Privacy Policy — Puss88 Online Gaming Platform

Introduction

Puss88 ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of every individual who visits, registers on, or transacts through our platform at https://puss88.cam. This Privacy Policy ("Policy") describes in detail how we collect, use, store, process, and protect personal information connection with the delivery of our online gaming and sports betting services to players in Malaysia and internationally.

This Policy applies to all personal data collected through the puss88 website, any associated mobile interfaces, customer support communications, promotional activities, and any other interaction you have with the Platform. It should be read alongside our Terms and Conditions, which govern your contractual relationship with puss88.

By registering an account with puss88, depositing funds, or otherwise using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein. If you do not agree with this Policy, you must refrain from using the Platform.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information that identifies or can reasonably be used to identify a natural person, directly or indirectly. This includes names, identification numbers (e.g., Malaysian IC/MyKad number), email addresses, IP addresses, transaction records, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, transmission, erasure, or destruction, whether automated or manual.
• "Data Controller" — Puss88, which determines the purposes and means by which your personal data is processed under this Policy.
• "Data Processor" — A third party that processes personal data on behalf of puss88, pursuant to a binding data processing agreement (e.g., a payment gateway or cloud hosting provider).
• "Consent" — A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC" — Know Your Customer; the process of verifying a player's identity and age before enabling full account functionality, including withdrawals.
• "Cookies" — Small text files placed on your device by the Platform to store preference, session, and analytical data.
• "Third Party" — Any person or entity other than you or puss88, including payment service providers, analytics vendors, and regulatory authorities.

Personal Data We Collect

Puss88 collects only the personal data that is necessary for the lawful, efficient, and secure delivery of our gaming services. The categories of personal data we collect include, but are not limited to, the following:

3.1 Registration & Account Data

• Full legal name
• Date of birth (to verify age eligibility — 21+ only)
• Residential address (including city, state, and postcode — e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru)
• Email address
• Mobile phone number
• Username and encrypted password hash
• Preferred currency (MYR for all Malaysian accounts)

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (Malaysian MyKad, Passport, or Driver's License)
• Proof of address documentation (utility bills, bank statements — issued within 3 months)
• Selfie photographs submitted for liveness verification
• Supplementary documentation requested for AML compliance purposes

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and methods (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, bank wire)
• Payment method identifiers (e.g., partial account numbers, e-wallet reference IDs)
• Transaction history and account balance records
• Bonus claims, wagering activity, and gaming outcomes

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Browser type, version, and operating system
• Device identifiers and screen resolution
• Session duration, pages visited, and click-through behaviour
• Game session logs, bet history, and in-platform navigation patterns

3.5 Communications Data

• Content of live chat transcripts and email correspondence with customer support
• Responses to surveys, feedback forms, or promotional communications
• Details of complaints or disputes submitted to puss88

How We Collect Your Personal Data

Puss88 collects personal data through the following primary channels:

• Direct submission: Information you provide when registering an account, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technical collection: Data collected automatically when you interact with the Platform, including log files, cookies, web beacons, and similar tracking technologies.
• Third-party sources: Where necessary for fraud prevention, AML compliance, or age verification, we may receive supplementary data from identity verification services, payment processors, and fraud intelligence networks.
• Publicly available sources: Information lawfully accessible from public records, electoral registers, or publicly available social profile data, used solely for identity verification or fraud detection purposes.

Data Processing & Use

We process your personal data for the following specific, lawful, and documented purposes:

Legal Basis for Processing

Puss88 processes personal data only where a valid legal basis exists under applicable data protection law. The legal bases we rely upon are:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you as a registered player, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable law, including KYC identity verification, anti-money laundering (AML) checks, age verification, and regulatory reporting.
• Legitimate Interest: Processing for purposes that are in puss88's legitimate operational and security interests and do not override your fundamental rights — such as fraud prevention, platform security, and analytics.
• Consent: Processing for purposes where we have obtained your explicit consent — primarily direct marketing communications. You may withdraw your consent at any time by contacting support or using the unsubscribe function in any marketing email.

Data Sharing & Disclosure

Puss88 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Service Providers: We share transaction-relevant data with payment processors including Touch 'n Go eWallet, Boost, GrabPay, DuitNow network partners, FPX, Maybank, CIMB, Public Bank, and other financial institutions necessary to complete your deposits and withdrawals.
• Identity Verification Partners: KYC data may be shared with third-party identity verification services under binding data processing agreements to confirm identity and age.
• Game Software Providers: Anonymised session data may be shared with our certified third-party game providers for technical support, game performance monitoring, and audit purposes.
• Regulatory & Law Enforcement Authorities: We will disclose personal data to competent authorities where required to do so by law, court order, or lawful regulatory directive.
• Fraud Prevention Networks: We may share data with industry fraud prevention systems to detect and prevent account fraud, bonus abuse, and multi-accounting.
• Corporate Restructuring: In the event of a merger, acquisition, or asset sale, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

Payment Data & KYC Documentation

Financial and KYC data is among the most sensitive personal information we handle. Puss88 applies enhanced security measures to this category of data, including encryption at rest and in transit, strict access controls, and comprehensive audit logging of all data access events.

KYC documents including MyKad scans, passport copies, and proof-of-address documentation are used exclusively for identity and age verification purposes. They are stored on encrypted servers and are not processed for any secondary purpose without your explicit consent.

Payment method data — such as partial account numbers, e-wallet reference IDs, and FPX transaction identifiers — is retained solely for transaction verification, chargeback dispute resolution, and AML compliance purposes. Full payment credentials (e.g., bank account passwords) are never stored by puss88.

Cookies & Tracking Technologies

Puss88 uses cookies, web beacons, pixel tags, and similar tracking technologies on our Platform. These tools allow us to deliver a functional, personalised, and secure gaming experience. By using the Platform, you consent to the use of cookies as described in this section.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cannot be disabled without impairing core functionality.
• Functional Cookies: Store your preferences such as language settings, preferred payment method, and last-visited game category to personalise your experience.
• Analytical / Performance Cookies: Used to collect anonymised data on how players interact with the Platform — page visits, session duration, and error rates — to improve platform performance and user experience.
• Security Cookies: Support our fraud detection and account security systems by identifying unusual access patterns or login anomalies.

You may control cookie behaviour through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. We do not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving external advertisements.

Data Retention

Puss88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulation. Our general retention framework is as follows:

• Active account data: Retained for the duration of your account and for a period of five (5) years following account closure, to comply with AML record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification, in accordance with applicable anti-money laundering regulations.
• Financial transaction records: Retained for seven (7) years to comply with financial record-keeping requirements under applicable law.
• Customer support communications: Retained for three (3) years from the date of the communication, or longer where a dispute remains unresolved.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.
• Technical log data: Retained for ninety (90) days in rolling logs for security and performance monitoring, then deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that renders-identification impossible.

Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data puss88 holds about you. To exercise any of these rights, please contact our support team at [email protected]. We will respond within thirty (30) days of receiving your request, or within the timeframe required by applicable law.