pk88 Privacy Policy

1 Introduction

pk88 is committed to protecting the privacy and personal data of all individuals who interact with our online gaming and sports betting platform. We recognise that privacy is a fundamental right, and we take seriously our responsibility as a data controller to handle your information with transparency, care, and security.

This Policy applies to all personal data collected through the pk88 website, mobile site, and any associated services, including account registration, KYC verification, deposit and withdrawal processing, customer support interactions, and marketing communications where you have provided consent.

This Policy should be read together with our Terms & Conditions, which govern the overall relationship between you and pk88. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail in relation to contractual matters, and this Policy shall prevail in relation to data protection matters.

2 Definitions

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

• "Data Controller" means pk88, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of pk88 under a contractual arrangement, including payment processors and KYC verification providers.
• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly — including name, date of birth, email address, IP address, device identifiers, and financial details.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, and deletion.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC" means Know Your Customer — the identity and age verification process required for all pk88 accounts before withdrawals are enabled.
• "Cookies" means small text files placed on your device by a website to store information about your session, preferences, or activity.
• "Platform" means the pk88 website, mobile site, and all associated services accessible at pk88.casa.

3 Personal Data We Collect

pk88 collects the following categories of personal data, depending on how you interact with our platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is contained in government-issued identity documents required for KYC compliance.

4 How We Collect Your Data

pk88 collects personal data through the following channels:

4.1 Directly From You

The majority of your personal data is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings. You control what information you provide at each of these touchpoints.

4.2 Automatically Through the Platform

Certain technical data is collected automatically when you access the pk88 platform. This includes your IP address, device identifiers, browser type, and session activity. This data is collected through server logs, session tracking technologies, and cookies (see Clause 11 for the full Cookies Policy).

4.3 From Third-Party Service Providers

In limited circumstances, we may receive data about you from authorised third-party service providers, including:

• Payment processors (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank) — who may confirm transaction outcomes or flag suspicious payment activity;
• KYC and identity verification services — who assist us in verifying the authenticity of submitted identity documents;
• Fraud detection and AML compliance providers — who may provide risk scoring data related to account activity patterns.

5 Legal Basis for Processing

pk88 processes your personal data only where a valid legal basis exists. The legal bases we rely upon are:

• Contractual Necessity: Processing required to register your account, verify your identity, process deposits and withdrawals, and deliver the services you have signed up for;
• Legal Obligation: Processing required to comply with applicable laws, including KYC regulations, AML (Anti-Money Laundering) obligations, and licensing conditions;
• Legitimate Interests: Processing conducted to prevent fraud, maintain platform security, improve our services, and detect bonus abuse — provided such interests are not overridden by your rights;
• Consent: Processing for marketing communications, where you have explicitly opted in. You may withdraw your consent at any time through your Account settings or by contacting our support team.

6 How We Use Your Personal Data

Your personal data is used for the following specific purposes:

• To create, maintain, and administer your pk88 Account;
• To verify your age and identity as required under our KYC obligations — all accounts must be held by persons aged 21 or above;
• To process your financial transactions, including deposits via DuitNow, FPX, Touch 'n Go eWallet, and bank transfers, and withdrawals to your verified payment method;
• To deliver the gaming services you have requested, including sports betting on events such as EPL, Liga Super Malaysia, and UFC, and casino games;
• To manage and administer bonus offers, promotions, and loyalty programme benefits;
• To monitor and enforce compliance with our Terms & Conditions, including detection of bonus abuse, multiple account usage, and fraudulent activity;
• To comply with our AML obligations, including transaction monitoring and suspicious activity reporting;
• To operate our responsible gambling tools, including deposit limits, loss limits, and self-exclusion processing;
• To respond to your customer support enquiries and resolve account issues;
• To send you transactional communications (account updates, withdrawal confirmations, security alerts);
• To send you marketing communications where you have consented to receive them;
• To improve our platform, products, and services through aggregated, anonymised analytics.

