Privacy Policy PG88 – Our Commitment to Protecting Your Data

1. Introduction and Scope of This Privacy Policy

PG88 ("we", "pg88" or "platform") takes user privacy seriously. This Privacy Policy ("Policy") explains how we collect, use, disclose, store, and protect your personal information when you use the pg88 platform at pg88-win.net and all related services.

This policy applies to all pg88 platform users, including website visitors, registered members, active players, and any individual who interacts with our services in any capacity. It covers all platform activities, including account registration, deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, Live Casino games, Sports Betting and badminton, as well as communications with our support team.

The pg88 Privacy Policy is developed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs the collection, processing, and use of personal data in commercial transactions in Malaysia. We operate according to the core PDPA principles of fairness, lawfulness, adequacy, accuracy, non-excessiveness, purpose limitation, security, and accessibility.

2. Types of Personal Data We Collect

PG88 collects personal data necessary to deliver our services safely and effectively. The data we collect can be grouped into several categories:

Registration & Identity Data

• Full name as stated on your Malaysian identification card (MyKad)
• An active Malaysian phone number
• Email address
• Date of birth (for 18+ age verification)
• Passwords (stored in an unreadable hashed format)

Identity Verification (KYC) Data

• Copy of Malaysian identity card (MyKad) — front and back
• Recent bank statement or proof of address
• Selfie photo for facial biometric verification (if required)

Financial & Transaction Data

• Bank account number or eWallet details (Touch 'n Go, GrabPay, Boost, ShopeePay)
• Records of all deposits and withdrawals
• Complete transaction history within the platform
• Records of all betting and gaming activity

Technical & Usage Data

• IP address and device information (device type, operating system, web browser)
• Geolocation data (state and city only, not precise coordinates)
• Platform activity logs, including login timestamps, pages visited, and actions taken
• Cookie data and session identifiers

3. How We Use Your Personal Data

PG88 uses the personal data collected solely for the purposes stated below. We do not use your data for any purpose beyond what is listed here without first obtaining your additional consent.

1. Identity Verification and Account Security: Ensuring every pg88 account is owned by a verified individual aged 18 and above. KYC verification is mandatory to protect members from identity misuse and to meet anti-money laundering legal obligations.
2. Deposit and Withdrawal Processing: All financial transactions are processed securely through your chosen Malaysian payment method. Your financial data is required to ensure funds reach the correct account every time, without delay.
3. Platform Service Provision: Manages all aspects of your gaming experience on pg88, including Live Casino, slots, Sports Betting, badminton, and E-Sports. Activity data is used to display your betting history and allow you to review your game records.
4. Customer Support: This enables pg88's Malay-speaking support team to provide effective, personalised assistance. Previous communication records help us understand the context of your issue more quickly.
5. Platform Security & Fraud Prevention: To detect and prevent fraud, money laundering, multiple account abuse, and any attempts to exploit the platform. This protects all members who play fairly at pg88.
6. Legal Compliance: To fulfil the reporting and record-keeping obligations required under Malaysian law, including PDPA 2010 and applicable anti-money laundering legislation.
7. Experience Personalisation: Tailoring promotional displays, game recommendations, and bonus offers based on your preferences and gaming activity, so your pg88 experience feels more relevant and enjoyable.
8. Service Communications: Sends important notifications about your account, transactions, promotions, and policy changes via SMS, email, or in-platform notifications. You can manage your marketing communication preferences through your account settings.

4. Third-Party Data Sharing and Disclosure

PG88 does not sell, rent or disclose members' personal data to third parties for marketing or commercial purposes under any circumstances. However, in the course of operating the platform, we may need to share limited data with the following categories of third parties — and this is done solely on a legitimate need-to-know basis:

• Payment Service Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX via Maybank2u and CIMB Clicks receive only the minimum transaction data required to process your deposits and withdrawals. This data is protected under strict confidentiality agreements.
• Game Providers: Providers such as Evolution Gaming, Pragmatic Play Live, and Microgaming may receive session identifiers that are technically required to run the games. They do not receive your full personal identity information.
• KYC and Identity Verification Services: Authorised third-party providers assist us in verifying members' identity documents. They are subject to the same strict confidentiality obligations as we are.
• Malaysian Authorities: PG88 will disclose personal data to Malaysian authorities — including the police, Bank Negara Malaysia, or relevant tribunals — when required to do so by a court order, warrant, or other valid legal obligation.
• Auditors & Professional Consultants: Accountants, lawyers and security consultants acting in a professional capacity may be granted limited access to data for audit, legal advice or security assessment purposes. They are bound by professional confidentiality obligations.

In all data sharing arrangements described above, pg88 ensures that only the minimum necessary data is disclosed, and all recipients are bound by comprehensive data protection agreements.

5. Cookies, Tracking Technologies & Session Data

PG88 uses cookies and similar tracking technologies to enhance your platform experience, maintain session security, and help us understand how the platform is used so we can continue to improve it.

Types of cookies used by pg88:

• Essential Cookies (Required): These cookies are required for the platform to function properly. They include login session identifiers, CSRF security tokens, and basic preference cookies. Without them, you will not be able to log in or play on pg88. These cookies cannot be disabled.
• Functional Cookies: Stores your preferences such as language selection, display settings, and game preferences so you do not need to reconfigure them each time you log in. These cookies can be disabled, though your experience may be affected.
• Analytics Cookies: Helps pg88 understand how members use the platform — which pages are visited most often, how long sessions last, and which features are most popular. This data is used for overall platform improvement and is not linked to your personal identity.
• Security Cookies: To detect suspicious login attempts, recognise your usual devices, and help prevent unauthorised access to your account. These cookies are a key component of pg88's security system.

