At Lapak99, privacy is more than a legal obligation — it is a responsibility we take seriously towards every player. This Policy clearly sets out what we collect, why we collect it, how we use it, and your rights as a player to control your own data.
Last Updated: 1 January 2026
Lapak99 takes a comprehensive approach to data protection. These six principles shape how we handle every player's personal information.
Lapak99 only collects data that is genuinely necessary to operate your account securely, process deposit and withdrawal transactions via Touch 'n Go, DuitNow, or FPX, and comply with applicable legal obligations. We do not collect unnecessary or excessive information beyond the actual operational needs of our platform.
All data transmitted between your device and Lapak99's servers is protected by 256-bit SSL encryption — the same security technology used by leading Malaysian banks such as Maybank and CIMB. This means that even if someone were to intercept your connection, they would be unable to read its contents.
Lapak99 has never sold, rented, or shared players' personal data with any third party for marketing or commercial purposes, and never will. Your information belongs to you — it is not an asset we monetise outside the platform. This is not merely a written commitment; it is an operational policy upheld by all lapak99 staff.
Lapak99 clearly states the specific purpose for which each category of data is collected and used. No data is collected for purposes not stated in this Privacy Policy. Should we need to use your data for a new purpose, we will notify you in advance and obtain your consent where required.
As a Lapak99 player, you have the right to access your personal data held by us, request corrections to any inaccurate information, request deletion under certain circumstances, and withdraw consent for specific data uses. All requests can be submitted to our team and will be processed within 14 business days.
Lapak99 conducts comprehensive security audits on a regular basis through qualified independent parties to assess the effectiveness of our data protection measures. The findings are used to continuously improve the platform's security systems. We also monitor our infrastructure in real time to detect any intrusion attempts or unauthorised access.
This Privacy Policy ("Policy") describes how Lapak99 ("we", "Platform") collects, uses, stores, and protects your personal information when you register, access, or use our online betting platform at lapak99.my. By registering or using Lapak99, you agree to the collection and use of information as described in this Policy. This Privacy Policy is to be read together with Terms & Conditions Lapak99. In the event of any conflict, the Terms & Conditions shall prevail. Lapak99 is committed to ensuring the privacy and security of your personal information is always upheld.
Lapak99 is an online betting platform operating in Malaysia, offering slots, live casino, Sports Betting on the Malaysia Super League and EPL, sports including badminton and MLBB e-sports, and a range of other online entertainment. In running these operations, we process a certain amount of personal information about our players.
This Policy applies to all personal information collected through lapak99.my, the Lapak99 mobile application, email and live chat communications between you and our support team, and any other interactions you have with Lapak99 as a registered player.
Lapak99 takes a serious and proactive approach to privacy protection. This means we do not merely meet the minimum requirements of applicable law — we actively strive to go beyond those minimum standards to give every Malaysian player who entrusts us with their personal data the best possible protection.
Important Note: This Privacy Policy is written in Bahasa Melayu to ensure all Malaysian players can fully understand their rights and protections. If you have any questions after reading this policy, the Lapak99 support team is available to assist you via live chat 24/7.
Lapak99 collects your personal data through several means: information you provide directly when registering and using the platform, information generated automatically as you use our services, and in limited circumstances, information from third parties required to process payments.
When registering and using Lapak99, you provide us with the following information: your full name, an active Malaysian phone number (for OTP verification), a password of your choice (stored in an unreadable hashed format), your Malaysian bank account or e-wallet details for deposit and withdrawal processing (account number, account holder name), and any additional information you provide to our support team when contacting us.
When you use lapak99, our systems automatically record certain technical information needed to operate securely and efficiently. This includes your device's IP address, browser type and operating system, activity logs within the platform (bets placed, games played, session duration), general location data (state in Malaysia based on IP), and mobile device information such as model and operating system to optimise your experience.
For every deposit and withdrawal transaction, Lapak99 records the date and time of the transaction, the amount in Malaysian Ringgit (MYR), the payment method used (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX via Maybank2u or CIMB Clicks), the processing status, and the transaction reference number. This data is required for dispute resolution and compliance with financial record-keeping requirements.
| Data Category | Example | Requirements |
|---|---|---|
| Identity | Full name, phone number | Mandatory |
| Financial | Bank account number, e-wallet | Mandatory |
| Technical | IP address, device type | Automatic |
| Activity | Game logs, betting history | Automatic |
| Support | Live chat conversation records | Where relevant |
Lapak99 uses your personal data for legitimate and limited purposes only. We do not use your data for any purpose beyond the scope outlined below without notifying you first.
