Privacy Policy — puyss888

1 Introduction

This Privacy Policy (the "Policy") governs the collection, processing, storage, and disclosure of personal data by puyss888 (hereinafter "puyss888", "we", "us", or "our") in connection with your use of the online gaming and sports betting platform accessible at puyss888.cam (the "Platform").

puyss888 operates primarily for the benefit of Malaysian players and processes personal data in accordance with applicable international data protection principles, including principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and accountability. We take the protection of your personal information seriously and apply industry-standard technical and organisational measures to safeguard the data entrusted to us.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which govern your broader relationship with puyss888. Where any conflict arises between this Policy and those documents, the more specific provision shall prevail.

2 Definitions

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" — any information that identifies or could reasonably identify a natural person, whether directly or indirectly, including name, identification number, location data, contact details, financial information, and online identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — puyss888, which determines the purposes and means of processing your Personal Data.
• "Data Subject" — the natural person to whom Personal Data relates — in this context, you, the registered User.
• "Third Party" — any natural or legal person other than puyss888 and you, including payment processors, game providers, and compliance partners.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement by the Data Subject to the processing of their Personal Data for a specified purpose.
• "KYC" — Know Your Customer, the identity verification process used to confirm User identity, age, and payment method ownership.

3 Data We Collect

puyss888 collects only the Personal Data that is necessary for the legitimate operation of the Platform and delivery of Services. We do not collect excessive, irrelevant, or unnecessary data. The categories of Personal Data we collect are set out below.

3.1 Registration Data

When you create an Account, we collect: full legal name; date of birth; email address; Malaysian mobile phone number; preferred username; and MYR account currency designation.

3.2 Identity Verification (KYC) Data

To satisfy anti-money laundering (AML) obligations and verify your eligibility to participate (including the 21+ age requirement), we may collect: government-issued identification documents (MyKad, passport, or equivalent); proof of residential address (utility bill, bank statement); and proof of payment method ownership.

3.3 Financial Transaction Data

When you make deposits or withdrawals, we collect transaction records including: payment method details (e-wallet account references for Touch 'n Go eWallet, Boost, GrabPay; bank account details for Maybank, CIMB, Public Bank, Hong Leong; card type and last four digits where applicable); transaction amounts in MYR; timestamps; and DuitNow/FPX transaction reference numbers.

3.4 Usage and Gameplay Data

We automatically collect data about how you use the Platform, including: login timestamps and session durations; games accessed, bets placed, and wager amounts; sports events bet upon (including Liga Super Malaysia, EPL, UFC, and other markets); device type, operating system, and browser information; IP address and approximate geolocation data.

3.5 Communications Data

When you contact our support team via live chat or email, we retain records of those communications, including timestamps, the nature of the enquiry, and any documentation submitted, for quality assurance, legal compliance, and dispute resolution purposes.

3.6 Responsible Gambling Data

Where you utilise responsible gambling tools, we record: deposit limit settings; loss limit configurations; self-exclusion requests and durations; and any responsible gambling support interactions. This data is treated with heightened sensitivity and processed exclusively for player protection purposes.

4 How We Use Your Data

puyss888 processes your Personal Data for the following purposes:

5 Legal Basis for Processing

puyss888 processes Personal Data under the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, payment processing, and service delivery;
• Legal Obligation: Processing required to comply with applicable anti-money laundering, know-your-customer, age verification, and other regulatory obligations;
• Legitimate Interests: Processing necessary for fraud detection, platform security, responsible gambling monitoring, and internal analytics, where such interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications, where you have given explicit, freely withdrawable consent at registration or account settings level.

6 Data Sharing & Disclosure

puyss888 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may share your data with the following categories of recipients only to the extent strictly necessary:

6.1 Payment Service Providers

To process MYR deposits and withdrawals, we share relevant transaction and identity data with our payment partners, including DuitNow-affiliated institutions, FPX-connected Malaysian banks (including Maybank, CIMB, Public Bank, and Hong Leong), and e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay). All payment partners are contractually bound to process data solely for payment fulfilment purposes.

6.2 Game Technology Providers

Our live casino studios and slot game providers may receive anonymised or pseudonymised gameplay data for the purposes of RNG certification, game performance auditing, and RTP verification. No identifiable personal information is shared beyond what is technically necessary for game session management.

6.3 Identity Verification Partners

KYC verification may involve secure transmission of identification documents to licensed identity verification service providers. These partners are bound by strict data processing agreements and are prohibited from using your data for any purpose other than identity verification on puyss888's behalf.

6.4 Regulatory and Law Enforcement Authorities

puyss888 may disclose Personal Data to regulatory bodies, law enforcement agencies, or courts where required by applicable law, legal process, or regulatory obligation. Such disclosures are made only to the minimum extent required and are documented internally.

6.5 Business Successors

In the event of a merger, acquisition, or transfer of substantially all assets of puyss888, Personal Data held by the Platform may be transferred to the successor entity, subject to equivalent data protection obligations.

