Privacy Policy — Payung88

This Privacy Policy ("Policy") is issued by Payung88 ("the Company", "we", "us", "our"), the operator of the online gaming platform located at https://payung88.cam (the "Platform"). This Policy describes how Payung88 collects, processes, stores, discloses, and protects personal data relating to all individuals who access or use the Platform ("Users", "Players", "you", "your").

Payung88 is committed to responsible data stewardship. We recognise that the personal information you entrust to us when creating an account, making a deposit, or interacting with our customer support team carries a significant responsibility. This Policy sets out, in plain and precise terms, exactly how we discharge that responsibility.

By registering an account, accessing the Platform, or submitting any personal information to Payung88, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

Payung88 serves players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations throughout the country. We process personal data in accordance with the applicable laws of the jurisdiction in which we hold our gaming licence, while also respecting the data protection expectations of Malaysian users.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — Any information that identifies or can be used to identify a living individual, either directly (such as a full name or MyKad number) or indirectly (such as a device identifier combined with usage data).
• "Processing" — Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For all personal data collected through the Platform, Payung88 is the Data Controller.
• "Data Processor" — A third-party entity that processes personal data on behalf of the Data Controller, pursuant to a contractual instruction and under defined security and confidentiality obligations.
• "Cookies" — Small text files stored on a User's device by a web browser at the request of the Platform, used to retain session state, preferences, and usage analytics.
• "KYC" — Know Your Customer — the regulatory process by which Payung88 verifies the identity, age, and, where required, the source of funds of a Player, in compliance with anti-money laundering obligations.
• "AML" — Anti-Money Laundering — the legal framework and internal compliance controls designed to detect, prevent, and report suspicious financial activity on the Platform.

Payung88 collects personal data across several categories, depending on how you interact with the Platform. The following table provides an overview of the categories of personal data we may collect and the context in which each arises:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, unless such data is voluntarily provided in the context of a responsible gambling self-assessment or is necessary to fulfil a specific legal obligation.

Payung88 collects personal data through the following means:

4.1 Direct Provision

You provide data to us directly when you register an account, complete KYC verification, make a deposit or withdrawal using Malaysian payment methods (such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or cryptocurrency), contact our customer support team, or respond to surveys or promotions.

4.2 Automated Collection

When you visit and interact with the Platform, our systems automatically collect technical data including your IP address, browser fingerprint, device identifiers, session timestamps, and navigation patterns. This data is collected through cookies, web server logs, and similar technologies. Please refer to Section 10 (Cookies & Tracking) for further details.

4.3 Third-Party Sources

In limited circumstances, Payung88 may receive personal data about you from third-party sources, including:

• Payment service providers (for transaction verification and fraud screening);
• Identity verification service providers (for KYC purposes);
• Credit reference or fraud prevention agencies (where applicable under our AML obligations);
• Regulatory authorities, where we are required to obtain or disclose information by law.

Payung88 processes personal data for the following defined purposes. We do not use your data for purposes that are incompatible with those disclosed in this Policy without first obtaining your consent or establishing a separate lawful basis.

• Account creation and management — To register and maintain your Player account, including authentication, preference management, and account security.
• Payment processing — To facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, DuitNow, FPX, GrabPay, cryptocurrency, and other supported payment methods.
• Identity verification (KYC) — To verify your identity, confirm your age (minimum 21 years), and screen for politically exposed persons and sanctions list matches as required by our licensing obligations.
• Anti-money laundering and fraud prevention — To monitor transactions and account behaviour for indicators of money laundering, fraud, and other financial crimes.
• Service delivery and improvement — To deliver the gaming and betting services you have requested and to analyse Platform performance and user experience for ongoing improvements.
• Customer support — To respond to your enquiries, resolve disputes, and manage complaints.
• Responsible gambling — To administer deposit limits, self-exclusion tools, and reality check notifications, and to identify Players who may be exhibiting signs of problematic gambling behaviour.
• Marketing communications — To send you promotional offers, bonus notifications, and Platform updates where you have given your consent or where we have a legitimate interest in doing so.
• Legal compliance — To fulfil our obligations under applicable gaming licence conditions, anti-money laundering legislation, and any other applicable laws.

Payung88 processes your personal data on the following lawful bases, consistent with applicable data protection principles:

• Performance of a contract — Most processing activities are necessary for the performance of the contract between you and Payung88 (i.e., providing the gaming services you have registered to use).
• Legal obligation — Certain processing is required for Payung88 to comply with its legal obligations, including KYC identity verification, AML transaction monitoring, and retention of financial records.
• Legitimate interests — Payung88 processes some personal data based on its legitimate business interests, including fraud prevention, Platform security, and analytical improvements to the user experience, provided these interests are not overridden by your rights and freedoms.
• Consent — Where Payung88 sends direct marketing communications or deploys non-essential cookies, we do so on the basis of your explicit consent, which you may withdraw at any time.

Payung88 may share your personal data with the following categories of third-party recipients, each bound by strict confidentiality and security obligations:

• Payment service providers — Including Malaysian e-wallet operators (Touch 'n Go, Boost, GrabPay), FPX banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency processing services — solely for the purpose of processing transactions on your Account.
• Identity verification providers — Third-party KYC service providers who assist in verifying identity documents and conducting sanctions screening.
• Game content providers — Licensed international game studios that supply the casino games and betting markets available on the Platform. These providers may receive limited technical data necessary to deliver game content to your device.
• IT infrastructure and cloud service providers — Providers of hosting, data storage, cybersecurity, and Platform maintenance services who process data solely on Payung88's instruction.
• Regulatory and law enforcement authorities — Where Payung88 is legally compelled to disclose personal data by a court order, regulatory direction, or applicable law, including mandatory reporting under AML legislation.
• Professional advisers — Legal counsel, auditors, and compliance consultants, subject to professional privilege and confidentiality obligations.

As an international online gaming platform, Payung88's operations and those of its service providers span multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Malaysia. Some of these countries may not have data protection laws that are equivalent in scope to Malaysian standards.

Where such international transfers occur, Payung88 implements appropriate safeguards to ensure that your personal data receives an equivalent level of protection, including:

• Contractual data processing agreements with all third-party processors incorporating standard data protection obligations;
• Technical and organisational security measures appropriate to the nature and sensitivity of the data transferred;
• Where applicable, transfer only to jurisdictions recognised as providing adequate data protection by our licensing authority.

Payung88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required to comply with applicable legal, regulatory, and contractual obligations. The following indicative retention periods apply:

• Account data and transaction records — Retained for a minimum of five (5) years from the date of the last transaction on your Account, in compliance with AML record-keeping obligations.
• KYC identity documents — Retained for a minimum of five (5) years from the date of KYC approval, or longer where required by applicable law.
• Customer support communications — Retained for a minimum of two (2) years from the date of the interaction, to support complaint resolution and audit purposes.
• Technical and usage data (logs, cookies) — Retained for a maximum of thirteen (13) months from collection.
• Marketing consent records — Retained for the duration of your Account plus three (3) years, to evidence consent where relevant.

Upon the expiry of applicable retention periods, personal data will be securely deleted or anonymised. Anonymised data, which can no longer be linked to any identifiable individual, may be retained and used for statistical, analytical, or research purposes without further restriction.

Payung88 uses cookies and similar tracking technologies (such as web beacons and local storage objects) on the Platform. Cookies are small data files stored on your browser or device that allow the Platform to recognise you between sessions and deliver a consistent, personalised experience.

Types of Cookies Used

• Strictly Necessary Cookies — Essential for the Platform to function correctly. These cookies enable session authentication, secure login persistence, and load balancing. They cannot be disabled without impairing the Platform's core functionality.
• Functional Cookies — Remember your preferences (such as language settings and game display options) and provide enhanced, personalised features.
• Analytical Cookies — Allow Payung88 to understand how users interact with the Platform — which pages are visited most frequently, where users encounter difficulties, and how the Platform can be improved. Data collected is aggregated and anonymised.
• Security Cookies — Support fraud detection and Platform security by identifying unusual access patterns and potential account takeover attempts.

You can manage and control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform. Analytical and functional cookies can be disabled without affecting core Platform access.

Subject to applicable law and certain limited exceptions (such as where data must be retained to fulfil a legal obligation or to protect the rights of third parties), you hold the following rights in relation to your personal data held by Payung88:

To exercise any of the above rights, please contact us using the details provided in Section 15 of this Policy. Payung88 will respond to all valid data subject requests within thirty (30) calendar days of receipt. In cases of complexity or high volume, this period may be extended by a further two months, with notification provided to you within the initial thirty-day window.

Payung88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, and misuse. Our security framework includes:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure;
• Multi-factor authentication requirements for administrative access to data systems;
• Incident response procedures for timely detection, containment, and notification of data breaches where required;
• Staff training on data protection obligations and information security best practices.

While Payung88 takes all reasonable precautions to safeguard your personal data, no transmission over the internet and no method of data storage can be guaranteed to be 100% secure. You also bear responsibility for keeping your Account credentials confidential, as detailed in our Terms & Conditions.

Payung88 does not knowingly solicit, collect, or retain personal data from individuals under the age of 21. Age verification is a mandatory component of our KYC process, and any account found to belong to a person under 21 years of age will be immediately suspended. Any personal data collected from an underage individual will be deleted as soon as its collection is identified.

If you are the parent or guardian of a minor and believe that your child has provided personal data to Payung88, please contact us immediately using the details in Section 15 so that we can take appropriate action.

Payung88 reserves the right to update or amend this Privacy Policy at any time in order to reflect changes in our data processing activities, applicable law, regulatory guidance, or Platform functionality. The date of the most recent revision is displayed at the top of this document.

Where changes are material — meaning they significantly affect your rights or how we process your personal data — we will provide notice via email to your registered address and/or by a prominent notice on the Platform prior to the changes taking effect. For minor clarifications or corrections, we may update the Policy without proactive notice, relying instead on the version indicator at the top of this page.

Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you should contact us to discuss your options, which may include exercising your right to erasure or closing your Account.

For all enquiries relating to this Privacy Policy, requests to exercise your data subject rights, or complaints concerning Payung88's data processing practices, please contact our Data Protection team through the following channels: