Data Protection Policy

Privacy Policy lazawin – Your Personal Data Protection

Your privacy is our priority. This page clearly explains how lazawin collects, uses, stores, and protects your personal information as a member of our gaming platform in Malaysia.

Updated: January 2026  ·  Version 2.4
Malaysia PDPA Compliance
256-bit SSL Encryption
0 Sale of Data to Advertisers
24/7 Security Monitoring
PDPA Malaysia Personal Data Protection Act

This Privacy Policy describes lazawin's data protection practices and applies to all users who access our platform via the website, mobile app, or any official lazawin channel. By using our platform, you agree to the terms set out here.

Introduction

Lazawin cares about the privacy of every member who entrusts us with their personal information. As an online gaming platform operating in Malaysia, we are bound by the Personal Data Protection Act 2010 (PDPA) and international security standards adopted by the licensed online gambling industry.

This Privacy Policy is written in clear, plain language because we believe you have the right to know exactly what happens with your data — not buried in hard-to-read legal jargon. If any section still raises questions, our team is available via 24/7 live chat.

This document covers all aspects of lazawin's data protection: from the types of information we collect during registration and how we use it to enhance your gaming experience, to the full rights you hold as the owner of that data.

Personal Data We Collect

Lazawin only collects information that is genuinely necessary to provide our services safely and efficiently. Here is a full overview of the data we collect and its sources:

Data You Provide Directly

  • Identity information: Full name, MyKad or passport number, date of birth, and gender collected during registration or the KYC process.
  • Contact information: Email address, mobile number, and current residential address.
  • Financial information: Bank account number, account holder name, and digital wallet details (Touch 'n Go, Boost) to process deposits and withdrawals.
  • Supporting documents: Copies of identity documents, utility bills, and proof of payment submitted during the KYC process.
  • Communications: Records of live chat conversations, support emails, and feedback you send us.

Automatically Collected Data

  • Technical data: IP address, device type, operating system, browser type, and screen resolution.
  • Activity data: Pages visited, games played, session duration, access date and time, and in-platform actions.
  • Transaction data: Your deposit history, withdrawals, wagering activity, and bonuses used in your account.
  • Approximate location data: State or city based on your IP address — we do not collect precise GPS location.
Data Categories Example Primary Purpose
Identity Name, IC number, date of birth Age verification & KYC
Contact Email, phone, address Communications & account recovery
Financial Bank account, e-wallet Payment Processing
Technical IP address, device, browser Security & fraud detection
Activity Game records, transactions Support, audit & compliance

How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. lazawin does not use your data for anything outside the scope of our services. Below are the specific purposes for which data is used:

  1. Account management: Create, verify, and maintain your lazawin account, including the KYC process required by regulations.
  2. Transaction processing: Verify and process all deposits and withdrawals using your preferred payment method in MYR.
  3. Platform security: Detect and prevent fraud, hacking, money laundering, and system abuse in real time.
  4. Personalise your experience: Recommend suitable games, tailor promotions, and improve the overall platform experience based on your usage patterns.
  5. Customer support: Provide effective support and resolve disputes based on your account records and activity.
  6. Legal compliance: Fulfil reporting obligations to relevant authorities as required by Malaysian law.
  7. Important communications: Send security notices, policy updates, transaction confirmations, and promotional information (only if you have consented).

Lazawin will not use your data to make fully automated decisions that negatively affect you without human intervention. Any major decisions such as account suspension always involve a manual review by our team.

Data Storage & Security

Your data security at lazawin is more than a slogan — it is real infrastructure we invest in seriously. All member personal data is stored on servers protected with 256-bit SSL encryption and secured by a multi-layered security system.

Technical Security Measures

  • Data encryption in transit: All communications between your browser or app and lazawin's servers use TLS 1.3 — the highest standard currently available.
  • Data encryption at rest: Sensitive information such as passwords, card numbers, and KYC documents is stored in encrypted format (encrypted at rest) using AES-256.
  • Internal access control: Only lazawin staff with a legitimate work need are permitted to access user data, and every access is logged for audit purposes.
  • 24/7 threat monitoring: An active intrusion detection system (IDS) monitors platform traffic at all times and will raise an automatic alert if any suspicious activity is detected.
  • Penetration testing: lazawin conducts regular security testing by independent external auditors to identify and close any vulnerabilities.

Data Retention Period

Lazawin retains your personal data for as long as necessary to fulfil the purpose of collection and comply with legal obligations. In general:

  • Active account data: For the full duration that your account remains active on lazawin.
  • Transaction and game data: Minimum 5 years after the transaction date for compliance and audit purposes.
  • KYC Data: Minimum 5 years after account closure, or longer if required by law.
  • Security logs: 2 years for security incident investigation purposes.

Data Sharing With Third Parties

Lazawin does not sell, does not rent, and does not trade your personal data to any third party for marketing or commercial gain. This is a commitment we have never compromised on.

However, there are specific situations where we need to share your data with carefully selected parties:

  • Payment service providers: Payment processors such as FPX, DuitNow, and digital wallets receive the information necessary to complete your transactions. They are bound by strict confidentiality agreements.
  • Licensed game providers: Game studios that supply casino content to lazawin may receive session data required to run their games. No full identity information is shared.
  • Legal authorities: lazawin will disclose information lawfully required by Malaysian authorities — including the Royal Malaysia Police, MACC, or courts — upon receipt of a valid official order.
  • Identity verification services: Licensed third-party KYC verification platforms help us verify your identity documents securely and efficiently.

All third-party providers that handle lazawin data are required to sign a Data Processing Agreement (DPA) that complies with Malaysia's PDPA standards. They are only permitted to use your data for purposes specified by lazawin.

