Privacy Policy

This Privacy Policy (the "Policy") sets out how Lambor66 — the operator of the online gaming and sports betting platform accessible at https://lambor66.cam — collects, processes, stores, and protects personal data belonging to users of the platform ("Users", "Players", "You").

Lambor66 is operated under an international gaming licence and is committed to responsible data handling practices consistent with internationally recognised data protection principles. This Policy applies to all personal data collected through the Lambor66 website, mobile interface, account registration process, payment systems, customer support channels, and any other interaction you have with the platform.

By registering an account on Lambor66, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree to the terms of this Policy, you must not use the Lambor66 platform.

For the purpose of this Policy, the following terms have the meanings set out below:

Lambor66 collects personal data through multiple touchpoints across the platform lifecycle. The categories of data collected are described below:

3.1 Registration Data

When you create a Lambor66 account, we collect: full legal name, date of birth, email address, mobile phone number, and residential address. This data is required to create and administer your account and verify your eligibility to use the platform.

3.2 KYC Identity Documents

To comply with our anti-money-laundering (AML) and Know Your Customer (KYC) obligations, we collect copies of government-issued photo identification (Malaysian MyKad, Passport, or Driver's License), proof of residential address (recent utility bill, bank statement, or telco bill), and selfie-with-ID photographs where requested.

3.3 Payment & Transaction Data

We collect data relating to deposits and withdrawals made on the platform — including payment method type (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, BTC, ETH, USDT), transaction amounts in MYR or cryptocurrency equivalent, transaction timestamps, and partially masked payment account identifiers. We do not store full card numbers or e-wallet PINs.

3.4 Gameplay & Betting Data

We record gameplay activity including games played, bet amounts, outcomes, session duration, and wagering history. This data is used for account management, dispute resolution, responsible gambling monitoring, and regulatory reporting.

3.5 Technical & Device Data

We automatically collect technical data when you access the platform, including your IP address, browser type and version, operating system, device type, screen resolution, and session timestamps. This data is used for security monitoring, fraud detection, and platform optimisation.

3.6 Communication Data

When you contact our customer support team — whether via live chat, email, or any other channel — we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

3.7 Marketing Preferences

Where you opt in to receive promotional communications from Lambor66, we collect your marketing preferences and track engagement with those communications (e.g., email open rates, click-through). You may withdraw marketing consent at any time via your account settings or by contacting support.

Lambor66 uses your personal data for the following purposes:

• Account Administration: Creating, managing, and maintaining your Lambor66 account, including processing deposits and withdrawals, applying bonuses, and managing VIP tier status.
• Identity Verification (KYC): Verifying your identity and address in compliance with our licensing authority's AML and KYC requirements before permitting withdrawals or high-value transactions.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover attempts, and other security threats through automated monitoring and human review.
• Responsible Gambling Monitoring: Monitoring gameplay patterns to identify potential problem gambling behaviour, enforcing deposit limits and self-exclusion requests, and fulfilling our duty of care obligations under our gaming licence.
• Regulatory Compliance: Meeting our legal obligations under our international gaming licence, including transaction reporting, record-keeping, and responding to lawful requests from competent regulatory and law enforcement authorities.
• Customer Support: Responding to your inquiries, resolving disputes, processing complaints, and communicating account-related updates.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the platform's functionality, game lobby, payment flow, and overall user experience.
• Marketing Communications: Where you have opted in, sending you promotional offers, bonus notifications, and platform updates. You may opt out at any time.

