevent access by underage individuals. Any Account found to belong to a person under the age of 21 will be immediately suspended and referred for investigation accordance with our licensing obligations.
Laju99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or operational needs. Material changes to this Policy will be communicated to Members via a notice on the Platform or by email to the registered address on your Account.
The date at the top of this Policy indicates when it was last revised. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how we handle your personal data.
If you have any questions, concerns, or complaints regarding this Privacy Policy or Laju99's data processing practices, or if you wish to exercise any of your data rights as described in Section 12, please contact us through the following channels:
We will acknowledge all data protection enquiries within five (5) business days and endeavour to provide a substantive response within thirty (30) calendar days. Where a request is particularly complex or numerous, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.
Our Privacy Commitments
All data in transit between your device and Laju99's servers is protected by industry-standard TLS/SSL encryption. Your personal and financial information is never transmitted in plaintext.
Laju99 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Your information is shared only with essential service partners under strict contractual protections.
Request access, correction, deletion, or portability of your personal data at any time. We respond to all data rights requests within 30 days and take every request seriously.
Sensitive data stored on Laju99's servers — including KYC documents and financial records — is encrypted at rest using robust encryption standards. Only authorised personnel with a documented business need can access it.
We collect only what is necessary and retain it only as long as required. When the retention period expires, data is securely deleted or anonymised — no unnecessary accumulation of personal information.
Non-essential cookies — including marketing and tracking cookies — are only placed with your explicit consent. You can manage or withdraw cookie consent at any time through your browser settings.
Our support team is available24/7 to answer any questions about how Laju99 handles your personal data. You can also visit our FAQ page for quick answers, or review our Terms & Conditions for the full contractual framework.
For players aged 21 and above only. Play responsibly.