Privacy Policy — lumba188

This Privacy Policy ("Policy") is published by lumba188 ("we", "us", "our", "the Platform", "lumba188") and applies to all personal data processed in connection with your use of the lumba188 website and associated gaming and betting services accessible at https://lumba188.cam (the "Platform").

lumba188 is committed to protecting the privacy and security of all personal data entrusted to us by our Members and website visitors. This Policy sets out in transparent and accessible terms how we collect, use, store, share, and protect personal information, as well as the rights available to you in relation to your data.

By registering a Member Account on the Platform, making a deposit, or continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and you consent to our processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly, including but not limited to name, email address, phone number, IP address, and financial information.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means lumba188, being the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means a third-party organisation that processes personal data on behalf of lumba188, subject to a data processing agreement and our instruction.
• "Member" means any individual who has registered a lumba188 Account.
• "KYC Data" means identity and age verification documentation submitted by a Member in connection with the Know Your Customer verification process.
• "Cookies" means small text files placed on a user's device by a web server for the purpose of identifying the browser and storing information related to the user's interaction with the Platform.

lumba188 collects the following categories of personal data from Members and Platform visitors:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or biometric data, except where required by applicable law or where voluntarily provided by the Member as part of a KYC-related document.

lumba188 collects personal data through the following means:

4.1 Directly from You

The majority of personal data we hold is provided directly by you during account registration, the KYC verification process, deposit and withdrawal transactions, and when you contact our customer support team via live chat, WhatsApp, or email.

4.2 Automatically via the Platform

When you access the Platform, certain technical and device data is collected automatically through server logs, cookies, and similar technologies. This includes your IP address, browser session information, and pages visited. This data is used primarily for security monitoring, fraud prevention, and platform optimisation.

4.3 From Third-Party Payment Providers

When you make a deposit or withdrawal via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency networks, our payment processing partners may share transaction confirmation data with us to reconcile your Account balance. We do not receive or store full payment card numbers or full e-wallet account credentials.

4.4 From Fraud Prevention and KYC Services

lumba188 may use third-party identity verification and fraud detection services to assist in validating Member identities and detecting suspicious activity. These services may return data points (such as a risk score or verification status) which are used in our KYC decision-making process.

lumba188 processes personal data for the following specific, documented purposes:

• Account Management: Creating, maintaining, and administering your lumba188 Member Account, including authentication and access control.
• Identity Verification (KYC): Verifying your age and identity in compliance with responsible gambling and anti-money laundering obligations before authorising withdrawals.
• Transaction Processing: Executing deposits, withdrawals, and balance adjustments across all supported Malaysian payment methods and cryptocurrency channels.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, and other security incidents.
• Anti-Money Laundering (AML) Compliance: Monitoring transaction patterns to identify and report suspicious financial activity as required by applicable law.
• Customer Support: Responding to your queries, complaints, and requests through our multilingual support team (English, Bahasa Melayu, Mandarin).
• Responsible Gambling: Monitoring gameplay patterns to identify potential problem gambling indicators and to action self-exclusion or deposit limit requests.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the Platform's performance, design, and game offering.
• Marketing Communications: Sending promotional offers, bonus notifications, and news updates to Members who have consented to receive marketing communications. Members may opt out at any time.
• Legal Compliance: Meeting our obligations under applicable international gaming regulations, data protection law, and financial crime prevention requirements.

lumba188 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a Member — including account administration, payment processing, and customer support — is based on the contract formed between you and lumba188 upon account registration.
• Legal Obligation: Certain processing activities — including KYC identity verification and AML transaction monitoring — are required by applicable law and regulatory obligations.
• Legitimate Interests: Processing for fraud detection, platform security, and internal analytics is based on lumba188's legitimate interests in operating a safe and compliant gaming platform, provided such interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential cookies is based on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

lumba188 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers: Malaysian payment processors and financial institutions (including but not limited to DuitNow network operators, FPX, Touch 'n Go, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency gateway providers) receive transaction data necessary to process your deposits and withdrawals.
• Identity Verification Partners: Third-party KYC and fraud detection services that assist in verifying Member identities and assessing transaction risk scores.
• Game Content Providers: Game studios and software providers whose games are hosted on the Platform may receive anonymised session and gameplay data for game performance analytics. These providers are not permitted to use this data for independent marketing purposes.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory direction, lumba188 may disclose Member data to relevant government agencies, financial regulators, or law enforcement bodies without prior notice to the Member.
• Professional Advisors: Legal, financial, and compliance advisors engaged by lumba188 may access limited personal data under strict confidentiality obligations where required in the performance of their services.

