Privacy Policy lemon212 – Our Commitment to Protecting the Personal Data of Malaysian Players

This Privacy Policy explains how lemon212 — operating through the website https://lemon212.asia — collects, uses, processes, stores, and protects your personal information as a member or user of our platform. This document applies to all individuals who access or use any services provided by lemon212, including account registration, deposits, withdrawals, participation in games, and all other interactions with the platform.

Lemon212 takes its role as a data controller seriously. This means we determine the purposes and means of processing your personal data, and we are fully accountable for ensuring that such data is processed in accordance with applicable laws and recognised privacy principles. All data processing is carried out in compliance with Malaysia's Personal Data Protection Act (PDPA) and relevant international standards.

By registering for and using the lemon212 platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this policy, you are advised not to use the lemon212 platform. For any enquiries regarding this policy, you may reach us by email at support@lemon212.asia.

Lemon212 collects only the personal data that is genuinely necessary to provide safe, compliant, and quality services to members in Malaysia. We do not collect excessive or irrelevant data beyond what is required for the platform's operations. The following are the categories of data we collect:

In some situations, we may also receive your personal data from legitimate third-party sources — for example, through identity verification platforms we use for the KYC process, or from credit bureau reports required for legal compliance. In all such cases, we ensure that the relevant third party has a lawful basis for sharing that data with us.

Lemon212 only uses your personal data for purposes that are stated, lawful and relevant to providing the platform's services to you. We do not use your data for any other purpose without informing you first and obtaining your consent where required by law. The primary purposes for which lemon212 uses data are as follows:

• Account Management — creating, verifying and maintaining your lemon212 account, including the KYC process required under financial compliance regulations.
• Transaction Processing — processing deposits and withdrawals using your preferred Malaysian payment method, verifying transactions and maintaining accurate financial records.
• Gaming Service Provision — allowing you to access all 200+ games on lemon212, process bets, calculate winnings and manage your account balance in real time.
• Customer Support — handling enquiries, resolving technical issues, processing complaints, and providing 24-hour assistance to lemon212 members.
• Security & Fraud Prevention — detecting and preventing fraud, money laundering, duplicate accounts, bonus abuse and any violation of lemon212's Terms & Conditions.
• Legal Compliance — to fulfil legal obligations under Malaysia's PDPA, applicable financial regulations, and lawful requests from authorities.
• Platform Improvements — analysing usage patterns to improve the layout, performance, and overall experience of the lemon212 platform for all players in Malaysia.
• Marketing Communications — sending information about lemon212 promotions, bonuses and new offers — only to members who have given explicit consent to receive such communications.
• Responsible Gaming — monitoring play patterns to identify potential problem gambling and providing appropriate interventions or self-management tools to members who need them.

Lemon212 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is an absolute commitment we have never compromised on. However, in a limited number of situations where it is necessary to provide services to you or to comply with the law, we may need to share certain information with the following parties:

• Payment Service Providers — payment processors handling FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and DuitNow transactions to ensure your deposits and withdrawals are processed securely.
• Identity Verification Providers — third-party KYC platforms that assist lemon212 in verifying member identities in accordance with legal compliance requirements.
• Game Providers — lemon212's game partners such as Pragmatic Play, Evolution Gaming and PG Soft receive only the minimum technical data required to ensure games function properly — they do not receive your full identity information or financial data.
• Authorities — law enforcement agencies, financial regulatory bodies or courts when lemon212 is legally required to disclose such information.
• Professional Advisors — lawyers, auditors or consultants involved in lemon212 operations, all bound by strict confidentiality obligations.

Lemon212 continuously invests in robust security infrastructure to protect your personal data from unauthorised access, disclosure, alteration or destruction. The security measures we have in place span technical, organisational and procedural safeguards.

