Privacy Policy —
lbc22

This Privacy Policy ("Policy") is published by lbc22 ("lbc22", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at lbc22.cam. It governs the collection, storage, processing, use, and disclosure of personal data relating to individuals ("Users", "Players", "you") who access or use the lbc22 platform, whether through our website, mobile browser interface, or any other channel we make available.

lbc22 takes data privacy seriously. We collect only the personal data that is necessary for us to operate the Platform, fulfil our legal obligations, and provide you with a safe and compliant gaming and betting experience. We do not sell your personal data to third parties for marketing purposes. We do not use your data for purposes beyond those set out in this Policy without first obtaining your consent.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated into the overall contractual framework governing your use of the lbc22 Platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identity document number, date of birth, contact details, financial information, and behavioural data.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction, whether by automated or manual means.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, lbc22.
• "Data Processor" means a third party that processes Personal Data on behalf of lbc22, subject to lbc22's instructions and appropriate data processing agreements.
• "Consent" means a freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their Personal Data for one or more specified purposes.
• "KYC" means Know Your Customer — the identity verification and age verification process required by lbc22 to comply with applicable anti-money laundering and responsible gambling obligations.
• "Cookie" means a small text file placed on a User's device by the lbc22 Platform for the purposes of session management, analytics, and functionality.
• "Platform" means the lbc22 website, mobile web interface, and related digital services available at lbc22.cam.

lbc22 collects the following categories of Personal Data from Users of the Platform:

lbc22 does not knowingly collect Sensitive Personal Data (such as racial or ethnic origin, religious beliefs, or health information) unless strictly required for regulatory compliance purposes, in which case explicit consent will be sought.

lbc22 collects Personal Data through the following means:

1. Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings.
2. Automatically — through cookies, pixel tags, server logs, and similar tracking technologies as you interact with the Platform. This includes your IP address, device identifiers, browsing behaviour, and session activity.
3. From payment processors — when you conduct transactions via Malaysian payment channels such as Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX, we may receive transaction confirmation data from those providers. We do not receive or store your full bank account passwords or card details.
4. From identity verification services — lbc22 may use third-party KYC verification providers to verify the authenticity of identity documents you submit. These providers process your documents under strict data handling agreements.
5. From publicly available sources — in limited circumstances, lbc22 may supplement account information with data from publicly available registries for compliance and fraud prevention purposes.

lbc22 processes your Personal Data only where we have a lawful basis for doing so. The following table sets out the purposes for which we process your data and the corresponding legal basis:

lbc22 does not sell, rent, or trade your Personal Data to third parties for their independent marketing purposes. We share your data only in the circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: We share necessary transaction data with Malaysian payment processors including Paynet (FPX and DuitNow), and e-wallet operators (Touch 'n Go, Boost, GrabPay) for the sole purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations.
• KYC and Identity Verification Providers: We may share your identity document images and personal identifiers with accredited third-party KYC verification services to fulfil our age and identity verification obligations.
• Game and Technology Providers: Where you play games hosted by third-party game studios on our Platform, those providers may receive session-level data (such as bet amounts and game outcomes) necessary for game operation. No personally identifiable information beyond an anonymised player identifier is shared for this purpose.
• Fraud Prevention and AML Services: We may share data with specialist fraud detection and anti-money laundering screening services to protect the integrity of our Platform and comply with applicable financial crime prevention obligations.
• Customer Support Platforms: Your support communications may be processed by third-party customer service software providers operating under strict data processing agreements with lbc22.
• Legal and Regulatory Authorities: We will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, regulation, or valid legal order. We will notify you of such disclosures where legally permissible.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of lbc22's assets, your Personal Data may be transferred as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transaction.

lbc22 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, and understand how players interact with our services. Cookies are small text files stored on your device by your browser when you visit lbc22.cam.

lbc22 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how Players use the Platform — such as which pages are most visited and how long sessions last. This data helps us improve the Platform experience. We use privacy-respecting analytics tools that do not share data with advertising networks.
• Functionality Cookies: Used to remember your preferences, such as your preferred language (English, Bahasa Melayu, Mandarin), currency display settings, and whether you have previously dismissed certain Platform notices.
• Marketing Cookies (Opt-in Only): With your explicit consent, we may place cookies that help us understand which promotional campaigns led you to lbc22, to measure the effectiveness of our marketing activities. These are only active if you have consented to marketing communications.