All third parties who process personal data on lumba188's behalf are required to execute a data processing agreement and are contractually prohibited from using such data for any purpose other than the specific service they provide to us.

lumba188 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and to meet our applicable legal and regulatory obligations. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

lumba188 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using 256-bit SSL/TLS protocols.
• Encryption at Rest: Personal and financial data stored in our databases is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Personal data is accessible only to authorised lumba188 personnel and third-party processors who require it in the performance of their specific functions. Role-based access controls and multi-factor authentication are enforced for all internal systems.
• Fraud Detection Systems: Automated systems monitor transaction patterns, login attempts, and gameplay behaviour in real time to detect and flag suspicious activity for review.
• Payment Security: All payment processing integrations handling Malaysian Ringgit transactions — including DuitNow, FPX, Touch 'n Go eWallet, Maybank, and CIMB — operate through PCI-compliant secured gateways. lumba188 does not store full payment card numbers or e-wallet credentials.
• Security Audits: Platform infrastructure and security controls are subject to periodic internal review and third-party security assessments.

Despite these measures, no digital system can guarantee absolute security. In the event of a data breach that poses a risk to your personal data, lumba188 will notify affected Members and relevant authorities in accordance with our incident response obligations.

The lumba188 Platform uses cookies and similar tracking technologies to deliver a stable, personalised, and secure user experience. We classify our cookie usage into the following categories:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session management cookies (which maintain your logged-in state), security tokens, and load-balancing cookies. No consent is required for these cookies as they are operationally necessary.

10.2 Functional Cookies

Functional cookies remember your preferences — such as your preferred language, currency display settings, and game interface options — to provide a more personalised experience on return visits. These cookies do not track activity across other websites.

10.3 Analytics Cookies

With your consent, we use anonymised analytics cookies to understand how visitors interact with the Platform — including which pages are visited most frequently and where users encounter technical difficulties. This data is used only in aggregate form to improve Platform performance.

10.4 Marketing Cookies

Marketing cookies, where deployed, are only activated upon explicit Member consent. These cookies may track your interaction with lumba188 promotional content. You may withdraw consent for marketing cookies at any time through your browser settings.

You may manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies may impair the functionality of the Platform.

In order to provide the lumba188 service, certain personal data may be transferred to and processed in countries outside of Malaysia. Such transfers may occur in connection with game server hosting, third-party KYC verification services, or payment processing infrastructure.

Where personal data is transferred internationally, lumba188 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include contractual data protection clauses, adequacy decisions, or certification frameworks recognised under applicable data protection law.

If you require further information about the specific safeguards applicable to any international transfer of your personal data, please contact us using the details provided in Section 16.

Subject to applicable data protection law, you hold the following rights in relation to personal data that lumba188 processes about you. You may exercise any of these rights by contacting our support team as described in Section 16. We will respond to valid requests within 30 days of receipt.

lumba188 strictly prohibits the use of its Platform by persons under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory step in the KYC process and all Members must confirm their age eligibility at the time of account registration.

If lumba188 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, that data will be permanently deleted and the associated Account will be immediately suspended. Any Balance associated with an underage Account will be forfeited in accordance with our Terms and Conditions.

Parents and guardians who believe that a minor has registered an Account on lumba188 should contact our support team immediately via live chat or at [email protected] so that the matter can be investigated and resolved promptly.

lumba188 may send marketing communications — including promotional offers, bonus announcements, new game notifications, and loyalty programme updates — to Members who have opted in to receive such communications during account registration or subsequently through their Account settings.

Marketing communications may be delivered by email, SMS, or in-platform notification. We endeavour to ensure that all marketing content is relevant and personalised to your demonstrated interests and usage patterns on the Platform.

You may opt out of marketing communications at any time by:

• Using the "unsubscribe" link included in any marketing email we send.
• Updating your communication preferences through your Account settings on the Platform.
• Contacting our customer support team and requesting removal from our marketing list.

Withdrawal of marketing consent will not affect the delivery of transactional or service communications (such as deposit confirmations, withdrawal notifications, or security alerts), which are sent regardless of marketing preference as they are operationally necessary.

lumba188 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. When material changes are made, we will update the "Last Updated" date at the top of this Policy and, where appropriate, notify Members via registered email or in-platform notification.

We encourage Members to review this Policy periodically to stay informed of how we are protecting your personal data. Continued use of the Platform following the publication of an updated Policy constitutes acceptance of the revised terms. If you do not agree with any amendment, you must cease using the Platform and may request voluntary account closure.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how lumba188 processes your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the Platform. Our multilingual support team (English, Bahasa Melayu, Mandarin) typically responds within 3–5 minutes.
• Email: [email protected] — We aim to respond to privacy-related email inquiries within 5 business days.

For requests to exercise your data rights (access, erasure, rectification, portability, or objection), please provide your registered email address and Member username in your request to allow us to locate and verify your Account before processing the request.

For matters specifically relating to responsible gambling, self-exclusion, or deposit limits, please visit our dedicated Responsible Gambling page.