How We Handle Your Data
Six core principles that govern every data processing decision lb33 makes.
Purpose Limitation
We only collect personal data that is directly necessary to provide, secure, and improve the lb33 platform. We do not collect data speculatively or for purposes unrelated to your account and our services.
Data Security
All personal data held by lb33 is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to personal data is restricted on a strict need-to-know basis within our organisation.
No Unnecessary Sharing
lb33 does not sell, rent, or trade your personal data to third parties for marketing purposes. Data is shared only with operational partners strictly necessary to deliver our services, under binding confidentiality obligations.
Your Rights, Respected
You have the right to access, correct, and request deletion of your personal data held by lb33, subject to our legal retention obligations. Requests are handled within 30 days of receipt.
Defined Retention Periods
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account data is retained for a minimum of five years post-closure for AML compliance purposes.
Full Transparency
This Privacy Policy tells you everything you need to know about our data practices in plain language. We update it whenever our practices change and notify registered users of material changes by email.
Introduction
This Privacy Policy ("Policy") is published by lb33 ("we", "us", "our", or "the Platform") and applies to all personal data collected, processed, stored, and shared in connection with the operation of the lb33 website at https://lb33.cam, its subdomains, and all associated services, including the sportsbook, live casino, slots, and customer support functions.
This Policy applies to all registered users, prospective users, visitors, and any other individuals whose personal data lb33 processes in the course of operating its platform. By creating an account on lb33, you confirm that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.
This Policy should be read alongside lb33's Terms & Conditions and Responsible Gambling Policy, both of which form part of the overall agreement governing your use of the platform.
Note for Malaysian Users: Malaysia's Personal Data Protection Act 2010 (PDPA) establishes requirements for the processing of personal data in commercial transactions. While lb33 operates under international licensing and the PDPA does not extend extraterritorial jurisdiction to offshore operators in all circumstances, lb33 is committed to data handling standards consistent with internationally recognised privacy principles, including those reflected in the PDPA, in respect of all Malaysian user data.
Definitions
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, online identifiers, and behavioural data. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or any combination thereof, whether automated or manual. |
| "Data Controller" | lb33 — the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | A third party that processes Personal Data on lb33's behalf, under contract and subject to lb33's instructions. |
| "KYC Data" | Identity and age verification documentation submitted by you, including copies of identification documents such as your Malaysian MyKad or passport, and proof of payment method. |
| "Cookies" | Small text files placed on your device by the lb33 platform or its third-party service providers to store session information, preferences, and analytical data. |
| "Platform" | The lb33 website, mobile interface, and all associated gambling and gaming services. |
Personal Data We Collect
lb33 collects the following categories of personal data, depending on how you interact with the platform:
3.1 Registration & Account Data
- Full legal name as it appears on your government-issued identification document.
- Date of birth (used to verify that you meet the 21+ age requirement).
- Residential address, including postcode, city (e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru, Penang, Shah Alam), and country.
- Email address and contact telephone number.
- Username and encrypted password credentials.
- Language and currency preferences (MYR/RM for Malaysian users).
3.2 KYC Verification Data
- Copy of government-issued photo identification — for Malaysian users, typically your MyKad (national identity card) or a valid passport.
- Proof of payment method, such as a screenshot of your DuitNow, Touch 'n Go eWallet, or Boost account showing your registered name and account identifier, or a bank statement from Maybank, CIMB, Public Bank, or Hong Leong.
- Proof of residential address where required (utility bill, bank statement, or official government correspondence issued within the past three months).
- Source of funds declaration, where requested under anti-money laundering obligations.
3.3 Financial Transaction Data
- Deposit and withdrawal transaction records, including amounts in MYR, timestamps, and payment method identifiers.
- Payment method details — lb33 stores only masked or tokenised payment identifiers (e.g., the last four digits of a bank account number); full account numbers are not stored on lb33's systems.
- Bonus credit and wagering history.
3.4 Gambling Activity Data
- Betting history across sportsbook markets (including EPL, Liga Super Malaysia, and other markets), live casino tables, slot games, and other gaming products.
- Session duration data, login and logout timestamps, and in-session activity logs.
- Responsible gambling tool settings, including deposit limits, loss limits, session time limits, and self-exclusion records.
3.5 Technical & Device Data
- IP address and approximate geolocation derived therefrom.
- Device type, operating system, browser type and version.
- Cookie identifiers and session tokens.
- Pages visited within the lb33 platform, click-stream data, and referral source data.
3.6 Communications Data
- Records of communications between you and lb33 support, including live chat transcripts and email correspondence.
- Marketing communication preferences and opt-in/opt-out records.
