Privacy Policy PK88 – Protection of Members' Personal Data in Malaysia

This Privacy Policy is issued by PK88 and applies to all individuals who use our platform, whether through the pk88.world website or the official PK88 mobile app for Android and iOS. It covers all personal information we collect, process, store, and share when you interact with our platform — including when you register an account, make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX, play casino games, place sports bets, or contact our customer support.

By registering a pk88 account or continuing to use our platform after the effective date of this policy update, you agree to the practices described in this Privacy Policy. If you do not agree, we encourage you to contact us for further discussion or to request the deletion of your account.

Pk88 acts as the data controller as defined under PDPA 2010, meaning we determine the purposes and means by which your personal data is processed. In certain contexts, we may also act as a data processor on behalf of specific business partners, but this will be clearly stated where applicable.

2.1 Data You Provide Directly

When you register and use the pk88 platform, you voluntarily provide the following information:

• Identity Information: Full name, Malaysian identity card number (MyKad), date of birth, gender.
• Contact Information: Email address, Malaysian mobile number, residential address.
• Financial Information: Payment method details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX/Maybank2u, CIMB Clicks), along with deposit and withdrawal transaction history.
• Verification Information: Identity verification documents such as a photo of your MyKad, a selfie, and bank statements for KYC (Know Your Customer) purposes.
• Account Information: Username, password (stored in encrypted form), account preferences.

2.2 Automatically Collected Data

When you use the pk88 platform, our systems automatically record the following technical information:

• Your device's IP address at the time of access
• Browser or application type and version used
• Device operating system (Android, iOS, Windows, etc.)
• Pages visited, duration of visit, and in-platform actions
• Cookie data and session identifiers
• General geolocation information based on IP address (not GPS)

Pk88 uses your personal data only for legitimate and reasonable purposes. The following outlines our primary purposes and the legal bases we rely on:

3.1 Account Management & Services

We process your data to create and manage your pk88 account, process deposits and withdrawals (RM) via Malaysian digital payment methods, provide access to games, respond to customer support enquiries, and send important account-related notifications. This is a contractual necessity – without this data, we are unable to provide our services to you.

3.2 Legal Compliance & KYC

PK88 has a legal obligation to ensure the platform is not misused for money laundering or illicit financing. To this end, we conduct identity verification (Know Your Customer / KYC) and continuously monitor transactions. This is legal obligation that we cannot disregard.

3.3 Security & Fraud Detection

Technical data such as IP addresses, access patterns, and transaction history are used to detect and prevent fraudulent activity, unauthorised access, and collusion — protecting all pk88 members, including you.

3.4 Platform Improvement

Anonymized and aggregated usage data is used to understand how members interact with the pk88 platform, enabling us to improve the user experience, introduce relevant new features, and maintain optimal technical performance.

3.5 Marketing Communications (with consent)

With your consent, we may send you information about pk88's latest promotions, bonuses, and offers via email or app notifications. You may withdraw this consent at any time through your account settings or by contacting our support team.

PK88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is a commitment we stand firmly by. However, there are limited circumstances in which data may need to be shared:

• Payment Gateway Providers: To process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, and CIMB Clicks, limited transaction information is shared with the respective providers. They are governed by their own privacy policies and PCI DSS security standards.
• Technology Service Providers: Technical infrastructure providers that support PK88's operations (such as cloud computing services and security monitoring). All such parties are bound by strict confidentiality agreements.
• Lawful Authorities: Where required by Malaysian law, a court order, or a legitimate request from a law enforcement agency, pk88 may be obligated to disclose the necessary data.
• Business Transfer: In the event of a merger, acquisition, or sale of assets, user data may be transferred to the new entity, but this Privacy Policy will continue to apply.

Pk88 continuously invests in security infrastructure to keep your personal data protected against all threats. The key security measures we have implemented are as follows:

• 256-bit SSL Encryption: All communications between your device and pk88's servers are encrypted using 256-bit TLS/SSL protocol — the same standard used by major Malaysian banks.
• Strict Access Controls: Only PK88 staff with a legitimate operational need are permitted to access members' personal data. All access is logged and audited on a regular basis.
• Password Encryption: Your account password is stored in hashed form, which is unreadable by anyone — including pk88 staff.
• Two-Factor Authentication (2FA): 2FA is available to all members as an added layer of security.
• 24/7 Monitoring: pk88's cybersecurity team continuously monitors our systems to rapidly detect and respond to threats.
• Penetration Testing: Independent security audits are conducted regularly by third-party experts to identify and address any vulnerabilities.

PK88 only retains your personal data for as long as necessary for the stated purposes, or as required by law. The following are our general data retention guidelines:

• Active Account Data: Retained for as long as your account remains active and for the required period following closure.
• Financial Transaction Records: Retained for a minimum of 7 years as required by Malaysian law governing financial records and anti-money laundering.
• KYC Documents (Identity Verification): Retained for a minimum of 5 years after the business relationship ends, in accordance with AML/KYC compliance requirements.
• Support Communication Logs: Retained for 2 years for reference and service quality audit purposes.
• Anonymized Analytics Data: Data from which all personal identifiers have been removed may be retained indefinitely for business analytics purposes.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered.

Under PDPA 2010 and pk88's commitment to privacy, you have the following rights regarding your personal data:

Pk88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for core platform functions such as login, session management, and security. Disabling them will directly impact the basic functionality of the platform.
• Functional Cookies: Enables the platform to remember your preferences — such as language, display settings, and game preferences — for a more convenient experience.
• Analytics Cookies: Helps us understand how users interact with the platform through aggregated and anonymised data. This information is used solely for platform improvement.

You can manage cookies through your browser settings. Disabling certain cookies may affect the functionality or user experience of the pk88 platform.

The pk88 platform is exclusively for individuals aged 18 and above. pk88 does not knowingly collect, process, or store the personal data of any individual under the age of 18.

Should we discover that personal data belonging to an individual under the age of 18 has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child may have registered a PK88 account are advised to contact our support team immediately.

Pk88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our business practices, applicable laws, or new platform features. Any amendments will take effect immediately upon publication of the updated version on the pk88 website, with the revision date clearly displayed.

For material amendments that significantly affect how we handle your data, we will notify you via your registered email or in-app notification on pk88 at least 7 days before the amendment takes effect. Continued use of the pk88 platform after that date will be considered acceptance of the relevant amendment.

Historical versions of this Privacy Policy are available upon request — please contact our team.

If you have any questions, concerns, or requests regarding this Privacy Policy or how PK88 handles your personal data, please contact our Data Protection Officer through the following channels: