Pussy888 Privacy Policy – Malaysian Player Data Protection

Pussy888 understands that trust is the foundation of the relationship between a platform and its members. When you make a deposit using Touch 'n Go eWallet or GrabPay, when you place your MYR on a Malaysia Super League football match or an IPL cricket game, when you reach out to our support team — all of that involves personal information you have entrusted to us. We take that responsibility very seriously.

Pussy888 adheres to internationally recognised data protection principles. Every decision regarding how we handle your data is evaluated against three core questions: Is collecting this data necessary? Do users understand that it is being collected and why? Is this data adequately protected? If the answer to any of these is "no", we do not proceed.

This policy covers all data collected through the pussy888.express website, the Pussy888 mobile application, customer support communications, and all other interaction channels between you and the Pussy888 platform.

Pussy888 only collects data that is strictly necessary to deliver platform services in a safe, lawful, and effective manner. Below are the categories of data we collect and the purposes for which they are used:

Every use of your personal data by Pussy888 has a legitimate, reasonable, and transparent purpose. We do not use your data for any purpose not stated in this policy without first obtaining your renewed consent.

• Account Management: Creating, verifying, and maintaining your account; processing secure logins; sending verification OTPs; and enabling updates to your personal details.
• Transaction Processing: Process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX Maybank2u/CIMB Clicks; process withdrawal of winnings; and issue transaction records to you upon request.
• Platform Security: Detecting and preventing unauthorised access, fraud, bot activity, bonus abuse, and money laundering through behavioural pattern analysis and technical data.
• Legal Compliance: Fulfil KYC requirements, AML (Anti-Money Laundering) procedures, and any reporting obligations to the relevant authorities as required by law.
• Service Improvement: Analysing platform usage patterns in aggregate, non-identifiable form to improve the interface, enhance performance, and develop new features more relevant to Malaysian players.
• Service Communications: Send important notifications about your account, policy changes, security updates, and relevant promotional information (if you have opted in to receive marketing communications).
• Customer Support: Identify you when you contact support, and access the relevant account records to resolve your query or complaint quickly and accurately.
• VIP Programme & Rewards: Calculating and managing reward points, VIP tiers, and bonus eligibility based on your betting activity on the platform.

Pussy888 does not share your personal data with external parties except in the following limited and strictly controlled situations:

• Payment Service Providers: Transaction information is shared with Malaysian e-wallet and banking providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) solely for the purpose of processing your financial transactions. These providers are subject to their own privacy policies and security standards regulated in Malaysia.
• Game Software Providers: Certain third-party game providers may receive session data required to run games correctly, such as session IDs and bet values. No personally identifiable information — such as your name or phone number — is shared with game providers.
• Audit & Compliance Body: Independent audit firms conducting our security and game fairness audits may access data required for audit purposes under strict confidentiality agreements.
• Legal Authorities: Pussy888 will disclose information to Malaysian law enforcement or the relevant regulatory authorities when required to do so by a valid court order, or where disclosure is necessary to protect serious public interests, including the detection of financial crime.

In all data-sharing arrangements, Pussy888 ensures that recipients are bound by confidentiality obligations equivalent to or stricter than our own standards. No data is shared for third-party marketing purposes without your explicit consent.

Pussy888 continually invests in security infrastructure to ensure your personal data is protected to the highest level technically and operationally achievable. The following are the key security measures we have in place:

• End-to-End Encryption: All data in transit between your device and Pussy888's servers is encrypted using 256-bit SSL/TLS. Data stored in our databases is also encrypted at rest using the AES-256 standard.
• Two-Factor Authentication (2FA): All logins from a new device require additional verification via a one-time password (OTP) sent to your registered phone number. This ensures that only you can access your account, even if your password has been compromised.
• 24/7 Continuous Monitoring: Our anomaly and threat detection system (SIEM) monitors all platform activity in real time, 24 hours a day, 365 days a year. Any suspicious patterns are analysed and acted upon within minutes.
• Strict Internal Access Controls: User data may only be accessed by Pussy888 staff who have a legitimate operational need and have received management authorisation. Every access is recorded in an immutable audit log.
• Periodic Penetration Testing: Pussy888 conducts penetration testing by independent security experts at least twice a year to identify and address security vulnerabilities before they can be exploited.
• Incident Response Plan: Pussy888 maintains an incident response procedure that is regularly tested and updated. Should any security breach occur that may affect your data, we will notify you within 72 hours of the incident being detected, in line with international best practices.

