Privacy Policy – payung88

1. Who We Are

payung88 (referred to in this policy as "payung88", "we", "us", or "our") operates the online casino and sports betting platform accessible at payung88.club. payung88 is the data controller in respect of personal data collected from users of the platform. Our primary point of contact for data-related matters is [email protected].

2. Data We Collect

payung88 collects the following categories of personal data from users:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., MyKad number or passport number).
• Contact Data: Email address, Malaysian mobile phone number, and postal address (where required for KYC purposes).
• Account Data: Username, encrypted password, account creation date, login history, session timestamps, and device identifiers.
• Financial Data: Deposit and withdrawal transaction history, payment method identifiers (e.g., masked bank account or e-wallet reference numbers), and transaction amounts in MYR.
• Gaming Activity Data: Bet history, game types accessed, wager amounts, win/loss records, and bonus utilisation history.
• Technical Data: IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited within the payung88 platform.
• KYC Documentation: Copies of identity documents, selfies, and proof of address documents submitted during verification processes.
• Communications Data: Records of your correspondence with payung88 support, including live chat transcripts and email exchanges.

payung88 does not collect full payment card numbers. Payment processing is handled by certified third-party payment processors who operate under their own PCI-DSS compliant environments.

3. How We Collect Your Data

payung88 collects personal data through the following mechanisms:

• Direct provision: Data you provide when registering an account, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the payung88 platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity and fraud-check data received from KYC verification providers and payment processors to validate your account and transactions.

4. Lawful Bases for Processing

payung88 processes your personal data on the following lawful bases:

• Contractual necessity: Processing required to fulfil the terms of your account agreement, including operating your account, processing bets, and paying out winnings.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, age verification requirements, and reporting obligations to regulatory authorities.
• Legitimate interests: Processing for fraud prevention, platform security, internal analytics, and responsible gaming monitoring, where these interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit opt-in consent. Consent may be withdrawn at any time.

5. How We Use Your Data

payung88 uses your personal data for the following purposes:

• To create, verify, and manage your payung88 account.
• To process deposits, bets, and withdrawals, and to maintain accurate financial records.
• To conduct age verification and KYC checks as required by applicable regulations.
• To detect and prevent fraud, money laundering, account abuse, and prohibited conduct as defined in the Terms & Conditions.
• To personalise your gaming experience, including displaying relevant game recommendations and promotional offers where you have not opted out.
• To monitor for responsible gaming indicators and to intervene where payung88 identifies potential problem gambling behaviour.
• To provide customer support and respond to your queries, disputes, and feedback.
• To send transactional communications, including deposit confirmations, withdrawal notifications, and security alerts.
• To comply with payung88's legal and regulatory obligations, including reporting to anti-money laundering authorities where required.
• To improve the payung88 platform through aggregated, anonymised usage analytics.

6. Data Sharing and Disclosure

6.1 payung88 does not sell, rent, or trade your personal data to any third party for commercial purposes.

6.2 payung88 may share your personal data with the following categories of third parties, strictly on a need-to-know basis:

• Payment processors: Including Touch 'n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB, Public Bank, 7-Eleven Cliqq, and cryptocurrency gateway providers, for the purposes of processing financial transactions.
• KYC and identity verification providers: For the purpose of verifying your identity and age as required by applicable regulations.
• Game providers: Limited technical data may be shared with certified game providers to facilitate gameplay, resolve disputes, and audit game integrity.
• Regulatory and law enforcement authorities: Where payung88 is legally required or lawfully requested to disclose data to a competent authority, including in connection with AML investigations or court orders.
• IT and security service providers: Who provide infrastructure, hosting, cybersecurity, and fraud detection services under contractual data processing agreements with payung88.

6.3 All third-party data processors engaged by payung88 are contractually required to process your data only in accordance with payung88's instructions and applicable data protection law.

7. International Data Transfers

payung88 operates internationally, and your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, payung88 ensures that appropriate safeguards are in place, including contractual clauses or equivalent protections, to ensure that your data is treated with the same level of protection as required under applicable Malaysian data protection regulations.

8. Data Retention

payung88 retains your personal data for as long as your account is active and for a minimum period of five (5) years following account closure, as required by applicable AML and gaming regulatory obligations. Financial transaction records may be retained for longer periods where required by law. Anonymised and aggregated data may be retained indefinitely for analytical purposes.

Where you have requested deletion of your personal data, payung88 will action this request within 30 days, subject to our legal retention obligations. Data required to comply with regulatory requirements cannot be deleted upon request.

9. Cookies and Tracking Technologies

payung88 uses the following categories of cookies on the platform:

• Strictly necessary cookies: Required for the platform to function, including session management, authentication, and security tokens. These cannot be disabled.
• Analytical cookies: Used to understand how players navigate the payung88 platform, including pages visited, time on site, and error occurrences. These are processed in aggregated form and do not identify individuals.
• Functional cookies: Used to remember your preferences, such as language settings and game filter selections, to improve your experience on return visits.

You may manage non-essential cookies through your browser's cookie settings. Please note that disabling certain cookies may affect the functionality of the payung88 platform.

10. Your Rights

Subject to applicable law and payung88's legal retention obligations, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data payung88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where payung88 no longer has a lawful basis to retain it.
• Right to restrict processing: You may request that payung88 restrict processing of your data in certain circumstances.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request your data in a structured, commonly used machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact payung88 at [email protected]. We will respond within 30 days of receipt of a valid request.

11. Children's Privacy

The payung88 platform is strictly intended for adults aged 21 and above. payung88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has registered an account or provided personal data, we will immediately suspend the account, delete the associated personal data, and take steps to prevent recurrence.

12. Security Measures

payung88 implements technical and organisational security measures appropriate to the risk presented by the processing of your personal data. These measures include SSL/TLS encryption for data in transit, AES-256 encryption for sensitive data at rest, role-based access controls limiting staff access to personal data on a need-to-know basis, regular penetration testing and security audits, and multi-factor authentication for administrative access to platform systems. Despite these measures, no system is entirely secure, and payung88 cannot guarantee absolute security. In the event of a data breach that poses a material risk to your rights, payung88 will notify affected users without undue delay.

13. Changes to This Policy

payung88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. Material changes will be communicated to registered users via the email address on file no less than seven (7) days before taking effect. The "Last updated" date at the top of this policy reflects the most recent revision. Continued use of the payung88 platform following the effective date of a revised policy constitutes your acceptance of the changes.

14. Contact and Complaints

For any questions, requests, or complaints regarding this Privacy Policy or payung88's data practices, please contact us at [email protected]. We aim to respond to all data-related enquiries within five (5) business days.

If you are unsatisfied with payung88's response to a privacy complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction.