Privacy Policy limau77 —
Our Commitment to Protecting Your Data

Personal data collected by limau77 used solely for the following legitimate and stated purposes:

• Account management: Creating, verifying, and maintaining your member account, including the KYC process and identity verification required by law.
• Transaction processing: Processing deposits, withdrawals, and all related financial transactions on your account securely and accurately.
• Platform security: Detecting and preventing fraudulent activity, money laundering, unauthorized access, and other security threats.
• Customer support: Answering inquiries, resolving technical issues, and providing assistance related to your account or transactions.
• Legal compliance: Meeting reporting obligations to the relevant authorities in accordance with applicable laws in our jurisdiction.
• Service communications: Sending important notifications regarding your account, policy changes, or security information you need to be aware of.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate support in line with our responsible gaming policy.

We will not use your data for any purpose beyond the scope stated above without first obtaining your additional consent.

limau77 does not sell your personal data. However, in certain limited situations, we may need to share data with select third parties to enable our platform to operate effectively:

• Payment providers: Transaction information required to process deposits and withdrawals is shared securely with our licensed payment providers, each of which maintains its own privacy and data protection policy.
• Identity verification services: KYC and financial crime record screening provider that helps us meet our AML (Anti-Money Laundering) obligations.
• Technical infrastructure providers: Cloud computing and hosting services that power our platform, bound by strict data processing agreements.
• Government authorities: Data is shared only when required by a valid court order, regulatory directive, or applicable statutory reporting obligation.

All third parties we work with are required to sign data protection agreements ensuring your data is handled to standards no less stringent than our own policies.

Platform limau77 uses cookies and similar tracking technologies to enhance the user experience, maintain secure login sessions, and understand how members interact with our platform.

• Session cookies: Required to maintain your login session while using the platform. These cookies are automatically deleted when you close your browser.
• Preference cookies: Saving your language and display preferences for a smoother experience on your next visit.
• Security cookies: Helping detect unauthorized access attempts and protecting your account from cyber threats.
• Analytics cookies: Used to understand aggregated, anonymised usage patterns for platform improvement purposes.

You can manage or disable cookies through your browser settings. Please note that disabling session cookies may affect core platform functionality, including the ability to stay logged in.

limau77 retains your personal data for as long as necessary to fulfil the purposes of collection or meet relevant legal obligations:

• Active account data: Retained for the duration your account is active and for several years after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements.
• Support communication logs: Retained for 3 years for audit purposes and resolution of any disputes that may arise.
• Technical data and system logs: Retained for 12 months for security and digital forensics purposes if required.

Once the designated retention period has ended, your data will be securely deleted or anonymised in accordance with established procedures and cannot be recovered.

In certain operational situations, your personal data may be processed or stored outside Malaysia — for example, by cloud infrastructure providers or international technical service providers that we engage.

When such a transfer takes place, limau77 ensuring it is done with adequate safeguards in place, including:

• Data processing agreements that meet or exceed the protection standards of Malaysia's PDPA.
• Use of recognized standard contractual clauses for international data transfers.
• Selecting providers based in countries or jurisdictions with recognized data protection laws.

Your data security is our absolute priority limau77. We implement multiple layers of technical and organisational controls to protect your information from unauthorised access, modification, or disclosure:

• Data encryption at rest: All sensitive data stored in our databases is encrypted using the latest encryption algorithms.
• Role-based access control: Only personnel who require access to perform their specific duties are authorised to view member data.
• Regular penetration testing: Our platform undergoes regular security testing by independent security experts to identify and address any vulnerabilities.
• 24/7 Monitoring: Automated monitoring systems operate around the clock to detect suspicious activity and security threats in real time.
• Incident response plan: We have clear procedures in place to handle any security incidents, including notification timelines for members and the relevant authorities.

limau77 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use.

When significant changes occur, we will notify you via an in-platform notification or by email to the address registered on your account, at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

The latest version of this Privacy Policy is always accessible on this page. We encourage you to review it periodically to stay informed about how we protect your information.