You may manage or withdraw your cookie consent at any time through your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality. For instructions on managing cookies in popular browsers, refer to your browser's help documentation.

lbc22 retains your Personal Data for no longer than is necessary for the purposes for which it was collected, taking into account applicable legal retention obligations. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

lbc22 implements industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and lbc22's servers is protected by 256-bit SSL/TLS encryption. The lbc22 Platform is only accessible via HTTPS.
• Encryption at Rest: Sensitive Personal Data and KYC documents stored on our servers are encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to Personal Data within lbc22's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to Personal Data undergo data privacy and security training.
• Two-Factor Authentication: Administrative systems containing Personal Data require multi-factor authentication for access.
• Regular Security Reviews: lbc22 conducts periodic security assessments of its infrastructure, data handling processes, and third-party Data Processor arrangements.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, lbc22 will notify affected Users as soon as practicable and take all reasonable steps to contain and remediate the breach.

lbc22 operates primarily for the Malaysian market and processes most Personal Data within servers located in the Asia-Pacific region. However, some of our Data Processors — such as cloud infrastructure providers, KYC verification services, and analytics platforms — may store or process data in data centres outside Malaysia.

Where Personal Data is transferred outside Malaysia, lbc22 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or greater than that applicable within Malaysia. Safeguards include:

• Data processing agreements incorporating standard contractual clauses for cross-border data transfers;
• Transfer only to Data Processors certified under internationally recognised data protection frameworks;
• Regular review of third-party Data Processor compliance with applicable data protection obligations.

You may request further information about the specific safeguards applicable to any particular international data transfer by contacting our Data Privacy team at the address provided in Section 15.

As a User of lbc22, you have the following rights with respect to your Personal Data. These rights may be subject to certain limitations where they conflict with lbc22's legal obligations (such as AML record-keeping requirements):

To exercise any of the above rights, please contact our Data Privacy team via the details set out in Section 15. We will respond to verified requests within 30 calendar days of receipt. We may request additional information to verify your identity before processing a data rights request.

Where you have provided consent as the basis for a specific processing activity (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, update your preferences in Account Settings or contact our support team.

The lbc22 Platform is strictly restricted to persons aged 21 years and above. lbc22 does not knowingly collect or process Personal Data from individuals under the age of 21. Our KYC verification process is designed specifically to identify and prevent access by underage individuals.

If lbc22 discovers that Personal Data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the Personal Data concerned to the extent permissible by law, and return any funds deposited to the source payment method. The matter may also be referred to appropriate authorities.

The lbc22 Platform may contain references to third-party services, including payment processors (such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX) and game content providers. When you interact with these third-party services, your data is processed under their respective privacy policies, over which lbc22 has no control.

lbc22 is not responsible for the privacy practices, content, or data security of any third-party services. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the lbc22 Platform.

The mention of any third-party payment service or game provider on the lbc22 Platform does not constitute an endorsement of that party's data privacy practices.

lbc22 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy — such as the introduction of a new purpose for processing Personal Data, a new category of data collected, or a change to how we share data — will be communicated to registered Users via the email address associated with their Account, at least 14 days prior to the changes taking effect.

Non-material amendments (such as editorial corrections, clarifications, or administrative updates) may be made without prior notice and take effect immediately upon publication on the Platform. The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision.

Your continued use of the lbc22 Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you should cease using the Platform and close your Account.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how lbc22 has handled your Personal Data, please contact us through the following channels:

• 24/7 Live Chat: Available directly on the lbc22 Platform. This is the fastest channel for urgent account-related privacy queries. Average response time: 3–5 minutes. Support is available in English, Bahasa Melayu, and Mandarin Chinese.
• Email: [email protected] (plain text only — this address is not a clickable link). Please allow up to 3 business days for email responses to data privacy enquiries.

When submitting a data rights request, please include your registered username, the email address associated with your lbc22 Account, a clear description of your request, and — where the request involves access to or deletion of specific data — sufficient detail to allow us to locate the relevant records.