Lorongjudi Privacy Policy – Your Personal Data Protection

1. Introduction

Welcome to the lorongjudi Privacy Policy. This document outlines our privacy practices and how we handle the personal information you provide when using the lorongjudi online betting platform, whether through our official website at lorongjudi.app or through our mobile app.

This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. We are committed to ensuring that all personal information you provide is handled with full responsibility, transparency, and security.

By registering for or using lorongjudi services, you consent to the collection and use of your personal information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform.

2. Information We Collect

Lorongjudi collects various types of information depending on how you interact with our platform. This data collection is necessary to provide secure services, process financial transactions, and meet legal compliance requirements.

We may also receive information about you from trusted third-party sources, such as identity verification service providers and fraud prevention agencies, to supplement and verify the information you have provided to us.

3. How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. lorongjudi does not use your data for any purpose beyond the limits set out in this policy. The following are the primary purposes for which your personal data is used:

• Account management: Create and maintain your member account, process registration, and verify your identity through the KYC process.
• Transaction processing: Handle deposits, withdrawals, and all financial activities related to your account securely and accurately.
• Platform security: Detect and prevent fraud, money laundering, multiple account usage, and any unlawful or suspicious activity.
• Legal compliance: Meet obligations under PDPA 2010, anti-money laundering (AML) regulations, and relevant regulatory directives.
• Service communications: Send important notifications relating to your account, transactions, policy changes, and security updates.
• Experience enhancement: Analyse aggregated usage patterns to improve platform design, game selection, and the overall user experience.
• Responsible gaming: Monitoring betting patterns to identify signs of problem gambling and offering appropriate assistance to members who need it.
• Marketing (with consent): Send promotional information and special offers — only to members who have given explicit consent to receive marketing communications.

4. Information Sharing with Third Parties

Lorongjudi takes a highly cautious and limited approach to sharing your personal data. We do not sell, rent, or trade your personal information to any third party for their own commercial purposes.

However, in the course of operating the platform, we may share your data with the following categories of third parties, and only to the extent necessary:

• Payment service providers: To securely process your deposits and withdrawals through licensed payment channels.
• Identity verification service providers: To conduct KYC checks and verify the authenticity of documents you submit.
• Cloud and infrastructure service providers: Servers and data storage systems used to operate our platform, all subject to strict confidentiality agreements.
• Authorities and regulatory bodies: Where required by law, court order, or lawful directive from a relevant authority.
• Fraud prevention agencies: To share information necessary for detecting and preventing fraudulent activity that affects our platform and members.

All third parties we work with are required to comply with security and privacy standards equivalent to those of lorongjudi, through legally binding data processing agreements.

5. Data Security and Protection

The security of your personal information is the absolute top priority of lorongjudi. We implement multiple layers of technical and organisational security controls to ensure your data is always protected against unauthorised access, disclosure, alteration, or destruction.

Key security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• At-rest encryption for all sensitive information stored in our databases.
• Role-based access control (RBAC) ensures that only authorised staff can access member personal data.
• Round-the-clock 24/7 security monitoring using intrusion detection systems (IDS) and intrusion prevention systems (IPS).
• Regular penetration testing conducted by independent security experts to identify and address vulnerabilities.
• Two-factor authentication (2FA) is available and encouraged for all member accounts.
• A clear, tested incident response procedure to handle any security breaches quickly and effectively.

While we take all reasonable precautions, no security system can be guaranteed to be completely foolproof. We encourage you to also take responsibility for your account security by using a strong password and enabling two-factor authentication.

6. Cookies and Tracking Technologies

Lorongjudi uses cookies and similar tracking technologies to enhance platform functionality, remember your preferences, and understand how members use our services. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as secure login, session management, and security features. These cookies cannot be disabled.
• Preference Cookies: Remember your settings and preferences such as language, currency denomination, and display options for a more personalised experience.
• Analytics Cookies: Collect aggregated and anonymised data on how members use our platform to help us improve its design and functionality.
• Security Cookies: Help identify and prevent fraudulent activity and ensure the security of your session.

You can manage or delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality or user experience of the lorongjudi platform.

7. Your Privacy Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the lorongjudi privacy policy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our privacy team by email at [email protected] or via live chat within the platform. We will process your request within 14 business days.

8. Children's Data

Lorongjudi services are intended solely for individuals aged 18 and above. We do not knowingly collect, store, or process any personal information from children under the age of 18.

If we determine that we have inadvertently collected personal information from a minor, we will take immediate action to delete that information and close the associated account. Parents or guardians who discover that their child has registered on lorongjudi are encouraged to contact our support team immediately.

9. Cross-Border Data Transfers

In operating a global platform, your personal data may be transferred to and stored on servers located outside Malaysia. All such data transfers are carried out in compliance with applicable legal requirements and with protections equivalent to Malaysian standards applied to your data.

Safeguards we implement for cross-border data transfers include:

• Legally binding Data Processing Agreements with all overseas service providers.
• Use of internationally recognised Standard Contractual Clauses.
• Regular security assessments of all overseas service providers to ensure ongoing compliance.
• Encryption of data in transit and at rest for all data transferred across borders.

10. Data Retention Period

Lorongjudi retains your personal data only for as long as necessary to fulfill the purposes stated in this privacy policy, or as required by applicable law.

• Active account data: Retained for the duration your account is active and for 7 years after account closure to comply with tax and financial legal requirements.
• Transaction records: Retained for 7 years in line with financial and AML legal requirements.
• KYC documents: Retained for the duration of the active account plus 5 years after account closure.
• Security logs: Retained for 2 years for fraud detection and security investigation purposes.
• Support communication data: Retained for 3 years after the last interaction for service reference and improvement.

Once the specified retention period has expired, your data will be securely deleted or anonymized using methods that ensure it cannot be recovered.

11. Privacy Policy Amendments

Lorongjudi reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements to the services we offer.

You will be notified of any significant amendments via:

• A prominent notice on the platform's main page at least 14 days before any amendment takes effect.
• Notification email sent to your registered email address.
• A notification in your account the next time you log in.

Your continued use of the lorongjudi platform after any Privacy Policy amendment takes effect will be considered your acceptance of the revised terms. We encourage you to review this policy periodically to ensure you are always informed about how we protect your information.

12. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our Data Protection Officer (DPO) team is ready to assist you.

You can reach us through the following channels:

• Privacy Email: [email protected]
• Live Support: In-platform live chat (available 24/7)
• Help Section: lorongjudi FAQ Centre

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex complaints or data subject rights requests, our maximum response period is 14 business days.