Ls300 Privacy Policy – Transparent & Comprehensive Personal Data Protection for Malaysian Users

1 Introduction & Scope of ls300's Privacy Policy

Ls300 ("we", "the ls300 platform", or "ls300.my") is an online entertainment platform operator committed to protecting the privacy and personal data security of all our users. This Privacy Policy applies to all individuals who register as members, visit the ls300.my website, or use any services provided by ls300, including any associated mobile applications.

This Privacy Policy has been formulated in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles. ls300 acts as the Data Processor for all personal information collected through our platform, and we take this responsibility extremely seriously.

We believe trust is the foundation of our relationship with every ls300 member. To build and maintain that trust, we are committed to being fully transparent about what data we collect, why we need it, how we use it, and who can access it. This commitment is not merely words — it is embedded in every process and system we operate at ls300.

2 Types of Personal Data Collected by ls300

Ls300 collects various categories of personal data necessary to provide and operate our platform services. All data collection is carried out on a minimum-necessity basis — we only collect what is strictly required, and nothing more.

Categories of data collected by ls300:

• Identity Information: Full name as per identification document, MyKad or passport number, date of birth, and gender.
• Contact Information: An active Malaysian mobile number, email address, and mailing address where required.
• Account Information: Your chosen username, hashed password, registration date and time, and login history.
• Financial Information: Details of payment methods used (masked bank account numbers, e-wallet numbers), deposit and withdrawal transaction history, and account balance records.
• Gaming Information: Gaming history, betting records, game results, and history of promotions used.
• Technical Information: IP address, device type and web browser, operating system, access times, and platform usage data.
• Communication Information: Records of conversations with the ls300 support team via live chat, email, or other communication channels.

3 How ls300 Collects Your Personal Data

Ls300 collects your personal data through several different channels. It is important for you to understand these data collection sources so you can make more informed decisions about how you interact with our platform.

• During Account Registration: Information you provide directly when completing the ls300 account registration form, including your name, phone number, and email address.
• During the Verification (KYC) Process: Identity documents and proof of address that you submit as part of the ls300 Know Your Customer (KYC) process, required for legal compliance and account security.
• During Financial Transactions: Information associated with every deposit and withdrawal transaction you make using DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX via Maybank2u, CIMB Clicks, or any Malaysian commercial bank that supports FPX.
• During Platform Use: Data automatically generated when you use the ls300 platform, including activity logs, cookies, and usage analytics data.
• Via Support Interactions: Information you share with the ls300 customer support team during assistance sessions or enquiries.
• From Public Sources: In certain cases involving compliance and verification, ls300 may review publicly available information for the purposes of identity verification and fraud prevention.

We never purchase data lists from third parties or collect personal data about you without your knowledge from unauthorised sources. All data collection by ls300 is transparent and based on clear consent or legal requirements.

4 How ls300 Uses Your Personal Data

Ls300 uses collected personal data solely for legitimate purposes directly related to the delivery of our platform services to you. Every data use purpose is grounded in a sound legal basis under Malaysia's PDPA.

• Account Management: Creates and manages your ls300 account, verifies your identity during login, and maintains the security of your account.
• Transaction Processing: Securely processing your deposits and withdrawals, maintaining accurate transaction records, and resolving any transaction-related disputes.
• Provision of Gaming Services: Provides access to all games on the ls300 platform, tracks game history to enable session recovery, and administers bonus and promotional programmes.
• Legal Compliance: To fulfil legal obligations under Malaysian law, including Know Your Customer (KYC) requirements, anti-money laundering (AML) compliance, and other applicable reporting obligations.
• Security & Fraud Prevention: Identifying and preventing fraudulent activity, account misuse, or security breaches that could affect other ls300 members.
• Customer Support: Providing effective assistance and support when you contact the ls300 support team, and resolving any issues or enquiries you raise.
• Platform Improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve the functionality, design, and overall experience of the ls300 platform.
• Service-Related Communications: Sending you important notifications regarding your account, changes to terms or policies, security information, and relevant ls300 promotions.

5 Data Disclosure to Third Parties

Ls300 is committed to not disclosing your personal data to third parties without your consent, except in the following limited circumstances:

• Payment Service Providers: Required transaction data is shared with authorised payment service providers — including FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay payment processors — solely to facilitate the processing of your deposit and withdrawal transactions. All such providers are bound by strict data confidentiality agreements with ls300.
• Technology Service Providers: Third-party companies that provide technical infrastructure, hosting, and security services for the ls300 platform may have limited access to data necessary for delivering those services. All such third parties are bound by strict data protection agreements.
• Auditors & Compliance Bodies: Independent auditors verifying the fairness of games and ls300's platform compliance may have access to aggregated data (not individual data) required for auditing purposes.
• Legal Requirements: ls300 may be required to disclose personal data to Malaysian government authorities or law enforcement agencies where requested via a valid court order or binding legal requirement.

In all of the above circumstances, ls300 will only disclose the minimum data necessary and will endeavour to inform you of any such disclosure where permitted by law. ls300 does not disclose your personal data to any parties beyond those specified above.

