puyss888 Privacy Policy

1 Overview & Scope

This Privacy Policy ("Policy") governs the collection, use, storage, disclosure, and protection of personal data by puyss888 ("the Platform", "we", "us", "our") in connection with your use of puyss888.org and all associated services, including the live casino, slots, sportsbook, poker, and wallet products available under the puyss888 brand.

This Policy applies to all individuals who visit puyss888.org, register a puyss888 account, use the puyss888 Login to access platform services, or interact with puyss888 through any supported communication channel including Live Chat and email. It applies regardless of whether access is from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, or any other location.

puyss888 operates this platform with data privacy as a core operational principle, not a compliance checkbox. The data practices described in this Policy reflect our commitment to treating the personal information of Malaysian players with appropriate care and transparency.

2 Personal Data We Collect

puyss888 collects personal data through the following channels: account registration, KYC verification submissions, transaction processing, platform usage, and direct communications with our support team. The categories of data collected are as follows:

puyss888 does not collect sensitive categories of personal data (such as racial or ethnic origin, political opinions, or health data) except where incidentally disclosed by you in support communications. Such disclosures are not used for any purpose beyond resolving the specific support matter.

3 How puyss888 Uses Your Personal Data

All personal data collected by puyss888 is used for clearly defined and legitimate purposes. We do not use your data for purposes beyond those described below without obtaining your prior consent or establishing a separate legal basis.

• Account Administration: Creating, managing, and maintaining your puyss888 account, including authenticating your identity at the puyss888 Login and managing account settings.
• Transaction Processing: Processing MYR deposits via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and FPX; and processing withdrawal requests to your verified Malaysian payment method.
• KYC & Age Verification: Verifying your identity and confirming that you meet the 21+ age requirement prior to activating full account functionality. This is a mandatory legal and licensing obligation, not optional.
• Regulatory Compliance: Meeting anti-money laundering (AML), counter-terrorist financing (CTF), and gaming licensing obligations. This includes monitoring transactions and, where required, reporting to relevant authorities.
• Platform Security: Detecting, investigating, and preventing fraudulent account activity, unauthorised access via puyss888 Login, collusion, and other prohibited conduct.
• Responsible Gaming: Monitoring usage patterns to identify potential problem gambling behaviours, administering self-exclusion requests, and enforcing deposit and loss limits configured by members.
• Customer Support: Responding to queries, resolving account disputes, and providing technical assistance via Live Chat and email.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform performance, game selection, and user experience for Malaysian players.
• Marketing (opt-in only): Sending promotional communications, bonus offers, and platform updates to members who have explicitly opted in. You may opt out at any time via Account Settings or by contacting support.

4 Legal Basis for Data Processing

puyss888 processes personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and puyss888 — including account creation, transaction processing, and platform service delivery.
• Legal Obligation: Processing required to comply with applicable law, including KYC/AML obligations, age verification requirements, and regulatory reporting duties imposed by puyss888's gaming licence.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where such interests are balanced against your privacy rights.
• Consent: Processing for optional marketing communications, where you have provided explicit opt-in consent at registration or via Account Settings. Consent may be withdrawn at any time without affecting your account access or the lawfulness of prior processing.

5 Data Sharing & Third-Party Disclosure

puyss888 does not sell, rent, or trade personal data. We share personal data only with the following categories of recipients and only to the extent necessary for the stated purpose:

• Payment Processors: Touch n Go, Boost, Maybank, CIMB, Public Bank, and FPX receive the transaction data necessary to process your deposits and withdrawals. These processors are bound by their own privacy obligations under Malaysian financial regulations.
• KYC Verification Providers: Licensed third-party identity verification services receive identity documents submitted during account verification. All providers used by puyss888 operate under data processing agreements consistent with applicable privacy standards.
• Game Content Providers: Providers such as PG Soft, Pragmatic Play, and live casino studio partners receive your account session token and stake data necessary to deliver game functionality. They do not receive your full identity or financial account data.
• Regulatory & Legal Authorities: puyss888 will disclose personal data to regulators, law enforcement, and courts where required by applicable law or valid legal process. We will notify affected members where legally permitted to do so.
• Service Providers: Technology and infrastructure providers supporting platform operations (hosting, analytics, customer support software) who process data on our behalf under written data processing agreements.

6 Data Retention

puyss888 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations, whichever is longer.