7 Data Sharing with Third Parties

pk88 does not sell your personal data. We share your data with third parties only in the following circumstances and only to the extent necessary:

7.1 Payment Processors

To facilitate deposits and withdrawals, we share relevant financial and identity data with our payment processing partners — including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and partnering banks (Maybank, CIMB, Public Bank, Hong Leong Bank). These partners act as data processors under contractual arrangements that require them to protect your data and use it solely for payment processing purposes.

7.2 KYC and Compliance Providers

Identity verification documents and personal data necessary for KYC compliance may be shared with authorised third-party verification services. These providers are contractually bound to data protection standards equivalent to our own and may not use your data for any purpose other than identity verification.

7.3 Regulatory and Legal Authorities

We may disclose your personal data to regulatory authorities, law enforcement bodies, or our licensing authority where required by applicable law, a valid legal process, or a court order. We will notify you of such disclosures where permitted by law.

7.4 Professional Advisors

We may share data with our legal advisors, accountants, or auditors where necessary for the operation of our business, subject to appropriate confidentiality obligations.

7.5 No Marketing Third-Party Sharing

We do not share your personal data with third-party advertising networks or marketing data brokers for the purpose of targeted advertising by those parties.

8 International Data Transfers

In providing our services, your personal data may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, pk88 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring third-party processors to maintain data protection standards equivalent to those applied by pk88;
• Transfer only to jurisdictions that provide an adequate level of data protection as recognised by applicable standards;
• Encryption of data in transit and at rest during cross-border transfers.

By using the pk88 platform, you acknowledge and consent to the international transfer of your data as described in this clause, subject always to the protections described herein.

9 Data Retention

pk88 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

10 Data Security

pk88 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption at rest for sensitive personal and financial data stored in our systems;
• Two-factor authentication (2FA) available for all player accounts;
• Access controls ensuring that personal data is accessible only to staff whose role requires it, subject to strict need-to-know principles;
• Regular security audits and penetration testing of our platform infrastructure;
• Incident response procedures to detect, contain, and notify relevant parties of any data breach in a timely manner.

11 Cookies & Tracking Technologies

pk88 uses cookies and similar tracking technologies to operate the platform effectively and to improve your user experience. The categories of cookies we use are as follows:

11.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They manage your login session, maintain your account state, and enable core security features such as CSRF protection. These cookies cannot be disabled without impairing the functionality of the platform.

11.2 Functional Cookies

These cookies remember your preferences — such as your preferred language, betting view settings, or responsible gambling limit reminders — to personalise your experience. They are set on the basis of your implicit consent through continued use of the platform.

11.3 Analytics Cookies

We use anonymised analytics cookies to understand how players navigate our platform — which pages are visited most frequently, where users encounter difficulties, and how long sessions typically last. This data is aggregated and cannot identify you as an individual. It is used solely to improve our services.

11.4 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of parts of the pk88 platform. Strictly necessary cookies cannot be disabled without leaving the platform.

12 Your Data Rights

You hold the following rights in relation to your personal data held by pk88. To exercise any of these rights, please contact our support team at [email protected] with your account username and a description of your request.

We will respond to all verified data rights requests within 30 days of receipt. In complex cases, this may be extended by a further 30 days, with prior notification. We do not charge a fee for exercising your rights unless requests are manifestly unfounded or excessive.

13 Minors and Under-Age Users

All accounts are subject to age verification as part of the KYC process. Providing false information about your age to circumvent this verification constitutes a breach of our Terms & Conditions and may have legal consequences.

If you are a parent or guardian and believe your child has accessed or registered on pk88, please contact us immediately at [email protected] so that we can take appropriate action without delay.

14 Amendments to This Privacy Policy

pk88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our platform services. When material changes are made, we will update the "Last Updated" date at the top of this document and, where appropriate, notify registered users by email or through a platform notification.

Your continued use of the pk88 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your data.

If a proposed change is materially adverse to your privacy rights and you do not agree to it, you have the right to close your Account and request deletion of your personal data, subject to our legal retention obligations.

15 Contact Us — Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pk88 handles your personal data, please contact us through the channels below. Our support team is available 24/7, including Malaysian public holidays.

For enquiries related to responsible gambling, self-exclusion, or deposit limit requests, please refer to our dedicated Responsible Gambling page, or contact the support team directly via email or live chat.