🔒 lk2 Privacy Policy – Your Data Protected Under Malaysia's PDPA 2010  |  🛡️ 256-bit SSL encryption across all transactions and account information  |  👤 lk2 does not sell or share your personal data with advertisers  |  📧 Privacy enquiries: support@lk2.click – response within 2 hours  |  ⚖️ Data access, correction, and deletion rights are available to all lk2 members  |  🔒 lk2 Privacy Policy – Your Data Protected Under Malaysia's PDPA 2010  |  🛡️ 256-bit SSL encryption across all transactions and account information  |  👤 lk2 does not sell or share your personal data with advertisers  |  📧 Privacy enquiries: support@lk2.click – response within 2 hours  |  ⚖️ Data access, correction, and deletion rights are available to all lk2 members  | 
OFFICIAL lk2 DOCUMENT – DATA PROTECTION

Lk2 Privacy Policy – Personal Data Protection for Malaysian Players

Lk2 values the privacy of every registered member. This Privacy Policy sets out in detail how lk2 collects, uses, stores and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using the lk2 platform, you agree to the privacy practices described herein.

Last Updated: 1 January 2026 Language: Bahasa Melayu Jurisdiction: Malaysia
SSL
256-bit Encryption
PDPA
Full Compliance
0
Data Sales
14 days
Request Process
lk2 Privacy Commitment Summary
Your personal data is protected by banking-grade 256-bit SSL encryption
lk2 does not sell, rent, or share your personal data with third-party advertisers
You have the right to access, correct, and request deletion of your data at any time
Data is collected solely for account operations, transaction verification, and platform security
Full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA)
Privacy requests are processed within 14 business days by the lk2 compliance team

Lk2's Six Core Privacy Protection Principles

Lk2's approach to privacy goes beyond mere legal compliance — it is a core part of our commitment to building lasting trust with every Malaysian player.

Bank-Grade Encryption

All data transmitted between your device and lk2's servers is protected by TLS 1.3 and 256-bit SSL encryption — the same technology used by Malaysia's leading banking institutions such as Maybank and CIMB. This means your login credentials, payment details, and personal data cannot be intercepted by any third party while in transit.

Full Control of Your Data, In Your Hands

Lk2 gives every member full control over their personal data. You can access all data we hold about you, correct inaccurate information, withdraw marketing consent at any time, and request deletion of your account along with all associated data. All such requests are processed within 14 business days, with no unnecessary questions asked.

No Data Sales to Advertisers

Lk2 explicitly states that members' personal data has never been and will never be sold, rented, or shared with advertising companies, data brokers, or any third party for marketing purposes. Your data is collected solely for the operation of the lk2 platform and is not used to build marketing profiles or sold to any external entity.

Malaysia PDPA Compliance

Lk2 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means every aspect of our data handling – from collection, processing and storage through to deletion – adheres to the seven data protection principles established under the PDPA. We conduct regular compliance reviews to ensure our practices remain current.

Secure & Limited Data Storage

Lk2 member personal data is stored on servers protected by multi-layered access controls, enterprise-grade firewalls and 24/7 security monitoring. lk2 applies a data minimisation principle – we only retain information that is strictly necessary for platform operations, and nothing beyond that. Data that is no longer needed is securely deleted on a defined schedule.

Immediate Data Breach Notification

In the event of any security breach affecting lk2 member personal data – however minor – lk2 is committed to notifying affected members within 72 hours of the breach being detected. The notification will include details on the nature of the breach, the data involved and the steps being taken to contain the damage and prevent recurrence.

How Your Data Is Handled at lk2

A brief overview of your personal data lifecycle, from collection through to deletion on the lk2 platform.

Collection
Data is collected only during registration, transactions, and relevant platform use. No data is collected without a clear purpose.
Protection
Data is encrypted in transit (SSL 256-bit) and stored in protected server environments with strict access controls.
Processing
Data is processed solely for account operations, identity verification, MYR transaction processing, and fraud detection.
Erasure
Data is securely deleted when it is no longer needed or upon member request, in accordance with the prescribed retention periods.

1 lk2 Privacy Policy – Introduction & Scope

Lk2, operating through the domain lk2.click, is an online sports betting and casino platform fully committed to protecting the privacy of every member who uses our services. This Privacy Policy ("Policy") transparently describes how lk2 collects, uses, stores, protects and discloses your personal data as you interact with the lk2 platform – whether via web browser, mobile device or any other communication channel.

This policy applies to all users of the lk2 platform, including registered members, unregistered visitors and any individual who contacts lk2 through customer support channels. By accessing the lk2 platform, registering an account or using any of the services provided, you confirm that you have read and understood this Privacy Policy and agree to the data handling practices described herein.

