1. Introduction
p88my ("we", "us", "our") is committed to protecting the privacy and personal data of all Members and visitors to the p88my platform. This Privacy Policy ("Policy") describes the types of personal data we collect, the purposes for which we process it, the conditions under which we may share it, and the rights available to you as a data subject.
This Policy applies to all personal data processed in connection with your use of the p88my website, mobile platform, and any associated services. By registering an account on p88my or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
This Policy should be read alongside the p88my Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.
2. Data Controller
p88my is the data controller in respect of all personal data collected through the Platform. As data controller, p88my determines the purposes and means of processing your personal data. All queries regarding this Policy or the exercise of your data subject rights should be directed to the p88my Data Protection team via the contact details provided in Section 15 of this Policy.
3. Personal Data We Collect
p88my collects personal data in the following categories:
- Registration & Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification number (MyKad or passport number) provided at the time of account registration or during KYC verification.
- Contact Data: Email address, mobile phone number, and residential address. This data is used for account communications, security alerts, and support correspondence.
- Financial Data: Bank account numbers, e-wallet identifiers (Touch n Go eWallet, Boost), and payment card details (card type and last four digits only — full card numbers are not stored by p88my). Transaction history including deposits, withdrawals, and gaming activity.
- Technical & Usage Data: IP address, device type and operating system, browser type and version, session timestamps, pages visited, features used, and geolocation data (country and city level) derived from your IP address.
- Gaming Activity Data: Bets placed, games played, wagering amounts, win/loss history, bonus usage, and session duration records. This data is maintained for regulatory compliance, responsible gaming monitoring, and dispute resolution purposes.
- Communications Data: Records of your correspondence with p88my support, including live chat transcripts and email exchanges. These records are retained for quality assurance and dispute resolution purposes.
- KYC Documentation: Copies of identity documents uploaded during the KYC verification process, including MyKad, passport, and any supporting proof of address documents.
p88my does not collect sensitive special-category personal data (such as racial or ethnic origin, religious beliefs, or health data) except where strictly required by applicable law or regulatory guidance.
4. How We Use Your Personal Data
p88my processes your personal data for the following purposes:
- Account Management: To create and maintain your p88my account, verify your identity, process deposits and withdrawals, and provide access to the Platform's features.
- KYC & Regulatory Compliance: To verify your age (21+) and identity in compliance with our licensing authority's requirements, and to meet applicable anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
- Transaction Processing: To facilitate deposits and withdrawals in MYR via supported payment channels and to maintain accurate financial records.
- Responsible Gaming Monitoring: To identify patterns of gaming behaviour that may indicate problem gambling and to administer responsible gaming tools including deposit limits, self-exclusion, and session controls.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, money laundering, and other prohibited conduct.
- Customer Support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
- Platform Improvement: To analyse usage data in aggregate (anonymised where possible) to improve the performance, functionality, and user experience of the p88my platform.
- Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent or where we have a legitimate interest to do so. You may opt out of marketing communications at any time by contacting p88my support.
- Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from competent authorities.
5. Legal Basis for Processing
p88my processes your personal data on the following legal bases:
- Contractual necessity: Processing required to perform our obligations under the p88my Terms & Conditions, including account management, transaction processing, and KYC verification.
- Legal obligation: Processing required to comply with applicable laws and regulations, including AML/CTF obligations and licensing authority requirements.
- Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for marketing communications and optional features where you have provided explicit, informed consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
6. Sharing of Personal Data
p88my does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:
- Payment Processors: Financial institutions, e-wallet operators (Touch n Go eWallet, Boost), and card networks (Visa, Mastercard) required to process your deposits and withdrawals.
- KYC & Identity Verification Providers: Third-party identity verification service providers engaged to support the KYC verification process required by our licensing authority.
- Game Software Providers: Licensed game studio partners who supply games to the p88my platform and who may receive aggregated, anonymised game performance data.
- Regulatory Authorities: Our licensing authority and any competent government authority or law enforcement body, where disclosure is required by law, regulation, court order, or binding request.
- IT & Infrastructure Providers: Cloud hosting, cybersecurity, and technology service providers engaged to maintain and secure the p88my platform, operating under binding data processing agreements.