How We Collect Your Data
lb33 collects personal data through the following mechanisms:
| Collection Method | Examples |
|---|---|
| Direct submission | Account registration form, KYC document upload, support contact forms, marketing preference settings. |
| Automated technical collection | Cookies, session tokens, server logs, device fingerprinting, and browser storage mechanisms activated when you access the lb33 platform. |
| Transaction processing | Data generated when you initiate deposits or withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or Hong Leong. |
| Third-party sources | Identity verification service providers used to cross-check KYC submissions; fraud prevention databases; payment processor confirmations. |
| Platform activity | Betting and gaming activity data generated as you use lb33 sportsbook, live casino, and slot products. |
Legal Basis for Processing
lb33 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual necessity: Processing required to perform our contractual obligations to you — including operating your account, processing deposits and withdrawals, and providing access to gambling and gaming products.
- Legal obligation: Processing required to comply with applicable laws, including anti-money laundering legislation, age verification obligations, and cooperation with competent authorities.
- Legitimate interests: Processing carried out to pursue our legitimate business interests — such as fraud prevention, platform security, responsible gambling monitoring, and service quality improvement — where such interests are not overridden by your privacy rights.
- Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in the context of marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
How We Use Your Personal Data
lb33 uses the personal data we collect for the following specific purposes:
6.1 Account Management & Service Delivery
To create and maintain your lb33 account; to process deposits and withdrawals in MYR via your chosen payment method; to provide access to sportsbook, live casino, and gaming products; to manage your bonus and promotional account credits; and to provide technical support.
6.2 Identity Verification & Regulatory Compliance
To verify your identity and age (21+ requirement) in accordance with our KYC obligations; to carry out anti-money laundering and counter-terrorist financing checks; to comply with reporting obligations to applicable regulatory or law enforcement authorities; and to respond to lawful requests for information from such authorities.
6.3 Fraud Prevention & Platform Security
To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, match-fixing, and other prohibited conduct as defined in our Terms & Conditions; to identify and block access from Prohibited Jurisdictions; and to monitor for technical vulnerabilities or anomalous platform activity.
6.4 Responsible Gambling
To monitor account activity for indicators of problem gambling behaviour; to enforce responsible gambling tool settings such as deposit limits, loss limits, session time controls, and self-exclusion restrictions that you have set; and to carry out mandatory intervention protocols where triggered by responsible gambling monitoring systems.
6.5 Marketing Communications
To send you promotional offers, bonus notifications, and product updates relevant to your use of lb33, where you have opted in to receive such communications. You may opt out of marketing communications at any time by contacting our support team or by using the unsubscribe mechanism included in any marketing email sent to you.
6.6 Platform Improvement
To analyse aggregated and anonymised usage data to understand how players interact with the lb33 platform; to identify technical issues; and to prioritise product development and feature improvements.
Data Sharing & Disclosure
lb33 does not sell, rent, or trade your personal data. We disclose personal data to third parties only in the following circumstances:
- Payment processors: DuitNow, FPX network banks (Maybank, CIMB, Public Bank, Hong Leong), Touch 'n Go eWallet, Boost, and GrabPay — to process deposit and withdrawal transactions. These parties receive only the minimum data necessary to complete the transaction.
- KYC and identity verification providers: Third-party services used to verify the authenticity of identity documents and cross-reference personal data against sanctions and politically exposed persons databases.
- Gaming software providers: Game studios and live dealer platform providers that supply the casino and gaming products available on lb33. These providers receive only anonymised or pseudonymised player session data necessary for game operation.
- Fraud prevention services: Third-party fraud detection and device fingerprinting services used to identify and prevent fraudulent account activity.
- Regulatory and law enforcement authorities: Where lb33 is legally required or compelled by a court order or competent regulatory authority to disclose personal data.
- Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of lb33's assets, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.
All third parties with whom lb33 shares personal data are required to maintain confidentiality obligations and to process such data only for the specified purpose for which it was shared.
Cookies & Tracking Technologies
lb33 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security cookies, load balancing. These cookies are essential to platform operation and cannot be disabled. | No — essential |
| Functional | Storing your language preference (English), currency preference (MYR), and display settings to improve your experience across sessions. | No — functional |
| Analytical | Aggregated, anonymised usage analytics to understand platform performance, identify technical errors, and prioritise improvements. | Yes — opt-in |
| Marketing | Tracking of promotional campaign effectiveness to ensure marketing spend is directed at genuinely interested audiences. lb33 does not use third-party advertising cookies for retargeting. | Yes — opt-in |
You can manage your cookie preferences at any time by contacting lb33 support. Note that disabling functional or analytical cookies may affect the performance or personalisation of certain platform features.
