Privacy Policy

2. Data Controller

For the purposes of applicable data protection legislation, pulang88 is the data controller in respect of personal data collected through the pulang88 platform. All queries, requests, and complaints relating to your personal data should be directed to pulang88 using the contact details set out in Section 14 of this Policy.

3. Information We Collect

3.1 Information You Provide Directly

When you register for, or interact with, a pulang88 account, we collect:

• Full legal name and date of birth
• Email address and contact telephone number
• Residential address
• Government-issued identity document details (submitted during Know Your Customer verification)
• Payment method details, including e-wallet identifiers (Touch 'n Go eWallet, Boost) and bank account information (for FPX-linked accounts at Maybank, CIMB, Public Bank and others)
• Username, password (stored in hashed form), and account security settings
• Communications you send to pulang88 customer support

3.2 Information Collected Automatically

When you access the pulang88 platform, we automatically collect the following technical data:

• IP address and approximate geolocation data derived therefrom
• Device type, operating system, and browser information
• Session duration, pages visited, and navigation patterns within the platform
• Game play history, bet amounts, wagering activity, and outcomes
• Deposit and withdrawal transaction records
• Cookie and similar tracking technology data (see Section 7)

3.3 Information from Third Parties

We may receive supplementary personal data from third-party identity verification providers, fraud prevention services, and payment processors in the course of processing your account registration and financial transactions.

4. How We Use Your Personal Data

pulang88 processes your personal data for the following purposes:

• Account management: To create, operate, and maintain your pulang88 member account.
• Identity and age verification: To verify that you meet the 21+ age requirement and are legally entitled to use the platform in your jurisdiction.
• Payment processing: To process deposits and withdrawals in MYR via your chosen payment method, and to maintain accurate financial records.
• Service delivery: To provide access to games, sportsbook, live casino, and other platform features.
• Customer support: To respond to and resolve queries, complaints, and support requests.
• Responsible gaming: To monitor gaming activity for signs of problem gambling behaviour and to fulfil our responsible gaming obligations, including enforcing self-exclusion and deposit limit requests.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering (AML) laws, know-your-customer (KYC) requirements, and gaming licence conditions.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security threats.
• Platform improvement: To analyse usage patterns and improve the platform's features, performance, and user experience.
• Communications: To send transactional notifications (account activity, payment confirmations, security alerts) and, where you have consented, promotional communications about pulang88 offers and features.

5. Legal Basis for Processing

pulang88 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services you have contracted for through your pulang88 account.
• Legal obligation: Processing required to comply with AML, KYC, gaming licence, and other applicable legal obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: For marketing communications and non-essential cookies, where we rely on your explicit consent. You may withdraw consent at any time by contacting pulang88 support.

6. Data Sharing & Disclosure

pulang88 does not sell or rent your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors and e-wallet providers: Touch 'n Go eWallet, Boost, DuitNow, and FPX bank partners, to process your financial transactions.
• Identity verification and KYC providers: Third-party services engaged to perform age and identity checks in compliance with licensing requirements.
• Game content providers: Licensed game studios whose titles are offered through the pulang88 platform, where technically necessary for game operation.
• Fraud prevention and security services: Specialist providers engaged to detect and prevent fraud, money laundering, and account takeover.
• Legal and regulatory authorities: Where required by applicable law, court order, regulatory direction, or our gaming licence conditions — including disclosure to anti-money laundering authorities.
• Professional advisors: Legal, accounting, and audit firms engaged by pulang88, subject to confidentiality obligations.

All third-party service providers engaged by pulang88 are contractually required to process personal data solely for the purposes instructed and to maintain appropriate data security measures.

7. Cookies & Tracking Technologies

pulang88 uses cookies and similar technologies to operate and improve the platform. The categories of cookies we use include:

• Strictly necessary cookies: Essential for platform authentication, session management, and security. These cannot be disabled.
• Functional cookies: Used to remember your preferences (such as language settings and preferred game categories) to personalise your platform experience.
• Analytics cookies: Used to collect anonymised or pseudonymised data about how Members navigate the platform, enabling us to identify usability improvements.

You may manage non-essential cookie preferences through your browser settings. Disabling functional or analytics cookies may affect certain platform features. Strictly necessary cookies cannot be disabled as they are required for the platform to function.

8. Data Retention

pulang88 retains your personal data for as long as your account remains active and for such additional periods as are required by applicable law and our gaming licence obligations. Specifically:

• Account and KYC records are retained for a minimum of five (5) years following account closure, as required by AML legislation.
• Financial transaction records are retained for a minimum of seven (7) years.
• Customer support communications are retained for three (3) years from the date of the relevant interaction.
• Game play and betting history is retained for five (5) years for regulatory and dispute resolution purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

9. Data Security

pulang88 implements and maintains technical and organisational security measures appropriate to the nature of the personal data processed, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and pulang88 servers
• Encryption of sensitive data at rest, including payment information and identity documents
• Secure password hashing — passwords are never stored in recoverable plain-text form
• Role-based access controls limiting internal access to personal data to authorised personnel only
• Regular security assessments and penetration testing of platform infrastructure
• Incident response procedures governing the detection, containment, and notification of data security incidents

No data transmission over the internet is guaranteed to be completely secure. While pulang88 employs industry-standard protections, you are also responsible for maintaining the security of your own account credentials.

10. Your Data Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by pulang88:

• Right of access: To request a copy of the personal data pulang88 holds about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data, subject to our legal retention obligations.
• Right to restriction: To request that we limit processing of your data in certain circumstances.
• Right to data portability: To receive your personal data in a structured, machine-readable format.
• Right to object: To object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, to withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact pulang88 customer support using the details in Section 14. We will respond to valid requests within thirty (30) days. Identity verification may be required before we can action your request.

11. Children & Minors

The pulang88 platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, that account will be immediately suspended and the data deleted (subject to any mandatory regulatory retention requirements). If you believe a minor has registered on pulang88, please contact us immediately via the details in Section 14.

12. International Data Transfers

The operation of the pulang88 platform may involve the transfer of your personal data to service providers located outside of Malaysia. Where such transfers occur, pulang88 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable Malaysian data protection law, including through the use of standard contractual clauses or other recognised transfer mechanisms.

13. Changes to This Privacy Policy

pulang88 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to Members via the registered email address and by a notice on the platform prior to the changes taking effect. The "Last updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the pulang88 platform following notification of changes constitutes your acknowledgement of the revised Policy.

14. Contact Us

For any questions, requests, or complaints relating to this Privacy Policy or pulang88's handling of your personal data, please contact our Data Protection team:

• Live Chat: Available 24/7 through the Platform — fastest response channel, typically under 2 minutes.
• Email: [email protected]

All data subject requests will be acknowledged within five (5) business days and actioned within thirty (30) calendar days, unless extended by up to a further two months in cases of complexity or volume, in which case you will be informed of the extension and the reasons for it.