p88my Privacy Policy

1. Introduction

p88my ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who accesses or uses the p88my website, mobile interface and associated services (the "Service"). This Privacy Policy ("Policy") describes in detail how personal data is collected, used, stored, shared and protected in connection with your use of the Service.

This Policy applies to all registered and unregistered visitors of p88my, including users based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other parts of Malaysia. It should be read alongside the p88my Terms and Conditions, which set out the rules governing use of the Service.

p88my may update this Policy from time to time. Material changes will be communicated to registered users via the email address on record. The current version of this Policy is always available on this page with the effective date clearly stated above.

2. Definitions

The following terms are used throughout this Policy with the meanings assigned below.

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, device identifiers and payment reference details.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, disclosure, deletion or any combination thereof.
• "Data Controller" — p88my, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of p88my under documented instructions, such as a payment service provider or cloud infrastructure operator.
• "Sensitive Data" — a subset of Personal Data that warants heightened protection, including financial account details and government-issued identification numbers.
• "Cookie" — a small text file placed on your device by the p88my platform to support session management, analytics and user preferences.
• "KYC" — Know Your Customer; the identity and age verification procedures p88my conducts in accordance with applicable requirements.

3. Data We Collect

p88my collects Personal Data through several channels, as described in the table below. We collect only information that is reasonably necessary to deliver, secure and improve the Service for Malaysian users.

We do not intentionally collect Sensitive Data beyond what is required for identity verification, payment ownership checks or legal compliance. p88my does not collect data relating to racial or ethnic origin, political opinions, health conditions or biometric data outside of government-issued document verification photographs used solely for identity confirmation.

4. Data Processing

Personal Data collected by p88my is processed for the following purposes:

• Account management: Creating, maintaining and securing your p88my account, including authentication and access controls.
• Transaction processing: Facilitating MYR deposits and withdrawals through GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong and other listed providers.
• Identity and age verification (KYC): Confirming that you are aged 21 or above and that your payment methods are in your own name.
• Legal compliance: Meeting obligations under applicable anti-money laundering, fraud prevention and data protection requirements.
• Responsible gambling: Monitoring account activity to identify patterns that may indicate problem gambling and enabling limit tools or self-exclusion where applicable.
• Customer support: Responding to account queries, payment issues and general support requests submitted through the p88my support channels.
• Platform security: Detecting and preventing fraud, account takeover attempts, multi-accounting and automated bot activity.
• Service improvement: Analysing aggregated, anonymised usage data to improve navigation, performance and feature design across the p88my platform.
• Communications: Sending account notices, security alerts, policy update notifications and, where consent has been given, promotional communications.

5. Legal Basis for Processing

p88my processes your Personal Data one or more of the following lawful bases, depending on the specific activity:

• Contractual necessity: Processing required to perform our obligations under the p88my Terms and Conditions, including account creation, transaction processing and dispute resolution.
• Legal obligation: Processing necessary to comply with applicable laws, including KYC requirements, anti-money laundering obligations and data retention mandates.
• Legitimate interests: Processing carried out in the legitimate interests of p88my or third parties, provided those interests are not overridden by your rights — for example, fraud detection, platform security and responsible gambling monitoring.
• Consent: Where you have provided clear, informed consent to a specific processing activity, such as receiving promotional communications. You may withdraw consent at any time by contacting [email protected].

6. Data Sharing

p88my does not sell your Personal Data to third parties. We may share Personal Data with carefully selected parties in the following circumstances:

• Payment service providers: To process deposits and withdrawals via the payment channels listed on the p88my platform. Each provider operates under its own data protection practices.
• Identity verification services: Third-party KYC and document verification platforms engaged to confirm your identity, age and payment ownership.
• Cloud and infrastructure providers: Data Processors that host p88my systems under contractual data processing agreements that restrict use of your data to service delivery only.
• Fraud prevention and security partners: Services that assist in detecting unusual account activity, bot access or misuse of promotional offers.
• Legal and regulatory authorities: Where disclosure is required by law, court order or a directive from a competent regulatory authority.
• Responsible gambling operators: Where self-exclusion information is required to be shared with applicable multi-operator exclusion schemes.

All third parties who process Personal Data on behalf of p88my are required to handle it in a manner consistent with this Policy and to implement appropriate technical and organisational safeguards.

7. Payment Data

When you make a deposit or request a withdrawal through p88my, financial data is transmitted to and processed by the relevant payment provider, which may include GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX, or a Malaysian bank such as Maybank, CIMB, Public Bank or Hong Leong. p88my retains transaction reference information and outcome records for KYC, fraud prevention and regulatory purposes.

All payment instruments used on p88my must be registered in your own name. We verify this as part of our standard KYC and withdrawal review process to protect against third-party misuse of payment accounts.