Pussy888 uses cookies and similar technologies to enhance your experience on the platform and ensure it functions properly. Here is an overview of the cookies we use:

• Essential Cookies (Required): These cookies are required for the platform's core functions — including maintaining your login session, remembering your language and currency preferences, and ensuring session security. Without these cookies, the platform will not function properly.
• Functional Cookies: Cookies that remember your preferences — such as your chosen odds format (decimal, fractional, or American), favourite sports selections, and display settings. These cookies improve your browsing experience but are not required for core functionality.
• Analytical Cookies: Pussy888 uses aggregated, non-personalised analytics data to understand how players use the platform — which pages are visited most, which features are most popular, and where users encounter difficulties. This helps us improve the platform for all members.
• Security Cookies: Cookies used to detect suspicious login attempts, recognise previously used devices, and help our fraud detection systems operate effectively.

You can manage your cookie preferences through your browser settings. Please note that blocking essential cookies may affect platform functionality. Pussy888 does not use cookies to track your activity on other websites outside our platform.

As a Pussy888 member and as an individual whose personal data we process, you have the following rights, which you may exercise at any time:

• Right of Access: You have the right to request a copy of all personal data Pussy888 holds about you. This request will be processed within 7 working days and the data will be delivered in a readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Most profile information can be updated directly from within your account.
• Right to Erasure: You have the right to request the deletion of your personal data. However, Pussy888 may be required to retain certain data for a specified period to fulfil legal obligations, such as financial records and AML compliance.
• Right to Restrict Processing: You may request that Pussy888 restrict the processing of your data in certain circumstances — for example, while the accuracy of your data is in dispute or while you are awaiting the outcome of a complaint.
• Right to Withdraw Consent: For data processing based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the validity of any processing that took place prior to the withdrawal.
• Right to Lodge a Complaint: If you are dissatisfied with how Pussy888 handles your data, you may raise a complaint through our customer support channels. All privacy complaints will be thoroughly investigated by our Data Protection Officer.

To exercise any of the above rights, please contact Pussy888 customer support via live chat or email at support@pussy888.express and state your request clearly. We will verify your identity before processing any request relating to your personal data.

Pussy888 retains your personal data for as long as your account is active, or for as long as necessary for the purposes set out in this policy. The following are data retention guidelines for key categories:

• Active Account Data: Retained for as long as your Pussy888 account remains active. You may request account closure and data deletion at any time.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with Malaysian legal and financial compliance requirements. This includes deposit records via e-wallet and FPX, as well as winnings withdrawal records.
• Security & Audit Logs: Retained for 2 years for the purposes of security incident investigation and audit verification.
• Support Communication Records: Customer support session transcripts are retained for 1 year for quality control and complaint reference purposes.
• Closed Account Data: Following account closure, Pussy888 will delete or anonymise your personal data within 90 days, except for data that must be retained for legal reasons as outlined above.

When data is no longer needed and there is no legal obligation to retain it, Pussy888 will ensure that data is securely deleted using methods that prevent recovery.

The Pussy888 platform is a service intended solely for adults aged 18 and above. Pussy888 does not knowingly collect, process, or store any personal data from children or individuals under the age of 18.

If we discover that personal data belonging to a minor has been collected without proper knowledge or valid consent, we will take immediate steps to delete that information, close the associated account, and return any funds that may remain in that account to the rightful owner.

Pussy888 reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, technology, or the way we conduct our business. The following are our commitments regarding policy changes:

• Any material changes to this policy — particularly those affecting your rights or how we use your data — will be communicated to you via in-app notifications and/or email to your registered address, at least 14 days before the changes take effect.
• For minor changes such as language corrections, clarification of existing terms, or updates to contact information, we will update the "Last Updated" date at the top of this policy without a separate notification.
• The latest version of this policy is always available on this page (pussy888.express/privacy-policy) and will clearly reflect the most recent effective date.
• Continued use of the Pussy888 platform after the effective date of any policy change will be considered acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Pussy888 handles your personal data, please contact us through the following channels:

• In-App Live Chat: Available 24 hours — the fastest way to address general privacy enquiries. Please indicate that your query relates to the "Privacy Policy" so it can be directed to the appropriate agent.
• Email Privacy: support@pussy888.express — for formal requests relating to data rights, such as data access, correction, or deletion requests. Please include your account number and a clear description of your request.

All privacy-related enquiries will be responded to within 7 working days. For requests involving more complex data access, correction, or deletion, processing may take up to 30 working days, and we will notify you if your case requires additional time.

All privacy-related communications can be conducted in Bahasa Melayu, and our team is ready to assist you in that language.