Malaysia PDPA SSL 256-bit Updated 2026

Privacy Policy lagu2 — Our Commitment to Protecting the Personal Data of Every Malaysian Player

Lagu2 genuinely respects the privacy of every Malaysian player. This document transparently sets out how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last Updated: 1 January 2026
Privacy Policy Summary
Legal FrameworkMalaysia PDPA 2010
Data EncryptionSSL 256-bit
Sale of Data to Third PartiesNever
Data Retention Period5 Years
Right to Data AccessAvailable
Right to Data DeletionAvailable
Privacy Email[email protected]

Lagu2's Six Data Protection Principles

How lagu2 protects the privacy of Malaysian players — built on six non-negotiable pillars.

Bank-Grade Encryption

All data transmitted between your device and lagu2's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions. This ensures that your login credentials, personal data and transaction details remain inaccessible to unauthorised parties.

Strict Access Controls

Only lagu2 staff with a legitimate business need are permitted to access players' personal data, and all such access is logged and continuously monitored. Our layered authorisation system ensures that no unauthorised access — whether internal or external — can occur within the lagu2 organisation.

Full Transparency

Lagu2 is committed to being transparent with players about what data we collect, why it is collected and how it is used. We do not collect data beyond what is necessary to provide the services you use, and we never sell personal data to third parties for commercial purposes.

Malaysia PDPA Compliance

All of lagu2's personal data management practices are designed and implemented in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular internal compliance audits and keep our policies up to date whenever relevant laws change.

Player Rights Guaranteed

Every lagu2 player has the full right to access, correct, download, and request the deletion of their personal data at any time. Such requests will be processed within 14 business days of receipt, subject to applicable legal data retention obligations.

Marketing Controls

Lagu2 will not send marketing communications without your explicit consent. You may choose to receive or opt out of any form of promotional communications during registration, and can update this preference at any time via your account settings or by contacting the lagu2 team directly.

What Data Does lagu2 Collect?

Lagu2 only collects data that is strictly necessary to provide a safe and enjoyable service to Malaysian players.

👤
Identity Information
Username, Malaysian mobile number and date of birth for age verification.
💳
Transaction Data
Deposit and withdrawal records in RM, and payment methods used.
🎮
Gaming Activity
Game history, bets, winnings, and session statistics for security purposes.
📱
Device Data
Device type, operating system, and browser version for experience optimisation.
🌐
Technical Data
IP address, access logs and session information for security and fraud prevention purposes.
🍪
Cookies & Analytics
Anonymised website usage data for lagu2 platform improvement.
🔒

lagu2's Commitment: Your privacy is not merely a legal obligation for us — it is a core value we have upheld since the very first day lagu2 began operating. We understand that you entrust us with sensitive personal information, and we honour that trust with the fullest sense of responsibility. This document is written in plain language so that every Malaysian player can clearly understand their rights.

1

Introduction & Scope of This Privacy Policy

This Privacy Policy is an official lagu2 document that explains how we manage the personal data of players using our platform at https://lagu2.my. It has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and forms part of the overall agreement between lagu2 and each registered player.

When you register a lagu2 account, make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow or any other supported Malaysian payment method, play slots or Live Casino games on our platform, or simply browse the lagu2 website, you are giving us your consent to process your personal data in accordance with this Privacy Policy.

Lagu2 acts as the Data Controller and is fully responsible for how Malaysian players' personal data is managed within our platform. If you have any questions or concerns regarding this Privacy Policy, you may contact lagu2's Privacy Officer by email at [email protected] at any time.

This Privacy Policy applies to all users of the lagu2 platform, including registered players, unregistered website visitors, and any party that interacts with lagu2 through any of our official communication channels. Continued use of the lagu2 platform following any update to this Privacy Policy constitutes acceptance of the revised terms.

