Laju7 Privacy Policy — Your Personal Data Protection

Laju7 is an online gaming platform operating under the official domain https://laju7.pro. We take the privacy and security of personal data of every individual who interacts with our platform extremely seriously — whether as a casual visitor, prospective member or active registered member.

This Privacy Policy ("Policy") details the types of personal data we collect, the purposes for which it is used, the parties who may receive it, the retention periods, and your rights as the data owner. This document forms part of the laju7 Terms and Conditions and should be read in conjunction with them.

We fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable regulations thereunder. In the event of any conflict between the Bahasa Melayu version and any other language version of this policy, the Bahasa Melayu version shall prevail for Malaysian users.

Laju7 only collects personal data that is strictly necessary to provide you with a safe, lawful and quality service. We do not collect excessive or irrelevant data beyond what is required for the operation of our platform.

We also collect data you voluntarily provide when contacting laju7 customer support, completing satisfaction surveys, or participating in promotional programmes held from time to time.

Laju7 uses your personal data solely for lawful and clearly stated purposes. We will not use your data for any other purpose without first obtaining your consent or without a solid legal basis.

• Account Management — Creating, verifying and maintaining your member account; processing logins and restoring account access when required.
• Transaction Processing — Processing deposits, withdrawals and all other financial transactions securely and in a timely manner.
• Legal Compliance — Meeting KYC and AML requirements, and reporting suspicious activity to the relevant authorities where required by law.
• Platform Security — Detecting and preventing fraud, account intrusions, system abuse and any other unlawful activity.
• Responsible Gaming — Monitoring gaming patterns to identify members who may need assistance or responsible gaming support.
• Service Communications — Sending important notifications regarding your account, transactions, security updates and policy changes.
• Marketing (with consent) — Sending promotional information, exclusive offers and the latest laju7 news to members who have given their consent.
• Platform Improvements — Analysing aggregated usage data to improve the design, performance and overall experience of the laju7 platform.

All data processing is carried out on the basis of at least one valid legal ground under PDPA 2010, namely member consent, contractual necessity, legal obligation or the legitimate interests of laju7.

Laju7 does not sell, rent or disclose your personal data to third parties for marketing or commercial purposes. However, in certain limited and strictly controlled circumstances, your data may be shared with the following parties:

• Payment Processors — DuitNow, FPX, TNG eWallet, Boost and GrabPay receive the transaction data necessary to securely process your deposits and withdrawals.
• KYC Service Providers — Third parties assisting with identity verification and AML compliance receive the required documents in a controlled and secure environment.
• Game Providers — The minimum data required to run games is shared with registered game software providers operating under strict confidentiality agreements.
• Legal Authorities — laju7 will disclose your data to Malaysian authorities if required by court order, legislation or a valid official investigation.
• Cloud Services & Infrastructure — Technical infrastructure providers that store and process data operate under data processing agreements that comply with international security standards.

The security of your personal data is laju7's highest priority. We implement multiple layers of technical and organisational security controls designed to protect your data from unauthorised access, disclosure, modification or destruction.

• End-to-End Encryption — All data transmitted between your device and laju7 servers is protected with 256-bit SSL/TLS encryption. Sensitive data at rest is also encrypted using AES-256 algorithms.
• Two-Factor Authentication (2FA) — laju7 provides and encourages the use of 2FA on all accounts to add an extra layer of security during login.
• 24/7 Monitoring — Our security team monitors platform activity around the clock to detect and respond to any security threats in real time.
• Internal Access Controls — Access to member personal data within laju7's internal systems is restricted based on the principle of least privilege — only staff who require such access to perform their job duties are permitted.
• Regular Security Audits — laju7 conducts regular independent penetration testing and security audits to identify and address any system vulnerabilities.
• Incident Response Plan — We have a comprehensive incident response protocol. In the event of a data breach, affected members will be notified within the timeframe stipulated by PDPA 2010.

Laju7 uses cookies and similar tracking technologies to enhance the user experience, maintain session security and analyse overall platform usage. Cookies are small text files stored on your device when you visit the laju7 platform.

You can control and manage cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality and security of the laju7 platform. Analytics cookies can be declined without impacting your gaming experience.

As a laju7 member and data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data. laju7 is committed to respecting and facilitating the exercise of these rights.

Laju7 retains your personal data only for as long as necessary to fulfil the original purpose of its collection or to meet relevant legal obligations. The following are our data retention guidelines:

• Active Account Data — Retained for the duration the account remains active plus a minimum of seven (7) years after account closure for legal compliance purposes.
• Financial Transaction Records — Retained for a minimum of seven (7) years in accordance with the requirements of the Deposit Protection Act 2011 and Malaysia's AML requirements.
• KYC Documents — Retained for the period required by compliance obligations and a minimum of five (5) years after the business relationship ends.
• Security Logs — Retained for 90 days to enable investigation of security incidents should they occur.
• Marketing Data — Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period expires and there is no legal requirement to retain the data further, laju7 will securely delete or destroy your personal data using approved methods, ensuring it cannot be recovered or accessed again.

The laju7 platform is exclusively for individuals aged 18 and above. laju7 does not knowingly collect, store or process personal data of children or individuals under the age of 18 under any circumstances.

All prospective members are required to confirm that they are 18 years of age or older during the registration process. A rigorous KYC process further verifies this information through official identity document checks. Should laju7 find that personal data of a minor has been inadvertently collected, we will promptly delete that data and close the relevant account.

Laju7 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements or relevant technological developments. All amendments will be published on this page with a clear update date.

For material amendments — those that substantially change how we use your data — we will notify you by email or in-platform notification at least seven (7) days before the amendment takes effect. Continued use of the laju7 platform after the effective date of any amendment constitutes full acceptance of the revised Policy.

We encourage you to review this page periodically to stay informed of how laju7 protects your privacy. If you disagree with any amendments, you may contact us to discuss the matter or choose to close your account before the amendments take effect.

If you have any questions, concerns or complaints regarding how laju7 handles your personal data, you may contact our Data Protection Officer (DPO) through the following channels: