Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by Lepak7 ("Lepak7", "we", "us", "our") and applies to all personal data collected, processed, and stored in connection with the operation of the Lepak7 online gaming and sports betting platform, accessible at https://lepak7.cam ("Platform").

Lepak7 serves players across Malaysia, including Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, and Shah Alam. We are committed to protecting the privacy of all individuals who interact with our Platform and processing personal data in a lawful, fair, and transparent manner.

By registering an account, depositing funds, or using any feature of the Lepak7 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

2. Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — Any information that relates to an identified or identifiable living individual, including name, identification number, contact details, financial information, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — Lepak7, as the entity that determines the purposes and means of processing personal data.
• "Data Subject" — The individual to whom personal data relates; in the context of this Policy, this means any registered Player or visitor to the Platform.
• "Third Party" — Any entity other than Lepak7 and the Data Subject that has access to personal data in connection with the provision of services to the Platform.
• "Cookies" — Small text files stored on a user's device by a web browser that enable session management and analytics functionality.
• "KYC" — Know Your Customer; the identity and document verification process required under applicable compliance obligations.

3. Personal Data We Collect

Lepak7 collects only the personal data necessary to provide our services, meet regulatory obligations, and improve the player experience. The categories of personal data we may collect include the following:

Category	Examples	Purpose
Identity Data	Full name, date of birth, nationality, MyKad / passport number	Account registration, KYC verification, age confirmation
Contact Data	Email address, phone number, residential address	Account communication, support, verification
Financial Data	Bank account details, e-wallet identifiers, transaction history	Payment processing, fraud prevention, AML compliance
Technical Data	IP address, device type, browser type, operating system, session timestamps	Platform security, fraud detection, session management
Usage Data	Games played, betting history, deposit/withdrawal patterns, login frequency	Responsible gambling monitoring, service personalisation
Communications Data	Live chat transcripts, email correspondence, support ticket history	Customer service, dispute resolution, quality assurance
Verification Documents	Copies of MyKad, passport, proof of address, payment method screenshots	KYC compliance, withdrawal processing

Lepak7 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, genetic data, or biometric data unless expressly required by applicable KYC regulations and with your explicit consent where required.

4. How We Collect Your Data

We collect personal data through the following means:

4.1 Direct Collection

You provide personal data directly to us when you register an account, complete the KYC verification process, make deposits or withdrawals, contact our support team, respond to surveys or promotional offers, or update your account profile.

4.2 Automated Collection

When you access and use the Platform, we automatically collect technical and usage data via cookies, log files, and server-side analytics. This includes your IP address, device identifiers, browser type, pages visited, session duration, and in-platform activity patterns. This data is collected to ensure platform security, detect fraud, and monitor responsible gambling indicators.

4.3 Third-Party Sources

In certain circumstances, we may receive personal data from third-party sources, including payment service providers (such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and other Malaysian banking partners), identity verification agencies, and fraud prevention services. Such data is processed only to the extent necessary to fulfil our contractual or compliance obligations.

5. Purpose of Data Processing

Lepak7 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your Lepak7 player account, including identity verification and authentication.
• Payment Processing: Facilitating deposits and withdrawals in MYR via supported Malaysian payment methods, and maintaining accurate financial records.
• Legal & Regulatory Compliance: Fulfilling KYC, Anti-Money Laundering (AML), and Counter-Terrorism Financing (CTF) obligations as required by applicable regulations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account abuse, and other unlawful activity on the Platform.
• Responsible Gambling: Monitoring player behaviour to identify indicators of problem gambling and applying responsible gambling tools where appropriate.
• Customer Support: Responding to enquiries, resolving disputes, and improving the quality of our support services.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications. You may withdraw consent at any time.
• Platform Improvement: Analysing aggregated usage data to enhance the functionality, stability, and user experience of the Lepak7 Platform.

