Lk2 Privacy Policy – Data Protection Every Malaysian Member

This Privacy Policy describes how lk2, operating under the domain lk2.asia, collect, use, store, protect, and in certain circumstances, share the personal information you provide to us or that we collect when you use the lk2 platform.

Lk2 takes data protection responsibilities very seriously. This policy was developed not merely to satisfy legal requirements, but because we believe every member has the right to know exactly how their personal data is handled by any platform they trust. Transparency in this regard is a core part of lk2's commitment to its members in Malaysia.

This Privacy Policy applies to all users of the lk2 platform, including visitors who browse the site without registering an account, active registered members, and former members whose accounts have been closed. By using the lk2 platform in any capacity, you are deemed to have read, understood, and agreed to this Privacy Policy.

Lk2 follows a data minimisation principle — we only collect information that is genuinely necessary to provide the services you request. The following are the categories of data that lk2 may collect:

Data You Provide Directly:

• Registration Information: Full name, email address, Malaysian phone number, date of birth, and password (stored in secure hashed form)
• Identity Verification Documents (KYC): A copy of your identity card (MyKad), passport, or other identity document requested for age and identity verification purposes
• Financial Information: Payment method details such as your Touch 'n Go account number, GrabPay ID, DuitNow information, or bank account number for processing deposits and withdrawals in MYR
• Communications: Messages you send to the lk2 support team via live chat, email, or WhatsApp

Automatically Collected Data:

• Technical Data: IP address, browser type, operating system, device identifier, and screen resolution
• Usage Data: Pages visited, games played, session duration, login and logout times, and navigation patterns within the lk2 platform
• Transaction Data: Deposit, withdrawal, wagering, winnings, and loss history in your lk2 account
• Cookie Data: Information collected through cookies and other tracking technologies — explained further in Section 6

Personal data collected by lk2 is used for the following purposes, all of which are necessary to provide a safe, fair, and high-quality online casino service to members in Malaysia:

Core Service Provision:

• Verifying your identity and age during registration and the KYC process
• Processes deposits and withdrawals in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX
• Managing your lk2 account, including balance, transaction history, and responsible gaming limit settings
• Providing access to all games on the lk2 platform, including slots, Live Casino, baccarat, blackjack, sports, and e-sports
• Processing and crediting any bonuses and promotions you are eligible for

Security & Compliance:

• Detecting and preventing fraud, money laundering, and platform abuse
• Ensuring compliance with applicable laws and regulations, including Malaysia's PDPA 2010
• Verifying that users meet the minimum age requirement of 18 years
• Detecting the use of multiple accounts in violation of lk2's Terms

Service Improvement:

• Analysing usage patterns to improve the lk2 platform's interface and user experience
• Sending account-related communications such as deposit confirmations, withdrawal notifications, and security alerts
• Delivering more responsive customer support based on your interaction history with lk2
• Sending lk2 promotional information and new offers – provided you have given consent for marketing communications

Lk2 does not sell members' personal data under any circumstances. However, there are limited situations where lk2 needs to share certain information with specific third parties to ensure our services function properly:

Trusted Service Providers:

• Payment Providers: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and the FPX network (Maybank2u, CIMB Clicks) receive only the minimum transaction information required to process your payment in RM. They are subject to their own privacy policies and security standards.
• Game Providers: Pragmatic Play, Evolution Gaming, PG Soft, and other providers receive session identifiers that cannot personally identify you, for game delivery purposes. They do not receive your full name, identity card number, or financial information.
• Identity Verification Services: Third-party KYC providers used by lk2 receive the documents required to verify your identity. They operate under strict confidentiality agreements with lk2.

Legal Requirements:

• Lk2 may disclose your data to Malaysian authorities (such as the police, MACC, or BNM) where required by a court order, warrant, or other valid legal obligation
• Any such disclosure will be limited to what is strictly necessary, and lk2 will endeavour to notify you of any such request where permitted by law

Lk2 invests seriously in security infrastructure to protect members' personal and financial data. The technical and operational security measures we employ include:

Technical Security:

