1Privacy Policy Introduction and Scope
LigaCiputra ("we", "our platform") takes seriously our responsibility to protect the privacy of all individuals who interact with our platform. This Privacy Policy outlines our practices regarding the collection, use, disclosure, transfer, and storage of your personal data when you use the ligaciputra.bid website and our official mobile app.
This policy applies to all registered members, website visitors, individuals who contact our support team, and anyone who interacts with any service offered by LigaCiputra. We are fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of personal data management.
2Types of Personal Data We Collect
In operating the platform, LigaCiputra collects several categories of personal data necessary to ensure a safe, seamless, and responsible gaming experience. The data we collect includes:
2.1 Registration Information
When you register an account, we collect your full name, date of birth, gender, phone number, email address, and preferred username. This information is required to verify your identity and ensure you meet the platform's eligibility criteria, including the minimum age requirement of 18 years.
2.2 Identity Verification (KYC) Information
To meet compliance and anti-money laundering requirements, we require a copy of a valid government-issued identity document such as a MyKad or passport, a selfie taken with the identity document, and proof of current residential address such as a utility bill or bank statement. These documents are stored using the highest level of encryption.
2.3 Financial Information
We record your bank account details, digital wallet account numbers (TNG eWallet, GrabPay, Boost, etc.) and your deposit and withdrawal transaction history on the platform. We does not store full credit or debit card numbers — all payment processing is handled by certified third-party payment providers.
2.4 Usage and Technical Data
Our system automatically records your IP address, device type and operating system, browser type, pages visited, session duration, gaming activity, and general geolocation data. This information is used solely for security purposes, service improvement, and detection of suspicious activity.
2.5 Cookies and Tracking Technologies
LigaCiputra uses session cookies and persistent cookies to enhance the user experience. You can manage cookie settings through your web browser; however, please note that blocking all cookies may affect certain features on our platform.
3Personal Data Usage Purpose
LigaCiputra uses collected personal data for clear and lawful purposes. We will not use your data for unrelated purposes without first obtaining your consent. The primary purposes for data use are as follows:
| Purpose of Use | Types of Data Used | Legal Basis |
|---|---|---|
| Registration & Account Verification | Name, email, phone number, KYC documents | Contract Performance |
| Transaction Processing | Bank details, deposit & withdrawal history | Contract Performance |
| Security & Fraud Prevention | IP address, session data, account activity | Legitimate Interests |
| Legal Compliance (AML/KYC) | Identity documents, transaction records | Legal Obligation |
| Customer Support | Email, chat logs, account information | Contract Performance |
| Marketing Communications | Email, phone number | Consent |
4Data Sharing with Third Parties
LigaCiputra does not sell or rent your personal data to any party. However, in certain situations, we may need to share your information with selected and trusted third parties:
- Payment Providers: To process deposits and withdrawals, the required transaction information is shared with certified payment processors such as FPX and approved digital wallet providers.
- Game Software Providers: Third-party game providers receive limited session data to ensure games function correctly and fairly.
- Relevant Authorities: We may disclose information to government agencies, law enforcement bodies, or courts when required by law or judicial order.
- Cloud Services and IT Infrastructure: Our technical service providers, such as cloud hosting partners, are bound by strict data protection agreements and are not permitted to use your data for any other purpose.
- Identity Verification Provider: For the KYC process, identity document information may be verified through licensed third-party verification services.
5Data Retention Period
LigaCiputra retains your personal data for as long as your account is active or as long as it is needed to provide services to you. When you close your account, we will delete or anonymize your personal data within a reasonable period, unless long-term retention is required for the following reasons:
- Financial and transaction records are retained for seven (7) years in accordance with tax and accounting legal requirements in Malaysia.
- KYC records and identity verification documents are retained for five (5) years after the account closure date in accordance with the requirements of the Anti-Money Laundering Act.
- Customer support communication logs are retained for three (3) years for reference and dispute resolution purposes.
- Usage data and technical logs are retained for twelve (12) months for security and analytics purposes.
6Your Rights as a Data Subject
As a LigaCiputra member, you have certain rights regarding your personal data under Malaysia's PDPA. We fully respect and facilitate the exercise of these rights:
- Right of Access: You have the right to obtain a copy of the personal data we hold about you.
- Right to Rectification: You may request correction of any inaccurate or outdated data.
- Right to Restrict Processing: In certain circumstances, you may request that we restrict the processing of your data.
- Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
- Right to Data Portability: You may request that we provide your data in a machine-readable format for transfer to another service provider.
- Right to Erasure: In certain situations permitted by law, you may request the deletion of your personal data.
To submit any request relating to the rights above, please contact our Data Protection Officer at [email protected]. We will process your request within 21 business days upon receipt of a complete request.
7Data Security and Protection Measures
LigaCiputra continually invests in the latest security infrastructure to ensure your data is protected against unauthorized access, loss, misuse, or accidental disclosure. Our implemented security measures include:
- Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
- Data encryption at rest using AES-256.
- Two-factor authentication (2FA) for account access and admin panels.
- Regular security audits conducted by independent, internationally certified cybersecurity firms.
- Intrusion detection and prevention system (IDS/IPS) active 24/7.
- Automatic data backup across multiple secure data centre locations.
- Mandatory security awareness training for all staff who handle personal data.
8Marketing Communications and Notification Preferences
By registering an account at LigaCiputra, you may opt in to receive marketing communications from us, including exclusive promotional offers, special bonuses, the latest game updates, and platform news via email or app notifications. Your consent to receive marketing communications is entirely voluntary.
You may withdraw your marketing consent at any time by updating your notification preferences in the account settings section, or by contacting our support team. Withdrawing marketing consent will not affect the core services you receive from LigaCiputra.
9Cross-Border Data Transfer
In the course of its global operations, LigaCiputra may transfer your personal data to servers or processing facilities located outside Malaysia. Any such transfer is carried out ensuring that protection equivalent to Malaysia's PDPA standards is maintained by the data recipient in the relevant country, either through appropriate contractual agreements or internationally recognised safeguard mechanisms.
10Children's Privacy
The LigaCiputra platform is intended solely for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18. Should we discover that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the relevant account. Parents or guardians with concerns regarding this matter may contact us at [email protected].
11Links to Third-Party Websites
The LigaCiputra platform may contain links to third-party websites or services that operate independently from us. This Privacy Policy does not apply to those third-party websites or services. We encourage you to read the privacy policy of any such website before providing them with any personal information, as we are not responsible for their privacy practices.
12Privacy Policy Amendments
LigaCiputra reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any significant amendments will be communicated to you via in-app notifications or to the email registered to your account at least 14 days before the amendment takes effect.
The "Last Updated" date shown at the top of this document will reflect the date of the most recent revision. Your continued use of the LigaCiputra platform after the revision's effective date constitutes your acceptance of the updated Privacy Policy.