Data Protection & Privacy

LM88 Privacy Policy — Your Data, Explained Clearly

LM88 is committed to handling your personal information with care. This Privacy Policy explains exactly what data we collect from Malaysian players, how we use it, who we may share it with, and the rights you hold over your own information.

Effective date: 1 January 2026
Introduction and Scope

Why This Policy Matters

When you create an LM88 account, place a wager, make a deposit via Touch 'n Go eWallet, DuitNow, Maybank or another Malaysian payment channel, or simply browse the platform, certain personal information is generated. LM88 collects and processes that information for defined purposes — to deliver the service, process payments in MYR, protect account security, meet our responsible gambling obligations and comply with applicable requirements.

This policy applies to every LM88 service, product and channel, including casino games, live dealer tables, sports betting (EPL, Liga Super Malaysia, UFC and other markets), mobile access, promotions and customer support interactions. It also covers personal data processed in connection with payment transactions and identity verification.

We do not sell or rent personal data to third parties for their own marketing purposes. We do not knowingly collect personal information from individuals under 21 years of age. If you believe a person under 21 has registered with LM88, please contact our support team immediately.

Our Privacy Commitments

Six Principles Behind LM88 Data Handling

Every data decision at LM88 is assessed against the following principles. They are not aspirational statements — they reflect how our data practices are structured in practice.

Purpose Limitation

Personal data is collected for specified, explicit purposes. We do not use information you provided for account registration to target you with unrelated third-party commercial offers.

Data Minimisation

We collect what is necessary for the defined purpose. A payment verification check requests the details required for that check — not broader personal background information.

Security by Design

LM88 deploys TLS encryption for data in transit, access controls for data at rest and authentication requirements for internal systems handling player records.

Player Rights First

You may request access to your data, ask for corrections, request deletion in defined circumstances, or ask us to restrict processing while a concern is being reviewed.

No Data Sales

LM88 does not sell, lease or trade your personal information to third parties for their commercial benefit. Sharing with service providers is governed by data-processing agreements.

Defined Retention

Data is held for as long as required for the stated purpose, legal compliance or legitimate operational need — then deleted or anonymised according to our retention schedule.

Section 1

Definitions

"LM88", "we", "us" and "our" refer to the operator of the LM88 gaming platform and services. "Player", "you" and "your" refer to any natural person who accesses or uses LM88, whether as a registered account holder or an unregistered visitor.

"Personal data" means any information that identifies or can reasonably identify a living individual, including name, identification number, contact details, financial information, device identifiers and behavioural data generated through use of LM88.

"Processing" includes any operation performed on personal data, such as collection, storage, use, disclosure, retrieval, deletion or transfer. "Service providers" are organisations engaged by LM88 to support defined operational functions, including payment processing, KYC verification, fraud screening and technical infrastructure.

Section 2

Data We Collect

LM88 collects personal data through account registration, payment transactions, account activity and platform use. The categories and their sources are described below.

Category Examples Collected When
Identity data Full legal name, date of birth, MyKad or passport number, nationality Registration, KYC verification
Contact data Mobile number, email address, residential address in Malaysia Registration, support interactions
Financial data Bank account reference, e-wallet identifier, transaction amounts in MYR, deposit and withdrawal records Payment transactions, withdrawals
Account activity Wager history, game sessions, bonus usage, login timestamps, session duration Ongoing platform use
Technical data IP address, device type, operating system, browser version, mobile network Automatic collection on access
Communications Support chat transcripts, email exchanges, complaint records Support interactions
Verification documents MyKad photograph (front and back), selfie image, proof of address document KYC review on request
Section 3

Legal Basis for Processing

LM88 processes personal data only where a defined legal basis exists. The primary bases applicable to LM88 are:

  • Contractual performance — processing necessary to register your account, accept wagers, process deposits and pay out winnings under the player agreement.
  • Legal obligation — processing required to satisfy identity verification, anti-money-laundering, fraud prevention and responsible-gambling obligations under applicable requirements.
  • Legitimate interests — processing used for security monitoring, fraud screening, internal analysis, service improvement and responsible-gambling assessments, where your fundamental interests do not override those purposes.
  • Consent — processing for marketing communications, profiling for personalised promotions or optional cookies, where you have given clear, specific and freely given consent that can be withdrawn at any time.

