pp88 Privacy Policy

1. Introduction

pp88 ("we", "us", "our") operates the online gaming platform accessible at pp88.lat (the "Platform"). As a platform that processes personal data in order to deliver gaming, payment, and customer support services to players across Malaysia, pp88 is committed to handling personal data responsibly, transparently, and in compliance with applicable data protection legislation.

This Privacy Policy applies to all individuals who access or use the pp88 Platform, including registered players, prospective players who browse the Platform without registering, and individuals who contact pp88 via live chat or email. This Policy should be read in conjunction with the pp88 Terms & Conditions, which set out the overall framework governing use of the Platform.

pp88 does not sell personal data to third parties for their own marketing purposes. Data is processed for the specific purposes described in this Policy and is retained only for as long as necessary to fulfil those purposes or to comply with applicable legal and regulatory obligations.

2. Data Controller

The data controller responsible for the personal data of pp88 Platform users is the operator of the pp88 Platform, being the entity licensed to operate the Platform under the applicable international gaming authority licensing framework. Where data processing activities are carried out by third-party processors on behalf of pp88 — such as payment service providers, KYC verification services, or technology infrastructure partners — those processors act under data processing agreements that bind them to confidentiality and data security obligations consistent with this Policy.

If you have questions about the identity of the data controller or wish to exercise any data subject rights described in this Policy, please contact pp88 via live chat support or by email at the address listed in Section 16 of this Policy.

3. Personal Data We Collect

pp88 collects and processes the following categories of personal data in connection with the operation of the Platform:

4. How Personal Data Is Collected

pp88 collects personal data through the following means:

• Direct provision by you: Data you submit during account registration, KYC verification, deposit or withdrawal requests, support contacts, or promotional claim processes.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session activity data via cookies and similar technologies. See Section 11 for further detail on cookies.
• Third-party sources: Identity verification data from KYC service providers; fraud risk signals from anti-fraud technology partners; payment verification data from payment processors including Touch n Go, Boost, DuitNow, and FPX participating banks.
• Publicly available sources: Sanctions lists, politically exposed person (PEP) databases, and other publicly available sources consulted as part of pp88's AML compliance obligations.

5. Purposes of Processing

pp88 processes personal data for the following purposes:

• Account management: Creating, maintaining, and managing your pp88 account, including authentication and session management.
• Service delivery: Providing access to casino games, live dealer tables, sportsbook markets, jackpot titles, and promotional offers.
• Payment processing: Executing deposit and withdrawal transactions and maintaining accurate financial records.
• KYC and identity verification: Verifying player identity and age (minimum 21 years) in compliance with licensing requirements.
• AML and fraud prevention: Monitoring transactions and account activity to detect and prevent money laundering, fraud, and other financial crime.
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling indicators and to enforce player-selected responsible gaming limits and self-exclusion periods.
• Customer support: Responding to support queries, managing complaints, and resolving disputes.
• Legal and regulatory compliance: Meeting obligations imposed by pp88's licensing authority, applicable data protection law, and other regulatory requirements.
• Platform security: Detecting and preventing unauthorised access, bot activity, and other security threats.
• Marketing communications: Sending promotional offers and bonus alerts to players who have opted in to receive such communications.
• Analytics and platform improvement: Analysing anonymised and aggregated usage data to improve Platform performance, game selection, and user experience.

6. Legal Basis for Processing

pp88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between pp88 and the Player — including account management, service delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML, and licensing obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by the Player's rights and interests.
• Consent: Processing for marketing communications, where the Player has provided explicit opt-in consent. Consent may be withdrawn at any time by contacting pp88 support or updating communication preferences in Account Settings.

7. Data Sharing and Disclosure

pp88 does not sell personal data. pp88 may share personal data with the following categories of recipient, strictly on a need-to-know basis and subject to confidentiality obligations:

• Payment service providers: Touch n Go, Boost, DuitNow, FPX banks, GrabPay, and cryptocurrency processors — for the purpose of processing transactions.
• KYC and identity verification providers: Third-party services that assist in verifying the identity and age of Players in accordance with licensing requirements.
• Fraud prevention and AML service providers: Technology platforms that assist pp88 in detecting and preventing financial crime and fraudulent activity.
• Game content providers: Certain game providers require technical data (e.g., player session tokens, game round IDs) to deliver game content and settle outcomes. These providers act under data processing agreements.
• Regulatory and licensing authorities: pp88 may be required to disclose Player data to its licensing authority or other competent regulatory bodies upon lawful request.
• Law enforcement: pp88 may disclose personal data to law enforcement or other government agencies where required to do so by applicable law or court order.
• IT infrastructure and hosting providers: Providers of hosting, database management, and security services who process data on pp88's behalf under data processing agreements.

