puyss888 Privacy Policy

This Privacy Policy applies to the puyss888 online gaming platform, accessible at puyss888.net and all associated subdomains and mobile-optimised interfaces (collectively, the "Platform"). For the purposes of applicable data protection legislation, puyss888 is the data controller responsible for the personal data of Members collected through the Platform.

puyss888 operates under an international gaming authority licence. Our data handling practices are designed to comply with the Personal Data Protection Act 2010 (Malaysia) ("PDPA") and any other applicable data protection legislation. By creating and using a puyss888 Account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

puyss888 collects the following categories of personal data in the course of operating the Platform:

puyss888 does not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required by our licensing authority for responsible gaming or self-exclusion purposes, in which case such data is processed only with your explicit consent.

puyss888 collects personal data through the following means:

• Direct Collection: Information you provide when registering a puyss888 Account, completing KYC verification, submitting a support request, responding to a promotion, or updating your Account settings.
• Automated Collection: Technical and usage data collected automatically when you access and use the Platform, including data collected via cookies, server logs, and session tracking technologies.
• Third-Party Sources: Identity and financial verification data received from KYC/AML service providers, payment processors, and fraud prevention services in the course of onboarding and transaction processing.
• Regulatory Sources: Information we may receive from regulatory authorities, law enforcement agencies, or licensing bodies in connection with our legal obligations.

puyss888 processes your personal data for the following purposes:

• To create, verify, and administer your puyss888 Account;
• To process deposits and withdrawals and reconcile financial transactions;
• To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under our international gaming licence;
• To verify that you meet the minimum age requirement of 21 years;
• To provide, maintain, and improve the Platform and its features;
• To provide customer support and resolve disputes;
• To detect, investigate, and prevent fraud, money laundering, collusion, and other prohibited activities;
• To deliver promotional offers, bonuses, and personalised communications where you have consented to receive them or where we have a legitimate interest in doing so;
• To operate responsible gaming tools including deposit limits, loss limits, self-exclusion, and reality checks;
• To comply with legal and regulatory obligations, including reporting to licensing authorities;
• To analyse Platform usage patterns and improve user experience, game offerings, and technical performance.

puyss888 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between puyss888 and you as a Member, including Account registration, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable law, including AML legislation, KYC requirements, and gaming regulatory obligations.
• Legitimate Interests: Processing carried out for puyss888's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming operations, where those interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, including the delivery of direct marketing communications and the collection of sensitive personal data where applicable. You may withdraw consent at any time by contacting our support team.

puyss888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Game Providers: Your account session tokens are shared with integrated game studios to enable gameplay. These providers do not receive your full personal profile.
• Payment Processors: Financial data necessary to process deposits and withdrawals is shared with our payment partners, including Touch n Go eWallet, Boost, FPX processing banks, and cryptocurrency exchange providers.
• KYC / AML Service Providers: Identity and document verification data is processed by third-party verification service providers under contractual data processing agreements.
• Fraud Prevention Services: Technical data including IP addresses and device fingerprints may be shared with fraud detection and cybersecurity service providers.
• Regulatory & Legal Authorities: puyss888 may disclose personal data to our licensing authority, law enforcement agencies, financial intelligence units, or courts where required or permitted by applicable law.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of puyss888, Member data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third-party service providers engaged by puyss888 are required to process personal data only in accordance with puyss888's instructions and are subject to appropriate contractual data protection obligations.

puyss888 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function correctly, including maintaining your login session, remembering your preferences, and enabling secure connections. These cannot be disabled without affecting Platform functionality.
• Performance Cookies: Collect anonymised data about how Members use the Platform — which pages load slowly, which features are used most — to help puyss888 improve platform performance.
• Functional Cookies: Remember your personal settings such as language preferences, display options, and responsible gaming configuration.
• Security Cookies: Support fraud detection and security functions including login anomaly detection and bot prevention.

You may configure your browser to refuse non-essential cookies. Please note that disabling certain cookies may affect the functionality of the puyss888 Platform, including your ability to remain logged in or access certain features. Your continued use of the Platform following the display of our cookie notice constitutes consent to the use of cookies as described in this section.

puyss888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Active Account Data: Retained for the duration of your puyss888 Account and for a minimum of five (5) years following Account closure, in compliance with AML and gaming regulatory record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years in accordance with applicable financial record-keeping obligations.
• KYC Documents: Identity verification documents are retained for the period required by our licensing authority, typically five (5) years post-Account closure.
• Support Records: Customer support communications are retained for three (3) years following resolution unless required for longer under applicable law.
• Self-Exclusion Records: Where you have requested self-exclusion, relevant data is retained for the duration of the exclusion period and for a further period as required to prevent re-registration.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with puyss888's data destruction protocols.

puyss888 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the puyss888 Platform;
• Encryption of sensitive personal data at rest within puyss888's database infrastructure;
• Strict role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Automated monitoring for unusual login patterns, suspicious transactions, and potential data breaches;
• Secure data centres with physical access controls and redundancy measures.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, puyss888 will notify you and any relevant regulatory authority in accordance with applicable data protection law. You should notify puyss888 immediately via live chat or email if you suspect any unauthorised access to your Account.

Subject to applicable law, you have the following rights in relation to your personal data held by puyss888:

To exercise any of the above rights, please contact our support team via live chat or by emailing [email protected]. puyss888 will respond to all data rights requests within 30 days. In certain circumstances, puyss888 may be required to retain or continue processing data despite a request — for example, where retention is required under AML legislation — in which case we will explain the reason for the limitation.

The puyss888 Platform is strictly intended for use by individuals aged 21 years and above. puyss888 does not knowingly collect personal data from anyone under the age of 21. If puyss888 becomes aware that personal data has been collected from an individual below the minimum age threshold, the relevant Account will be closed immediately and all associated data will be deleted, with the exception of any records required to be retained under applicable law for the prevention of future underage access attempts.

If you have reason to believe that a minor has registered a puyss888 Account, please contact our support team immediately so that the matter can be investigated and appropriate action taken.

puyss888 operates an international platform and certain personal data processing activities may involve the transfer of data to servers or service providers located outside Malaysia. Where personal data is transferred outside Malaysia, puyss888 ensures that appropriate safeguards are in place, including contractual data processing agreements incorporating standard data protection clauses, to ensure that your personal data receives equivalent protection to that afforded under Malaysian data protection law.

puyss888 engages third-party service providers — including KYC verification providers, payment processors, and cloud infrastructure providers — who may process data in jurisdictions including Singapore, the European Economic Area, and other locations with recognised adequate data protection standards. By using the puyss888 Platform, you consent to the transfer of your personal data to these jurisdictions as described in this section.

puyss888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where material changes are made, puyss888 will notify Members via the email address registered to their Account or through a prominent notice on the Platform prior to the changes taking effect.

The "Last updated" date at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically. Continued use of the puyss888 Platform following notification of any material change constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests in relation to this Privacy Policy or puyss888's data processing practices, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the Platform — average first response under 3 minutes
• Email: [email protected]

puyss888 aims to acknowledge all privacy-related enquiries within 3 business days and to fully resolve data rights requests within 30 calendar days of receipt. Where a request requires extended processing time, we will inform you accordingly.