PG88 Malaysia Privacy Policy – Member Personal Data Protection

This Privacy Policy is published by PG88 ("we", "our platform") and applies to all users who access or use the pg88 digital entertainment platform via the website https://pg88-play.net, the mobile app, or any other channel we provide.

We understand that entrusting your personal information to any digital platform — especially one involving financial transactions such as deposits via DuitNow, Touch 'n Go eWallet or GrabPay — requires a great deal of trust. That is why pg88 invests seriously in data security infrastructure and maintains a strict, transparent, and accountable privacy policy.

This policy details the types of data we collect, why it is collected, how it is used and stored, and what rights you have over that data. We believe transparency is the foundation of trust – and trust is the foundation of our relationship with every member. pg88 across Malaysia.

PG88 collects various types of information depending on how you interact with our platform. Below is an overview of the data we collect and why it is needed:

We only collect data that is strictly necessary for the stated purposes. PG88 does not collect sensitive personal data such as your health information, religious beliefs or political views.

All data collected by pg88 used for legitimate and limited purposes. Below are the primary ways your data is used:

• Platform Operations & Account ManagementCreating and managing your pg88 account, processing registrations, verifying identity for KYC (Know Your Customer) purposes, and enabling access to all games — from blackjack and baccarat at the Live Casino to Malaysia Super League football betting and MPL e-sports.
• Financial Transaction ProcessingProcessing your deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX, or CIMB Clicks; processing withdrawal of winnings to your Malaysian bank account or e-wallet; and maintaining accurate financial records for every transaction.
• Security & Fraud DetectionDetecting and preventing fraudulent activity, money laundering, multi-accounting, bot usage and any activity that violates pg88's terms of use. This includes behavioural pattern analysis and anomaly detection in account activity.
• Customer SupportProviding 24/7 technical support and customer service in Bahasa Melayu, resolving disputes related to games or transactions, and maintaining communication history for future reference.
• Platform EnhancementsAnalysing usage patterns to improve the pg88 platform's interface and user experience, developing new features tailored to the needs of Malaysian players, and testing technical changes prior to full release.
• Legal ComplianceFulfilling all applicable legal compliance obligations in Malaysia, including PDPA requirements, anti-money laundering (AML) regulations, and any mandatory reporting obligations to the relevant authorities.

PG88 does not sell, rent, or trade members' personal data to any party for marketing or commercial purposes. However, there are limited circumstances in which we may need to share your data with certain parties:

• Payment Service ProvidersRequired transaction information is shared with registered payment processors – such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and other gateway providers – solely for the purpose of processing your transactions. All such providers are bound by strict data protection agreements with pg88.
• Platform Technology ProvidersLimited technical data may be shared with software providers that assist in running the pg88 platform — such as hosting service providers, fraud detection systems, and analytics tools. All such parties are bound by confidentiality agreements.
• Legal AuthoritiesPG88 may be required to disclose information to the relevant authorities (police, courts, Malaysian regulatory agencies) when mandated by law or a valid court order. We will not disclose more than what is legally required.

Member personal data pg88 stored on secure servers with multi-layered protection. Below is an overview of our data security infrastructure:

• All data in transit is protected with 256-bit SSL/TLS encryption — covering every login session, every deposit and withdrawal transaction, and every interaction within the pg88 platform.
• pg88 member passwords are never stored in plain text. We use a strong one-way hashing algorithm so that even in the event of a server compromise, your password remains secure.
• pg88's server infrastructure is housed in data centres equipped with physical access controls, 24/7 CCTV surveillance, fire suppression systems and power redundancy to ensure continuous data availability and security.
• All databases containing pg88 members' personal data are encrypted at rest using AES-256 encryption for an additional layer of protection.
• Security penetration testing is conducted regularly by independent cybersecurity experts to identify and address any vulnerabilities in pg88's systems before they can be exploited.

Data Retention Period: PG88 retains member personal data for as long as necessary to fulfil the purposes for which it was collected and to meet applicable legal obligations. Data for active accounts is retained for the duration the account remains active. Following account closure, key data such as transaction records is retained for a minimum of 7 years for Malaysian legal compliance purposes, before being securely deleted.

