lembu99 is committed to protecting the privacy and personal data of all users who access our platform. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the rights available to you as a data subject.
For the purposes of applicable data protection legislation, the data controller responsible for personal data collected through the lembu99 platform at lembu99.win is the operator of lembu99 ("lembu99", "we", "us", "our"). Any references to "you" or "your" in this Privacy Policy refer to any individual who accesses, registers on, or interacts with the lembu99 platform.
If you have any questions regarding the handling of your personal data by lembu99 or wish to exercise any of your data subject rights, please contact our Data Protection contact at support@lembu99.win.
lembu99 collects personal data from you directly and automatically in the course of providing our online casino and sportsbook services. The categories of personal data we collect are as follows:
lembu99 processes personal data only for specified, explicit, and legitimate purposes. The following table summarises the primary purposes for which we use your data:
| Purpose | Data Categories Used |
|---|---|
| Account registration & management | Registration data, identity data |
| Identity verification (KYC/AML compliance) | KYC documents, financial data, registration data |
| Processing deposits & withdrawals | Financial data, identity data |
| Delivering gaming services | Gaming activity data, technical data |
| Fraud detection & platform security | Technical data, financial data, gaming activity |
| Responsible gaming monitoring | Gaming activity, registration data, communications |
| Customer support | Communications data, account data |
| Marketing & personalised offers (with consent) | Registration data, gaming activity, communications preferences |
| Regulatory compliance & reporting | All categories as required by applicable law |
| Platform improvement & analytics | Technical data, gaming activity (aggregated/anonymised where possible) |
lembu99 processes personal data on the following legal bases under applicable data protection law:
Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
lembu99 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. We share personal data only in the following limited circumstances:
We share data with carefully selected third-party service providers who process data on our behalf under written data processing agreements. These include: game studios and platform providers (for game delivery), payment processors and e-wallet operators (for transaction processing), KYC/identity verification service providers, cloud infrastructure providers, fraud detection service providers, and customer support software providers.
lembu99 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, legal process, or where we have a good-faith belief that such disclosure is necessary to protect the rights, property, or safety of lembu99, our players, or the public.
In the event of a merger, acquisition, or sale of all or a portion of lembu99's assets, personal data held by lembu99 may be transferred to the acquiring entity as part of that transaction. Affected Players will be notified of any such transfer and any resulting change to this Privacy Policy.
lembu99 uses cookies and similar tracking technologies on the platform to ensure proper functionality, remember your preferences, analyse usage patterns, and where you have consented, to deliver relevant promotional content.
You may control cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality.
lembu99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law. The following general retention periods apply:
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.
lembu99 implements appropriate technical and organisational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:
No data transmission over the internet is entirely risk-free. While lembu99 applies industry-standard security measures, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
Subject to applicable data protection law, you have the following rights in relation to the personal data lembu99 holds about you. You may exercise any of these rights by contacting us at support@lembu99.win. We will respond to all verifiable requests within 30 days.
Request a copy of the personal data lembu99 holds about you and information about how it is processed.
Request correction of any inaccurate or incomplete personal data held in your lembu99 account.
Request deletion of your personal data where there is no longer a legitimate legal basis for retaining it.
Request that we limit the processing of your personal data in certain defined circumstances.
Request receipt of your personal data in a structured, machine-readable format for transfer to another service.
Object to processing of your data based on legitimate interests, including profiling for direct marketing purposes.
Please note that certain rights are subject to limitations — for example, we may be unable to delete data that we are legally required to retain under anti-money laundering regulations. We will explain any applicable restrictions when responding to your request.
lembu99's primary servers and operations serve the Malaysian market. Where personal data is transferred to service providers located outside Malaysia, lembu99 ensures that appropriate safeguards are in place, including contractual protections equivalent to applicable data protection standards. We do not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing compensating safeguards.
The lembu99 platform is strictly intended for adults aged 21 years and above. lembu99 does not knowingly collect, process, or retain personal data relating to any individual under the age of 21. If we become aware that personal data of an underage individual has been collected through our platform, we will immediately suspend the associated account, delete all related personal data, and report the matter in accordance with applicable requirements. If you believe a minor has registered on lembu99, please contact us immediately at support@lembu99.win.
With your consent, lembu99 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, sportsbook promotions, and other offers relevant to your lembu99 account. You may withdraw your consent to receive marketing communications at any time by:
Withdrawal of marketing consent does not affect the receipt of transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, and security alerts.
The lembu99 platform may contain references to third-party game studios or payment providers as part of the normal operation of the service. lembu99 is not responsible for the privacy practices of any third-party entities. We encourage you to review the privacy policies of any third-party service providers whose platforms you access in connection with using lembu99.
lembu99 may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or platform features. Material changes — including changes to the categories of data collected, the purposes for which data is used, or your rights as a data subject — will be communicated to registered users via email at least 14 days before the changes take effect. The current version of this Privacy Policy is always accessible at lembu99.win/privacy-policy, along with the effective date of the current version.
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by lembu99, please contact us using the following:
If you are dissatisfied with our response to a data privacy concern and believe your rights under applicable data protection law have not been adequately addressed, you may have the right to lodge a complaint with the relevant supervisory authority or data protection regulator in your jurisdiction.
Six concrete commitments — not marketing language — behind how lembu99 handles your personal information.
Every connection between your device and lembu99 is protected by TLS encryption. Your data is never transmitted in plaintext over any network.
lembu99 never stores your password in readable form. All credentials are hashed using industry-standard algorithms. Not even our staff can see your password.
lembu99 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Full stop.
We don't keep data indefinitely. Retention periods are defined, enforced, and aligned with legal requirements. Data is securely deleted after retention periods expire.
Marketing preferences can be updated at any time from your account settings. Withdrawing consent takes effect immediately with no impact on your account.
All data subject rights requests — access, rectification, erasure, portability — are acknowledged and responded to within 30 days of receipt.
Your data is protected. Your withdrawals are fast. Your games are fair. Join over 500,000 Malaysian players who trust lembu99. 21+ only. T&C apply.
Create My lembu99 Account