Where processing is based on consent, withdrawal does not affect the lawfulness of processing that occurred before withdrawal. You may exercise your consent choices through account settings or by contacting support.

Section 4

How We Use Your Data

LM88 uses personal data for the following defined purposes:

  • Creating and maintaining your LM88 account and verifying access credentials.
  • Processing deposits and withdrawals via Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong, and via cryptocurrency methods including BTC, ETH and USDT.
  • Administering bonuses, promotions and loyalty programme benefits in accordance with applicable terms.
  • Providing customer support through live chat and email, including resolving complaints and account queries.
  • Conducting security monitoring, fraud detection and anti-money-laundering screening.
  • Assessing responsible gambling risk and applying player-protection measures including deposit limits, session monitoring and self-exclusion.
  • Improving platform performance, fixing defects and analysing aggregated usage patterns to enhance the player experience.
  • Sending service-related communications such as account notifications, security alerts and policy update notices.
  • Sending promotional communications to players who have consented to receive them, subject to an ongoing right to unsubscribe.
LM88 does not use automated individual decision-making that produces legal or similarly significant effects without providing an opportunity to request human review.
Section 5

Payment Data and Identity Verification

Financial data collected during deposits and withdrawals is used to execute the transaction, match payment records to the registered account and screen for irregular patterns. Transaction data relating to deposits made through Maybank, CIMB, Public Bank, Hong Leong, FPX or e-wallets such as Touch 'n Go eWallet and GrabPay is processed in MYR and stored in secure systems with access restricted to authorised personnel.

Before processing a first withdrawal, or where LM88 has a legitimate basis for a further check, we may request identity documents, including a MyKad or comparable government-issued identification. Verification documents are assessed for authenticity and stored for the period required by our retention schedule, after which they are deleted.

Full payment card numbers, CVV codes and complete bank account credentials are never stored by LM88. Payment processors used by LM88 operate within their own security frameworks. We retain transaction identifiers and partial account references to the extent required for reconciliation and legal compliance.

Never share your full bank login credentials, one-time passwords or payment card details with LM88 support or any other party.
Section 6

Sharing and Disclosure of Personal Data

LM88 does not sell personal data. We may share personal data with the following categories of recipient where disclosure is necessary for a defined purpose:

  • Payment processors and e-wallet operators — to execute deposit and withdrawal transactions in MYR through FPX, DuitNow and similar channels.
  • Identity verification providers — to confirm that documents submitted during KYC reviews are genuine and consistent with account information.
  • Fraud and security screening services — to identify suspicious transaction patterns, device anomalies or coordinated account behaviour.
  • Cloud infrastructure providers — to host and maintain the LM88 platform on secure servers, subject to data-processing agreements.
  • Analytics and performance providers — to analyse aggregated, pseudonymised usage data for service improvement, subject to restrictions on direct identification.
  • Regulatory or law-enforcement bodies — where disclosure is required by applicable legal obligation, court order or a legitimate request from a competent authority.

Where personal data is transferred to a service provider, we require contractual commitments from that provider concerning data security, purpose limitation and permissible sub-processing. We do not transfer personal data to a country that lacks adequate protections without applying appropriate safeguards.

Section 7

Cookies and Tracking Technologies

LM88 uses cookies and similar tracking technologies to support platform functionality and to understand how the service is used. The categories in use are:

  • Strictly necessary cookies — required for session management, authentication and security functions. These cannot be disabled without affecting the ability to access LM88.
  • Performance and analytics cookies — used to measure page load times, error rates and navigation patterns using aggregated, pseudonymised data.
  • Functional cookies — used to remember your preferences such as display settings or recently accessed game categories.
  • Marketing and profiling cookies — used, with your consent, to identify whether you have previously visited LM88 and to support relevant promotional communications.

You may configure your browser to reject or delete cookies, though doing so may affect session continuity and access to certain features. Consent for non-essential cookies may be managed through the cookie preference tool displayed on first access or through your browser settings.

