Installing these apps, and who really holds your login

Until the files disappeared, lpe88.life was mostly a set of download pages. Ten apps had a page of their own, each a paragraph of sales copy on top of a column of buttons marked Android, IOS, Windows or Web, and the LPE88 article carried four more buttons of its own. Every page ended with a "Contact Us" button that opened a chat window. The storage behind those buttons was deleted years ago, so every one of them now leads nowhere. We have not replaced them, and we won't.

This page does two other jobs. The first half explains what those buttons actually installed and what can go wrong on each kind of device. The second half, under Logins, deals with the other thing people typed into this site: a username and password. Further down there is a short note for each app, starting with LPE88, on what its old row offered.

Why none of these apps is in Google Play or the App Store

Google and Apple accept real-money gambling apps only from operators licensed in the country where the app is offered. None of the twelve apps on this site holds a Malaysian licence, and online gambling is illegal in Malaysia in any case. So the apps travel outside the stores: an Android file handed over by link, an iPhone build signed with a company certificate, a Windows installer.

So nobody checks the file before it reaches you, nothing updates it, and nothing proves that the file you were sent is the one the operator built.

Android files and the "install unknown apps" switch

A phone will not install a file from outside Google Play until you give one app, usually the browser or the file manager, permission to install unknown apps. The switch sits somewhere under Settings, Apps and Special app access, though each phone brand moves it around a little.

Once that switch is on for the browser, it stays on. Any file that browser downloads later can be installed as well, including one pushed by a pop-up on a page you never meant to open. So turn it off again straight after the install. If Google Play Protect flags the file or offers to scan it, let it.

Mod APKs, "latest version" pages and files sent in chat

Type any of these app names into a search engine and you get pages offering a mod APK, an unlimited version or this month's download link. A modified casino app can't do what those pages suggest. Your balance and the result of every spin are decided on the operator's server, not on your phone, so a changed file has no way to add credit or tilt a reel.

What a changed file can do is quite different. It can copy the ID and password you type, draw a fake login box, or carry malware that reads SMS messages and watches your banking app. Malaysian banks and the police have warned for years about APK files sent through messaging apps that take over a phone and drain its owner's accounts. "Latest version" pages are no better: a stranger's site can't know which build matches the back office your ID lives on.

Permissions a slot app has no reason to ask for

A slot app needs an internet connection, and perhaps storage for its game files. If the installer or the app asks for any of the following, stop, cancel and delete the file.

• Accessibility access. It lets an app read the screen and press buttons for you.
• Reading or sending SMS. Your bank's TAC arrives by SMS.
• Device admin rights. They make an app hard to remove.
• Display over other apps. That is how a fake window gets laid over a real one.
• Notification access, which can also expose your TAC.

If you have already granted one of these, uninstall the app, check the device admin list under the security settings in case it put itself there, change your online banking password from a different device and call your bank. The National Scam Response Centre line, 997, is there for exactly this.

iPhone builds and enterprise certificates

The old IOS buttons used a system Apple designed for companies to give in-house apps to their own staff. The app installs from a link but refuses to open until you visit Settings, General, VPN & Device Management and trust the developer listed there. That trust covers every app signed with the same certificate, not only the casino app you wanted.

When Apple finds such a certificate being used to hand apps to the public, it revokes it. The app then stops opening overnight, and the only way back is a fresh build signed by some other company. That is why iPhone versions of these apps keep appearing and vanishing. 918Kiss and Mega888 even had a 32-bit build for very old iPhones that no current iPhone can run.

One line to hold: never install a configuration profile that asks to manage the device. Trusting a developer is one thing. Handing over device management is far more, and no slot app needs it.

Windows, Mac and web versions

Seven apps had a Windows button on the old pages: LPE88, NTC33, Rollex11, ACE333, 3Win8, Play8oy and Live22. These installers are rarely signed, so Windows shows a blue "Windows protected your PC" screen before they run. Scan the file with Microsoft Defender before you click past that screen. Live22 alone had a Mac package, which triggers the Mac's own warning about an unidentified developer for the same reason.

Four apps also had a web version that ran in the browser: LPE88, NTC33, Rollex11 and Star996. A web version installs nothing, which removes the file risks above. It adds a different one: a copy of a login page is very easy to make. Use only the address the person who issued your ID gave you, save it as a bookmark, and never reach it through an ad or a link someone sends you.

Where a file should come from

If you decide to install one of these apps anyway, the only source that makes sense is the agent or site that created your game ID. They know which build talks to their back office, and if the file turns out to be bad, you know exactly who sent it.

We don't supply files, links, IDs or credit. The partner box at the foot of this page belongs to a separate online casino with its own account, and it doesn't supply app files or IDs for any app listed here. This site is for adults aged 18 and over. Because online gambling is illegal in Malaysia, there is no regulator to turn to if a file or an agent lets you down, so read our responsible gaming page before a first top-up.

