Lorong33 Privacy Policy – Protecting Malaysian Users' Data

Lorong33 collects various categories of information to provide our Malaysian users with a secure, personalised, and high-quality service. The information we collect falls into two main categories:

Information You Provide Directly:

• Full name, date of birth, and gender collected during lorong33 account registration.
• Email address, mobile number, and residential address.
• Identity verification details such as your national identification number (MyKad) when required.
• Payment method information, including registered Malaysian bank account or e-wallet details.
• Communications you send to the Lorong33 support team, including complaints, enquiries, and feedback.

Automatically Collected Information:

• IP address, device type, operating system, and web browser used.
• In-platform activity data, including bets placed, games played, and access times.
• General location data based on IP address for security and compliance purposes.
• Cookies and similar tracking technologies that help improve your user experience.
• Server access logs used for technical troubleshooting and security purposes.

All information collected by Lorong33 is used for legitimate and specific purposes. We do not process your data beyond the scope of the purposes stated here:

Lorong33 will not use your data for any purpose beyond those stated above without first obtaining your consent. We also do not make automated decisions that affect your rights based solely on profiling without human involvement.

Lorong33 understands that your trust depends on how we handle your personal data. We only share your information under limited and legitimate circumstances:

Trusted Service Providers: Lorong33 works with select third-party service providers to support platform operations, including payment providers such as Touch 'n Go, GrabPay, DuitNow, and FPX, as well as gaming software and technology infrastructure providers. All such providers are bound by strict confidentiality agreements and are only permitted to process your data for specified purposes.

Legal Obligation: lorong33 may disclose your information to government authorities or regulatory bodies when required by Malaysian law, court order, or for the purpose of investigating fraud, money laundering, or other financial crimes.

Protection of Lorong33's Interests: In rare circumstances, we may need to disclose information to protect lorong33's legitimate interests, prevent fraud, or enforce the platform's Terms & Conditions.

Lorong33 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform usage patterns. Below are the types of cookies we use:

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect certain functions of the Lorong33 platform and your login experience.

Lorong33 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or accidental disclosure:

• Data encryption: All transmitted data is secured with 256-bit TLS/SSL encryption. Sensitive data stored in our databases is also encrypted using the latest industry standards.
• Internal access controls: Only Lorong33 staff who require access to your data in the course of their duties are permitted to do so, and such access is closely monitored.
• 24/7 security monitoring: Our systems are continuously monitored to detect and respond to any suspicious activity or security threats.
• Regular security audits: Lorong33 conducts regular security audits and penetration testing to identify and address system vulnerabilities.
• Two-factor authentication: We strongly encourage all users to enable two-factor authentication (2FA) for an added layer of security on their lorong33 account.
• Incident response procedures: Lorong33 has established incident response procedures in place. In the event of a data breach that affects you, we will notify you within the timeframe required by applicable law.

While we take all reasonable steps to protect your data, no system on the internet can be guaranteed 100% secure. We encourage you to take proactive measures as well, such as using a strong password and never sharing your login credentials with anyone.

Lorong33 retains your personal data only for as long as it is needed for the purposes outlined in this Privacy Policy or as required by Malaysian law. The following are general guidelines for our data retention periods:

• Active account data: Retained for as long as your account remains active with Lorong33.
• Financial transaction records: Retained for a minimum of 7 years after the transaction for financial and tax compliance purposes.
• Support communication logs: Retained for 3 years after the issue is resolved.
• Marketing data: Retained until you withdraw consent or close your account.
• Closed account data: Basic information is retained for 5 years after account closure for fraud prevention and legal compliance purposes.

Once the retention period has ended, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or linked back to you.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Lorong33:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: If your data is inaccurate or outdated, you have the right to request a correction at no charge.
• Right to Erasure: You may request the deletion of your personal data under certain circumstances, subject to our legal obligations.
• Right to Object to Processing: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where the processing of your data is based on your consent, you may withdraw that consent at any time.
• Right to Complain: You have the right to lodge a complaint with the relevant data protection authority if you believe your privacy rights have been violated.

To exercise any of the above rights, please contact the Lorong33 privacy team by email at support@lorong33.com. We will process your request within 21 business days and may require identity verification before carrying out any request.

The Lorong33 platform is strictly for adults aged 18 and above. Lorong33 does not knowingly collect or process personal data from anyone under the age of 18. If you believe we may have collected information from someone under 18, please contact us immediately so we can take appropriate action, including deleting the information and closing the relevant account.

Lorong33 encourages parents and guardians to monitor their children's online activities and use appropriate parental control software to prevent minors from accessing online betting platforms.

In the course of its operations, Lorong33 may transfer your personal data to servers or service providers operating outside Malaysia. Any such international data transfers are carried out in compliance with applicable legal requirements and with safeguards in place to ensure a level of data protection equivalent to Malaysian standards.

Lorong33 ensures that all data recipients outside Malaysia are bound by appropriate data transfer agreements or operate in jurisdictions that provide an adequate level of data protection. We do not transfer your data to countries or entities that fail to meet adequate data protection standards.

Lorong33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technologies used. Any material changes will be communicated to you via your registered email or through a prominent notice on the platform at least 7 days before the changes take effect.

Your continued use of the Lorong33 platform after the effective date of any amendment will be considered your acceptance of the latest version of the Privacy Policy. The most current version of this Privacy Policy is always available on this page with a clearly indicated update date.

If you have any questions, concerns, or complaints about how Lorong33 handles your personal data, or if you wish to exercise any of your privacy rights, please reach out to us through the following channels:

• Email: support@lorong33.com
• Live Chat: Available 24/7 within the Lorong33 platform

The Lorong33 privacy team will respond to your enquiry within 3–5 business days. For more complex cases such as data access or deletion requests, the processing period is up to 21 business days. We are committed to resolving every privacy enquiry thoroughly, fairly, and within the required timeframe.