You can manage cookies through your web browser settings. However, disabling essential cookies will affect your ability to use the pg88 platform fully. A cookie notice is displayed on your first visit to pg88-win.net, and your preference is saved for future sessions.

6. PG88 Data Security Measures

Pg88 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, disclosure, alteration, or destruction. This is not merely a promise — it is the actual infrastructure we build and maintain every day.

Key security measures we have implemented:

• Data Encryption in Transit: All communications between your browser and pg88's servers are secured with TLS 1.3 protocol and 256-bit SSL encryption. No sensitive data is transmitted in plain text.
• Data Encryption at Rest: Sensitive data — including bank details, identification card numbers, and passwords — is stored in encrypted format using AES-256 algorithms. Passwords are further secured with bcrypt hashing and a unique salt for each account.
• Internal Access Controls: Access to member data within pg88's internal systems is restricted to staff with specific job requirements only, applying the principle of least privilege. All internal access is logged and audited on a regular basis.
• Two-Factor Authentication (2FA): All pg88 internal admin accounts are protected with two-factor authentication. For member accounts, 2FA is available as an option and is strongly encouraged.
• 24-Hour Monitoring: Our automated monitoring system detects and flags unusual activity in real time, including repeated failed login attempts, access from unfamiliar locations, and suspicious transaction patterns.
• Regular Penetration Testing: pg88 conducts regular security testing with independent security specialists to identify and address any vulnerabilities before they can be exploited.

While pg88 takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. We encourage you to take your own security precautions as well, such as using a strong password and keeping your login credentials private.

7. Data Retention Period

PG88 retains your personal data only for as long as it is needed for the purposes set out in this Policy or to fulfil applicable legal obligations. Once data is no longer required, it will be securely deleted or anonymised in accordance with established procedures.

Pg88 general data retention principles:

• Active account data is retained for as long as your account remains active and in use.
• After account closure, financial and identity data is retained for seven years to meet Malaysia's anti-money laundering legal reporting requirements and tax audit obligations.
• Technical data such as access logs and session records are retained for two years for security and dispute resolution purposes.
• Customer support communication records are retained for three years.
• Data collected during an unsuccessful KYC process is retained for 90 days before being securely deleted.

8. Your Personal Data Rights

As a pg88 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

• Right to Access: You have the right to obtain a copy of the personal data we hold about you. Requests can be made via live chat or email and will be processed within 14 working days.
• Right to Rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Basic details such as your phone number and email address can be updated directly in your account settings.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. However, this right is not absolute — we may need to retain certain data to meet legal obligations even when a deletion request has been made.
• Right to Restrict Processing: You may request that we restrict the processing of your data in specific situations, for example while you are disputing the accuracy of your data or while we are reviewing your objection request.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service, where this is technically feasible.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time. An unsubscribe option is available in every marketing email we send.

To submit any request relating to your personal data rights, contact pg88's Data Protection Officer via email support@pg88-win.net with the subject line "Personal Data Rights Request". Please include your pg88 account number and a clear description of your request. We will verify your identity before processing any data request to ensure the security of your account.

9. Protection of Children's Data

The pg88 platform is exclusively for individuals aged 18 and above. We do not knowingly collect, store, or process the personal data of any individual under the age of 18.

Pg88 applies a strict age verification process during registration, including date of birth confirmation and a KYC process that requires valid Malaysian identity documents. Should we discover or become aware that a minor's data has been inadvertently collected, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and believe that your child under the age of 18 has registered or used the pg88 platform, please contact us immediately via live chat or email at support@pg88-win.net. We will take prompt action to investigate and resolve the matter.

10. Amendments to This Privacy Policy

PG88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements in how we serve our users. The last updated date at the top of this page will always be kept current.

When we make material changes to this Policy — particularly changes that affect how we use your data or your rights — we will notify you via:

• A prominent notification on the pg88 platform homepage for at least 30 days
• Email to your registered address
• In-platform notification upon your next login

Your continued use of the pg88 platform after any changes take effect constitutes your acceptance of the amended Policy. If you do not agree with the changes, you have the right to close your account and withdraw all remaining balances before the new Policy comes into force.

We encourage you to review this page periodically, especially before making any deposit or significant transaction, to ensure you are always using the platform with a full understanding of how your data is handled.

11. How to Contact Us Regarding Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how pg88 handles your personal data, we strongly encourage you to reach out to us. We are committed to responding to every enquiry thoroughly and promptly.

Pg88's Data Protection Officer can be reached through the following channels:

• Email: support@pg88-win.net (use the subject line "Privacy Policy Enquiry" or "Data Rights Request")
• Live Chat: Available 24 hours a day, 7 days a week, directly on the pg88-win.net platform
• Target Response Time: 2 hours via live chat, 24 hours via email for general enquiries
• Official Data Request: Resolved within 14 business days upon identity verification

If you are not satisfied with pg88's response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia (PDPA Commissioner) or the relevant regulatory authority under applicable Malaysian law.