pulau88 Privacy Policy

This Privacy Policy describes the personal information practices of pulau88 in connection with its website, account services, casino entertainment, sports betting information, promotional features, payment functions and customer assistance. pulau88 recognises that account and financial information can be sensitive and undertakes to handle it for legitimate, defined purposes.

This policy is written for Malaysian users and should be read with the pulau88 Terms and Conditions. References to applicable data protection requirements include the Malaysian Personal Data Protection Act 2010 where it applies, together with any mandatory requirements of the jurisdiction governing the relevant pulau88 service.

If a user does not agree with this policy, the user should discontinue access to pulau88 and avoid providing personal information. Certain services cannot be supplied without essential account, age, payment and identity information.

For this Privacy Policy, the following definitions apply:

• Personal information means information relating to an identified or reasonably identifiable individual.
• Processing means collecting, recording, organising, using, storing, disclosing, correcting, restricting or deleting information.
• Account data means information connected with a registered pulau88 profile, including login, transaction and verification records.
• Service provider means an organisation engaged to perform a defined service for pulau88 under appropriate confidentiality obligations.
• User means a visitor, registered player or other individual who communicates with pulau88.

pulau88 may collect information directly from a user, automatically from the user's device or from authorised payment, verification and fraud-prevention providers. Information requested depends on the service used and the level of verification required.

During KYC review, pulau88 may request a MyKad, Malaysian driving licence or passport, proof of address dated within the previous three months, a verification selfie and evidence that a payment method belongs to the account holder. Users should provide only the documentation requested through an authorised secure channel.

pulau88 may process personal information to:

• Create, verify, secure and administer a pulau88 account;
• Confirm that the user is aged 21 or above;
• Process MYR deposits and withdrawals through approved payment channels;
• Provide casino, live game and sports betting account functions;
• Detect duplicate accounts, suspicious transactions, fraud and security threats;
• Conduct KYC and anti-money-laundering checks where required;
• Investigate payment queries, settlement disputes and complaints;
• Apply deposit limits, cooling-off periods and self-exclusion instructions;
• Maintain service stability and analyse website performance;
• Send essential account, security and policy notices;
• Meet legal, regulatory, record-keeping and audit obligations.

pulau88 does not sell personal information as a standalone commercial product. Information is not used to make guaranteed predictions about casino or sports outcomes. Any personalisation is intended to support service relevance, account security and responsible use.

Depending on the information and applicable law, pulau88 may process data because it is necessary to provide contracted account services, comply with a legal obligation, protect legitimate operational interests, prevent fraud, respond to an emergency or act upon valid consent.

Legitimate interests may include protecting pulau88 users, securing accounts, maintaining accurate financial records, improving service reliability and resolving disputes. Before relying on such interests, pulau88 considers whether the processing is proportionate and whether user rights require additional safeguards.

Where pulau88 relies on consent for optional communication or device functionality, refusal or withdrawal will not invalidate processing already completed lawfully. Withdrawal may, however, prevent access to an optional feature that depends on that consent.

pulau88 supports payment information relevant to Malaysian users, which may include FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank and Hong Leong transactions. Availability can differ by account and may change over time.

pulau88 records transaction references, amounts, dates, status and limited payment identifiers required for reconciliation and verification. Banks, e-wallet operators and payment processors may independently process information under their own privacy obligations. pulau88 does not require a user to disclose a banking password, complete card security code or one-time authentication code to customer support.

pulau88 may share the minimum information necessary with carefully selected service providers that support payment processing, identity verification, hosting, technical security, game delivery, analytics, customer assistance and professional advice. Providers are expected to use information only for authorised purposes and apply suitable confidentiality and security measures.

Information may also be disclosed where required by a valid law, court order, regulatory request or financial crime investigation. pulau88 may share relevant records when reasonably necessary to protect a user, enforce account terms, investigate fraud, respond to a payment dispute or defend legal rights.

If ownership or operation of pulau88 changes through a lawful business transaction, necessary information may transfer as part of that transaction, subject to continued protection and notice where required. pulau88 will not disclose personal information merely because an unrelated party requests it.

pulau88 may use first-party cookies and similar storage technologies to maintain a secure session, remember language or display preferences, detect suspicious login behaviour and understand whether website functions operate correctly. Essential cookies may be required for authentication and account security.

Technical logs can include IP address, browser version, operating system, device category, timestamps, requested pages and error information. pulau88 uses these records to investigate failures, prevent abuse and improve performance for users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and elsewhere.

Browser controls may allow users to restrict optional cookies. Blocking essential storage may prevent account login, security checks or transaction functionality from operating correctly.

pulau88 uses layered administrative, technical and organisational controls designed to protect personal information. Measures may include encrypted transmission, restricted employee access, account authentication, activity monitoring, secure backups, supplier review and incident response procedures.

No internet service can guarantee absolute security. Users also have an important role in protection. A pulau88 password should be unique, difficult to guess and not reused for email, banking or social accounts. Users should sign out on shared devices and report unexpected login or payment activity promptly.

Where pulau88 confirms a personal information incident, it will assess the likely consequences, take reasonable containment measures and provide notices to affected individuals or authorities when legally required.

pulau88 retains information only for as long as reasonably necessary for the purpose for which it was collected, subject to legal, financial, fraud-prevention, dispute and regulatory requirements. Retention periods can differ according to data category and account status.

Account and transaction records may need to remain available after account closure where required for financial reporting, KYC evidence, anti-money-laundering checks, self-exclusion enforcement or legal claims. When information is no longer required, pulau88 will delete, anonymise or securely isolate it in accordance with applicable procedures.

A deletion request does not automatically override mandatory retention duties. pulau88 will explain any material restriction when responding to a valid request.

Certain pulau88 technology, verification, payment or support providers may operate outside Malaysia. As a result, personal information may be processed in another jurisdiction where privacy rules differ from Malaysian requirements.

When an international transfer occurs, pulau88 seeks to apply appropriate safeguards based on the nature of the information, the recipient, contractual protections and applicable legal requirements. Access remains limited to the information reasonably required to perform the authorised service.

Subject to identity verification and applicable law, a pulau88 user may exercise certain rights concerning personal information. These rights are not absolute and may be restricted by legal, security or regulatory obligations.

pulau88 may request sufficient information to confirm the identity of the person making a request. This protects account data from unauthorised disclosure. Complex or repeated requests may require additional time, and pulau88 will communicate any applicable limitation.

pulau88 does not knowingly seek personal information from anyone below the minimum permitted age. If information suggests that an underage individual has attempted to create or use an account, pulau88 may suspend access, conduct age verification and delete information where retention is not legally necessary.

A parent or guardian who reasonably believes that an underage person has provided information to pulau88 may contact the privacy team using the plain-text details in the Contact Us section.

pulau88 may revise this Privacy Policy to reflect changes in services, technology, security practices or legal obligations. The latest version will be published on this page with an updated review date.

Where a change materially affects how pulau88 processes existing personal information, an appropriate notice will be provided before the change takes effect when required. Continued use of pulau88 does not replace any fresh consent that may be legally necessary for a new processing purpose.

Questions, complaints and requests concerning this Privacy Policy or pulau88 data handling may be directed to the privacy team. The website email is displayed as plain text and is not a clickable link:

Include a clear description of the request and enough information for pulau88 to identify the relevant account. Do not include a password, PIN, complete payment credentials or one-time security code. pulau88 may require secure identity verification before releasing or changing personal information.