Privacy Policy

This Privacy Policy ("Policy") issued by lbor68 ("lbor68", "we", "us", "our"), the operator of the online casino and sports betting platform at https://lbor68.cam. It describes how lbor68 collects, processes, stores, shares, and protects the personal data of individuals ("you", "User", "Player") who access or use the Platform.

This Policy is incorporated by reference into the lbor68 Terms and Conditions and should be read alongside that document. By registering an account with lbor68 or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

lbor68 operates under international online gaming licensing and applies data protection standards consistent with international best practices. While lbor68 is not incorporated Malaysia, we recognise our responsibility to treat the personal data of Malaysian players with the same care and rigour we would apply under any applicable data protection framework.

For the purposes of this Privacy Policy, the following definitions apply:

lbor68 collects personal data in the following categories, depending on your level of engagement with the Platform:

We do not collect full card numbers, CVV codes, or complete bank account numbers. Payment data is handled directly by our certified payment processors (such as Touch'n Go eWallet, Boost, GrabPay, DuitNow, and FPX-connected banks) and is not stored on lbor68 servers.

lbor68 collects personal data through the following channels:

4.1 Directly From You

The majority of the personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or configure your account settings. You have control over what you provide, though certain data (such as registration details and KYC documents) is mandatory for account operation.

4.2 Automatically Through Technology

When you access the Platform, our servers automatically record technical data including your IP address, browser type, device identifiers, and session information. This data is collected via server logs and, where applicable, cookies and similar tracking technologies. See Section 8 for details on our use of cookies.

4.3 From Third-Party Service Providers

We may receive personal data from third-party providers who assist in identity verification (KYC), fraud prevention, and anti-money laundering screening. Such data is limited to what is necessary for these purposes. We may also receive data from payment service providers to confirm transaction status and prevent fraudulent payment activity.

4.4 Through Responsible Gambling Tools

Where you configure deposit limits, session reminders, or self-exclusion settings, this preference data is collected and stored to give effect to your request. Responsible gambling data is treated with particular sensitivity and accessed only by our player protection team.

lbor68 processes personal data only for specific, legitimate purposes. The following table sets out our primary processing activities and the legal basis on which each rests:

lbor68 does not engage in automated decision-making that produces legally significant effects based solely on personal data, without human oversight. Where profiling is used (e.g., responsible gambling pattern detection), appropriate safeguards are applied.

lbor68 does not sell, rent, or trade your personal data. We share personal data only in the following circumstances, and only to the extent necessary for the relevant purpose:

6.1 Payment Service Providers

To process deposits and withdrawals, we pass necessary transaction data to Malaysian payment service providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX-participating banks (Maybank, CIMB, Public Bank, Hong Leong Bank). These providers act as independent data controllers for their own processing.

6.2 KYC and Fraud Prevention Vendors

We engage certified third-party identity verification and AML screening providers. These vendors process KYC Data on our behalf as Data Processors under contractual data processing agreements, and may not use your data for any purpose other than verification.

6.3 Game and Technology Providers

Our casino game and sportsbook providers may receive anonymised session data (e.g., game activity logs) for the purpose of game operation, fairness auditing, and technical support. No directly identifiable personal data (such as your name or payment details) is shared with game providers beyond what is strictly required for game-level account management.

6.4 Legal and Regulatory Authorities

lbor68 may disclose personal data to regulatory authorities, licensing bodies, or law enforcement agencies where required by applicable law, court order, or as part of our regulatory compliance obligations. We will notify you of such disclosure where legally permitted to do so.

6.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of lbor68's business, personal data held by lbor68 may be transferred to the acquiring entity. Affected users will be notified prior to any such transfer, and the receiving entity will be required to comply with this Policy.

lbor68 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to any legal obligation to retain data for a longer period. The following general retention periods apply:

• Active account data — Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with international AML record-keeping obligations;
• KYC and identity documents — Retained for a minimum of five (5) years from the date of collection or from the date of account closure, whichever is later;
• Transaction and financial records — Retained for a minimum of five (5) years in accordance with financial record-keeping requirements under our licensing jurisdiction;
• Customer support communications — Retained for a minimum of two (2) years from the date of the last communication;
• Technical and server logs — Typically retained for 90 days, or longer where required for fraud investigation or legal proceedings;
• Marketing preferences — Retained until you withdraw consent or close your account.