8. International Data Transfers

The operation of the pp88 Platform involves data processing by service providers located in various jurisdictions. Where personal data is transferred to recipients outside Malaysia, pp88 implements appropriate safeguards to ensure that such transfers are conducted in compliance with applicable data protection law. These safeguards may include contractual data transfer clauses, data processing agreements, and reliance on adequacy determinations where applicable.

Players who wish to obtain further information about the specific safeguards applied to any particular data transfer may contact pp88 via live chat support.

9. Data Retention

pp88 retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. The following general retention principles apply:

• Active account data: Retained for the duration of the active account relationship and for a period of at least five (5) years following account closure, in accordance with AML and licensing record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, as required by applicable AML legislation.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Retained for a minimum of two (2) years from the date of the communication, or longer where the communication relates to an ongoing dispute or regulatory matter.
• Marketing data: Retained until consent is withdrawn or until the Player opts out of marketing communications, after which marketing data is deleted or anonymised promptly.

Where data is no longer required for any lawful purpose, pp88 will securely delete or anonymise it in accordance with its data disposal procedures.

10. Security of Personal Data

pp88 implements technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between Players and the pp88 Platform
• Encryption of sensitive data at rest within pp88 databases
• Role-based access controls restricting staff access to personal data on a need-to-know basis
• Two-factor authentication options for Player accounts
• Regular security assessments and vulnerability testing of the Platform infrastructure
• Secure data handling procedures for KYC documents and financial records
• Incident response procedures for detecting, assessing, and responding to data security incidents

Notwithstanding these measures, no system is entirely immune to security threats. Players are encouraged to use strong, unique passwords for their pp88 accounts and to enable two-factor authentication. If you suspect that your account has been compromised, contact pp88 live chat support immediately.

11. Cookies and Tracking Technologies

The pp88 Platform uses cookies and similar tracking technologies to operate core Platform functionality, enhance user experience, and support Platform security. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember Player preferences such as language settings, remembered login status, and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data about how Players interact with the Platform to support performance monitoring and service improvement. Data collected is aggregated and does not identify individual Players.
• Security cookies: Used for fraud detection and prevention, including identifying suspicious access patterns and bot activity.

pp88 does not use third-party advertising or tracking cookies that would share your data with external advertising networks. Players may adjust cookie preferences through their browser settings. Note that disabling strictly necessary cookies may impair the functionality of the Platform.

12. Your Data Protection Rights

Subject to applicable data protection law and the conditions set out therein, Players whose personal data is processed by pp88 have the following rights:

To exercise any of these rights, please contact pp88 via live chat support or by email. pp88 will respond to verified requests within thirty (30) days of receipt. pp88 may need to verify your identity before processing a data subject request.

13. Minors and Age Restriction

Age verification is applied during the account registration process and may be requested at any time during the Player's use of the Platform. Where pp88 identifies or is made aware that an account is held by or has been used by a person under 21 years of age, that account will be immediately closed, any balance handled in accordance with applicable licensing requirements, and all associated personal data deleted or retained only to the extent required by law.

If you believe that a minor has created a pp88 account or has accessed the Platform, please contact pp88 live chat support immediately.

14. Marketing Communications

pp88 may send promotional communications — including bonus offers, reload promotion alerts, new game announcements, and sportsbook event notifications — to Players who have opted in to receive such communications at registration or via Account Settings.

You may withdraw consent to receive marketing communications at any time by: updating your notification preferences in Account Settings; contacting pp88 live chat support; or replying to any promotional email with an unsubscribe request. Withdrawal of marketing consent will not affect the lawfulness of any processing carried out prior to withdrawal.

Withdrawal of marketing consent does not affect the receipt of transactional and account management communications, such as deposit confirmations, withdrawal notifications, KYC requests, and responsible gaming alerts, which are sent as part of the contractual account relationship.

15. Changes to This Privacy Policy

pp88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or pp88's data processing practices. Material changes will be communicated to registered Players via email and/or a notice on the Platform prior to taking effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the pp88 Platform following notification of any material amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with any amendment, you may request account closure by contacting pp88 support.

16. Contact for Privacy Matters

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by pp88, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the pp88 Platform — the fastest way to reach the support team
• Email: [email protected] (plain text — not a clickable link)

pp88 aims to acknowledge all privacy-related queries within two (2) business days and to provide a substantive response within thirty (30) days. For complex requests, pp88 will notify the requesting Party if additional time is required.