Logins

The old site had a page called Login, and it confused a lot of visitors. It was the sign-in form of the website itself, with a username, a password and a "Remember me" box, and it was there for the two people who edited the site. It never logged anyone into LPE88 or any other app. That page is gone. There is no login on lpe88.life now, no member accounts and no wallet, and nothing on this site will ever ask for a password.

For all twelve apps, the ID and password come from an agent or a site with back-office access. They create the ID, set the first password and load credit after you pay. The place to type those details is the app's own login screen, or a web version whose address that same person gave you. Nowhere else.

Fake login pages are the easiest scam in this business. Watch for these signs:

• An address that looks almost right, with an extra letter, a hyphen or an unusual ending.
• A "login" link that arrives in a chat message, often with a promise of a bonus or a new version.
• Any page that asks for your online banking username, password or TAC. No game login needs them.
• An offer of a ready-made ID with credit already loaded, from someone you have never paid.

If you forget your password, none of these apps has a reset button. Ask whoever issued the ID to set a new one. If that person has disappeared, the ID and the credit on it usually go with them, and paying a "recovery service" to get them back only adds to the loss. If you typed your details into a page you now doubt, ask the issuer to change your game password, and if banking details went in as well, call your bank and 997 straight away.

App by app

What the old rows offered for each app. It is a record of which devices each app was built for, not a list of places to get it.

LPE88

LPE88, the Lucky Palace app, never had its own install page. Its buttons sat inside the LPE88 article: two Android files, one for slot games and one for live games, a Windows installer, and a web version on a separately named website. There was no iPhone button. The web version asks for the same ID and password as the app, so the look-alike warning above applies to it twice over. The LPE88 page covers the lobby and seventeen of its games.

918Kiss

The 918Kiss row, still labelled SCR888 in brackets, had two iPhone builds, one marked 64-bit and one marked 32-bit, and a single Android file that sat on a different host from all the other apps' files. There was no Windows version and no web version. The copy promised free downloads on iPhone and Android, which only ever meant the file cost nothing. More on the 918Kiss page.

Live22

Live22 had the longest row of any app: Android, iPhone, Windows and a Mac package. The old lobby screenshot below shows Featured, Slots, Table, Arcade, Favourite and Room tabs with a Total Jackpot counter above the tiles. We blurred the player ID and the balance in the top bar. For all the name, the lobby is mostly slots, as the Live22 page shows.

3Win8

3Win8 came with three buttons: Android, iPhone and Windows. Its old copy asked whether you'd like to win millions of ringgit for a few dollars. No install page can offer that, and this one never could. The lobby and games are on the 3Win8 page.

Sky777

The copy on the old Sky777 page said the app ran on Android, iOS and Windows 10 and in a browser. The buttons underneath told a shorter story: iPhone and Android, nothing else. The lobby screenshot has tabs for All, Feature, Progressive, Slot, Arcade and Table, with Live Casino marked "coming soon". We blurred the balance. The Sky777 page covers its games.

ACE333

ACE333 had Android, iPhone and Windows buttons. The page also carried a lobby screenshot with a mobile number in the player field and another website's name on a phone mock-up, so we don't show it. Its tabs read Slot, Arcade, Table, Fishing and Live. The ACE333 page has the games.

Mega888

Mega888's row copied the 918Kiss layout: a 64-bit iPhone build, a 32-bit build for older iPhones and one Android file. The old text said Mega888 could be downloaded for free on any device. With no Windows or web version on the page, that was never true even of this row. The Mega888 page goes through the lobby.

Play8oy

Play8oy offered Android, iPhone and Windows. The old lobby screenshot for this app included a QR code for a download, which we don't reproduce: a QR code is a link you can't read before you follow it. The games are on the Play8oy page.

NTC33

NTC33, the Newtown Casino app, had two Android files, one for slots and one for live games, a Windows installer and a web version. The page text promised an iOS app too, but no iPhone button ever appeared. Two Android files mean two installs and two sets of permissions to check, so ask the person who issued your ID which one you need. See the NTC33 page.

Rollex11

Rollex11, which people often spell Rolex 11, had the same shape of row as NTC33: an Android file for slots, a second one for live games, a Windows installer and a web version. There was no iPhone build, so on an iPhone the browser was the only route the page gave. The Rollex11 page covers the games.

Joker123

Joker123 had the shortest row on the site: a single Android button. No iPhone build, no Windows installer, no web version. The Joker123 page has the games.

Star996

Star996 had nothing to install. Its page held one link, marked as the online version, to a betting website with a sportsbook and casino rooms. So an APK sold under the Star996 name is something the old site never listed. The Star996 page explains more.