Section 8

Data Retention

LM88 retains personal data for as long as the defined purpose remains active, a legal obligation requires retention, or a legitimate operational interest applies. The following general periods guide our retention practices:

  • Account registration and identity verification data: held for the duration of the account and for a defined period after closure, as required for compliance and dispute resolution.
  • Financial transaction records: retained for the period required by anti-money-laundering obligations and payment reconciliation requirements.
  • Support communications: retained for the period required to resolve disputes and for internal quality review.
  • Technical and device data: retained for a shorter period consistent with security monitoring needs.
  • Marketing consent records: retained until consent is withdrawn, after which marketing communications will cease.

When the applicable retention period ends, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised data may be retained for statistical analysis.

You may request early deletion of certain personal data where the processing has no continuing legal or legitimate basis. We will assess such requests within a reasonable time and respond in writing.
Section 9

Your Privacy Rights

Subject to applicable law and the specific circumstances of your request, you hold the following rights in relation to your personal data processed by LM88:

Right of Access

Request a copy of the personal data LM88 holds about you and information about how it is used.

Right to Rectification

Ask us to correct inaccurate personal data or complete incomplete records in your LM88 account.

Right to Erasure

Request deletion of personal data where the processing has no continuing legal or legitimate basis.

Right to Restrict

Ask LM88 to limit processing while a data accuracy concern or an objection is being reviewed.

Right to Portability

Receive your personal data in a structured, commonly used format where the processing is based on consent or contract.

Right to Object

Object to processing based on legitimate interests, including objection to direct marketing communications at any time.

Withdrawal of Consent

Withdraw consent for processing based on consent, such as marketing or optional cookies, without affecting prior lawful processing.

Automated Decision Review

Request human review of any automated decision that produces a significant effect on your account or wagers.

Rights requests should be submitted to LM88 support at [email protected] — displayed as plain text only and not a clickable link. Include your registered account username, a description of your request and, where identity confirmation is required, the information reasonably needed for us to verify your identity before acting on the request.

Section 10

Children, Minors and Under-21 Access

LM88 services are intended strictly for adults aged 21 years and above. LM88 does not knowingly collect, store or process personal data relating to individuals under the age of 21. Account registration requires confirmation of age, and identity verification may be used to confirm that a player meets the minimum age requirement.

If a parent, guardian or concerned party believes that a person under 21 has accessed or registered with LM88, they should contact our support team immediately. Upon receiving a credible report, LM88 will investigate, close the account if the concern is confirmed and delete the personal data of the minor as promptly as the circumstances permit.

LM88 is for players aged 21 and above only. Underage access is prohibited, and all reported cases will be reviewed without delay.
Section 11

Security Measures

LM88 applies technical and organisational security measures appropriate to the sensitivity of the personal data processed. These include:

  • TLS encryption for all data transmitted between your device and the LM88 platform.
  • Access controls restricting internal visibility of personal data to authorised personnel with a defined operational need.
  • Two-factor authentication options for player accounts and for LM88 internal systems handling sensitive records.
  • Regular security reviews, including testing of authentication controls and review of access logs.
  • Data-processing agreements with service providers requiring equivalent security standards.

No security control eliminates risk entirely. You are responsible for protecting your own account credentials. Use a strong, unique password, enable available authentication features, and contact LM88 support promptly if you notice unfamiliar account activity or believe your credentials have been compromised.

In the event of a personal data breach that creates a material risk to affected players, LM88 will take steps to contain the breach and communicate with affected players in accordance with applicable requirements.
Section 12

Policy Changes and How to Contact Us

This Privacy Policy may be updated from time to time to reflect changes in LM88 data practices, service features, payment arrangements, legal requirements or operational procedures. The updated policy will state the date on which it takes effect. Continued use of LM88 after that date constitutes acknowledgement of the revised policy.

For significant changes that affect the basis on which personal data is processed, LM88 will take reasonable steps to draw attention to the update, such as displaying a notice within the platform.

Privacy-related enquiries, data subject rights requests and data breach concerns may be directed to LM88 at [email protected] — displayed here as plain text only, not a clickable email link. Please include your LM88 account username and a clear description of your concern. Do not include your account password or one-time security codes in any communication.

We aim to acknowledge all privacy enquiries promptly and to provide a substantive response within a reasonable time, depending on the complexity of the request.
Your Data is Protected

Play on a Platform That Takes Privacy Seriously

LM88 is built around transparency — you know what data we hold, why we hold it and how to exercise your rights. Review additional policies, explore the FAQ or return to the LM88 homepage. Services are for players aged 21 and above only.