Privacy Policy lego138

Lego138 ("we", "Platform") values the privacy of every individual who uses our services. This Privacy Policy explains in detail how we collect, use, store, protect and, in certain circumstances, disclose your personal information when you register and use the lego138 platform at lego138.vin.

This policy applies to all users of the lego138 platform, including website visitors, registered members, and anyone who interacts with our services through any channel — whether via the website, mobile app, or our customer support channels.

By registering an account or using any lego138 service, you agree to be bound by this Privacy Policy. If you do not agree with any part of this policy, you are requested not to use our platform. This policy should be read together with Terms and Conditions lego138, which is the platform's comprehensive user agreement.

Lego138 reserves the right to update this Privacy Policy from time to time in line with changes in law, technology or business operations. Any significant changes will be communicated to members via email or an in-platform notice.

Lego138 collects various types of personal information from you for the purposes described in this policy. Below is a summary of the data we collect by category:

Lego138 no collecting information that is not required for platform operations. We only request data that is relevant and strictly necessary to provide you with a safe, legitimate and quality service.

Sensitive Data: During the identity verification (KYC) process, we may request a copy of your identification card or passport. These documents are used solely for age and identity verification, stored with full encryption, and not shared with any party except as required by law.

Lego138 uses collected personal data solely for legitimate and transparent purposes. The following are the primary purposes for which your data is used:

• Account Management: Creating and maintaining your member account, processing registration and ensuring secure login for every session.
• Transaction Processing: Processing deposits and withdrawals quickly and securely via multiple supported payment methods including DuitNow, FPX, Touch 'n Go eWallet and bank transfers.
• Identity Verification (KYC): Verifying your identity to meet regulatory requirements and to prevent fraud, money laundering and access by underage individuals.
• Customer Support: Handling your complaints, enquiries and requests efficiently through the lego138 support team, operating 24 hours a day.
• Platform Improvements: Analysing usage patterns and feedback to improve the user experience, platform performance and game offerings.
• Marketing Communications: Keeping you informed about promotions, bonuses and platform updates — only with your consent. You may unsubscribe at any time.
• Legal Compliance: Meeting legal, regulatory and relevant authority requirements whenever necessary.
• Fraud Detection: Detecting and preventing fraudulent activity, multi-account usage, money laundering and other security violations to protect all platform members.

Lego138 will not use your data for purposes unrelated to platform operations without first obtaining your explicit consent. Every use of data is based on a valid legal basis — whether consent, contractual necessity, legitimate interest or legal obligation.

Lego138 does not sell, rent or disclose your personal data to third parties for commercial purposes. However, under certain limited circumstances, we may share your information with the following parties:

• Payment Service Providers: Information required to process your financial transactions is shared with licensed payment providers such as banks and digital wallet operators. They are bound by strict confidentiality obligations.
• Game Providers: Limited game data is shared with third-party game software providers solely for the purpose of operating games and ensuring result integrity. No personally identifiable information is shared beyond technical requirements.
• Technical Service Providers: Companies that assist with server hosting, data processing, analytics and cybersecurity — all bound by strict data protection agreements with lego138.
• Lawful Authorities: lego138 will disclose required information to government authorities, regulatory bodies or law enforcement agencies when mandated by Malaysian law or a valid court order.

The privacy and security of your personal data is lego138's top priority. We implement multiple layers of technical and organisational security measures to protect your data from unauthorised access, loss, misuse or accidental disclosure.

• 256-bit SSL Encryption: All communications between your device and lego138 servers are encrypted using 256-bit TLS/SSL protocol. This ensures that data transmitted cannot be intercepted or read by unauthorized parties.
• Secure Password Storage: Your account password is not stored in plain text. We use a strong hashing algorithm with salt to ensure your password remains secure even in the event of an unexpected data breach.
• 24/7 Monitoring: The lego138 cybersecurity team monitors our systems around the clock to detect and respond to any threats or suspicious activity immediately.
• Two-Factor Authentication (2FA): lego138 supports two-factor authentication to add an extra layer of security to your account. You are encouraged to enable this feature through your account settings.
• Regular Security Audits: lego138 undergoes regular security audits and penetration testing by independent cybersecurity firms to ensure our systems remain secure and up to date.
• Internal Access Controls: Only lego138 staff with a legitimate business need are permitted to access members' personal data. All access is logged and audited on a regular basis.

Lego138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

The following are the types of cookies used by lego138:

• Essential Cookies: Required for core platform functions such as login session verification, security, and navigation. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helping us understand how members interact with the platform — which pages are most popular, how long sessions last and where users encounter issues — for continuous improvement purposes.
• Functional Cookies: Saving your preferences such as language, display settings and other choices so you do not need to reconfigure them each time you use the platform.
• Analytics Cookies: Used alongside audited third-party analytics tools to help us understand usage trends in aggregate and anonymised form for product improvement purposes.

You can manage or delete cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality and user experience of the lego138 platform. For guidance on managing cookies in popular browsers, please refer to your browser's help documentation.

In accordance with Malaysia's Personal Data Protection Act (PDPA) and applicable data protection legislation, you have the following rights regarding your personal data held by lego138:

• Right of Access: You have the right to request a copy of the personal data we hold about you. This request can be submitted through the lego138 customer support channel.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request an immediate correction. You may also update basic profile information yourself through your account settings.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. Please note that this right may be limited by legal obligations such as financial record-keeping requirements.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances, such as when you are disputing the accuracy of that data.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may unsubscribe from marketing communications via the unsubscribe link in any promotional email.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format and transfer it to another data controller, to the extent technically feasible.

To submit any request related to your privacy rights, please contact the lego138 support team via live chat or our support email. We will process your request within 30 business days of receipt, or sooner where possible.

Lego138 retains your personal data for as long as your account is active or as long as it is needed to provide services to you. Upon account closure, we may still retain your data for a specified period to fulfill the following legal obligations:

• Financial & Transaction Records: Retained for a minimum of 7 years in line with Malaysia's tax and accounting legal requirements and anti-money laundering regulations.
• KYC & Identity Verification Records: Retained for a minimum of 5 years after account closure to comply with regulatory requirements related to identity verification.
• Security & Activity Logs: Retained for 2 years for security investigation, fraud detection, and system integrity monitoring purposes.
• Support Communication Records: Retained for 3 years for customer support reference and the resolution of any disputes that may arise.

Once the mandatory retention period has expired, your personal data will be securely deleted or anonymised so that you can no longer be identified from it. lego138 implements a regular data deletion schedule as part of its responsible data management practices.

Lego138 is a gaming platform restricted to users aged 18 and above. We do not knowingly collect personal data from minors. All registering users are required to confirm that they meet the minimum age requirement.

Lego138 employs various technical measures and verification procedures to prevent access by underage individuals, including age verification during registration and thorough KYC checks. If we discover or suspect that personal data of a minor has been collected without our knowledge, we will immediately take action to delete that data and close the account in question.

If you believe a minor has registered an account at lego138, please contact our support team immediately so that appropriate action can be taken without delay.

Lego138 takes every privacy inquiry, concern and complaint seriously. If you have any questions about this Privacy Policy, how we handle your personal data, or wish to submit a privacy rights request, we are here to help.

You can reach us via:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the lego138 platform.
• Support Email: [email protected] — we will respond within 24 hours on business days.

For general inquiries about our platform, you may also refer to our FAQ ours. For information on your rights and responsibilities as a member, please refer to Terms and Conditions ours. To play safely and responsibly, visit our Responsible Gaming ours.

Lego138 is committed to addressing all privacy inquiries promptly, transparently and professionally. Your trust in us is a responsibility we take seriously.