Privacy Policy

lexus888 (hereinafter "lexus888", "we", "us", or "our") is committed to safeguarding the privacy and personal data of all individuals who interact with our platform, whether as registered players, prospective users, or visitors to the lexus888 website at lexus888.cam (the "Platform").

This Privacy Policy sets out our practices with respect to the collection, processing, storage, disclosure, and protection of personal data. It has been prepared in accordance with applicable international data protection standards and reflects our obligations to users primarily based in Malaysia, as well as internationally.

This Policy applies to all personal data processed by lexus888, regardless of the medium through which it is collected — including through the website, live chat, email correspondence, support tickets, KYC documentation, and payment transaction records.

The following terms carry specific meanings throughout this Privacy Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data held by lexus888.
• "Data Controller" means lexus888 in its capacity as the entity that determines the purposes and means by which personal data is processed.
• "Data Processor" means any third-party service provider that processes personal data on behalf of lexus888 pursuant to a written data processing agreement.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "User" / "Data Subject" means any registered player, account applicant, or visitor whose personal data is processed by lexus888.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC Documents" means identity verification materials submitted by the User, including government-issued identification, proof of address, and payment method documentation.
• "Cookies" means small text files placed on a User's device by the Platform for the purposes of session management, analytics, and functionality enhancement.

lexus888 collects personal data in several categories depending on your level of engagement with the Platform. The table below summarises the main categories of data we process:

lexus888 collects personal data through the following primary channels:

We only process personal data where we have a valid legal basis for doing so. The table below sets out the primary purposes for which lexus888 processes personal data and the corresponding legal justification for each:

• Account Registration & Management: Processing is necessary for the performance of the contract between you and lexus888 (account agreement and Terms of Service).
• Payment Processing: Necessary for contract performance. Financial transaction data is processed to facilitate deposits, withdrawals, and payout settlement in MYR.
• KYC & Identity Verification: Necessary for compliance with applicable legal obligations including anti-money laundering (AML) requirements and age verification regulations.
• Fraud Detection & Platform Security: Legitimate interest of lexus888 to maintain platform integrity, detect fraudulent activity, and protect all users from harm.
• Responsible Gambling Compliance: Legal obligation and legitimate interest — including enforcing age restrictions (21+), monitoring for signs of problem gambling, and facilitating self-exclusion requests.
• Customer Support: Contract performance and legitimate interest to resolve user queries and complaints effectively.
• Analytics & Platform Improvement: Legitimate interest to improve platform performance, user experience, and game offerings based on aggregated usage data.
• Marketing Communications: Based on your prior consent, where you have opted in to receiving promotional emails, SMS, or in-platform notifications from lexus888.
• Legal & Regulatory Compliance: Compliance with legal obligations including the retention of financial records, responding to lawful regulatory requests, and cooperating with law enforcement where required.

lexus888 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only with the categories of recipients listed below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Including processors facilitating transactions via DuitNow, FPX, Maybank, CIMB Bank, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, Visa, Mastercard, and cryptocurrency gateways. These providers receive transaction data strictly for payment processing purposes.
• KYC & Identity Verification Providers: Third-party providers who assist us in verifying the identity, age (21+), and address of registered players in accordance with our regulatory obligations.
• Game Software Providers: Game studios and platform aggregators who supply the casino games, live dealer tables, and sports betting technology on lexus888 may process limited technical and gameplay data to deliver their services.
• Fraud Prevention & AML Services: Specialist agencies that help lexus888 detect and prevent fraudulent activity, money laundering, and account abuse.
• IT Infrastructure & Hosting Providers: Cloud and server infrastructure partners who store and process Platform data under strict data processing agreements with lexus888.
• Legal & Regulatory Authorities: We will disclose personal data to regulatory bodies, law enforcement agencies, or courts where we are legally required to do so, or where we believe disclosure is necessary to protect the rights, property, or safety of lexus888, our users, or the public.
• Professional Advisers: Lawyers, auditors, and compliance consultants acting in an advisory capacity to lexus888, subject to professional confidentiality obligations.

lexus888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

• Account Data: Retained for the duration of the active account relationship, plus a minimum of five (5) years following account closure, to comply with AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with applicable financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following the completion of the KYC process or account closure, whichever is later.
• Support Communications: Retained for three (3) years following the resolution of the relevant query or complaint.
• Gaming History: Retained for five (5) years from the date of the gaming session, or longer where required for regulatory reporting or dispute resolution.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications, at which point it will be deleted or anonymised within 30 days.

Where personal data is no longer required for any lawful purpose, lexus888 will securely delete or anonymise it in a manner that prevents reconstruction or re-identification.

lexus888 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and deliver a consistent experience across devices and sessions.

lexus888 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security posture includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the lexus888 Platform is encrypted in transit using the same standard employed by major Malaysian financial institutions including Maybank and CIMB Bank.
• Encryption at Rest: Sensitive data fields — including payment credentials and KYC document content — are encrypted within our database infrastructure.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Employees and contractors who access personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: Available to all registered users for account login to reduce the risk of unauthorised access.
• Security Audits: Regular internal and third-party security reviews of our infrastructure, codebase, and data handling practices.
• Incident Response: lexus888 maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, we will notify affected users and relevant authorities in accordance with applicable legal requirements.

Subject to applicable law and the legal bases on which we process your data, you hold a range of rights over your personal data. lexus888 is committed to honouring these rights in a timely and transparent manner. Requests can be submitted by contacting our support team at [email protected].

• Right of Access: You may request confirmation of whether lexus888 holds personal data about you and, if so, obtain a copy of that data along with information about how it is processed.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update many details directly from your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal obligations that require retention (e.g., AML record-keeping requirements).
• Right to Restrict Processing: You may request that lexus888 limit its processing of your personal data in certain circumstances, for example while a rectification request is under review.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you may request a structured, machine-readable copy of your personal data to facilitate transfer to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing. Upon receipt of a valid objection to marketing, we will cease all marketing communications within 30 days.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

The lexus888 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data relating to any person under the age of 21.

If lexus888 becomes aware that an account has been created by or that personal data has been submitted by an individual under the age of 21, we will immediately suspend the account, delete the associated personal data to the extent permissible by law, and — where required — report the incident to relevant authorities.

If you are a parent or guardian and believe that a minor in your care has registered an account with lexus888, please contact us immediately at [email protected] so we can investigate and take appropriate action.

lexus888 operates a globally distributed infrastructure. As a result, personal data collected from users in Malaysia may be transferred to and processed in jurisdictions outside of Malaysia, including jurisdictions where data protection laws may differ from those applicable in Malaysia.

Wherever personal data is transferred internationally, lexus888 ensures that appropriate safeguards are in place, including contractual data transfer agreements, standard contractual clauses, or transfers to jurisdictions that provide an adequate level of data protection. We do not transfer personal data to jurisdictions that do not provide adequate protection without implementing additional safeguards.

The lexus888 Platform may reference or display content from third-party service providers, including game studios and payment processors. Any interaction you have with a third-party service — even when accessed through the lexus888 Platform — is governed by that third party's own privacy policy and terms of service.

lexus888 is not responsible for the privacy practices or content of any third-party service provider, and we encourage you to review the privacy policies of any third parties whose services you use in connection with your lexus888 account. Our responsibility for your personal data extends only to data held and processed directly by lexus888 or by our authorised Data Processors acting under our instruction.

lexus888 may send you promotional communications about new games, bonus offers, VIP program updates, and platform news where you have provided your prior consent during the registration process or at a later date through your account notification settings.

Marketing communications may be delivered via email, SMS, or in-platform notification. The content of these communications will always relate to lexus888 products and services — we do not use your contact details to market third-party products.

lexus888 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. All amendments will be posted on this page with an updated "Last Updated" date.

Where amendments are material — meaning they substantially affect how your personal data is processed or your rights in relation to it — we will notify registered users via email or an in-platform notice at least 14 days before the revised Policy takes effect. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Privacy Policy.

We recommend reviewing this page periodically to remain informed of how lexus888 handles your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by lexus888, please contact our Data Support team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on any page of the Platform
• Service Area: We serve registered players across Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, Bangsar, and all of Malaysia

We aim to acknowledge all privacy-related enquiries within 5 business days and to resolve them fully within 30 calendar days. For complex or sensitive matters, our team will keep you informed of progress throughout the review process.