Platform pg88 uses cookies and similar tracking technologies to enhance the user experience and platform security. Here is an overview of the types of cookies we use:

• Essential CookiesThese cookies are essential for the basic functionality of the pg88 platform — including login session management, platform security, and remembering your language preferences. Disabling them would significantly impair the platform's functionality.
• Performance CookiesUsed to analyse how players interact with the pg88 platform – the most frequently visited pages, time spent on each game (blackjack, baccarat, roulette), and navigation paths. This data helps us improve the platform's design and functionality.
• Functional CookiesSaving your personal preferences such as language settings, favourite game tables, and display options to provide a more personalised and consistent experience each time you log in to your pg88 account.
• Security CookiesHelping to detect and prevent fraudulent activity, including suspicious login attempts from unusual locations or usage patterns inconsistent with your account's normal behaviour.

You can manage and control cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality or user experience of the platform. pg88 you.

As the pg88 involves real-money financial transactions — including deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX, as well as withdrawals to your Malaysian bank account — we take additional security measures to protect your financial data:

• Your bank account or e-wallet number stored in the pg88 system is tokenised – meaning the actual number is never stored in plain text in our database.
• All payment processing via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost and ShopeePay is handled by licensed and regulated payment gateway providers in Malaysia. PG88 does not store your credit or debit card details directly.
• Every deposit and withdrawal transaction is fully recorded in your pg88 account history for complete transparency, allowing you to verify all transactions made.
• Withdrawals may only be made to the same payment method used for the deposit, or to an account that has undergone a valid identity verification (KYC) process. This is a protective measure to prevent unauthorised withdrawals to third-party accounts.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a member pg88 have the following rights regarding the personal data we hold about you:

To exercise any of the above rights, please contact our privacy team by email at support@pg88-play.net with the subject line "PDPA Data Rights Request". Include your pg88 username and a clear description of your request. We will process all valid requests within 14 business days.

Platform pg88 is intended exclusively for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. This is a non-negotiable commitment within our privacy policy.

• All pg88 account registrations require age verification. We use multiple methods to confirm that applicants are 18 years of age or older, including Malaysian phone number verification and a KYC process where required.
• Should pg88 discover that personal data belonging to an individual under the age of 18 has been inadvertently collected, we will take immediate steps to delete that data and close the relevant account.
• Parents or guardians who believe their underage child has registered on the pg88 platform are urged to contact us immediately at support@pg88-play.net so that we can take the appropriate remedial action.

PG88 may send you marketing communications about the latest promotions, new bonuses, special sporting events (such as the Malaysia Open badminton, Malaysia Super League finals or major EPL matches) and newly launched platform features.

• Marketing communications will only be sent to you if you have given your consent at the time of registration or at any point thereafter through your pg88 account settings.
• You may withdraw your consent to receive marketing communications at any time by clicking the "Unsubscribe" link in any pg88 marketing email, or by updating your communication preferences in your account settings.
• Even if you opt out of marketing communications, pg88 will still send you important service messages — such as transaction confirmations, account security alerts, and notices of material changes to our terms.

PG88 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, applicable laws in Malaysia, or the way we handle members' personal data.

When we make material changes to this Privacy Policy, we will notify you through:

• A notification will be displayed in your pg88 account upon your next login after the changes have been made.
• A notification email sent to your registered address for changes deemed material or significant to the way your data is processed.
• An update to the "Effective Date" displayed at the top of this Privacy Policy page.

Continued use of the pg88 after a Privacy Policy change is considered your acceptance of those changes. If you do not agree with the changes made, you have the right to close your pg88 account and request deletion of your data in accordance with the procedure set out in Section 8.

If you have any questions, concerns or requests regarding this Privacy Policy or how pg88 handles your personal data, we encourage you to contact us directly:

• Privacy EmailSend your enquiry to support@pg88-play.net with the subject line "Privacy Policy Enquiry" or "PDPA Data Rights Request". Our team will respond within 24 hours for general queries, or within 14 working days for formal data access or deletion requests.
• 24/7 Live ChatThe pg88 support team, available 24/7 in Bahasa Malaysia, can also assist you with any privacy or account security enquiries through the live chat feature within the platform.
• Response TimeWe are committed to responding to all privacy enquiries within 24 hours for general queries, and within 14 working days for formal data rights requests under the PDPA.

PG88 takes every privacy complaint and request seriously. If you feel that we have not handled your personal data appropriately after contacting us, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (JPDP), the regulatory body overseeing PDPA compliance in Malaysia.