- Professional Advisers: Legal counsel, accountants, and auditors, subject to confidentiality obligations.
7. International Data Transfers
p88my may transfer your personal data to recipients located outside Malaysia in connection with the services described in this Policy, including cloud infrastructure providers and game studio partners. Where such transfers occur, p88my ensures that appropriate safeguards are in place, including contractual clauses that impose data protection obligations on the receiving party equivalent to those applicable to p88my. By using the Platform, you consent to international transfers of your personal data where necessary for the provision of our services.
8. Data Retention
p88my retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:
- Account and identity data: retained for the duration of your account plus a minimum of five (5) years following account closure, in compliance with AML regulatory requirements.
- Transaction records: retained for a minimum of five (5) years from the date of the transaction.
- KYC documentation: retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
- Support communications: retained for a minimum of two (2) years.
- Technical and usage data: retained in aggregate or anonymised form for platform analytics purposes.
At the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with p88my's internal data management procedures.
9. Cookies & Tracking Technologies
p88my uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used on p88my include:
- Strictly necessary cookies: Essential to the functioning of the Platform, including session management and authentication. These cookies cannot be disabled.
- Performance & analytics cookies: Used to collect anonymous information about how visitors use the Platform, including pages visited and error messages, to help improve platform performance.
- Functional cookies: Used to remember your preferences, such as language settings and display options, to personalise your experience on return visits.
You may configure your browser to decline non-essential cookies. However, disabling certain cookies may affect the functionality of the Platform. By continuing to use the p88my platform, you consent to the use of cookies as described in this Policy.
10. Your Data Subject Rights
Subject to applicable law, you have the following rights in relation to your personal data held by p88my:
- Right of access: You may request a copy of the personal data p88my holds about you.
- Right to rectification: You may request correction of inaccurate or incomplete personal data.
- Right to erasure: You may request deletion of your personal data in certain circumstances, subject to our legal retention obligations.
- Right to restriction: You may request that processing of your personal data be restricted in certain circumstances while a dispute or review is pending.
- Right to data portability: Where technically feasible, you may request a copy of personal data you have provided to p88my in a structured, machine-readable format.
- Right to object: You may object to processing of your personal data carried out on the basis of legitimate interests, including for direct marketing purposes.
- Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, please contact the p88my Data Protection team using the contact details in Section 15. p88my will respond to all verified requests within 30 days. We may require you to verify your identity before processing your request.
11. Children & Minors
The p88my platform is strictly for adults aged 21 years and above. p88my does not knowingly collect or process personal data of persons under 21. Age verification is enforced through the KYC process at registration. If p88my becomes aware that personal data has been collected from a person under 21 without verified parental consent, it will take immediate steps to delete that data and close the associated account. If you believe a minor has registered an account on p88my, please contact support immediately.
12. Data Security
p88my implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL encryption of all data in transit, access controls limiting data access to authorised personnel, regular security assessments and penetration testing, and secure data centre infrastructure with physical access controls.
While p88my takes all reasonable steps to protect your personal data, no transmission over the internet or electronic storage system can be guaranteed to be 100% secure. p88my cannot warrant the absolute security of personal data transmitted to or from the Platform. You are responsible for maintaining the confidentiality of your account credentials.
13. Third-Party Services
The p88my platform may contain links to or integrations with third-party services, including payment processors and identity verification providers. This Privacy Policy applies only to data processed by p88my. Third-party services operate under their own privacy policies, which p88my does not control. p88my is not responsible for the privacy practices of third-party services accessible from the Platform.
14. Changes to This Privacy Policy
p88my reserves the right to update this Privacy Policy at any time. Where changes are material, p88my will provide advance notice via email to your registered address or via a notification on the Platform. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the p88my platform following notification of changes constitutes your acceptance of the revised Policy.
15. Contact & Complaints
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by p88my, please contact our Data Protection team. You may reach us via live chat on the Platform (available 24/7) or by email. We aim to respond to all data-related enquiries within 72 hours.
Email: [email protected]
If you are not satisfied with p88my's response to a privacy complaint, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.