Ladbrokes Malaysia Privacy Policy — Your Data Protection

1 Personal Information We Collect

Ladbrokes collects various types of information depending on how you interact with our platform. This data collection is necessary to ensure a smooth, secure gaming experience and to comply with applicable legal requirements.

All information you provide must be truthful, accurate, and up to date. You are responsible for updating your information whenever changes occur. Inaccurate information may affect your ability to make withdrawals or use certain services.

2 How We Use Your Data

Every piece of data we collect has a specific and legitimate purpose. ladbrokes does not use your data arbitrarily. The following are the primary purposes for which your personal data is used:

• Account Management — to register, verify, and maintain your account in an active and secure state.
• Transaction Processing — to process deposits, withdrawals, and any financial transactions you carry out.
• Identity Verification (KYC) — to comply with anti-money laundering legal requirements and ensure the platform is not misused.
• Service Improvement — to analyse usage patterns and improve platform features for a better gaming experience.
• Service Communications — to send important account-related notifications, promotions you are eligible for, and policy updates.
• Fraud Prevention — to detect and investigate suspicious activity that may compromise the security of your account and the platform as a whole.
• Legal Compliance — to fulfil reporting and compliance obligations to the relevant authorities when required.

3 Data Storage and Security

The security of your personal data is a responsibility we take extremely seriously. ladbrokes employs multiple layers of protection to ensure your data remains safe from unauthorised access, loss or misuse.

The technical security measures we employ include:

• 256-bit SSL encryption for all data transmission between your browser and our servers.
• Database-level data encryption for sensitive information such as passwords and financial details.
• Firewalls and intrusion detection systems monitored 24 hours a day, 7 days a week.
• Two-factor authentication (2FA) is available for all player accounts.
• Regular security audits by independent third parties to identify and patch any system vulnerabilities.
• Role-based access control — only staff who require access to specific data to perform their duties are permitted to do so.

Our data retention periods are as follows: active account data is retained for the duration the account remains active, plus six (6) years after closure for legal compliance purposes. Anonymised analytics data may be retained indefinitely as it cannot be linked back to any individual.

4 Data Sharing with Third Parties

Ladbrokes does not sell or rent your personal data to any third party. However, in certain situations, we may need to share specific information with the following parties for legitimate operational purposes:

• Payment Service Providers — to process your deposits and withdrawals securely and promptly.
• Identity Verification Providers — to verify your identity during the KYC process in compliance with anti-money laundering requirements.
• Gaming Service Providers — game session information is shared with third-party game providers integrated within our platform solely to enable gameplay to function.
• Legal Authorities — when required by court order, criminal investigation, or legitimate regulatory reporting obligations.
• Parent Company or Affiliates — in the context of corporate restructuring or business transfers, with reasonable prior notice given to players.

All third parties we work with are required to meet data protection standards equivalent to our own. Legally binding data-sharing agreements are required before any data is shared.

5 Use of Cookies and Tracking Technologies

The ladbrokes platform uses cookies and similar tracking technologies to enhance website functionality, remember your preferences and analyse how you use our platform. The types of cookies we use are as follows:

• Essential Cookies — required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
• Functional Cookies — remembers your preferences such as language, currency, and display settings for a more personalised experience.
• Analytics Cookies — collects anonymised usage data to help us understand how players use the platform and identify areas for improvement.
• Performance Cookies — monitors platform speed and performance to ensure a smooth experience for all users.

You can manage your cookie preferences through your internet browser settings. Please note that disabling certain cookies may affect platform functionality. Third-party advertising cookies are not used on the ladbrokes platform.

6 Your Rights as a User

As a ladbrokes player, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

7 Cross-Border Data Transfers

As a global online platform, your data may be stored or processed on servers located outside Malaysia. In all such cases, ladbrokes ensures equivalent protection is provided for your data through the following mechanisms:

• Standard data transfer agreements that comply with international data protection standards.
• A security risk assessment is conducted before any cross-border data transfer is approved.
• Sensitive data is always encrypted in transit and at rest, regardless of server location.
• Only countries or regions with an adequate level of data protection are permitted as data transfer destinations.

You can find out more about the safeguards used for cross-border data transfers by contacting our data protection team.

8 Contact Our Data Protection Team

If you have any questions, concerns or complaints regarding how we handle your personal data, our Data Protection Officer (DPO) team is ready to assist.

We take every privacy complaint seriously and are committed to responding within five (5) business days for general enquiries, and thirty (30) business days for formal data rights requests.