Privacy Policy PP88 – Personal Data Protection for Malaysian Members

This Privacy Policy is published by PP88 and applies to all users of the PP88 platform, including registered members, website visitors and any individuals who interact with PP88's services in Malaysia. This document transparently describes how PP88 collects, processes, stores and protects your personal data.

PP88 takes member privacy seriously. As an online betting and entertainment platform operating in Malaysia, we are subject to the Personal Data Protection Act 2010 (PDPA) and all related legislation in force in Malaysia. This Privacy Policy sets out your rights as a data subject and PP88's obligations as a responsible data processor.

By registering a PP88 account or using any of our services, you consent to your personal data being collected and used in accordance with this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to initiate the account closure process.

PP88 only collects personal data that is strictly necessary to provide members with a safe, fair and efficient service. The following categories of data are collected:

PP88 uses collected personal data solely for the following legitimate and stated purposes:

• Identity Verification & Membership: Verifying that each member meets the age eligibility requirement (18 years and above) and Malaysia residency criteria, and preventing duplicate registrations that violate PP88's Terms & Conditions.
• Financial Transaction Processing: Verifying and processing all deposits (minimum RM10) and withdrawals (minimum RM50) in MYR through approved payment methods.
• Service Delivery: Managing your PP88 account, providing access to all games including football, live casino, cricket, e-sports and slots, and resolving any disputes.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering and unauthorised use of the PP88 platform.
• Personalise Your Experience: Recommending relevant promotions, games and content based on your gaming history and preferences on PP88.
• Service Communications: Sending important notifications about your account, transactions, the latest promotions and policy updates that affect you.
• Legal Compliance: Meeting compliance obligations required by applicable Malaysian laws and regulations.

PP88 processes members' personal data on the basis of one or more valid legal grounds under Personal Data Protection Act 2010 (PDPA) Malaysia:

• Consent: You have given explicit consent for the collection and processing of your data upon registering a PP88 account.
• Contract Performance: Processing is necessary to deliver the services you have requested, including processing financial transactions and managing your account.
• Legitimate Interests: PP88 has a legitimate interest in processing data for platform security, fraud prevention and service improvement purposes — provided that such interests do not override your privacy rights.
• Legal Obligations: Some processing is required to comply with legal obligations in Malaysia, such as anti-money laundering (AML) requirements.

PP88 does not sell, rent or trade members' personal data to any third party for marketing or commercial purposes. However, under certain limited circumstances, PP88 may share data with the following parties:

• Payment Service Providers: Payment gateways including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks) receive the transaction details necessary to process your deposits and withdrawals. These providers maintain their own privacy policies and are subject to strict security standards.
• Technology Partners: Game and slots providers, such as licensed casino software companies, which require minimal information to deliver games to you. All such sharing is governed by strict confidentiality agreements.
• Authorities: Where required by law, court order, or directive from a legitimate Malaysian authority, PP88 may disclose the necessary personal data.
• Professional Advisors: Lawyers, accountants, and auditors bound by professional confidentiality obligations in the course of providing their services to PP88.

PP88 makes serious investments in its data security infrastructure to ensure that the personal and financial information of Malaysian members is consistently protected against potential threats.

• 256-bit SSL/TLS Encryption: All communications between your device and PP88's servers are encrypted using the latest SSL/TLS protocols, ensuring your data cannot be read by unauthorized parties in transit.
• Secure Data Storage: Data is stored on servers protected by layered firewalls, role-based access controls and 24/7 monitoring.
• Two-Factor Authentication (2FA): PP88 offers a 2FA feature to all members to add an extra layer of security to their accounts.
• Active Threat Monitoring: A threat detection system (SIEM) runs continuously to detect and respond to any unauthorised access attempts.
• Regular Penetration Testing: PP88 conducts regular security assessments by independent third parties to identify and address vulnerabilities before they can be exploited.
• Employee Access Controls: Only authorized PP88 staff who require access to perform their duties may view member data, and every access is logged for audit purposes.

PP88 adheres to the principle of data storage minimisation — we retain personal data only for as long as is genuinely necessary for the stated purposes or as required by Malaysian law.

• Active account: Data is retained for the duration your account remains active with PP88, plus any additional period required by law following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian tax and financial legal requirements.
• Communication logs: Customer support emails and chat records are retained for 2 years for dispute resolution purposes.
• Technical data (IP logs, sessions): Retained for 90 days for security and fraud detection purposes, then automatically deleted.
• Upon account closure: Personal data no longer required by law will be deleted or anonymized within 30 days of the account closure process being completed.

Under Personal Data Protection Act 2010 (PDPA) Malaysia, you have the following rights regarding the personal data held by PP88:

The PP88 platform uses cookies and similar tracking technologies to enhance the user experience, analyse usage patterns and maintain platform security. The following types of cookies are used:

• Essential Cookies: Required for core PP88 platform functions such as login sessions, security and transaction processing. These cookies cannot be disabled.
• Functional Cookies: Storing your preferences such as display language and account settings to deliver a more personalised experience.
• Analytics Cookies: Helping PP88 understand how members use our platform so we can continually improve our services. Analytics data is aggregated and does not identify individual users.
• Security Cookies: Used to detect suspicious activity, prevent fraud and protect your account from unauthorised access.

You may manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the PP88 platform and prevent you from logging in or making transactions.

In certain operational circumstances, PP88 members' personal data may need to be transferred to or processed by servers located outside Malaysia — for example, for cloud infrastructure services or international game providers. When such transfers occur, PP88 ensures:

• The recipient country or region has an equivalent level of data protection or higher than Malaysia's PDPA.
• A valid data transfer agreement with standard contractual clauses signed with the relevant provider.
• Transfers are carried out solely for legitimate operational purposes and limited to the minimum data required.
• All data transfers are recorded and auditable to ensure ongoing compliance.

PP88 strictly prohibits the use of our platform by individuals under the age of 18. We do not knowingly collect or process personal data of minors. The following measures are in place to ensure their protection:

• PP88's registration process requires adequate age and identity verification.
• Should PP88 discover that personal data of individuals under the age of 18 has been collected inadvertently, such data will be deleted immediately and the account will be terminated.
• Parents or guardians who suspect their child has registered on PP88 may contact us immediately at support@pp88-bangla.com for immediate investigation and action.

For any enquiries, complaints or requests relating to this Privacy Policy or how PP88 handles your personal data, please contact the PP88 Privacy Officer through the following channels: