Privacy Policy

1. Introduction

1.1  ppg688 operates Malaysia's premier online gaming platform, serving members across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and the wider Malaysian market. In the course of providing online casino games, sports betting, slots, and related services, ppg688 necessarily collects and processes personal data about its Members.

1.2  ppg688 is committed to protecting the privacy and security of its Members' personal data. This Policy is intended to be read in plain terms, without sacrificing the legal precision required to give Members a complete picture of how their data is handled. Where legal terminology is used, it is followed by a plain-language explanation.

1.3  This Policy applies to all personal data collected through the ppg688 Platform, including data collected during registration, during active use of games and financial services, through customer support interactions, and through the Platform's technical infrastructure including cookies and server logs.

2. Personal Data We Collect

ppg688 collects the following categories of personal data:

2.1 Registration Data

• Full legal name as it appears on your identification document;
• Date of birth (for age verification — ppg688 is strictly 21+);
• Email address (used as your primary account identifier and communication channel);
• Mobile phone number (used for two-factor authentication and account notifications);
• Residential address (for identity verification and regulatory compliance).

2.2 Identity Verification Data

• Copies of identity documents (Malaysian MyKad, passport, or equivalent);
• Proof of address documents (utility bills, bank statements);
• Source-of-funds documentation where required by anti-money laundering obligations.

2.3 Financial Data

• Payment method details sufficient to process transactions — for bank transfers, the account name and bank name; for e-wallets, the registered mobile number;
• Transaction history: deposits, withdrawals, and bonus credits;
• Note: ppg688 does not store full card numbers or e-wallet passwords. Payment credentials are processed by PCI-DSS compliant third-party payment processors.

2.4 Gameplay Data

• Game session records including titles played, bet amounts, results, and timestamps;
• Sportsbook bet slips and settlement records;
• Responsible gaming settings and self-imposed limit histories.

2.5 Technical Data

• IP address and approximate geolocation at the time of login;
• Device type, operating system, and browser version;
• Session duration and page interaction data;
• Cookie and similar tracking technology data as described in Section 6.

2.6 Communications Data

• Records of customer support interactions via live chat and email;
• Opt-in preferences for promotional communications.

3. How We Use Your Personal Data

ppg688 uses personal data for the following purposes:

• Account creation and management: Verifying your identity, maintaining your account, and providing access to Platform features;
• Age verification: Confirming that all Members are aged 21 or above before permitting real-money gaming activity;
• Payment processing: Executing deposits and withdrawals via your chosen Malaysian payment method (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank PBe, FPX, Visa/Mastercard);
• KYC and AML compliance: Fulfilling our Know Your Customer and Anti-Money Laundering obligations under applicable regulations;
• Fraud prevention and security: Detecting and preventing fraudulent transactions, multi-accounting, and unauthorised access;
• Responsible gaming: Monitoring gameplay patterns to identify indicators of problem gambling and applying Member-requested limits;
• Platform improvement: Analysing aggregated, anonymised usage data to improve game offerings, interface design, and performance;
• Marketing communications: Sending promotional offers and platform updates to Members who have opted in — you may opt out at any time from your account settings;
• Legal and regulatory obligations: Maintaining records as required by applicable gaming authority guidelines and responding to lawful requests from regulatory and law enforcement bodies.

4. Legal Basis for Processing

ppg688 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the services you have contracted for by registering a ppg688 account, including account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering requirements, age verification obligations, and gaming authority reporting;
• Legitimate interests: Processing required for ppg688's legitimate business interests — fraud prevention, security monitoring, and platform improvement — where such interests are not overridden by your fundamental rights;
• Consent: Processing of data for optional purposes, such as direct marketing communications, where you have provided explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

5.1  ppg688 does not sell, rent, or share your personal data with unaffiliated third parties for their own marketing or commercial purposes.

5.2  ppg688 shares personal data with the following categories of third-party service providers solely to the extent necessary for them to deliver their services to ppg688:

• Payment processors: To execute MYR deposits and withdrawals via Touch n Go eWallet, Boost, FPX, and card networks. These processors are PCI-DSS compliant and are contractually prohibited from using your payment data for any purpose other than processing your transactions;
• Identity verification providers: To perform KYC checks, document verification, and age verification in compliance with gaming authority requirements;
• Game studios and software providers: Game studios hosting live dealer tables or providing RNG game software receive the minimum data necessary to deliver the game session. ppg688 does not pass your full identity data to game studios;
• Fraud detection services: To detect and prevent account fraud, bonus abuse, and money laundering using behavioural analytics tools;
• Customer support platforms: Chat and ticketing tools used by ppg688's support team to manage Member communications.

5.3  Regulatory disclosure. ppg688 will disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, lawful order, or gaming authority directive. ppg688 will notify affected Members of such disclosures where legally permitted to do so.

5.4  Business transfers. In the event of a merger, acquisition, or sale of all or part of ppg688's business, Member personal data may be transferred as part of that transaction. ppg688 will provide notice of any such transfer and the applicable privacy terms.

6. Cookies & Tracking Technologies

6.1  ppg688 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function — session authentication, security tokens, and load balancing. These cannot be disabled without preventing use of the Platform;
• Functional cookies: Remembering your preferences such as language settings and responsible gaming display options;
• Analytics cookies: Collecting aggregated, anonymised data about page visits and feature usage to help ppg688 improve the Platform. No individual Member is identified in analytics reports;
• Marketing cookies: Used only where you have opted in to personalised promotional communications. These cookies help ppg688 serve relevant offers rather than generic promotions.

6.2  You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from completing ppg688 login or accessing certain Platform features.

7. Data Security

7.1  ppg688 implements the following technical and organisational security measures to protect personal data:

• 256-bit SSL/TLS encryption for all data in transit between your device and ppg688 servers;
• One-way cryptographic hashing of account passwords — plaintext passwords are never stored;
• Two-factor authentication (2FA) available to all Members and strongly recommended;
• Automated fraud and anomaly detection systems monitoring login geography, transaction patterns, and gameplay activity;
• Regular security assessments and penetration testing by independent third parties;
• Role-based access controls limiting staff access to personal data to the minimum necessary for their function.

7.2  Notwithstanding the above, no internet-based data transmission or storage system can be guaranteed to be 100% secure. ppg688 encourages Members to use strong, unique passwords for their ppg688 account and to enable 2FA to maximise personal account security.

8. Data Retention

8.1  ppg688 retains personal data for the following periods:

• Active account data: For the duration of your active ppg688 membership plus a post-closure period of five (5) years, to satisfy gaming authority record-keeping requirements and to resolve any disputes arising from your use of the Platform;
• KYC and AML documentation: Five (5) years from account closure or from the date of the last transaction, in accordance with applicable anti-money laundering regulations;
• Customer support records: Three (3) years from the date of the interaction;
• Marketing opt-in records: For the duration of your membership or until you withdraw consent, whichever is earlier.

8.2  Data that has exceeded its retention period is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

9. Your Data Rights

ppg688 Members have the following rights in relation to their personal data:

• Right of access: You may request a copy of the personal data ppg688 holds about you;
• Right of rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
• Right to restrict processing: You may request that ppg688 restrict processing of your data in certain circumstances while a complaint or request is being resolved;
• Right to data portability: You may request a machine-readable copy of the personal data you provided directly to ppg688, for transfer to another service provider;
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time from your account settings without affecting the lawfulness of prior processing;
• Right to object: You may object to processing based on ppg688's legitimate interests where you believe your fundamental rights override those interests.

To exercise any of the above rights, contact ppg688 at support@ppg688.app. ppg688 will respond to verified requests within 30 days. Identity verification may be required before a request is processed.

10. Children's Privacy

10.1  ppg688 is strictly for individuals aged 21 years and above. ppg688 does not knowingly collect personal data from persons under 21 years of age. Age verification is conducted as part of the registration process.

10.2  If ppg688 becomes aware that it has inadvertently collected personal data from a person under 21, it will immediately close the associated account, return any deposited funds, and delete the relevant personal data without undue delay.

10.3  If you believe a person under 21 is attempting to or has successfully registered a ppg688 account, please notify ppg688 immediately at support@ppg688.app.

11. Cross-Border Data Transfers

11.1  ppg688 operates servers and engages service providers in multiple jurisdictions. Your personal data may therefore be transferred to, stored in, and processed in countries outside Malaysia. Where such transfers occur, ppg688 ensures that appropriate safeguards are in place — including contractual data protection clauses with service providers — to protect your personal data to a standard equivalent to that applied within Malaysia.

11.2  ppg688's payment processing partners for Malaysian domestic payment methods (Touch n Go eWallet, Boost, Maybank FPX, CIMB, Public Bank PBe) operate under Malaysian financial services regulations, and transaction data for these methods remains within Malaysia's financial infrastructure.

12. Amendments to This Policy

12.1  ppg688 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be communicated to Members via their registered email address and/or a prominent notice on the Platform at least 7 days prior to the effective date.

12.2  Continued use of the ppg688 Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the amendments, you should close your ppg688 account before the effective date.

13. Contact & Data Subject Requests

For all privacy-related enquiries, data subject rights requests, and complaints, please contact ppg688 at:

Email: support@ppg688.app (plain text — not a clickable link)

ppg688 will acknowledge all written privacy enquiries within 24 hours and provide a substantive response within 30 calendar days. For complex requests that require additional time, ppg688 will notify you of the extension and the reason before the initial 30-day period expires.