Privacy Policy pn88 — Malaysia User Data Protection

Pn88 takes our responsibility to every user's privacy seriously. We understand that your trust in us depends not only on the games we offer — but also on how we handle the personal information you share with us.

This Privacy Policy is written in clear, plain language so every pn88 member knows exactly what happens to their data. We do not hide important details in fine print or complex legal language.

This policy applies to all users who access the pn88 platform through the official website at pn88.bio, the pn88 mobile app for Android and iOS, and any official pn88 communication channels including customer support and marketing emails.

Pn88 collects information from you through various means to provide a secure, efficient and personalised service. Below are the categories of information we collect:

Information you provide directly:

• Identity information: Full name, date of birth, identity card or passport number, gender and nationality.
• Contact details: Email address, mobile phone number, and mailing address.
• Financial information: Bank account numbers, credit/debit card details (processed securely through trusted third-party payment providers) and transaction history.
• Verification documents: Copies of your ID card, passport, utility bill, or other documents required for the KYC (Know Your Customer) process.
• Account preferences: Language settings, notifications, and game preferences you have selected.

Automatically collected information:

• Device data: Device type, operating system, browser version, screen resolution, and unique device identifier.
• Usage data: Pages visited, time spent, in-game actions, betting patterns, and account activity history.
• Location data: IP address, estimated geographic location, and time zone for security and compliance purposes.
• Technical data: Error logs, crash reports and diagnostic information for platform improvements.

Every piece of information we collect is used for a clear and legitimate purpose. pn88 uses your data for the following:

• Account management: Creating and managing your account, processing registration and verifying your identity through the KYC process.
• Transaction processing: Processing deposits, withdrawals and all financial transactions securely and accurately.
• Platform security: Detecting and preventing fraud, money laundering, account manipulation and other suspicious activity.
• Legal compliance: Fulfilling reporting obligations to relevant authorities in accordance with applicable law.
• Service improvements: Analysing usage patterns to improve the user experience, platform stability and game quality.
• Customer support: Helping you resolve issues, answer enquiries and provide technical assistance.
• Marketing communications: Sending information about promotions, bonuses and platform updates — only to users who have given their consent.
• Responsible gaming: Monitoring betting patterns to identify signs of problem gambling and provide appropriate support.

Pn88 does not sell, rent or trade your personal information to any third party. However, there are limited situations where we may need to share your information:

• Service providers: Companies that help us operate the platform, such as payment providers, game providers, and IT support services. All such parties are bound by strict confidentiality agreements.
• Legal authority: When required by court order, subpoena, or a lawful request from law enforcement agencies or regulatory bodies.
• AML compliance: Information required for anti-money laundering (AML) and counter-terrorism financing (CFT) reporting to the relevant authorities.
• Business transfers: In the event of a merger, acquisition, or asset transfer, your data may be transferred to the successor entity, subject to an equivalent privacy policy.

In all of the above situations, pn88 ensures that only the minimum necessary information is shared, and that recipients are obligated to protect that information.

Your data security is pn88's top priority. We implement multiple layers of technical and organisational protection to keep your information safe at all times:

• Data encryption in transit: All communications between your device and pn88 servers are protected by TLS 1.3 encryption and regularly updated 256-bit SSL certificates.
• Data encryption at rest: Sensitive data stored in our databases is encrypted using AES-256 to prevent unauthorized access.
• Access control: Only authorized personnel have access to user data, and all access is logged and continuously monitored.
• Two-factor authentication: pn88 internal systems require multi-factor authentication for all access to systems containing user data.
• Continuous monitoring: Our systems are monitored 24/7 to detect any unusual activity or intrusion attempts.
• Security audits: Penetration testing and security audits are conducted periodically by independent security experts.

Pn88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can control and manage cookies through your browser settings. However, disabling essential cookies may affect the functionality of the pn88 platform. For more information on managing cookies, refer to your browser's documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and pn88's internal policies, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the pn88 support team via live chat or email at [email protected]. We will process your request within 14 business days.

Pn88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required to comply with our legal obligations.

• Active account data: Retained for as long as your account remains active on the pn88 platform.
• Transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• Security logs: Retained for 2 years for security incident investigation purposes.
• Customer support data: Retained for 3 years after the last interaction.
• After account closure: Personal data will be deleted or anonymized within 90 days of account closure, unless there is a legal obligation to retain it for longer.

Pn88 strictly prohibits use of the platform by individuals under 18 years of age. We do not knowingly collect or process personal data from minors.

If we discover that personal information has been collected from a minor without our knowledge, we will take immediate steps to delete that information and close the associated account.

Parents or guardians who suspect their child has registered or used the pn88 platform are requested to contact our support team immediately at [email protected] so that appropriate action can be taken.

Pn88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technologies used.

• Significant changes will be communicated to you via your registered email or in-platform notification at least 14 days before taking effect.
• Minor changes or typo corrections may be enforced without prior notice.
• The "last updated" date at the top of this document will always reflect the latest version.
• Continued use of the platform after changes take effect will be considered acceptance of the updated policy.

We encourage you to check this page regularly so you always know how we are protecting your privacy.

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, the pn88 team is ready to assist. We take every privacy inquiry seriously and are committed to responding within a reasonable timeframe.

• Privacy email: Send privacy-related inquiries to [email protected] with the subject line "Privacy Inquiry".
• Live Chat: Contact us directly via the in-platform live chat for urgent inquiries.
• WhatsApp: You can also reach us via WhatsApp for your convenience.

Typical response times are within 1–3 business days for general enquiries, and 14 business days for formal data rights requests.