Cookies & Tracking Technologies

The lazawin platform uses cookies and similar tracking technologies to keep the platform running smoothly and to deliver a better experience for you. These cookies do not contain personal information that directly identifies you.

Types of Cookies We Use

  • Essential cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled without affecting platform usability.
  • Performance cookies: Collect anonymous data on how users interact with the platform — pages frequently visited, time spent, and errors encountered — to help us improve.
  • Functional cookies: Remember your preferences such as language, platform theme, and display settings for future sessions.
  • Analytics cookies: Helps us understand overall usage patterns in aggregate for product development and platform marketing purposes.

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect the functionality of the lazawin platform.

Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have important rights regarding your personal data held by lazawin. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will process your request within 14 business days.

Right to Rectification

If any of your data is inaccurate or outdated, you may request a correction through your account settings or by contacting customer support.

Right to Erasure

You may request deletion of your data after closing your account, subject to applicable legal retention obligations.

Right to Object

You can object to your data being used for direct marketing at any time by contacting us or adjusting your notification settings.

Right to Data Portability

You have the right to receive your data in a structured, machine-readable format for transfer to another platform if needed.

Right to Restrict Processing

In certain circumstances, you may request that processing of your data be temporarily restricted while your request is being reviewed by our team.

To exercise any of the above rights, contact our data protection team by email at [email protected] or via the platform's live chat. We will verify your identity before processing any data-related request.

Data of Underage Minors

Lazawin is an adults-only gaming platform. We do not knowingly collect, store, or process any personal data from individuals under the age of 18. Account registration is open only to adult users who have verified their age.

If we discover that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the associated account. Parents or guardians who find that their child has registered on lazawin are urged to contact us promptly via our support email.

Amendments to This Privacy Policy

Lazawin reserves the right to update this Privacy Policy from time to time to reflect changes in platform practices, legal requirements, or data protection improvements. Any significant changes will be communicated to you via:

  • A prominent notice on the lazawin platform homepage.
  • Notification email sent to the email address registered to your account.
  • A pop-up notice upon your next login after changes take effect.

The "Updated" date at the top of this page always reflects the latest version currently in effect. Your continued use of the lazawin platform after the amendment date constitutes your acceptance of the updated policy.

Contact Our Data Protection Officer

Lazawin has appointed a Data Protection Officer (DPO) responsible for ensuring PDPA compliance and handling all privacy-related inquiries. If you have any concerns, questions, or complaints about how we handle your personal data, please contact:

  • Privacy Email: [email protected] – response within 3 business days.
  • General Support Email: [email protected] – for general account enquiries.
  • Live Chat: Available 24/7 directly within the lazawin platform for instant assistance.
  • FAQ: Check page FAQ us for answers to common questions.

If you are not satisfied with our response after contacting the DPO, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010.

Lazawin's Six Pillars of Data Protection

Our commitment is more than a promise — it is a real, auditable data protection system

End-to-End Encryption

All data transmitted between your device and lazawin's servers is protected by TLS 1.3 and 256-bit SSL encryption. Sensitive information such as passwords and financial data is never stored in plain text.

Integrated KYC Verification

Lazawin's KYC process uses secure digital identity verification technology. Your documents are reviewed and stored in a hardened environment, accessible only to authorised personnel.

No Sale of Personal Data

Lazawin operates on a business model that does not rely on selling user data. Your data is never sold, rented, or shared with third-party advertisers for any marketing purpose.

Malaysia PDPA Compliance

The lazawin platform was built with Malaysia's Personal Data Protection Act 2010 in mind from day one. We undergo regular compliance audits to ensure these standards are consistently met.

Data Control in Your Hands

Lazawin gives you full control — from managing your notification preferences to requesting a copy or deletion of your data. Your PDPA rights are easy to exercise without unnecessary red tape.

Real-Time Threat Monitoring

Lazawin's threat detection system operates 24 hours a day, 7 days a week. Any unusual activity in your account will trigger an automatic review and an immediate notification to you.

FAQ – Privacy Policy

Answers to the most frequently asked questions about how lazawin protects your privacy

Absolutely not. lazawin does not sell, rent, or trade your personal data to any advertiser or third party for marketing purposes. Our business model does not rely on monetising user data. Your data is used solely for platform operational purposes as stated in this Privacy Policy.

You can request access to your personal data by emailing [email protected] or contacting us via live chat. Please include your username and account number in your request. Our team will verify your identity before processing the request within 14 business days.

KYC documents such as MyKad copies and proof of address are retained for a minimum of 5 years from the account closure date. This is a legal compliance requirement under anti-money laundering (AML) regulations binding on online gambling platforms. After this period, data will be securely deleted from our systems.

You can manage your cookie settings through your browser. However, essential cookies required for core platform functions — such as login authentication and session security — cannot be disabled without affecting your ability to use lazawin. Non-essential cookies such as analytics and marketing cookies can be disabled without impacting core functionality.

If you suspect any unauthorized access or data breach, contact the lazawin security team immediately via 24/7 live chat or email [email protected]. Change your password right away and enable two-factor authentication (2FA) if you haven't already. Our team will investigate your report within 24 hours and provide regular updates on the progress of the investigation.

Join a Platform That Puts Your Privacy First

Lazawin offers more than a great gaming experience — we also ensure your personal data stays safe and protected at all times. Register an account today and enjoy peace of mind playing on a platform trusted by over 500,000 Malaysian members.

Your data is protected by 256-bit SSL encryption. Must be 18 years or older. Responsible Gambling

Bahasa Melayu