Your data is primarily used to operate your Lapak99 account: processing registration, verifying your identity, enabling secure account access, handling deposits via Touch 'n Go eWallet or DuitNow, processing withdrawals to your bank account or e-wallet, managing bonuses and promotions you have activated, and providing customer support whenever you reach out to us.
Lapak99 uses technical and activity data to detect and prevent fraud, money laundering, multiple account ownership, and any activity that violates Terms & Conditions ours. This is an essential safeguard to protect all players using the platform in good faith from the actions of irresponsible players.
As a legally operating platform, Lapak99 is required by law to maintain certain records and to disclose information to the relevant authorities when lawfully requested through proper legal procedures. Lapak99 will not disclose your data to authorities without proper legal procedure, except where required by law.
Aggregated usage data (not individually identifiable data) is used to understand how players use Lapak99 and to inform development decisions that improve the user experience. For example, if aggregated data shows that many players encounter difficulty at a particular step in the deposit process, we will optimise that step accordingly.
Lapak99 uses your phone number and email to send important account-related notifications, including OTP verification, updates to our terms or privacy policy, responses to complaints and enquiries, and promotional or bonus information if you have opted in. You can opt out of marketing communications at any time through your account settings.
Limited Purpose Principle: lapak99 will not use your data for any purpose other than the original purpose for which it was collected, without obtaining fresh consent from you. This is our commitment to the principle of "purpose limitation" in data protection.
Lapak99 does not sell, rent, or trade players' personal data to any party for commercial purposes. Data sharing occurs only in the limited circumstances described below, and in each case involves parties bound by strict confidentiality obligations.
To process your deposits and withdrawals, Lapak99 is required to share a minimum amount of transaction information with the relevant payment service providers — such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow operators, and banks offering FPX services via Maybank2u or CIMB Clicks. Only the minimum information necessary to complete the transaction is shared, and it remains subject to each payment provider's own privacy policy.
Slot and Live Casino game providers that partner with Lapak99 may receive minimal technical data (such as game session IDs and bet values) required to run the games and process winnings. Your full identity information is not shared with game providers.
Lapak99 will disclose player data to Malaysian authorities where required by a court order or a lawful request from the relevant authority. In such circumstances, lapak99 will notify the affected player where permitted to do so under applicable law.
In the event that Lapak99 is involved in a merger, acquisition, or transfer of business assets, player data may be transferred to the receiving entity as part of that process. Should this occur, players will be notified in advance, and the receiving entity will be bound by data protection obligations that are equivalent to or stricter than those set out in this Privacy Policy.
Warning: lapak99 will not share your data with third-party marketing companies, advertisers, or any party for commercial purposes unrelated to lapak99's services. If you receive a communication claiming to be from lapak99 through an unfamiliar channel, please contact our support team for verification.
Lapak99 continually invests in robust data security infrastructure. Data protection goes beyond encryption — it involves a layered system that safeguards your data from every possible angle.
All communications between your device and Lapak99's servers are encrypted using TLS 1.3 with 256-bit SSL encryption. This means all data transmitted — including login credentials, transaction details, and gaming activity — is fully encrypted and cannot be read by any third party that may attempt to intercept the communication. Player passwords are stored in hashed form using a secure algorithm and cannot be decrypted, even by Lapak99 staff.
Access to players' personal data within Lapak99's systems is restricted on a need-to-know basis. Only staff who require access to fulfil their job responsibilities may access player data, and all such access is automatically logged and monitored. All Lapak99 staff sign legally binding confidentiality agreements.
The Lapak99 infrastructure is monitored around the clock, 24 hours a day, 7 days a week, by automated monitoring systems designed to detect any unusual activity, intrusion attempts, or unauthorised access. Should any security threat be detected, our security team will respond immediately in accordance with established incident response procedures.
In the event of a data breach affecting players' personal information, Lapak99 is committed to notifying affected players in a timely manner and taking immediate steps to limit the impact of the breach. We will also report such incidents to the relevant authorities where required by law.
Lapak99 retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or for as long as required by applicable law, whichever is longer. We do not keep data beyond what is necessary.
For as long as your Lapak99 account remains active, we retain all account information, transaction history, and activity records. This allows you to review your gaming and transaction history at any time, and enables us to provide effective customer support should you have any questions about past account activity.
After your account is closed at your request, Lapak99 will retain financial transaction records for the minimum period required under Malaysian financial law. This data is held in a secure, restricted format and is not used for marketing or operational purposes. Data not subject to legal retention requirements will be deleted within 90 days of the account closure date.