6 Security & Data Protection at ls300

Ls300 continually invests in the latest security technologies and procedures to ensure your personal data remains protected at all times. The key security measures we have implemented include:

• Encryption in Transit: All data transmitted between your device and ls300 servers is encrypted using Transport Layer Security (TLS) protocol with 256-bit SSL encryption. This ensures that your information cannot be intercepted or read while in transit.
• Storage Encryption: Sensitive data, including passwords and financial information, is stored in encrypted or masked format within ls300's systems. Passwords are never stored in plain text.
• Access Controls: Access to member personal data within ls300's internal systems is restricted to staff who genuinely require it to carry out their duties. All access is logged and monitored.
• Security Monitoring: The ls300 system is monitored continuously, 24 hours a day, to detect any suspicious activity, intrusion attempts, or other security threats.
• Periodic Audits: ls300 conducts regular security assessments and audits by independent cybersecurity experts to identify and address any vulnerabilities in our systems.
• Staff Training: All ls300 staff with access to member personal data undergo comprehensive data protection training and are bound by strict confidentiality agreements.

7 ls300 Data Retention Periods

Ls300 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by Malaysian law. The general principles we follow are:

• Active Account Data: For as long as your ls300 account remains active, we will retain all account-related data to ensure uninterrupted, quality service.
• After Account Closure: After your account is closed, ls300 will retain your transaction data and account records for a minimum of 7 years in accordance with Malaysian financial and tax legislation. Other data not required by law will be deleted or anonymised within 90 days of account closure.
• Communication Records: Customer support conversation records are retained for a maximum of 3 years from the date of interaction, for quality assurance purposes and reference in the event of a dispute.
• Technical Data (Logs): Technical logs and usage data are retained for a maximum of 12 months and are then automatically deleted or anonymised.

Once the relevant retention period has expired, ls300 will securely delete or destroy your personal data so that it cannot be recovered or accessed again.

8 Cookies, Tracking Technologies & Analytics

Ls300 uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and understand how members use our platform. Below is an explanation of the types of cookies we use:

• Essential Cookies (Required): Cookies required for the core functionality of the ls300 platform, including login session management, account security, and transaction processing. These cookies cannot be disabled without affecting the overall functionality of the platform.
• Performance & Analytics Cookies: ls300 uses anonymised analytics data to understand platform usage patterns — such as the most frequently visited pages, most popular games, and average usage duration. This data helps us improve the platform experience for all members.
• Preference Cookies: Cookies that store your preferences within the ls300 platform — such as interface language and display settings — so you do not have to reconfigure them each time you log in.
• Security Cookies: Dedicated cookies that help ls300 identify and prevent unauthorised access, bots, and fraudulent activity on the platform.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality and user experience of the ls300 platform. ls300 does not use cookies for third-party marketing or paid advertising purposes.

9 Your Personal Data Rights at ls300

As an ls300 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by our platform. ls300 is committed to facilitating the exercise of these rights without unreasonable obstacles:

• Right of Access: You have the right to request a copy of the personal data we hold about you and to obtain information on how that data is being used.
• Right to Rectification: If you believe the personal data ls300 holds about you is inaccurate or outdated, you have the right to request a correction without undue delay.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. However, this right may be limited by ls300's legal obligations to retain certain records.
• Right to Restrict Processing: Under certain circumstances, you may request ls300 to restrict the way we process your personal data.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, including marketing communications from ls300.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the validity of any processing carried out prior to the withdrawal.

To exercise any of the rights above, please contact the ls300 support team by email at [email protected] stating the right you wish to exercise and any relevant information. ls300 will respond to your request within 14 business days. In complex cases, this response period may be extended to up to 30 business days, and you will be notified in advance.

10 Children's Personal Data

The ls300 platform is strictly for adults aged 18 and above. ls300 does not knowingly collect or process personal data of individuals under 18 years of age. Should we discover that we have inadvertently collected personal data from someone under 18, we will take immediate steps to delete that data and terminate the associated account.

If you are a parent or guardian who believes that your child under 18 has registered an account on ls300, please contact us immediately at [email protected] so that we can take appropriate action without delay.

11 Links to Third-Party Content

The ls300 platform may contain links to third-party websites or services in certain contexts. ls300 wishes to make clear that this Privacy Policy applies solely to the ls300.my platform and does not cover any third-party websites or services you may access through links on our platform.

Each third-party website operates under its own privacy policy, which may differ from ls300's. ls300 is not responsible for the privacy practices, content, or security of any third-party website or service. We encourage you to read and understand the privacy policy of any website you visit before providing your personal information.

Payment service providers such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX are entities separate from ls300 and have their own privacy and data security policies. ls300 shares only the minimum data necessary with these providers to enable the processing of your transactions.

12 Privacy Policy Amendments & Contact Us

Ls300 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the technologies we use. When material changes are made to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying clear notifications within the ls300 platform about changes that have been made.
• Sending email notifications to all registered members regarding material changes.

Your continued use of the ls300 platform after any amendments to this Privacy Policy take effect will be deemed as your acceptance of the revised policy. If you do not agree with any changes, you have the right to close your ls300 account by contacting our support team.

For any questions, concerns, or requests regarding this Privacy Policy or ls300's use of your personal data, please reach out to us via:

• Email: [email protected] (response within 24–48 hours)
• Live Chat: Available 24/7 within the ls300 platform

The ls300 Malay-speaking support team is ready to help you understand your data privacy rights and address any concerns you may have in a prompt, transparent, and professional manner.