Pp88 Privacy Policy – Personal Data Protection for Malaysia Members

1Introduction & Scope of the pp88 Privacy Policy

This Privacy Policy is issued by pp88 ("we", "the platform") and applies to all individuals who use, register with, or interact with the pp88 platform in any capacity, including via the website, mobile app, or any digital interface associated with pp88.

Pp88 is committed to protecting the privacy of all our members in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We understand that your trust is our most valuable asset, and safeguarding your personal data is part of our promise to every pp88 member in Malaysia.

By using the pp88 platform — whether to play live casino, bet on Malaysia Super League football matches, play poker, roulette, or any other game — you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please stop using the pp88 platform and contact us to close your account.

2Personal Data Collected by pp88

Pp88 only collects data that is necessary for legitimate, stated purposes. The following are the categories of data we collect:

2.1 Data You Provide Directly

• Registration information: Full name, date of birth, Malaysian identity card number (MyKad), email address, and mobile phone number.
• Identity verification (KYC) information: Copies of your identification document and proof of address requested during the pp88 account verification process.
• Financial information: Details of the payment method used — whether Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u or CIMB Clicks. pp88 does not store full account numbers — only the information required for transaction processing.
• Communications: The content of any communications you send to the pp88 support team via live chat, email, or WhatsApp.

2.2 Data Collected Automatically

• IP address, web browser type and version, device operating system, and screen resolution.
• Login session information — sign-in time, sign-out time, and session duration.
• Gaming activity history, including game types played, bet amounts, game outcomes, and account balance.
• Cookie data and similar tracking technologies, described in further detail in Section 7.

3How pp88 Uses Your Personal Data

Pp88 uses the personal data collected solely for the following purposes:

• Account management: Creating, verifying, and maintaining your pp88 account, including the login process, two-factor authentication, and password recovery.
• Transaction processing: Processing deposits via your preferred Malaysian payment methods (TnG, GrabPay, DuitNow, and others), as well as handling your withdrawal requests.
• Service delivery: Ensuring all games — Live Casino, slots, poker, roulette, Sports Betting, and e-sports — function correctly and are tailored to your preferences.
• Security and fraud prevention: Detecting and preventing suspicious activity, duplicate accounts, automated bot usage, and any form of fraud that could compromise the security of the pp88 platform and its members.
• Legal compliance: Complying with the requirements of the Personal Data Protection Act 2010, anti-money laundering (AML) regulations, and all other applicable legal obligations.
• Customer support: Answering enquiries, resolving complaints, and providing technical support to pp88 members.
• Important communications: Sending account-related notifications, security updates, terms changes, and other important information relevant to your use of the pp88 platform.
• Analytics and improvement: Analysing aggregated platform usage patterns (not at an individual level) to improve pp88's performance, design, and features.

Pp88 does not use your personal data to make automated decisions that have legal or significant effects on you without human involvement.

4Legal Basis for Data Processing

Pp88 processes your personal data only on valid legal grounds in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: By registering a pp88 account and accepting this Privacy Policy, you consent to the processing of your data for the stated purposes. You may withdraw this consent at any time by closing your pp88 account.
• Contract performance: Data processing required to deliver pp88's services to you — such as payment processing and account management — is necessary for the performance of the contract between you and pp88.
• Legitimate interests: Certain data processing activities — such as fraud detection and platform analytics — are carried out on the basis of pp88's legitimate interests in operating a safe and efficient business.
• Legal obligation: pp88 is required under Malaysian law to maintain certain records and disclose information to the relevant authorities when necessary.

5Data Sharing with Third Parties

Pp88 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the following limited circumstances, pp88 may share your data:

• Contracted service providers: Payment providers such as Touch 'n Go, GrabPay, DuitNow, and FPX-supported banks receive the transaction information needed to process your deposits and withdrawals. They are bound by strict confidentiality agreements.
• Platform technology provider: Gaming software companies that provide live casino, slots, and poker games may receive the minimal technical data required for their operation. They are not permitted to use this data for any other purpose.
• Legal authorities: pp88 will disclose data when required by a court order, regulatory directive, or other applicable Malaysian legal requirement. We will notify you where we are permitted to do so.
• Fraud prevention: In confirmed cases of fraud, pp88 may share necessary information with the relevant financial institutions or authorities.

6pp88 Data Security Measures

Pp88 invests seriously in security infrastructure to protect your personal data against unauthorised access, loss, misuse, or accidental disclosure.

• All communications between your browser and the pp88 platform are encrypted using TLS 1.3 with a 256-bit SSL certificate.
• Member passwords are never stored in plain text — they are encrypted using a robust hashing algorithm (bcrypt).
• Access to members' personal data within pp88 is restricted to staff with a legitimate business need only, based on the principle of least privilege.
• Security penetration testing is conducted periodically by independent third parties.
• Data backups are performed daily and stored at separate locations with full encryption.

While pp88 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. If you suspect that your pp88 account has been compromised, please contact our support team immediately.

7pp88 Cookie Policy

Pp88 uses cookies and similar tracking technologies to enhance your user experience and platform security. Cookies are small text files stored on your device when you visit the pp88 platform.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect the functionality of the pp88 platform and could prevent you from logging in or playing.

8Your Rights Regarding Personal Data

As a pp88 member, you have the following rights regarding your personal data, in accordance with Malaysia's PDPA:

To exercise any of these rights, contact the pp88 privacy team at support@pp88-khelo.com with the subject line "Privacy Rights Request". Please include your full name and pp88 account number to help us process your request promptly.

9Data Retention & Deletion

Pp88 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required under Malaysian law:

• Active account data: Retained for as long as your pp88 account remains active.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian consumer protection and anti-money laundering legal requirements.
• Customer support communication logs: Retained for 3 years for reference and service quality purposes.
• Security log data: Retained for 12 months for fraud detection and platform security purposes.
• Closed accounts: Personal data of closed accounts is anonymised within 90 days, except for records that must be retained by law.

Once the retention period has expired, data will be permanently deleted or anonymised using industry-standard procedures that ensure the data can no longer be linked back to the individual concerned.

10Privacy Policy Amendments & How to Contact pp88

Pp88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technologies used, or legal requirements. Members will be notified of any material changes through:

• In-platform notifications on pp88 during login
• Email notification to the registered address
• Announcements on the pp88 privacy policy homepage

Continued use of the pp88 platform after any amendments take effect will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes, you are entitled to close your pp88 account without penalty.

This Privacy Policy was last updated on: 1 January 2026. This version supersedes all previous versions of the pp88 Privacy Policy.