Technical logs and platform activity data are retained for 12 months for security and technical troubleshooting purposes. After this period, the logs are automatically deleted or anonymised.
Lapak99 recognises and respects your rights over your personal data. You may exercise these rights at any time by contacting our support team, and all requests will be processed within 14 working days of receipt.
You may request a copy of all personal data Lapak99 holds about you. We will provide the data in a readable format within 14 business days.
If any personal data we hold about you is inaccurate or out of date, you have the right to request an immediate correction — for example, a misspelled name or a phone number that has since changed.
You may request the deletion of your personal data in certain circumstances, such as when the data is no longer needed for its original purpose. This right is subject to any applicable legal retention obligations.
You may request Lapak99 to temporarily restrict the processing of your data — for example, while you are disputing the accuracy of your data or while a complaint investigation is ongoing.
You may request your personal data in a machine-readable format (such as CSV) so that you can transfer it to another service should you choose to do so.
You may object to the processing of your data for specific purposes, particularly for direct marketing. Any objection to marketing will be actioned immediately without question.
How to Exercise Your Rights: To exercise any of the above rights, contact the Lapak99 support team via live chat on the platform or by email at support@lapak99.my, stating the right you wish to exercise and providing the information needed to verify your identity. All requests will be processed within 14 business days.
Lapak99 uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance user experience, and analyse usage patterns on an aggregated basis. Cookies are small text files stored in your browser when you visit lapak99.my.
You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. However, please note that blocking all cookies may affect certain features on the Lapak99 platform, particularly essential cookies required for login and session security.
Lapak99 is an online betting platform strictly for individuals aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe that someone under 18 has registered a Lapak99 account or provided us with their personal data, please contact our support team immediately.
Should we become aware that we have collected personal data from an individual under the age of 18, we will take immediate steps to close the account in question, delete all associated data, and report the incident to the relevant authorities where necessary.
Parents & Guardians: If you find that your child under the age of 18 has accessed Lapak99, please contact us immediately at support@lapak99.my to have the account closed. Lapak99 takes the protection of minors seriously and will act promptly in such cases.
In the course of platform operations, a limited amount of technical data may be processed by infrastructure service providers operating across various locations. Where your personal data is transferred outside Malaysia for processing, Lapak99 ensures that such transfers comply with applicable legal requirements and that your data is protected to a standard equivalent to or higher than the protections afforded in Malaysia.
All third-party service providers that process Lapak99 players' personal data are contractually bound to comply with strict data protection standards and are not permitted to use that data for any purpose other than what has been directed by Lapak99.
Lapak99 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, evolving legal requirements, or improvements to our services. The latest version of the Privacy Policy will always be available at lapak99.my/privacy-policy, with a clearly displayed last-updated date.
Should there be any material changes to the way we process your personal data — for example, changes to the types of data collected, the purposes of use, or player rights — lapak99 will notify active players via in-platform notifications or email at least 14 days before the changes take effect. This gives you sufficient time to review the changes and decide whether to continue using the platform.
Continued use of the Lapak99 platform after an updated Privacy Policy takes effect will be considered your acceptance of the revised Policy. If you do not agree with the changes, please stop using the platform and contact us to close your account and process any eligible balance withdrawal.
If you have any questions, concerns, or requests regarding this Privacy Policy or how Lapak99 handles your personal data, we encourage you to reach out to our team directly. We are committed to addressing all privacy-related enquiries accurately and in a timely manner.
Available 24/7 within the platform. The fastest way to raise urgent privacy enquiries. Average response time under 3 minutes from a live agent.
Support@lapak99.my — include "Privacy Enquiry" in the subject line. Responded to within 2 business days with a detailed reply.
For rights requests (data access, correction, or deletion), please have your lapak99 account number and identity verification details ready when contacting us.
Answers to the most frequently asked questions by Malaysian players about privacy and data protection at lapak99.
This Privacy Policy is to be read together with Terms & Conditions Lapak99. By registering and using the Lapak99 platform, you agree to both of these documents. If you have any questions about your privacy rights or how we handle your personal data, our support team is available via 24/7 live chat or by email at support@lapak99.my.
Your gaming activity data on Lapak99 is also used to help identify patterns that may indicate signs of problem gambling. This forms part of our commitment to responsible gaming. If our system detects any concerning patterns, our team may proactively reach out to offer support or self-control tools. The use of data for this purpose is for your benefit. For more information on self-control tools and support resources, visit the Responsible Gaming us. The Lapak99 platform is for entertainment purposes only and is intended solely for players aged 18 and above in Malaysia.