lazawin Privacy Policy — How We Handle Your Personal Data

1. Introduction

lazawin ("the Platform", "we", "us", "our") is an English-language online gambling information and entertainment brand serving Malaysian adults. This Privacy Policy ("Policy") describes the personal data we collect from persons who access, register on or interact with the lazawin platform at https://lazawin.cam ("Users", "you").

lazawin is committed to handling personal data lawfully, transparently and proportionately. This Policy should be read together with the lazawin Terms and Conditions, which govern your use of the platform as a whole. By registering an account or continuing to use the platform, you acknowledge that you have read and understood this Policy.

2. Definitions

• "Data Subject" means any identified or identifiable natural person whose personal data is processed by lazawin.
• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identity document number, contact details and financial information.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer and deletion.
• "Data Controller" means lazawin, which determines the purposes and means of processing personal data.
• "Data Processor" means any third party that processes personal data on behalf of lazawin under a written contractual arrangement.
• "KYC" means Know Your Customer identity verification procedures applied to confirm account holder identity and ownership of payment methods.
• "Cookies" means small text files placed on a User's device by the platform to support session management, analytics and personalisation.
• "MYR / RM" means Malaysian Ringgit, the lawful currency of Malaysia.

3. Data We Collect

lazawin collects the following categories of personal data from Users:

4. How Data Is Collected

4.1 Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your account preferences.

4.2 Automatically — when you access the platform, our servers and analytics tools collect technical and usage data including your IP address, device identifiers, browser type and session activity. This occurs whether or not you are logged in to an account.

4.3 From payment providers — when you initiate a deposit or withdrawal via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow or FPX, the relevant provider may share transaction reference data with lazawin to confirm the transfer.

4.4 From identity verification partners — where third-party KYC service providers are engaged to assist with document verification, those providers may return identity confirmation status data to lazawin.

5. Purposes and Legal Basis for Processing

lazawin processes personal data only where a lawful basis exists. The table below summarises the primary processing purposes and their corresponding bases:

6. Data Sharing and Disclosure

6.1 lazawin does not sell, rent or trade personal data to any third party for commercial purposes.

6.2 Personal data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment processors and e-wallet providers — including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow and FPX operators — to execute financial transactions.
• KYC and identity verification service providers — to confirm account holder identity and document authenticity.
• IT infrastructure and cloud hosting providers — for secure storage and processing of platform data.
• Analytics and performance monitoring tools — to help lazawin understand platform usage and improve the user experience.
• Customer support platform providers — to facilitate live chat and email ticket management.
• Regulatory authorities and law enforcement — where disclosure is required by applicable Malaysian or international law, court order or legitimate regulatory request.

6.3 All third-party data processors engaged by lazawin are required to process personal data only for the specified purpose, maintain appropriate security measures, and refrain from onward disclosure without prior written authorisation.

7. Cookies and Tracking Technologies

7.1 lazawin uses cookies and similar browser-based technologies to support the operation, security and analysis of the platform. The following categories of cookies are used:

• Strictly necessary cookies — essential for platform functionality including session authentication, security tokens and load balancing. These cannot be disabled without impairing your ability to use the platform.
• Functional cookies — remember your preferences such as language settings, game category filters and notification preferences, allowing a more consistent experience across visits.
• Analytics cookies — collect aggregated, anonymised data about how Users navigate the platform, which pages are visited most frequently, and where Users encounter difficulty. This data helps us improve content and platform performance.
• Marketing and personalisation cookies — used only where you have provided explicit consent, to tailor promotional content and offers to your activity profile.

7.2 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality. Disabling analytics or marketing cookies will not affect your ability to use core platform features.

7.3 lazawin does not use cookies to collect sensitive personal data such as financial credentials, identity document details or health information.

8. Data Retention

8.1 lazawin retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations.

8.2 As a general guide, the following retention periods apply:

• Account and identity data — retained for the duration of the account relationship and for a minimum of five years following account closure, in line with standard anti-money laundering record-keeping requirements.
• Financial transaction records — retained for a minimum of seven years to satisfy financial record-keeping obligations.
• KYC verification documents — retained for a minimum of five years following the completion of the relevant verification exercise.
• Customer support communications — retained for three years from the date of the last interaction, unless the matter relates to an ongoing dispute.
• Analytics and usage data — retained in aggregated or anonymised form for up to two years.

8.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

9. Data Security

9.1 lazawin implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration or destruction. Measures include, but are not limited to, encrypted data transmission, access controls, regular security reviews and staff confidentiality obligations.

9.2 Notwithstanding these measures, no data transmission over the internet or electronic storage system is entirely free of risk. lazawin cannot guarantee absolute security but is committed to responding promptly to any confirmed or suspected security incident.

9.3 You play an important role in maintaining account security. You are responsible for keeping your password confidential, not sharing your one-time verification codes, and notifying lazawin support immediately at [email protected] if you suspect unauthorised access to your account.

9.4 In the event of a personal data breach that poses a risk to your rights and interests, lazawin will take appropriate remedial action and notify affected Users in accordance with applicable legal requirements.

10. International Data Transfers

10.1 Personal data collected by lazawin may be processed or stored in jurisdictions outside Malaysia where our service providers operate. Where such transfers occur, lazawin takes steps to ensure that the receiving jurisdiction or the contractual arrangements in place provide an adequate level of data protection.

10.2 Transfers to payment processors such as DuitNow, FPX and major Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong) are primarily conducted within Malaysia. Transfers involving international e-wallet operators or cloud infrastructure providers may involve cross-border data flows subject to contractual data protection clauses.

11. User Rights

Subject to applicable law, Users have the following rights in relation to personal data held by lazawin:

To exercise any of the above rights, please contact lazawin support at [email protected] with a clear description of your request. We will respond within 30 calendar days. Where a request cannot be fulfilled — for example due to a conflicting legal obligation — we will explain the reason in writing.

12. Minors and Age Restrictions

12.1 lazawin is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts.

12.2 If lazawin becomes aware that personal data has been collected from a person under the age of 21, the associated account will be closed immediately and the data will be deleted in accordance with applicable legal requirements, subject to any mandatory retention obligations.

12.3 If you believe a minor has registered an account or provided personal data to lazawin, please notify us immediately at [email protected].

13. Third-Party Links

13.1 The lazawin platform does not include links to third-party websites as a matter of policy. Should any reference to an external service appear in informational content, lazawin accepts no responsibility for the privacy practices or data handling of those third-party services.

13.2 Users are encouraged to review the privacy policies of any payment provider or financial service they use in connection with their lazawin account, including Touch 'n Go eWallet, Boost, GrabPay and their respective banking institutions.

14. Amendments to This Policy

14.1 lazawin may update this Privacy Policy from time to time to reflect changes in data practices, applicable law or regulatory guidance. The revised Policy will be published on this page with an updated effective date.

14.2 Where a material change is made, lazawin will make reasonable efforts to notify registered Users through the platform or via the registered email address on file prior to the change taking effect.

14.3 Your continued use of the platform following publication of an amended Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised Policy, you should close your account and cease use of the platform.

15. Contact Us

For privacy enquiries, data access requests, correction requests or complaints regarding the handling of your personal data, please contact the lazawin support team:

• Support email: [email protected]
• Live chat: Available 24 hours a day, 7 days a week through the platform.
• Response target: Privacy-related correspondence within 30 calendar days; general support enquiries within 24 hours.

When contacting us regarding a privacy matter, please provide your registered email address and a clear description of your request. Do not include your full payment card details, account password or identity document numbers in any support communication.