Pika88 Privacy Policy — Personal Data Protection Malaysian Members

1. Introduction and pika88 Privacy Commitment

Pika88 understands that privacy is more than a legal requirement — it is the trust you place in us every time you register, log in, or make a transaction on our platform. That trust is something we guard wholeheartedly.

As an online gaming platform operating in the Malaysian market, pika88 is subject to Personal Data Protection Act 2010 (PDPA) Malaysia and complies with all legal requirements relating to the collection, processing and storage of users' personal data. We never treat your data as a tradeable business asset — your information belongs to you, and we only manage it on the basis of clear and legitimate necessity.

This Privacy Policy explains in plain, easy-to-understand language — without complex legal jargon — what information we collect, why we need it, how we protect it, and what choices and rights you have over your own data.

---

2. Personal Information We Collect

Pika88 only collects information that is strictly necessary to provide a safe, fair, and fully functional service. We do not collect data that is irrelevant or exceeds the operational requirements of the platform.

2.1 Information You Provide Directly

When you register or use pika88 services, you will provide us with the following information:

This information is required for identity verification, financial transaction processing and compliance with anti-money laundering (AML) legal requirements.

2.2 Information Collected Automatically

When you use the pika88 platform, our systems automatically record certain technical information for security and service improvement purposes:

• Your device's IP address and network information.
• Web browser type, operating system and device type used.
• Pages visited, session duration and game activity records.
• General location data (state/country) based on IP address.
• Cookie information and login session identifiers.

2.3 Financial Transaction Information

Every deposit and withdrawal transaction you make via DuitNow, FPX, TNG eWallet, GrabPay, or Boost is recorded in our system. These records include the transaction amount, date and time, payment method used, and transaction status. This information is retained for audit purposes, dispute resolution, and financial reporting compliance.

---

3. How We Use Your Information

Pika88 uses your personal data only for lawful and transparent purposes. The following is a complete list of how your data is used:

• Identity and eligibility verification: Verifying that you meet the age and location requirements to use the pika88 platform.
• Account management: Creating, maintaining and protecting your account, including processing password reset requests and two-factor authentication.
• Transaction processing: Processing deposits, withdrawals and any other financial transactions you make on our platform securely and accurately.
• Legal compliance: Fulfilling legal obligations related to AML, KYC and reporting to the relevant authorities when required.
• Customer Service: Answering enquiries, resolving complaints and providing you with technical support.
• Platform security: Detecting and preventing fraud, unauthorised access, multi-account usage and other illegal activities.
• Service improvement: Analysing usage patterns in aggregate (not individually) to improve the interface and overall user experience.
• Marketing communications: Sending promotional information and exclusive offers — only if you have consented to receive them during registration.

---

4. Sharing Information with Third Parties

Pika88 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. This is our absolute commitment to every member.

However, there are certain situations where we may need to share your information with carefully selected third parties, solely to enable us to provide you with the best possible service:

4.1 Payment Service Providers

Required transaction information is shared with payment gateway providers such as DuitNow, FPX, TNG eWallet, GrabPay and Boost to process your deposits and withdrawals. These providers maintain their own strict privacy policies and security standards.

4.2 Game Providers

Your username and game activity records are shared with game software providers that supply game titles on the pika88 platform to ensure game sessions function correctly and Wins are recorded accurately.

4.3 Authorities and Enforcement Bodies

Pika88 will disclose required information to competent authorities — including law enforcement agencies or regulatory bodies — where there is a legal obligation to do so, or where we believe such disclosure is necessary to protect public safety.

4.4 Technical Service Providers

Third parties that help us operate the platform's technical infrastructure — such as cloud computing, analytics, and cybersecurity services — may have limited access to your data as part of their service agreements. All such parties are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.

---

5. Data Security and Protection Measures

Protecting your personal data is pika88's top priority. We continuously invest in the latest security technologies and procedures to ensure your information remains safe at all times.

The security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your browser and pika88's servers is protected with bank-grade SSL encryption, making it unreadable to any party attempting to intercept the communication.
• Hashed password storage: Your password is never stored in plain text. We use strong cryptographic hashing algorithms so that even pika88 internal staff cannot read your password.
• Two-factor authentication (2FA): An additional security layer is available for all member accounts to prevent unauthorised access.
• 24/7 security monitoring: Our systems are continuously monitored to detect any unusual activity or intrusion attempts.
• Role-based data access: pika88 staff can only access the data they need for their specific duties — no unrestricted full access is granted.
• Regular security audits: The pika88 platform undergoes regular penetration testing and security audits conducted by independent experts.

---

6. Cookies and Tracking Technologies

Pika88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as maintaining your login session and ensuring account security. These cookies cannot be disabled without affecting core platform functionality.
• Performance Cookies: Collecting information on how you use our platform (pages visited, time spent) to help us improve the overall user experience.
• Functional Cookies: Remembering your preferences such as language, display settings and login details for your convenience.
• Analytics Cookies: Data is collected in aggregate and anonymised form to understand platform usage patterns. This data cannot be traced back to any specific individual.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the pika88 platform.

---

7. Data Retention and Deletion Period

Pika88 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable law.

• Active account data: Retained for as long as your account is active and for a specified period after account closure, for the purpose of resolving any disputes or claims that may arise.
• Financial transaction records: Retained for a minimum of 7 years after the transaction occurs, in line with Malaysia's accounting and AML compliance requirements.
• Security logs: Retained for 12 months for security incident investigation purposes.
• Marketing data: Deleted as soon as you withdraw consent to receive marketing communications.

When your data is no longer needed and there is no legal obligation to retain it, pika88 will delete or anonymise that data in a secure and irreversible manner.

---

8. Your Rights Under This Privacy Policy

As a pika88 member, you have the following rights regarding your personal data, and we are committed to respecting and facilitating the exercise of those rights:

To exercise any of the above rights, please contact our data protection team at [email protected]. We will process your request within 30 working days.

---

9. Children's Privacy

Pika88 is a platform designed exclusively for adults aged 18 and above. We do not intentionally collect or process personal data from individuals under the age of 18. Should we discover that data from a person under 18 has been collected inadvertently, we will take immediate action to delete that data and close the relevant account.

If you are a parent or guardian and suspect that your child has registered on our platform, please contact us immediately at [email protected] so that we may take the appropriate action promptly.

---

10. Changes to This Privacy Policy

Pika88 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments. Any material changes will be communicated to you via an in-account notification or your registered email at least 14 days before the changes take effect.

The "Last Updated" date at the top of this document will always be updated to reflect the latest version of the Privacy Policy currently in effect. We encourage you to review this page periodically.

---

11. How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the pika88 Data Protection Officer through the following channels:

We take every privacy complaint seriously and will investigate and respond to you in a timely manner. If you are not satisfied with our response, you have the right to escalate your complaint to the Malaysia Personal Data Protection Department or the relevant regulatory authority.