This Privacy Policy forms part of your overall agreement with lk2 and should be read together with lk2's Terms & Conditions. In the event of any conflict between this Policy and any other terms, the provisions of this Privacy Policy shall apply to all matters relating to personal data.

2 Types of Personal Data Collected by lk2

Lk2 operates on a data minimisation principle – we only collect information that is strictly necessary to provide a safe, seamless and responsible service to Malaysian players. The data collected by lk2 falls into several categories:

Identification Data:

  • Full name as stated on your identification card (MyKad) or passport
  • Malaysian identity card number or passport number
  • Date of birth (for age verification, 18 and above)
  • Gender
  • Current residential address in Malaysia

Contact Data:

  • An active Malaysian mobile number (used for OTP and service communications)
  • Email address (for account verification and notifications)

Financial Data:

  • E-wallet details used for deposits and withdrawals (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow)
  • Bank account details for withdrawals via FPX (bank account number, bank name — Maybank, CIMB, and others)
  • Deposit and withdrawal transaction history in Malaysian Ringgit (MYR)

Platform Activity Data:

  • Sports betting history, matches wagered on, and their outcomes
  • Casino game history including slots, blackjack, baccarat, and live games
  • Records of bonuses claimed and wagering requirement status
  • Deposit limits and responsible gambling options you have set

Technical Data:

  • IP address for each login session
  • Device type, operating system, and web browser used
  • Login and logout session timestamps
  • Cookie data relevant to platform functionality (see Section 9)

Lk2 never stores credit or debit card numbers in our system. All payment transactions are processed directly through licensed and recognised payment gateways in Malaysia. lk2 does not have access to your full credit or debit card number at any time.

3 How lk2 Uses Your Personal Data

Lk2 uses collected personal data for specific, legitimate and transparent purposes. Below is a complete list of the purposes for which lk2 member personal data is used:

  • Identity and eligibility verification: Ensuring every member meets the minimum age requirement of 18 years and is a valid Malaysian resident before being permitted to use the platform.
  • Account operations and management: Processing registrations, managing logins, handling password changes and maintaining accurate account records.
  • Financial Transaction Processing: Processing MYR deposits via Touch 'n Go, GrabPay, DuitNow, FPX and other methods, as well as processing winnings withdrawals to members' bank accounts or e-wallets.
  • Provision of betting and casino services: Provides access to Sports Betting markets, casino games, slots, and all other lk2 products.
  • Fraud detection and prevention: Monitoring account activity to detect suspicious behaviour, multiple account usage or any fraudulent attempts that could compromise the security of the platform and other members.
  • Legal compliance: Fulfilling legal obligations under the PDPA 2010, anti-money laundering (AML) requirements, and reporting obligations to relevant authorities where required by law.
  • Customer Service: Enabling the lk2 support team to resolve your enquiries, complaints and assistance requests effectively.
  • Service communications: Sending transaction notifications, account updates, promotional information (if you have opted in to receive them) and important notices about platform changes.
  • Platform improvements: Analysing aggregated, anonymised usage patterns to improve user experience, platform performance, and lk2's product offerings.

Lk2 does not use member personal data for any purpose outside the list above without first obtaining your explicit consent.

4 Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), lk2 processes members' personal data on one or more of the following lawful bases:

  • Contract performance: Processing required to fulfil the service agreement between you and lk2, including bet processing, financial transactions in MYR and account management.
  • Legitimate interests: Processing required for lk2's legitimate interests, such as fraud detection, platform security, and service improvement, provided those interests do not override your fundamental rights.
  • Legal compliance: Processing required under applicable Malaysian law, including AML/CFT requirements and reporting obligations to authorities.
  • Consent: For certain processing activities such as marketing communications, lk2 obtains your explicit consent, and you have the right to withdraw that consent at any time.

5 Personal Data Sharing & Disclosure

Lk2 affirms that we do not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, there are limited situations in which lk2 is required to share certain information with specific parties:

  • Technical Service Providers: Companies that provide infrastructure, server hosting, payment processing and cybersecurity services that enable lk2 to operate. All such providers are bound by strict confidentiality agreements and are only permitted to process data for purposes directed by lk2.
  • Game providers: Minimum technical details required to enable players to access games from providers such as Pragmatic Play, PG Soft, and others. These providers do not receive your full personally identifiable information.
  • Licensed payment providers: Transaction information required to process MYR deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, FPX and other licensed payment methods in Malaysia.
  • Malaysian government authorities: Where required by law or a valid court order, lk2 will disclose the necessary information to the relevant authorities.

In all cases where data is shared with third-party service providers, lk2 ensures that appropriate data processing agreements are in place and that those providers meet security standards equal to or higher than lk2's own.