2

Personal Data Collected by lagu2

Lagu2 follows a data minimisation principle — we only collect data that is strictly necessary for legitimate purposes and do not collect beyond those needs. Below are the categories of personal data that lagu2 may collect from Malaysian players:

Data you provide directly to lagu2:

  • Registration information: A valid Malaysian mobile number, preferred username, password (stored as an irreversible hash) and date of birth for minimum age verification of 18 years.
  • Identity verification documents (KYC): A copy of your MyKad or passport, proof of address such as a utility bill or Malaysian bank statement, and any other supporting documents requested to meet legal compliance requirements.
  • Financial information: Details of the payment methods used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX), Malaysian bank account numbers for withdrawal purposes, and transaction records in RM.
  • Communications: The content of messages you send to the lagu2 support team via live chat or email, including complaints, enquiries, and feedback.

Data collected automatically during use of the lagu2 platform:

  • IP address, approximate geographic location (city level only, not precise location), device type, operating system and web browser version.
  • Gaming activity history, including games played, bets in RM, winnings, session duration, and play patterns — used for security and responsible gaming purposes.
  • Platform access and activity logs for fraud detection and account security.
  • Cookie data and similar tracking technologies to improve the user experience and lagu2 platform analytics.
3

How lagu2 Uses Your Personal Data

Lagu2 processes personal data of Malaysian players only for lawful, necessary, and relevant purposes in connection with the provision of our platform services. We will not use your data for any purpose not stated in this Privacy Policy without first obtaining your additional consent.

Primary purposes for which personal data is used at lagu2:

  • Account management: To create, verify, and manage your player account at lagu2, including identity and age verification.
  • Transaction processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and to process winnings withdrawals in MYR to your Malaysian bank account or digital wallet.
  • Gaming service provision: To allow you to access and play all games available on lagu2, save your game progress and statistics, and manage bonus and promotion programmes.
  • Security and fraud prevention: To monitor account activity for the detection and prevention of fraud, money laundering, multi-account usage, and any activity that violates lagu2's Terms & Conditions.
  • Responsible gaming: To monitor gameplay patterns and provide early assistance to players who may be showing signs of problem gambling, in line with lagu2's commitment to responsible gaming.
  • Service communications: To send important information relating to your account, transactions, policy updates, and security notifications required for the operation of your account.
  • Legal compliance: To fulfil lagu2's obligations under applicable Malaysian laws, including financial reporting requirements and lawful requests from authorised authorities.
  • Platform improvement: To analyse platform usage in aggregate and anonymised form in order to identify improvement opportunities that make the lagu2 playing experience better over time.

Marketing Note: lagu2 will only use your data for marketing communications if you have given explicit consent at the time of registration or at a later date. You may withdraw this marketing consent at any time without affecting your ability to use lagu2's services.

4

Data Sharing with Third Parties

Lagu2 does not sell, rent or trade players' personal data to any third party for their own commercial purposes — this is an absolute, non-negotiable principle in lagu2's operations. However, there are limited circumstances in which lagu2 needs to share personal data with certain parties for legitimate operational purposes:

lagu2's appointed service providers:

  • Payment providers: To process deposit and withdrawal transactions, lagu2 is required to share minimal transaction information with payment service providers such as Touch 'n Go eWallet, GrabPay, DuitNow and FPX gateways. All such providers are bound by strict confidentiality and data protection agreements.
  • Gaming software providers: Game providers supplying video slots, Live Casino and other games on the lagu2 platform may receive minimal, anonymised gameplay statistics for their own technical operational purposes.
  • Security and anti-fraud services: lagu2 uses specialised third-party services to detect and prevent fraud. Data shared is limited to the technical information necessary for this purpose.
  • Hosting and infrastructure services: Cloud and server infrastructure providers that host the lagu2 platform, all bound by strict confidentiality agreements.

Disclosures required by law:

  • Lagu2 will disclose personal data to the relevant Malaysian authorities when required by a court order, search warrant or official request from a competent law enforcement agency.
  • In the context of investigations involving financial fraud, money laundering, or online crime, lagu2 will cooperate fully with the relevant Malaysian authorities in accordance with proper legal procedures.

In all of the data-sharing scenarios above, lagu2 ensures that only the minimum necessary data is shared, and that all recipients are bound by confidentiality and data protection obligations that are equivalent to or stricter than those practised by lagu2 itself.