Data Security
lb33 implements and maintains a comprehensive information security programme to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our key security measures include:
- 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the lb33 platform.
- AES-256 encryption for personal data stored at rest in our database infrastructure.
- Strict access control policies: access to personal data within lb33's organisation is restricted to personnel who require it to perform their specific role, and is governed by role-based access controls and mandatory access logging.
- Two-factor authentication (2FA) enforcement for all lb33 staff accessing production systems containing personal data.
- Regular penetration testing of platform infrastructure by independent third-party security specialists.
- Segregated storage of KYC documents with restricted access and audit logging of all document retrieval events.
Security Incident Notification: In the event that a personal data breach occurs that is likely to result in a risk to your rights and freedoms, lb33 will notify affected users without undue delay after becoming aware of the breach, providing details of the nature of the breach and the steps we are taking to address it.
Notwithstanding our security measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own device and login credentials. If you believe your lb33 account has been compromised, contact our support team immediately via live chat.
Data Retention
lb33 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account, plus 5 years post-closure | AML legal obligation |
| KYC verification documents | Duration of account, plus 5 years post-closure | AML legal obligation |
| Financial transaction records | 7 years post-transaction | Financial record-keeping legal obligation |
| Gambling activity logs | Duration of account, plus 3 years post-closure | Responsible gambling and dispute resolution |
| Support communications | 3 years from date of communication | Legitimate interest — dispute resolution |
| Marketing preference records | Duration of account | Consent management compliance |
| Technical/device data (logs) | 13 months from collection | Security and fraud prevention |
Where personal data is no longer required for any retention purpose, it is securely deleted or irreversibly anonymised using industry-standard data destruction methods.
Your Data Rights
Subject to applicable law and certain exemptions, you hold the following rights over the personal data lb33 holds about you:
To exercise any of the above rights, please contact lb33's support team via live chat or by email at [email protected]. Please be ready to confirm your identity before we process your request. We will acknowledge your request within 5 business days and complete the request within 30 days. Where a request is complex, we may extend this period by a further 30 days with notification to you.
Limitations: Certain rights are subject to exemptions. For example, lb33 may be unable to erase personal data that it is required to retain under anti-money laundering legislation or other applicable law. Where an exemption applies, we will inform you and explain the basis for it.
Children's Privacy
The lb33 platform is strictly restricted to individuals aged 21 and above. lb33 does not knowingly collect, process, or retain personal data of any individual under the age of 21. Access to and use of the lb33 platform by persons under 21 is prohibited and constitutes a breach of our Terms & Conditions.
If lb33 becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, all wagering activity will be voided, all deposited funds will be returned to the original payment source, and all personal data associated with the account will be deleted from our systems as soon as our legal retention obligations and dispute resolution requirements permit.
If you believe that lb33 may have inadvertently collected data from a person under the age of 21, please notify us immediately via live chat or at [email protected].
International Data Transfers
lb33 operates as an international online gaming platform. Personal data collected from Malaysian users and other users may be transferred to, stored in, and processed in jurisdictions outside of Malaysia where lb33's infrastructure, data processors, or operational partners are located.
Where personal data is transferred internationally, lb33 takes steps to ensure that appropriate safeguards are in place to protect that data, including:
- Binding contractual clauses in agreements with data processors requiring equivalent data protection standards.
- Transfers only to jurisdictions with demonstrated adequate data protection frameworks, or subject to contractual data protection obligations where the destination jurisdiction does not have such a framework.
- Technical security measures (encryption in transit and at rest) applied consistently across all jurisdictions in which lb33 processes data.
Amendments to This Policy
lb33 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we process your personal data or the rights you hold — we will provide advance notice by posting a prominent notice on the lb33 platform and by sending a notification to the email address registered on your account prior to the changes taking effect.
Non-material amendments — such as clarifications of existing practices, corrections of typographical errors, or administrative updates — may be made without prior notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.
Your continued use of the lb33 platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept a material amendment, you should cease using the platform and may close your account in accordance with the Terms & Conditions.
Contact Us
If you have any questions, concerns, or requests in relation to this Privacy Policy or lb33's personal data processing practices, please contact us through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week, directly on the lb33 platform. This is the fastest channel for account-related privacy queries.
- Email: [email protected] — for formal privacy requests including data subject rights requests. We aim to acknowledge receipt within 5 business days.
When submitting a data subject rights request by email, please include your full registered name, registered email address, and a brief description of your request. We may ask you to verify your identity before processing the request.
Your Privacy Matters to lb33
We built lb33 to be a platform Malaysian players can trust — and that trust starts with how we handle your data. Questions? Our support team is available around the clock.
🔞 For players aged 21 and above only. Please gamble responsibly.