Lambor66 processes personal data under the following legal bases, consistent with internationally recognised data protection frameworks:

Lambor66 does not sell, rent, or trade your personal data to third parties. Data is shared only in the following limited and controlled circumstances:

• Licensed Payment Processors: Personal data necessary to process transactions is shared with licensed payment service providers — including e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), FPX-participating banks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency network facilitators — solely for the purpose of executing your deposit or withdrawal instruction.
• KYC & Identity Verification Providers: Where Lambor66 uses a third-party identity verification service to assist with KYC document review, your identity documents and verification data are shared with that provider under strict contractual data processing obligations.
• Regulatory & Licensing Authorities: We may be required to disclose personal data to our licensing authority, or to competent regulatory or law enforcement bodies, where lawfully required to do so. We will comply with all lawful disclosure obligations.
• Fraud Prevention Networks: We may share data with licensed fraud prevention and AML screening services to verify identities and screen transactions against financial crime watchlists.
• IT Infrastructure & Cloud Providers: Technical service providers supporting our platform infrastructure — including hosting, database management, and security monitoring — may process personal data on our behalf as authorised Data Processors, under contractual obligations consistent with this Policy.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of Lambor66's business, personal data held by Lambor66 may be transferred to the acquiring entity, subject to equivalent privacy protections.

The Lambor66 platform uses cookies and similar tracking technologies to maintain your session, remember your preferences, and gather anonymised performance analytics. We categorise our cookie use as follows:

You may adjust your browser settings to block or delete cookies at any time. Note that disabling essential cookies will impair the functionality of the Lambor66 platform, including the ability to log in and process transactions. Analytics cookies may be declined through your browser settings without affecting core platform functionality.

Lambor66 implements technical and organisational security measures appropriate to the risk level of the data being processed. These measures include:

• Transport Encryption: All data transmitted between your browser or device and the Lambor66 platform is encrypted using TLS 1.2 or higher (256-bit SSL). Your connection is indicated by HTTPS in the browser address bar.
• At-Rest Encryption: Sensitive personal data stored in our databases — including KYC documents and payment identifiers — is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data within Lambor66's internal systems is restricted on a need-to-know basis, with role-based access controls and audit logging of all data access events.
• Fraud Monitoring: Automated systems monitor account activity and transaction patterns in real time for signs of fraud, account takeover, and money laundering. Suspicious activity triggers manual review by our compliance team.
• Incident Response: In the event of a data breach that poses a risk to the rights and freedoms of affected users, Lambor66 will notify affected individuals and relevant authorities within the timeframes required under applicable law.

Lambor66 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following retention schedule:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data must be retained for ongoing legal proceedings or regulatory investigations, retention may be extended as required.

Subject to applicable law and any overriding regulatory obligations, you have the following rights with respect to your personal data held by Lambor66:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and your account username. Lambor66 will respond within 30 calendar days of receiving a verified request. We may require identity verification before processing a data rights request to protect against unauthorised access.

The Lambor66 platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under the age of 21. Age is verified as part of the account registration process and further confirmed during KYC verification.

If Lambor66 discovers or is notified that personal data has been collected from an individual under 21 years of age, the affected account will be immediately suspended, all data associated with that account will be reviewed, and any funds — including winnings — may be withheld pending investigation and, where appropriate, returned to the depositing payment source.

Parents or guardians who believe their child may have registered an account on Lambor66 are encouraged to contact us immediately at [email protected] so that the matter can be investigated and resolved promptly.

As an internationally licensed platform, Lambor66 may process and store personal data on servers located outside of Malaysia. Such transfers are carried out only to countries or service providers that maintain data protection standards consistent with internationally recognised frameworks, or under contractual safeguards — such as Standard Contractual Clauses — that provide equivalent protections.

Where personal data is transferred to third-party processors in other jurisdictions — such as KYC verification providers, payment processors, or cloud infrastructure providers — Lambor66 ensures that such transfers are governed by data processing agreements that require the recipient to maintain appropriate technical and organisational security measures and process data only for the specified purposes.

Lambor66 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will publish an updated version of this Policy at lambor66.cam/privacy-policy and, where practicable, notify registered users via email or a prominent notice on the platform.

The effective date at the top of this Policy indicates when the current version took effect. Your continued use of the Lambor66 platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree to the changes, you should cease using the platform and close your account before the updated Policy takes effect.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a complaint about how Lambor66 has handled your personal data, please contact us through the following channels:

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. By continuing to use the Lambor66 platform after this date, you confirm your understanding and acceptance of this Policy.