8. Cookies & Tracking Technologies

p88my uses cookies and similar tracking technologies to support essential site functions, maintain your login session, analyse how the Service is used and deliver a consistent experience across desktop and mobile devices.

Types of cookies used by p88my

• Essential cookies: Required for core functionality including authentication, session management and security checks. These cannot be disabled without impairing Service use.
• Functional cookies: Store preferences such as language settings and interface configurations to personalise your experience.
• Analytics cookies: Collect anonymised and aggregated data about page visits, navigation paths and interaction patterns to help us improve the p88my platform.
• Security cookies: Used to detect fraud attempts, bot traffic and account takeover signals.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the performance or availability of specific features on p88my.

9. Data Retention

p88my retains Personal Data for as long as is necessary to fulfil the purpose for which it was collected, to maintain the contractual relationship with you as an account holder, or to comply with applicable legal, regulatory and audit obligations.

As a general guide, the following retention periods apply, subject to any overiding legal requirement:

• Account and identity records: Retained for the duration of your account and for a minimum period thereafter in accordance with applicable obligations.
• Transaction records: Retained for a minimum period required under applicable financial and anti-money laundering regulations.
• Support correspondence: Retained for a reasonable period to support follow-up, dispute resolution and quality review.
• Marketing consent records: Retained until consent is withdrawn, plus a brief verification period.
• Self-exclusion and responsible gambling records: Retained for an extended period to prevent circumvention of exclusion commitments.

When Personal Data is no longer required, p88my will delete or anonymise it in manner that prevents recovery and re-identification.

10. Security Measures

p88my implements a range of technical and organisational safeguards to protect Personal Data from unauthorised access, accidental loss, alteration or disclosure. These measures include, but are not limited to:

• Encrypted data transmission using current TLS standards for all communications between your device and the p88my platform.
• Access controls limiting internal access to Personal Data to authorised personnel on a need-to-know basis.
• Hashing and salting of authentication credentials so that passwords are never stored in plaintext.
• Regular security assessments and vulnerability reviews of platform infrastructure.
• Monitoring systems designed to detect anomalous login patterns, brute-force attempts and suspicious account activity.

11. User Rights

Subject to verification of your identity and applicable legal restrictions, you have the following rights in relation to Personal Data that p88my holds about you:

• Right of access: Request a copy of the Personal Data p88my holds about you and information about how it is processed.
• Right to rectification: Request correction of inaccurate or incomplete Personal Data in your account records.
• Right to erasure: Request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected and where no legal retention obligation applies.
• Right to restriction: Request that p88my restricts processing of your Personal Data in certain circumstances, for example while a correction request is assessed.
• Right to object: Object to processing based on legitimate interests, including direct marketing communications.
• Right to data portability: Request that certain Personal Data be provided to you in a structured, machine-readable format where technically feasible.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the legality of prior processing.

To exercise any of these rights, please contact p88my support at [email protected] with the subject line "Privacy Rights Request" and a clear description of your request. p88my will respond within a reasonable period following verification of your identity.

12. Minors & Age Verification

p88my is strictly an adult platform. The Service is intended solely for individuals who are aged21 years or above. We do not knowingly collect Personal Data from persons under the age of 21.

As part of the account registration and KYC process, p88my takes steps to verify the age of all users. If we become aware that a user is under the minimum age, the associated account will be suspended immediately, any funds deposited will be returned using the original payment method and all related Personal Data will be deleted in accordance with our retention policy.

13. International Data Transfers

In connection with the operation of the p88my platform, Personal Data may be transferred to and processed in jurisdictions outside Malaysia, for example where cloud infrastructure or third-party service providers operate their systems. Where such transfers occur, p88my will put in place appropriate safeguards to ensure that your Personal Data is protected to a standard consistent with this Policy.

These safeguards may include contractual data processing agreements with third-party recipients that bind them to handle your Personal Data only for specified, limited purposes and in a manner consistent with applicable data protection principles.

14. Policy Amendments

p88my reserves the right to amend this Privacy Policy at any time. Revisions will be published on this page with an updated effective date. Where amendments are material — for example, a change to the categories of data collected or a new sharing arrangement — p88my will notify registered users via their registered email address no fewer than seven calendar days before the change takes effect.

Continued use of the Service following the publication of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, you must discontinue use of the Service and may request account closure by contacting our support team.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data rights request, or need to report a privacy concern related to your p88my account, please reach our team through the channel below. Do not include your account password, one-time PIN or complete payment credential in your message.

For the fastest resolution of a data rights request, please include your registered email address, a brief description of the request and, where applicable, the specific data category involved. p88my will acknowledge your request and provide a substantive response within a reasonable timeframe after completing identity verification.