Poka88 Privacy Policy – Protection of Your Personal Data

1Information We Collect

Poka88 collects various types of information from users of our platform. This collection is conducted transparently and only for legitimate purposes related to the operation of our online entertainment platform. The information we collect falls into several main categories:

Identity and Account Information

• Full name as it appears on your identity card or passport.
• Identity card number (MyKad) or passport number for the KYC process.
• Date of birth for minimum age verification of 18 years.
• Active email address and mobile phone number.
• Account username and password (stored in encrypted form).

Financial Information

• Bank account number for processing deposits and withdrawals via FPX, DuitNow QR, and other local payment methods.
• Transaction records include deposit amounts, withdrawals, redeemed bonuses, and wagering history.
• Information related to the payment method used, but not full card numbers — we do not directly store credit or debit card details.

Technical and Usage Information

• Your IP address, device type, operating system, and browser version when you access the platform.
• Activity logs include login times, games played, and session duration.
• Cookie data and similar tracking technologies to enhance the user experience.
• Location information at the country or state level based on IP address.

2How We Use Your Information

Every piece of information collected by poka88 is used for clear, legitimate purposes directly related to the delivery of platform services. Below is a full description of how your data is used:

Poka88 will not use your data for any purpose other than those stated above. If we need to use your data for a new purpose not listed here, we will obtain your consent in advance through a clear notice.

3Legal Basis for Data Processing

Every processing of personal data carried out by poka88 is based on one or more valid legal grounds. We process your personal data on the basis of:

• Contract Performance: Processing required to fulfil our obligations to you as a platform member, including transaction processing and account maintenance.
• Legal Obligation: Compliance with KYC requirements, anti-money laundering (AML), and financial reporting requirements set by the relevant authorities.
• Legitimate Interest: Fraud detection, risk management, and platform security enhancements that benefit all members.
• Consent: Sending marketing and promotional communications, which you may withdraw consent for at any time.

4Data Storage and Security

Poka88 implements comprehensive technical and organisational security measures to ensure your personal data is protected against unauthorised access, loss, alteration, or unintended disclosure.

Technical Security Measures:

• 256-bit SSL/TLS data encryption for all communications between your device and poka88 servers.
• At-rest encryption for all sensitive information stored in our databases.
• Two-factor authentication (2FA) is available for additional account security.
• Continuous 24/7 security monitoring with an automated intrusion detection system.
• Security testing and vulnerability audits (penetration testing) are conducted periodically by independent parties.

Data Retention Period:

• Active account data is retained for as long as your account remains active on the platform.
• Financial transaction records are retained for a minimum of 7 years for financial regulatory compliance purposes.
• Technical logs and session data are retained for 90 days before being automatically deleted.
• After account closure, primary personal data will be deleted within 90 days, except for data that must be retained for legal reasons.

5Sharing Information with Third Parties

Poka88 does not sell or rent your personal data to any third party for marketing purposes. However, there are limited situations where we need to share information with other parties to enable our services to operate effectively:

• Payment Processing Providers: Required transaction information is shared with licensed payment providers such as local banks, FPX, and digital wallet operators to process your deposits and withdrawals.
• Game Software Providers: Usernames and session IDs are shared with licensed casino software providers supporting our platform for game operation purposes.
• Regulatory Authority: Information required by law or court order will be disclosed to the relevant authorities in Malaysia.
• Audit and Compliance Partners: Independent audit firms that help us comply with security and fair play standards.

All third parties working with us are required to comply with strict data protection standards and are not permitted to use received data for any purpose other than those specified in our mutual service agreements.

6Cookies and Tracking Technologies

Poka88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that allow the platform to recognise you on subsequent visits.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies: Collects anonymous information about how you use the platform, enabling us to identify and improve areas that need enhancement.
• Functional Cookies: Stores your preferences such as language, display theme, and other settings for a more convenient experience.
• Analytics Cookies: Helps us understand overall usage patterns for product and service improvement purposes.

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality and security of the Poka88 platform.

7Your Rights as a Data Subject

As a poka88 member and data subject, you have certain rights regarding the personal information we hold about you. We are committed to facilitating the exercise of these rights:

• Right to Access: You have the right to request a copy of all personal data we hold about you.
• Right to Rectification: If any information we hold is inaccurate or out of date, you have the right to request an immediate correction.
• Right to Erasure: Under certain circumstances, you have the right to request that your personal data be deleted, subject to legal retention obligations we are required to comply with.
• Right to Restrict Processing: You have the right to request that we restrict how we use your data in certain situations.
• Right to Object: You have the right to object to data processing based on legitimate interests or for direct marketing purposes.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another service provider.

8Cross-Border Data Transfers

In some operational cases, your personal data may be transferred to or processed in other countries where our game software providers or technical infrastructure are located. Poka88 ensures that any such data transfers are carried out with adequate safeguards through:

• Data processing agreements compliant with international data protection standards with all technical partners.
• Use of standard contractual clauses recognised as a lawful data transfer mechanism.
• Regular security assessments of all partners that receive poka88 player data.

You will be notified of any material changes to how your data is transferred or processed internationally that may affect your privacy rights.

9Children's Data

The poka88 platform is exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data from minors. All account registrations go through a strict age verification process, including identity document checks.

Should we find that data belonging to an individual under 18 has been collected unintentionally, we will take immediate steps to delete that data and close the relevant account without notice. If you are aware that a minor has registered on our platform, please notify our support team immediately.

10Privacy Policy Amendments

Poka88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data protection practices, new legal requirements, or relevant technological developments. Any material amendments will be communicated to you via:

• A prominent notice on the poka88 platform homepage at least 14 days before any amendment takes effect.
• A notification email sent to your registered email address.
• In-platform pop-up notification during your next login session.

Continued use of the platform after the effective date of any amendment will be deemed as acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account before the amendment takes effect.