Privacy Policy — lambe303

This Privacy Policy ("Policy") is published by lambe303 ("Company", "We", "Us", "Our"), the operator of the online gaming platform accessible at https://lambe303.cam and all associated sub-domains and applications (collectively, the "Platform"). This Policy applies to all individuals who access, register on, or interact with the Platform, including visitors, registered Members, and VIP players.

lambe303 is committed to protecting the privacy and personal data of all users. We recognise that players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, and Shah Alam — entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy has been prepared to provide full transparency about how that data is handled at every stage of its lifecycle.

This Policy should be read in conjunction with lambe303's Terms and Conditions, which constitute the complete agreement between you and the Company governing use of the Platform. Terms not defined in this Policy carry the same meaning as defined in the Terms and Conditions.

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including but not limited to name, date of birth, national identification number, email address, phone number, financial account details, IP address, and device identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or erasure.
• "Data Controller" means lambe303, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of lambe303, including payment processors, identity verification services, and cloud infrastructure providers.
• "Member" means any individual who has successfully registered an account on the lambe303 Platform.
• "KYC Data" means identity and age verification documentation submitted by a Member to satisfy Know Your Customer obligations, including copies of government-issued identification documents and proof of address.
• "Cookies" means small text files placed on a user's device by the Platform for the purposes described in Section 10 of this Policy.

lambe303 collects Personal Data across several categories, depending on your level of interaction with the Platform. The table below summarises the categories of data collected and their primary purpose:

lambe303 does not intentionally collect any special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) unless expressly required to do so by a regulatory obligation, in which case you will be notified separately.

lambe303 collects Personal Data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or completing any other form on the Platform.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through Cookies, web beacons, and server log files. See Section 10 for full details on our Cookie Policy.
• Third-party sources: Identity and address verification data received from licensed KYC and anti-money laundering (AML) screening service providers, used to cross-verify information you provide during registration or withdrawal requests.
• Payment processors: Transaction confirmation data received from payment processors and financial institutions when you make a deposit or withdrawal using DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, 7-Eleven CLiQQ, USDT TRC20, or Bitcoin.

lambe303 processes Personal Data on the following legal bases, as applicable to each category of data and processing activity:

• Contractual necessity: Processing required to perform the contract between you and lambe303, including account registration, payment processing, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, and regulatory record-keeping duties.
• Legitimate interests: Processing carried out in pursuit of lambe303's legitimate business interests — such as fraud prevention, platform security, product improvement, and responsible gambling monitoring — where those interests are not overridden by your privacy rights.
• Consent: Where lambe303 relies on your consent as the legal basis for processing — for example, for direct marketing communications — you may withdraw that consent at any time by contacting our support team or adjusting your account communication preferences.

lambe303 processes your Personal Data for the following specific purposes:

• To create and manage your registered Member account on the Platform;
• To verify your identity and age (21+ minimum requirement) in compliance with KYC obligations;
• To process deposits and withdrawals via your chosen Malaysian payment methods, including DuitNow, Touch 'n Go eWallet, FPX bank transfers, and cryptocurrency channels;
• To detect, investigate, and prevent fraudulent activity, money laundering, and other forms of financial crime;
• To monitor your gaming activity for responsible gambling purposes, including the application of deposit limits, loss limits, session controls, and self-exclusion where applicable;
• To provide customer support in English, Bahasa Melayu, and Mandarin across Live Chat, WhatsApp, and email channels;
• To comply with the terms of lambe303's international gaming licence and all associated regulatory obligations;
• To personalise your experience on the Platform, including the display of relevant promotions, game recommendations, and notification preferences;
• To maintain the security and integrity of the Platform, including IP-based geo-restriction, session monitoring, and multi-factor authentication;
• To send you transactional and service communications, including account notifications, withdrawal confirmations, and promotional communications where you have provided consent.

lambe303 does not sell, rent, or trade your Personal Data to any third party for marketing or commercial purposes. We share Personal Data only in the following circumstances:

• Payment processors: Financial transaction data is shared with licensed payment service providers — including e-wallet operators (Touch 'n Go, Boost, GrabPay), DuitNow, FPX-connected Malaysian banks, and cryptocurrency exchange custodians — solely to facilitate your deposit and withdrawal transactions.
• KYC and AML service providers: Identity documents and verification data may be shared with licensed third-party identity verification and AML screening services engaged by lambe303 to fulfil its regulatory obligations.
• Gaming platform providers: Limited technical and account data may be shared with licensed game content providers (such as live casino and slot game studios) where necessary to provide you access to their games hosted on the Platform.
• Regulatory and law enforcement authorities: lambe303 may disclose Personal Data to regulatory bodies, gaming authorities, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by lambe303 who are bound by professional confidentiality obligations may access Personal Data in the course of their engagements.