6 lk2 Data Security Measures

Lk2 takes serious investment in security technologies and procedures to protect members' personal data from unauthorised access, loss, alteration, or unauthorised disclosure. Key security measures implemented by lk2 include:

  • Data encryption in transit: All communications between your device and lk2's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate. This protects your data from being intercepted during transmission over the internet.
  • Data Encryption at Rest: Sensitive data stored in lk2's databases is encrypted using AES-256, ensuring the data remains unreadable even in the event of unauthorised physical access to the servers.
  • Two-factor authentication (2FA): An OTP system via Malaysian SMS is used to verify logins and important transactions, adding an extra layer of security to your account.
  • Internal access controls: Only lk2 staff who require access to specific data to carry out their duties are permitted to view it — the principle of least privilege is strictly enforced.
  • 24/7 Security Monitoring: An intrusion detection system and anomaly monitoring operate around the clock to detect and respond to security threats promptly.
  • Regular Security Audits: lk2 conducts regular penetration testing and security audits by independent security experts to identify and address vulnerabilities before they can be exploited.

While lk2 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against every threat. You also play an important role in keeping your account safe – never share your lk2 password or OTP with anyone.

7 Personal Data Retention Period

Lk2 retains member personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law. The following are general guidelines for data retention periods at lk2:

  • Active account data: Retained for the duration of the active account period and for three years after account closure, for legal compliance purposes and the resolution of any disputes that may arise.
  • Financial transaction records: Retained for seven years in accordance with Malaysia's tax legislation and financial compliance requirements.
  • Identity verification logs: Retained for the period required under Malaysia's AML/CFT obligations, typically five to seven years.
  • Technical log data: Server logs and technical data are retained for 90 days for debugging and security purposes, then automatically deleted.
  • Customer support communications: Support conversation records are retained for two years for service quality purposes and historical case reference.

Once the defined retention period expires, data is securely deleted using methods that ensure it cannot be recovered. Upon a valid member request, the deletion process can be expedited unless there is a legal obligation that prevents it.

8 Your Rights Regarding Personal Data at lk2

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, you as a lk2 member have the following rights with respect to your personal data:

Your Rights Description How to Claim
Right of Access Obtain a copy of all personal data lk2 holds about you Email us at support@lk2.click
Right to Rectification Correct any inaccurate or incomplete information in your account Directly via account settings or email
Right to Erasure Request deletion of your personal data when it is no longer required Email us at support@lk2.click
Right to Object Object to the processing of your data for direct marketing purposes Update your notification settings
Right to Restriction Request lk2 to restrict processing of your data during a dispute investigation Email us at support@lk2.click
Right to Portability Receive your data in a reusable, portable format Email us at support@lk2.click

All requests relating to the above rights will be processed within 14 business days following identity verification by lk2's compliance team. No fee is charged for the first request within any 12-month period. For repeated requests or those requiring significant effort, lk2 reserves the right to charge a reasonable administrative fee.

To exercise any of your privacy rights, send an email to support@lk2.click with the subject line "Privacy Rights Request – [Right Type]", along with the phone number registered to your lk2 account for identity verification. Our compliance team will get back to you within 2 business days to confirm your request.

9 Cookies, Tracking & Similar Technologies

Lk2 uses cookies and similar tracking technologies to enhance the user experience, ensure smooth platform functionality, and analyse usage patterns on an aggregate basis. The following are the types of cookies used by lk2:

  • Essential cookies (required): Required for core platform functions such as maintaining your login session, saving language preferences, and ensuring session security. These cookies cannot be disabled without affecting essential platform functionality.
  • Performance & Analytics Cookies: Used to understand how players interact with the lk2 platform — including most-visited pages, time spent, errors encountered, and more. All analytics data is aggregated and does not personally identify any individual.
  • Functional cookies: Saves your personal preferences such as preferred layout, display settings, and notification choices so you don't have to reconfigure them each time you log in.
  • Security Cookies: Helps detect and prevent fraudulent activity by identifying unusual login patterns or suspicious access attempts.

You can manage cookie usage through your web browser settings. However, disabling essential cookies may affect lk2 platform functionality, including the ability to log in and make transactions. lk2 respects Do Not Track (DNT) signals sent by your browser for analytics and marketing cookies.

10 Protection of Children's Data

Lk2 strictly prohibits the use of the platform by individuals under 18 years of age. This platform is for adult entertainment only and is neither designed nor intended for use by children or minors below the stipulated age.

Lk2 does not knowingly collect or process personal data from individuals under 18 years of age. Should lk2 discover that personal data of a minor has been collected without valid parental or guardian consent, lk2 will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your underage child has registered an lk2 account, please contact us immediately at support@lk2.click. lk2 will treat such situations as a high priority and ensure all related data is permanently deleted upon verification.