6. Legal Basis for Processing

Lepak7 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and financial reporting requirements.
• Legitimate Interests: Processing carried out to pursue the legitimate interests of Lepak7, including fraud prevention, platform security, and service improvement, provided such interests are not overridden by your fundamental rights.
• Consent: Processing based on your specific, informed, and freely given consent, particularly in relation to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Third Parties

Lepak7 does not sell, rent, or trade your personal data with any third party for commercial gain. We may, however, share your data with the following categories of recipients where strictly necessary:

• Payment Service Providers: Malaysian payment processors and banking partners (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and RHB) to facilitate deposits and withdrawals. These providers process your financial data solely for payment execution purposes.
• Identity Verification Agencies: Third-party KYC service providers who verify the authenticity of identification documents submitted during the account verification process.
• Fraud Prevention Services: Industry fraud detection and prevention databases used to identify and prevent unauthorised account activity, money laundering, and identity theft.
• Technology Infrastructure Providers: Cloud hosting and data infrastructure providers that support the technical operation of the Lepak7 Platform. These providers act as data processors under binding data processing agreements and may not process your data for their own purposes.
• Legal and Regulatory Authorities: Competent authorities, law enforcement agencies, or regulatory bodies where disclosure is required by law, court order, or in connection with an investigation of suspected illegal activity.

8. Data Retention

Lepak7 retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. The following general retention guidelines apply:

• Account Data: Retained for the duration of your active account plus a minimum period of five (5) years following account closure, to satisfy regulatory and AML record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years in accordance with standard financial record-keeping obligations.
• KYC Documentation: Identity documents are retained for a minimum of five (5) years following the end of the business relationship, as required under applicable anti-money laundering regulations.
• Support Communications: Customer support correspondence is retained for up to three (3) years for quality assurance and dispute resolution purposes.
• Technical / Log Data: Server logs and technical data are retained for up to twelve (12) months before automated deletion.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual.

9. Cookies & Tracking Technologies

Lepak7 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session authentication, login persistence, and security functions. These cannot be disabled without impacting core functionality.
• Analytical / Performance Cookies: Used to collect aggregated, anonymised information about how visitors interact with the Platform, enabling us to identify errors, measure performance, and improve user experience. No personally identifiable information is collected via these cookies.
• Functionality Cookies: Enable the Platform to remember your preferences, such as language settings and display configurations, to provide a more personalised experience.

Lepak7 does not use third-party advertising or retargeting cookies. You may control cookie settings through your browser. Please note that disabling certain cookies may affect the functionality of the Platform.

10. Data Security

Lepak7 implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encrypted storage of sensitive personal and financial data at rest;
• Role-based access controls ensuring that only authorised personnel can access personal data in the course of their duties;
• Regular security audits, penetration testing, and vulnerability assessments of our platform infrastructure;
• Multi-factor authentication requirements for administrative access to data systems;
• Incident response procedures for the detection, reporting, and remediation of potential data security breaches.

While Lepak7 takes all reasonable precautions to protect your data, no digital system can guarantee absolute security. If you believe your account has been compromised, please contact our support team immediately via live chat at [email protected].

11. Your Data Rights

As a Data Subject, you have the following rights in respect of your personal data held by Lepak7. To exercise any of these rights, please contact our Data Protection team at [email protected]. We will acknowledge your request within 48 hours and aim to fulfil it within 30 calendar days.

12. Children's Privacy

The Lepak7 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a minor, we will immediately suspend the associated account, delete all collected data, and void any associated transactions.

If you are a parent or guardian and believe that a minor has created an account or submitted personal data to Lepak7 without your consent, please contact us immediately at [email protected]. We will investigate and take prompt action.

13. International Data Transfers

The Lepak7 Platform is primarily operated for and directed at players based in Malaysia. In certain circumstances, your personal data may be processed by our service providers or infrastructure partners located outside of Malaysia, including in jurisdictions that may have different data protection standards to those in Malaysia.

Where such transfers occur, Lepak7 ensures that appropriate safeguards are in place to protect your personal data, including entering into binding data processing agreements with relevant third parties that impose obligations equivalent to those under this Privacy Policy. By using the Lepak7 Platform, you consent to such transfers where necessary for the provision of our services.

14. Updates to This Privacy Policy

Lepak7 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made to how we process your personal data, we will notify you by displaying a prominent notice on the Platform and, where reasonably practicable, by email to your registered address. The revised Policy will display an updated "Last Updated" date at the top of this page.

Your continued use of the Lepak7 Platform following any updates to this Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of how we protect your data.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by Lepak7, please contact our Data Protection team using the details below. Our support agents are available 24 hours a day, 7 days a week, in Bahasa Melayu, Chinese (中文), and English.

We are committed to handling all privacy-related enquiries with the utmost care and confidentiality. Your trust is the foundation of the Lepak7 platform — players across Malaysia from Kuala Lumpur to Johor Bahru rely on us to keep their data safe, and we take that responsibility seriously.