lambe303 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. The following general retention periods apply:

• Account and registration data: Retained for the duration of the Member's active account, plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations.
• KYC documents: Retained for a minimum of seven (7) years following the date of submission, in accordance with AML regulatory requirements.
• Financial transaction records: Retained for a minimum of seven (7) years following each transaction, for regulatory audit and dispute resolution purposes.
• Customer support communications: Retained for a minimum of three (3) years following the date of the last communication, for quality assurance and dispute resolution purposes.
• Technical and usage logs: Retained for up to twelve (12) months for security analysis, fraud investigation, and platform improvement purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with lambe303's internal data management procedures.

lambe303 implements a comprehensive suite of technical and organisational security measures designed to protect Personal Data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between user devices and lambe303's servers;
• Encryption of Personal Data and financial records stored in lambe303's server infrastructure;
• Strict access controls limiting access to Personal Data to authorised personnel who require it for their job function, subject to confidentiality obligations;
• Two-factor authentication (2FA) for all administrative system access and, where enabled by Members, for player account login;
• Regular penetration testing and security audits conducted by independent third-party security specialists;
• Comprehensive incident response procedures to detect, assess, and report data breaches in accordance with applicable regulatory notification obligations.

lambe303 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. They enable us to recognise your device, maintain your session, and analyse how the Platform is used.

The following categories of cookies are used on the lambe303 Platform:

• Strictly Necessary Cookies: Required for the basic operation of the Platform, including session management, authentication, and security. These cookies cannot be disabled without impacting core Platform functionality.
• Functional Cookies: Enable personalised features such as remembering your language preference (English, Bahasa Melayu, or Mandarin), game display settings, and notification preferences.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — including pages visited, features used, and session duration — to help us identify areas for improvement.
• Security Cookies: Used to detect fraudulent activity, identify suspicious login attempts, and enforce geo-restrictions.

You may adjust your browser settings to refuse or delete certain categories of cookies; however, disabling strictly necessary cookies may prevent you from accessing key Platform features, including your account and the gaming lobby. lambe303 does not use cookies for third-party advertising or cross-site tracking.

Subject to applicable data protection law and the regulatory obligations of lambe303 as a licensed gaming operator, you have the following rights in respect of your Personal Data:

• Right of Access: You may request a copy of the Personal Data that lambe303 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected or supplemented.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, and where no legal retention obligation applies.
• Right to Restriction of Processing: You may request that lambe303 restrict the processing of your Personal Data in certain circumstances — for example, while a disputed processing activity is under review.
• Right to Data Portability: Where processing is based on consent or contractual necessity, and carried out by automated means, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to the processing of your Personal Data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to lambe303's right to demonstrate compelling grounds for the processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

The lambe303 Platform is strictly intended for use by individuals who are at least 21 years of age. lambe303 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from an individual below the minimum age, we will immediately close the associated account, delete the collected data (subject to any applicable regulatory retention requirements), and take appropriate action in accordance with our regulatory obligations.

If you believe that lambe303 has inadvertently collected Personal Data from a minor, please contact our support team immediately at [email protected] so that we may take prompt corrective action.

As a platform operating under an international gaming licence, lambe303 may transfer certain categories of Personal Data to servers, service providers, or regulatory authorities located outside of Malaysia. Such transfers occur only in the following circumstances:

• Where the transfer is necessary to provide the contracted gaming services to you as a Member;
• Where the transfer is required to comply with a regulatory or legal obligation;
• Where the recipient country or organisation provides an adequate level of data protection as determined by applicable law or binding contractual safeguards.

All international data transfers carried out by lambe303 are governed by data processing agreements that impose equivalent data protection obligations on the recipient. lambe303 does not transfer Personal Data to jurisdictions that do not offer adequate protection without first implementing appropriate safeguards, such as standard contractual clauses or binding corporate rules.

lambe303 reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, regulatory requirements, business practices, or technological developments. Material changes to this Policy will be communicated to registered Members via email notification to the address on record, or through a prominent notice on the Platform, at least seven (7) calendar days before the changes take effect.

Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and may request account closure in accordance with the Terms and Conditions. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

We encourage you to review this Policy periodically to remain informed about how lambe303 processes your Personal Data.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data subject rights as described in Section 11, please contact our Data Protection team using the details below:

For questions relating to our Terms and Conditions, responsible gambling tools, or general account management, please visit the relevant pages linked below or contact our general Customer Support team, who are available 24/7.

Terms & Conditions  ·  Responsible Gambling  ·  FAQ