11 Cross-Border Data Transfers

During normal lk2 platform operations, the personal data of Malaysian members is primarily stored and processed on servers located in jurisdictions with appropriate data protection laws. However, there are certain situations where data may need to be processed by service providers operating outside Malaysia — for example, international game providers or global technical infrastructure services.

In all cases of cross-border data transfers, lk2 ensures that:

  • The recipient country or entity has adequate data protection standards as recognised by the Personal Data Protection Commissioner of Malaysia.
  • Appropriate data transfer agreements are in place to ensure your data is protected to a standard equivalent to Malaysia's PDPA.
  • Data transfers are limited to the minimum information necessary for a specific and legitimate purpose only.

12 Amendments to the lk2 Privacy Policy

Lk2 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements or relevant technological developments. Any material amendments to this Policy will be communicated to members via:

  • In-platform notifications on lk2 displayed upon login
  • Notification emails to your registered email address
  • A prominent notice on the lk2.click homepage

Notice of changes will be provided at least 14 days before any amendment takes effect, except where immediate changes are required for security or urgent legal compliance reasons. The most recent update date is always shown at the top of this document. Your continued use of the lk2 platform after any amendment's effective date constitutes your acceptance of the updated Privacy Policy.

13 How to Contact lk2 for Privacy Inquiries

For any questions, concerns, or requests relating to this Privacy Policy or lk2's handling of your personal data, please contact our compliance and privacy team through the following channels:

  • Email: support@lk2.click (include "Privacy Inquiry" in the email subject line)
  • Live Chat: Available 24/7 within the lk2 platform after logging in

Our team is committed to responding to all privacy-related inquiries within 2 business hours for general inquiries and within 14 business days for data rights requests that require formal review and processing.

For your security, the lk2 team will never ask for your account password, full credit card number, or OTP via email or live chat. If you receive a communication claiming to be from lk2 requesting such information, please disregard it and report it to us immediately.

Your Privacy Matters — So Does Your Wellbeing

Beyond protecting your data privacy, lk2 is also committed to the wellbeing of all players. Your game history and betting activity data at lk2 are used on a limited basis to help us identify players who may need responsible gambling support – and for no other purpose. If you or someone you know needs help, please contact Talian Kasih at 15999.

FAQ – lk2 Privacy Policy

The most common questions members ask about how lk2 handles their personal data.

When you voluntarily close your lk2 account, lk2 will initiate the data deletion process according to a set schedule. Your identification data and account details will be deleted or anonymised within 30 days of confirmed account closure. However, certain data must be retained for a longer period for legal reasons — financial transaction records in MYR are kept for seven years in accordance with Malaysia's tax requirements, and identity verification logs are retained for five years in accordance with AML/CFT requirements. This data will not be used for any marketing or operational purposes after your account is closed. You may request account and data deletion by contacting support@lk2.click.

No. lk2 does not share your individual betting history – whether that involves Malaysia Super League football, BWF badminton, MPL esports, slots, blackjack or any other game – with any advertising companies, marketing agencies or third-party entities unrelated to lk2 platform operations. Your betting history is confidential information accessible only to you through your lk2 account and to lk2 staff directly responsible for processing transactions or resolving related support issues. For AML/CFT investigations, data may be shared with Malaysian authorities only where a valid legal obligation exists.

To obtain a copy of your personal data (data access right), send an email to support@lk2.click with the subject "Data Access Right Request" and include the Malaysian mobile number registered to your lk2 account. The lk2 compliance team will verify your identity via OTP to that number before processing the request. Within 14 business days, you will receive a file containing all personal data we hold about you, including account information, MYR transaction history, support communication records and relevant technical data. The data will be delivered in a secure format readable with common software. Your first request within any 12-month period is free of charge.

lk2 maintains a comprehensive Data Incident Response Plan that is activated immediately upon detection of any security breach. Within 72 hours of a breach being identified, members whose data may have been affected will be notified via email and in-platform notification – including details on the nature of the breach, the data potentially exposed and protective steps you should take, such as changing your password or monitoring your bank account transactions. lk2 will also report significant breaches to the Personal Data Protection Commissioner of Malaysia in accordance with the requirements of PDPA 2010. Following any incident, lk2 will conduct a thorough investigation and implement preventive measures to ensure it does not recur.
🔒

Privacy Guaranteed – Play on lk2 with Peace of Mind

Lk2 protects your personal data to the highest security standards. Join over 580,000 Malaysian players who already trust lk2 for Sports Betting, blackjack, slots and more – with your privacy fully guaranteed.

Platform for users aged 18 and above only. Please play responsibly. Talian Kasih: 15999.

Bahasa Melayu