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. You may request early deletion of your personal data subject to Section 10 of this Policy.

lbor68 uses cookies and similar technologies to operate and improve the Platform. The following categories of cookies are used:

8.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain your login session, remember your account preferences, ensure security tokens are active, and prevent fraudulent access. These cookies cannot be disabled without disabling the Platform itself.

8.2 Performance and Analytics Cookies

We use anonymised analytics cookies to understand how users interact with the Platform — which pages are most visited, where users drop off, and how performance can be improved. This data is aggregated and does not identify individual users. We do not use Google Analytics or other third-party advertising analytics tools that track users across external websites.

8.3 Functional Cookies

Functional cookies remember your preferences and settings (such as language preference and responsible gambling limit acknowledgements) to provide a more personalised experience when you return to the Platform.

8.4 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse all cookies or to be notified when a cookie is set. Please note that disabling strictly necessary cookies will prevent you from accessing your lbor68 account. Disabling analytics or functional cookies will not prevent Platform access but may reduce the quality of your experience.

lbor68 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• Encryption in Transit: All data transmitted between your device and the lbor68 Platform is protected by256-bit SSL/TLS encryption. Always verify the padlock icon in your browser before entering any personal information;
• Encryption at Rest: Sensitive personal data stored on lbor68 servers — including KYC documents and financial data — is encrypted at rest using industry-standard encryption algorithms;
• Access Controls: Internal access to personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit;
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts to provide an additional layer of identity verification;
• Penetration Testing: The Platform is subject to periodic penetration testing and vulnerability assessments by independent security professionals;
• Incident Response: lbor68 maintains a documented data breach response procedure. In the event of a breach that is likely to result in high risk to you, we will notify affected players without undue delay.

While lbor68 takes all reasonable precautions, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own login credentials and for promptly notifying us of any suspected unauthorised access to your account.

Subject to applicable law and our legitimate interests in maintaining accurate records and complying with regulatory obligations, you have the following rights in relation to your personal data held by lbor68:

To exercise any of the above rights, please contact our support team via live chat or by email at [email protected] (plain text — not a link). We will respond to verified requests within 30 days. Where requests are manifestly unfounded or excessive, we may charge a reasonable administrative fee or decline to act, providing reasons.

The lbor68 Platform may contain references to third-party payment services (such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, and FPX) and third-party game providers whose services are integrated into the Platform. When you interact with these third-party services, your data is processed by them in accordance with their own privacy policies.

lbor68 is not responsible for the privacy practices of third-party service providers or game providers beyond the contractual data processing agreements we maintain with them as Data Processors. We encourage you to review the privacy policies of any third-party services you interact with outside of the lbor68 Platform environment.

The lbor68 Platform is strictly for persons aged 21 years and above. lbor68 does not knowingly collect or process personal data from individuals under the age of 21. Our KYC verification process is specifically designed to enforce this age restriction at the account level.

If lbor68 discovers that personal data has been collected from a person under the age of 21, we will take immediate steps to close the account, return any real-money deposits to the originating payment method, and securely delete the minor's personal data from our systems without undue delay.

If you are a parent or guardian and believe that your child or a person under your care has registered with lbor68, please contact our support team immediately via live chat so that we can investigate and take appropriate action.

lbor68 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, legal requirements, or operational procedures. The most recent version of this Policy will always be published at https://lbor68.cam/privacy-policy, with the "Last Updated" date revised accordingly.

Where a change is material — meaning it significantly affects how we process your personal data or your rights in relation to it — we will provide advance notice by email to your registered address or through a prominent notice on the Platform, less than 14 days before the change takes effect.

Your continued use of the lbor68 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised Policy. If you do not accept the changes, you must cease using the Platform and submit a data deletion request in accordance with Section 10 of this Policy.

If you have questions, concerns, or requests relating to this Privacy Policy or lbor68's handling of your personal data, please reach out through the following channels:

• Live Chat: Available24/7 directly on the lbor68 Platform. This is the fastest method for urgent account-related privacy requests.
• Email (plain text — not a link): [email protected] — For formal data subject rights requests, please include your registered username, a description of your request, and confirmation of your identity.

We handle all privacy-related correspondence with strict confidentiality. Responses to formal data subject rights requests will be provided within 30 calendar days of receipt of a verified request. For particularly complex requests, we may extend this period by a further 30 days with prior notice.

lbor68 is committed to resolving privacy concerns promptly and transparently. If you are dissatisfied with our response, you may escalate your concern to the relevant supervisory authority in your jurisdiction.