• Active Account Data: Retained for the duration of your active membership plus a minimum of five (5) years post-account closure, consistent with standard financial record-keeping requirements in the context of online gaming operations.
• KYC Documents: Retained for a minimum of five (5) years from the date of account closure or the date of last transaction, whichever is later, to comply with AML recordkeeping obligations.
• Transaction Records: MYR deposit and withdrawal records are retained for a minimum of five (5) years in compliance with financial recordkeeping standards applicable to the platform's licensing framework.
• Support Communications: Live Chat transcripts and email correspondence are retained for a minimum of two (2) years for dispute resolution and quality assurance purposes.
• Technical & Session Logs: Retained for a maximum of ninety (90) days for security monitoring purposes, after which they are anonymised or deleted.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

7 Security Measures

puyss888 implements technical and organisational security measures proportionate to the sensitivity of the personal data held and the risks of our platform environment. These measures include:

• 256-bit SSL Encryption: All data transmitted between your device and puyss888 servers — including puyss888 Login credentials and financial transaction data — is encrypted in transit using 256-bit SSL, the same standard applied by Malaysian banking portals.
• Password Hashing: Member passwords are hashed using a one-way cryptographic algorithm. puyss888 cannot retrieve your plain-text password; only password reset mechanisms allow credential updates.
• Access Controls: Personal data is accessible only to puyss888 personnel with a documented operational need. Access is role-based, logged, and subject to regular review.
• Two-Factor Authentication: puyss888 Login supports OTP-based two-factor authentication to protect account access even where credentials are compromised.
• Security Audits: The platform undergoes regular security assessments including penetration testing. Critical vulnerabilities are remediated on an expedited timeline.
• Incident Response: puyss888 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify affected members within the timeframe required by applicable law.

No security measure is infallible. puyss888 cannot guarantee absolute security against all possible threats. You are responsible for maintaining the security of your puyss888 Login credentials and for notifying us immediately of any suspected unauthorised account access.

8 Cookies & Tracking Technologies

puyss888 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for platform operation, including session management (maintaining your authenticated puyss888 Login session), security tokens, and load balancing. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Store your preferences such as language settings and responsible gaming tool configurations. Disabling these may affect your platform experience but will not prevent access.
• Analytics Cookies: Collect anonymised data about how Malaysian players navigate the platform — which game categories are most visited, session length patterns, and device type distribution. This data is used to improve the platform and is not linked to individual identities.

puyss888 does not use third-party advertising or retargeting cookies. You will not be tracked across other websites based on your puyss888 usage. You may manage cookie preferences through your browser settings. For strictly necessary cookies, browser-level disabling may prevent you from maintaining a puyss888 Login session.

9 Your Data Rights

As a data subject, you have the following rights in relation to the personal data puyss888 holds about you. These rights may be subject to applicable legal limitations, including retention obligations and fraud prevention requirements:

• Right of Access: You may request a copy of the personal data puyss888 holds about you. We will respond to verified access requests within 30 calendar days.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Some corrections (such as name changes) require supporting documentation consistent with KYC standards.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations. Data subject to AML retention requirements cannot be deleted until those obligations are satisfied.
• Right to Restrict Processing: You may request that puyss888 restricts processing of your data in specific circumstances, such as while the accuracy of data is contested.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time via Account Settings or by contacting support. Withdrawal does not affect the lawfulness of prior processing.
• Right to Object: You may object to processing based on legitimate interests. puyss888 will assess whether compelling grounds to continue processing outweigh your interests.

To exercise any of the above rights, contact the puyss888 support team at [email protected] with the subject line "Data Subject Request" and your registered email address. We may request identity verification before processing your request.

10 Children's Privacy

The puyss888 platform is strictly intended for adults aged 21 years and above. puyss888 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process, enforced via MyKad KYC submission.

If puyss888 discovers that personal data has been collected from an individual who is under 21, the relevant account will be immediately suspended, associated funds will be returned to the verified source payment method, and all personal data associated with the underage account will be deleted in accordance with our data retention schedule.

If you believe a minor has created a puyss888 account, please contact [email protected] immediately with relevant details so the matter can be investigated and resolved promptly.

11 International Data Transfers

Where personal data is transferred to or processed in a jurisdiction outside Malaysia — for example, by game content providers operating server infrastructure in other countries — puyss888 ensures that appropriate safeguards are in place to protect your data to a standard consistent with this Policy.

Such safeguards include contractual data protection clauses with all processors and providers handling personal data outside Malaysia, and selection of providers with demonstrated compliance records in jurisdictions with equivalent or higher data protection standards.

puyss888 does not transfer personal data to jurisdictions identified as inadequate for data protection purposes without establishing specific protective mechanisms.

12 Policy Amendments

puyss888 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform operations. Material changes will be communicated to registered members via the email address on file with a minimum of fourteen (14) days' notice before taking effect.

The current version of this Policy is always available at puyss888.org/privacy-policy. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the puyss888 platform following the effective date of any amendment constitutes your acknowledgment of the updated Policy.

13 Contact Us

For any queries relating to this Privacy Policy, your personal data held by puyss888, or to exercise your data rights, please contact the puyss888 data team through the following channels:

• Email: [email protected] — mark the subject line as "Privacy Query" or "Data Subject Request" for prioritised routing.
• Live Chat: Available 24 hours a day, 7 days a week via the puyss888 platform. For data subject requests, the support team will escalate to the relevant team within one business day.

puyss888 aims to respond to all privacy-related queries within 5 business days. Complex data subject requests requiring verification or cross-team review may take up to 30 calendar days. We will inform you if a request requires more time and the reason for the delay.