7 Data Retention

puyss888 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your Account's active status;
• KYC and Identity Documents: Retained for a minimum of five (5) years following Account closure, in accordance with AML regulatory requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction;
• Customer Support Communications: Retained for three (3) years from the date of the final communication in each case;
• Responsible Gambling Records: Retained for five (5) years from the date of Account closure or self-exclusion, to support player protection obligations;
• Marketing Consent Records: Retained until consent is withdrawn, plus a reasonable administrative period.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised using industry-standard data destruction methods.

8 Data Security

puyss888 implements the following technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction:

• AES-256 encryption for all stored Personal Data and financial records;
• TLS 1.3 protocol for all data transmission between client and server;
• Role-based access controls limiting staff access to Personal Data based on operational necessity;
• Regular independent penetration testing and vulnerability assessments of Platform infrastructure;
• Multi-factor authentication requirements for all internal administrative access;
• Incident response procedures with defined escalation paths and mandatory breach notification timelines;
• Staff data protection training conducted on a regular basis.

While puyss888 takes all reasonable technical precautions, no digital transmission or storage system is entirely immune to risk. In the unlikely event of a data breach materially affecting your Personal Data, we will notify affected Users and relevant regulatory authorities in accordance with applicable legal requirements.

9 Cookies & Tracking Technologies

puyss888 uses cookies and similar tracking technologies to operate the Platform effectively and improve your user experience. Cookies are small text files placed on your device by the Platform. They do not directly identify you as an individual but may store session information, preferences, and analytics data.

9.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They maintain your login session, remember your language preferences, and ensure security features operate correctly. You cannot opt out of essential cookies without disabling Platform functionality.

9.2 Analytics Cookies

We use analytics cookies to understand how Users interact with the Platform — which pages are most visited, where Users encounter difficulties, and how our Malaysian player base navigates the games and betting sections. This data is aggregated and anonymised wherever possible.

9.3 Responsible Gambling Cookies

Certain cookies support our responsible gambling systems — for example, tracking session duration to trigger time-limit reminders or maintaining self-exclusion status across sessions. These cookies serve a direct player protection function and are treated as essential.

9.4 Managing Cookies

You may control cookie settings through your browser preferences. Disabling non-essential cookies will not prevent you from accessing the Platform but may affect certain personalisation features. For full cookie management guidance, refer to your browser's help documentation.

10 Your Rights as a Data Subject

As a registered User of puyss888, you hold the following rights with respect to your Personal Data. These rights may be subject to certain limitations where processing is required by law or is necessary for the legitimate operation of the Platform:

• Right of Access: You have the right to request a copy of the Personal Data puyss888 holds about you;
• Right to Rectification: You may request correction of any Personal Data that is inaccurate or incomplete;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where processing is no longer necessary, subject to overriding legal obligations (including our AML retention requirements);
• Right to Restriction: You may request that we restrict the processing of your Personal Data in certain circumstances, for example while a rectification request is under review;
• Right to Data Portability: Where processing is based on consent or contract, you may request that your data be provided to you in a structured, commonly used, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests, including direct marketing communications;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our Data Protection team via the contact channels listed in Section 15. We will respond to all verifiable requests within thirty (30) calendar days. Requests may require identity verification before we can act upon them.

11 International Data Transfers

puyss888 operates infrastructure that may involve the transfer and storage of Personal Data in jurisdictions outside Malaysia. Where such transfers occur, puyss888 ensures that adequate protections are in place, including contractual safeguards (such as data processing agreements incorporating appropriate standard contractual clauses) or transfers to jurisdictions recognised as providing an adequate level of data protection.

Personal Data relating to Malaysian players — including KYC documents, transaction records, and gameplay data — is handled with the same standard of care regardless of where it is physically processed, in accordance with this Policy.

12 Protection of Minors

puyss888 employs document-based KYC verification to enforce the 21+ minimum age requirement. If you have reason to believe that a minor has registered on the Platform, please contact our support team immediately. We will investigate and act promptly on all such reports.

13 Third-Party Links & Services

The Platform may contain references to third-party game providers and payment services. While puyss888 selects its service partners carefully and contractually requires them to maintain appropriate data protection standards, this Policy does not cover the privacy practices of those third-party services. puyss888 accepts no responsibility for the privacy practices of any third party.

14 Policy Amendments

puyss888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or our operational structure. Where amendments are material, we will notify registered Users via the email address on their Account and/or via a prominent notice on the Platform, providing a minimum of seven (7) days' advance notice before the revised Policy takes effect.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acknowledgement and acceptance of the changes. The "Last Updated" date at the top of this document reflects the date of the most recent revision. The current version of this Policy is always accessible at puyss888.cam/privacy-policy.

15 Contact Us

For all privacy-related enquiries, data subject rights requests, or concerns regarding how puyss888 handles your Personal Data, please contact us using the details below. All contact information is provided as plain text only and is not a clickable link:

We will acknowledge all data rights requests within five (5) business days and aim to resolve them fully within thirty (30) calendar days. Where a request is complex or where we receive a high volume of requests simultaneously, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.