• 256-bit SSL Encryption — all communications between your browser and lemon212's servers are encrypted using 256-bit TLS/SSL protocol, ensuring that data in transit cannot be intercepted by unauthorised parties.
• Stored Data Encryption — sensitive data including passwords and financial information is encrypted at rest on lemon212's servers using the latest industry-standard encryption algorithms.
• Multi-layered Access Control — only lemon212 staff who genuinely need access to your personal data to carry out their authorised duties are permitted to do so, and all access is logged and monitored.
• Two-Factor Authentication — lemon212's internal systems storing member data are protected with two-factor authentication for all staff access.
• Regular Security Audits — lemon212 conducts regular vulnerability assessments and penetration testing through independent cybersecurity firms to identify and patch weaknesses before they can be exploited.
• Real-Time Monitoring — lemon212's automated monitoring system operates 24 hours a day to detect any suspicious activity or unauthorised attempts to access member data.
• Staff Training — all lemon212 staff who handle members' personal data receive comprehensive privacy and data security training, which is updated on a regular basis.

While lemon212 takes all reasonable steps to protect your data, no security system can guarantee 100% absolute protection against every threat. In the event of a data breach involving your personal information, lemon212 will notify you and the relevant authorities as required by applicable law within the mandated timeframe.

Lemon212 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. Once your personal data is no longer needed, it will be securely deleted or anonymised.

• Active Account Data — for as long as your account is active on lemon212, plus a specified period after account closure in accordance with legal compliance requirements.
• Financial & Transaction Records — minimum 7 years from the transaction date, in accordance with applicable Malaysian accounting and tax legal requirements.
• KYC Documents — a minimum of 5 years following the termination of the business relationship, in accordance with applicable AML (Anti-Money Laundering) compliance requirements.
• Support Communication Records — 2 years from the date of communication for reference and service improvement purposes.
• Usage Analytics Data — up to 2 years in anonymised form for trend analysis and lemon212 platform improvement purposes.
• Marketing Data — until you withdraw your consent or request removal from lemon212's marketing communications list.

Lemon212 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit lemon212. They help the platform remember your preferences, keep your login session secure, and provide us with insights into how the platform is used so we can continue improving it.

You can control or delete cookies through your web browser settings at any time. However, disabling mandatory cookies may affect the functionality of the lemon212 platform and your account security. For optional cookies, you can grant or withdraw consent through the privacy settings panel available on lemon212.

As a lemon212 member and data subject under Malaysia's PDPA, you have several important rights regarding your personal data. lemon212 is committed to respecting and facilitating the exercise of these rights. Your rights are as follows:

To exercise any of the above rights, submit a written request to support@lemon212.asia stating the right you wish to exercise along with your account details. lemon212 will verify your identity before processing the request and will respond within 14 business days. No fees are charged for reasonable privacy rights requests.

Lemon212 is a platform intended solely for adults aged 18 and above. We do not knowingly collect, process or store any personal data from individuals under the age of 18. Age verification is conducted as part of our registration and KYC process.

Should lemon212 discover that personal data belonging to a minor has been collected unintentionally — for example, due to false information provided during registration — we will take immediate action to delete that data and close the account in question. Any balance in the account will be returned to the individual's legal guardian following appropriate verification.

Lemon212 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, developments in applicable law, or improvements to how we operate the platform. Each updated version will display the latest revision date at the top of this page.

For material and significant changes — changes that substantially affect how we use your data or that reduce your privacy rights — lemon212 will notify members via their registered email address or through a prominent notice on the platform at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision about your continued use of the lemon212 platform.

If you have any questions, concerns or requests relating to this Privacy Policy or how lemon212 handles your personal data, our privacy team is ready to assist through the following channels:

• Privacy Email — support@lemon212.asia (please state "Privacy Enquiry" in your email subject line)
• Live Chat — available 24 hours at the corner of the lemon212 platform, directly in Bahasa Malaysia
• Customer Support — lemon212's Bahasa Malaysia-speaking support team, available 24/7

Lemon212 acts as the data controller responsible for all personal data processed through the platform. Any enquiries regarding your privacy rights or complaints about how your data is handled will be taken seriously and responded to within the stated timeframes — 2 hours for general enquiries and 14 working days for formal data rights requests.