5

Data Storage & Security Measures

Lagu2 retains players' personal data for as long as necessary for the purposes set out in this Privacy Policy, or to fulfil applicable legal obligations. Financial transaction records are typically retained for 5 years from the date of the transaction in accordance with Malaysian legal requirements. Active account data is retained for the duration of the active account and for up to 2 years after account closure.

lagu2's technical and organisational security measures:

  • Encryption in transit: All communications between your browser and lagu2's servers are protected by 256-bit TLS/SSL encryption.
  • Encryption at rest: Sensitive data, including passwords (in hashed form) and identity verification documents, are stored in encrypted form on lagu2's servers.
  • Layered access controls: A role-based access management system ensures that lagu2 staff can only access data relevant to their job responsibilities.
  • Continuous monitoring: lagu2's security monitoring system operates 24/7 to detect any suspicious activity or unauthorised access attempts.
  • Regular security audits: lagu2 conducts regular internal security assessments and independent audits to identify and address potential security vulnerabilities.
  • Data breach procedure: lagu2 has a comprehensive incident response procedure in place. In the event of a data breach affecting players' personal data, we will notify the affected players and the relevant authorities within the timeframe stipulated by law.

While lagu2 implements comprehensive security measures, no security system can guarantee 100% protection under all circumstances. We encourage players to take their own protective steps as well, such as using a strong, unique password for their lagu2 account and never sharing their login credentials with anyone.

6

Cookie Policy & Tracking Technologies

Lagu2 uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and analyse website usage on an aggregate basis. Cookies are small text files stored on your device when you browse the lagu2 website.

You can manage your cookie settings through your web browser settings. Please note, however, that disabling essential cookies may affect the functionality of the lagu2 platform, including your ability to log in and play. For non-essential cookies, you can manage your preferences via the cookie settings panel available on the lagu2 website or directly through your browser settings.

7

Players' Rights Regarding Personal Data

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), every lagu2 player has the following rights regarding their personal data. lagu2 is committed to facilitating the exercise of these rights promptly and without unnecessary difficulty.

Right of Access
You have the right to obtain a copy of all personal data that lagu2 holds about you. This request can be submitted by emailing [email protected] and will be processed within 14 business days.
Right to Rectification
If your personal data at lagu2 is inaccurate or out of date, you have the right to request a correction at no charge. For basic account information, you can update it directly through your lagu2 account settings.
Right to Erasure
You have the right to request the deletion of your personal data from lagu2's systems, subject to applicable legal data retention obligations. Deletion requests will be processed following confirmed account closure.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time. Simply contact the lagu2 team via email or live chat to update your communication preferences.
Right to Portability
You have the right to receive your personal data in a structured, machine-readable format. Contact [email protected] to request an export of your personal data from the lagu2 platform.
Right to Restriction
In certain circumstances, such as during a dispute over data accuracy, you have the right to request a restriction on the processing of your personal data while the matter is being resolved by lagu2.

To exercise any of the rights above, submit a written request to lagu2's Privacy Officer at [email protected] with a clear subject line stating the right you wish to exercise, along with your account details for identity verification. lagu2 will acknowledge receipt of your request within 3 business days and resolve it within 14 business days.

8

Children's Data Protection

Lagu2 is an entertainment platform for adults aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18. The lagu2 registration process requires date-of-birth verification, and we employ multiple measures to prevent underage sign-ups.

Should lagu2 discover that we have inadvertently collected personal data from an individual under the age of 18, we will immediately take the following steps: close the account in question without delay, delete all associated personal data from our systems, and refund any deposits that have been made.

If you suspect that someone under the age of 18 is using or has registered on lagu2, please report it to us immediately by emailing [email protected]. lagu2 takes the protection of minors from gambling extremely seriously and will act swiftly on any such report.

9

Links to Third-Party Websites

The lagu2 website may contain links to third-party websites or services that are not operated by lagu2. This Privacy Policy does not apply to those third-party websites or services. lagu2 is not responsible for the privacy practices or content of any third-party websites that may be displayed on or linked from our platform.

We encourage players to read and understand the privacy policy of every website they visit outside the lagu2 platform. Use of third-party websites is entirely at the player's own risk and responsibility.

10

Changes to This Privacy Policy

Lagu2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements. All changes will be published on this page with an updated date and revised version number.