• 256-bit SSL Encryption: All communications between your device and lk2's servers are encrypted using the latest TLS protocol with 256-bit encryption keys – the same standard used by Malaysia's major banks
• Hashed Passwords: Account passwords are stored using strong hashing algorithms and cannot be decrypted, meaning even lk2 staff cannot view your password
• Two-Factor Authentication (2FA): lk2 offers an additional layer of security through two-factor authentication, which sends an OTP code to your registered phone number
• 24/7 Monitoring: lk2's systems are continuously monitored to detect any unauthorised access attempts or suspicious activity.
• Regular Penetration Testing: lk2 conducts regular security testing by independent security experts to identify and address any vulnerabilities in our systems

Operational Security:

• Access to member data by lk2 staff is restricted to those who require it to perform their job duties (principle of least privilege)
• All lk2 staff with access to personal data are bound by confidentiality agreements and undergo regular data security training
• A complete audit trail is maintained for all access to and modifications of members' personal data

Lk2 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit the lk2 website.

Types of Cookies Used by lk2:

• Essential Cookies (Required): Required for core platform functions such as maintaining your login session, saving language preferences, and securing transactions. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Allows lk2 to remember your preferences such as favourite games, display settings, and betting limits you have set. This enhances the overall ease of use on the platform.
• Analytics Cookies: Helping lk2 understand how members use the platform — which pages are visited most, how long play sessions last, and where users encounter difficulties. This data is used to drive overall improvements to the lk2 platform.
• Security Cookies: Detecting suspicious activity, preventing fraud, and protecting the integrity of your session on lk2.

You can manage your cookie settings through your web browser. Keep in mind that disabling all cookies may affect certain features on the lk2 platform. For guidance on managing cookies in your browser (Chrome, Firefox, Safari, Edge), please refer to the help section of the respective browser.

Lk2 does not use third-party cookies for advertising or targeted marketing to users outside the lk2 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy principles practised by lk2, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the lk2 team by emailing support@lk2.asia by clearly stating your request. lk2 will acknowledge receipt of your request and provide a response within 30 calendar days. In certain complex cases, this period may be extended to up to 60 days with notice to you.

Lk2 retains members' personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required under applicable Malaysian law. The general principles we follow are:

Once the applicable retention period has expired, data will be securely deleted or anonymised so that it can no longer be linked to any specific individual. The deletion process uses methods that ensure data cannot be recovered.

If you close your lk2 account, your personal data will not be deleted immediately, as we remain obligated to retain financial and audit records in accordance with Malaysian law. However, your account will be set to inactive status and your data will not be used for marketing or communication purposes after closure.

The lk2 platform is strictly for individuals aged 18 and above. lk2 does not knowingly collect, use, or store any personal data from individuals under the age of 18.

All new account applicants are required to confirm that they are 18 years of age or older during the registration process. lk2 also conducts additional age verification through the KYC process where necessary. Should lk2 become aware that personal data belonging to an individual under the age of 18 has been collected, we will promptly take the following steps:

• Closing the account in question immediately
• Delete all associated personal data from our systems
• Withholding and returning any deposited funds
• Reporting the incident to the relevant authorities where required

Lk2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or developments in how we provide our services. Any amendments will be posted on this page with an updated "Last Updated" date.

For material amendments – those that significantly change how we use or disclose your personal data – lk2 will provide more prominent notice, including:

• In-platform notifications on lk2 when you log in
• Email notification sent to your registered email address
• In some cases, seeking your consent again for data processing

Your continued use of the lk2 platform after any amendments to this Privacy Policy take effect will be considered your acceptance of the revised version. We therefore encourage you to review this page periodically to stay informed of lk2's latest privacy practices.

If you have any questions, concerns, or requests regarding this Privacy Policy or how lk2 handles your personal data, we encourage you to reach out to us through the following channels:

• Privacy Email: support@lk2.asia – please include "Privacy Enquiry" in your email subject line to help us process your request faster
• Live Chat: Available directly on the lk2 platform 24 hours a day, 7 days a week — the fastest option for an immediate response
• WhatsApp: Available 24/7 for a more casual conversation and faster response

The lk2 team handling privacy enquiries will respond within 3 business days for general enquiries, and within 30 calendar days for formal data subject rights requests such as access, correction, or deletion requests.

Lk2 is committed to handling all privacy enquiries and complaints seriously, professionally, and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.

We value the trust you place in lk2 by registering an account and using our platform. That trust is a responsibility we take seriously and never take for granted. Your privacy is not merely a legal obligation for lk2 — it is part of how we respect and value every member who chooses to play with us.