For material and significant changes to the way we process your personal data, lagu2 will provide advance notice via your registered email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the changes and decide whether to continue using the lagu2 platform.

We encourage players to review this Privacy Policy periodically, especially when you receive a change notice from lagu2, to stay informed about how we protect your privacy.

11

Contact lagu2's Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how lagu2 handles your personal data, please contact our Privacy Officer, who has been specifically appointed to manage all matters relating to personal data protection:

  • Privacy Email: [email protected] — For all enquiries and requests relating to privacy rights and personal data.
  • General Support Email: [email protected] — For general enquiries about the lagu2 platform.
  • Live Chat: Available 24/7 within the lagu2 platform for immediate queries.
  • Service Languages: Bahasa Melayu and English.
  • Response Time: Within 3 business days for privacy emails, under 5 minutes for live chat.

lagu2's Promise: Every privacy enquiry and complaint we receive is handled with seriousness, professionalism, and complete confidentiality. lagu2's Privacy Officer is ready to help you understand your rights and ensure that your personal data is managed to the highest data protection standards. Your trust is lagu2's most valuable asset.

Frequently Asked Questions — lagu2 Privacy Policy

Answers to the most frequently asked questions by Malaysian players about privacy and data protection at lagu2.

Absolutely not. lagu2 does not sell, share or trade players' personal data with any marketing companies or third-party advertisers. Your data is used solely for the purposes stated in our Privacy Policy — to provide you with lagu2's platform services securely and efficiently. This is an absolute, non-negotiable principle in lagu2's operations.

lagu2 retains your personal data for the duration of your active account plus any period required by Malaysian law. Financial transaction records are kept for 5 years from the date of the transaction in accordance with financial reporting legal requirements. Account data is retained for up to 2 years after account closure. After these periods, data that is no longer needed will be securely deleted from lagu2's systems.

To request a copy of your personal data, send an email to [email protected] with the subject line "DATA ACCESS REQUEST" along with your lagu2 account number. We will first verify your identity before processing the request. A copy of your data will be provided in a readable format within 14 business days. No fee is charged for the first request within any 12-month period.

lagu2 may use your gameplay activity data to personalise in-platform communications, such as relevant game recommendations or bonus offers tailored to your playing patterns — this is solely to enhance your experience at lagu2. However, we do not use your gameplay data to target advertisements outside the lagu2 platform, and this data is never shared with any third-party advertising networks.

When you close your lagu2 account, your personal data is not deleted immediately, as lagu2 is required to comply with legal obligations for retaining financial records. Transaction records are retained for 5 years after the last transaction, while general account data is kept for up to 2 years after closure. Once the mandatory retention period has elapsed, all data no longer required will be permanently deleted from lagu2's systems. If you wish to expedite the deletion of specific data not subject to legal retention obligations, please submit a request to [email protected].
The Privacy Protections We Pledge to Every lagu2 Player

Four privacy guarantees that lagu2 upholds without compromise for all Malaysian players.

256-bit SSL Encrypted
All data in transit is protected
No Data Sales
Your data is never sold to anyone
PDPA 2010 Compliance
Aligned with Malaysian law
Player Rights Guaranteed
Access, correct & delete your data

Play at lagu2 with Confidence — Your Privacy Is Always Protected

You now have a clear picture of lagu2's commitment to your privacy and personal data protection. Register today and experience an online entertainment platform that not only offers Malaysia's best games, but also safeguards your privacy to the highest industry standards.

500K+
Players Trust lagu2
256-bit
SSL Encryption
PDPA
Malaysia Compliance
24/7
Privacy Support

* For players aged 18 and above only. Play responsibly.

Responsible Gaming — Privacy and Well-Being Go Hand in Hand

Lagu2 uses the gameplay activity data we collect not only for operational purposes, but also to help identify players who may benefit from responsible gaming support. If our systems detect concerning patterns of play, the lagu2 team may reach out to you privately and confidentially to offer assistance. This is how lagu2 puts data to good use — to safeguard the wellbeing of every one of our players. Gaming at lagu2 is strictly for individuals aged 18 and above.

Bahasa Melayu