Privacy Policy
pluang88

1. Introduction

pluang88 ("we", "us", "our") operates the online gaming platform available at pluang88.cam (the "Platform"). As part of providing our services to members across Malaysia — including players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — we collect and process personal data about registered members and, to a limited extent, visitors to the Platform.

This Privacy Policy describes the categories of personal data we hold, the purposes and legal bases for which that data is processed, the parties with whom it may be shared, the retention periods we apply, the security measures in place, and the rights available to you as a data subject.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the broader contractual relationship between you and pluang88.

2. Definitions

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" — pluang88, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of pluang88 under a written agreement and subject to instruction.
• "Member" — a natural person who has registered a verified account on the Platform in accordance with the Terms & Conditions.
• "KYC" — Know Your Customer verification procedures including identity, age, address, and source-of-funds checks.

3. Data We Collect

3.1 Information you provide directly

When you register an account, submit a KYC document, contact support, or interact with a promotion, pluang88 may collect the following categories of personal data:

• Full legal name, date of birth, and gender
• Residential address within Malaysia or the applicable jurisdiction
• Contact details including email address and phone number
• Government-issued identification numbers (MyKad, passport, or equivalent)
• Copies of identity and address verification documents submitted for KYC
• Financial information including deposit and withdrawal transaction records, payment method identifiers, and, where applicable, bank account or e-wallet details associated with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB Bank, or Hong Leong Bank

3.2 Information collected automatically

Certain technical data is collected automatically when you access the Platform:

3.3 Information from third parties

pluang88 may receive personal data from third-party KYC verification services, payment processors, fraud prevention providers, and, where permitted by law, from responsible gambling databases or self-exclusion registries for the purpose of preventing minors or self-excluded individuals from accessing the Platform.

4. Purposes & Legal Bases for Processing

pluang88 processes personal data only where a legitimate legal basis exists. The principal purposes and corresponding bases are set out below:

5. Data Sharing & Disclosure

5.1 Service providers and data processors

pluang88 engages third-party service providers to assist with specific operational functions, including payment processing, identity verification, IT infrastructure, fraud detection, and customer support tooling. Each service provider is engaged under a data processing agreement that restricts their use of personal data to the stated purpose and prohibits onward transfer without pluang88's authorisation.

5.2 Legal and regulatory disclosure

pluang88 may disclose personal data to law enforcement authorities, regulatory bodies, or courts when required to do so by applicable law, court order, or regulatory mandate, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of pluang88, its members, or the public.

5.3 Business transfers

In the event of a merger, acquisition, or transfer of the Platform's business assets, personal data held by pluang88 may be transferred to the acquiring or successor entity. Members will be notified of any such transfer and of any material change to the applicable privacy terms before it takes effect.

5.4 No sale of personal data

pluang88 does not sell, rent, or otherwise commercialise personal data to third parties for advertising, profiling, or any other commercial purpose unrelated to the operation of the Platform.

6. Cookies & Tracking Technologies

pluang88 uses cookies and similar tracking technologies to maintain session state, authenticate members, apply account preferences, and collect aggregated analytics about Platform usage. The categories of cookies deployed include:

• Strictly necessary cookies — essential for the Platform to function, including session authentication and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional cookies — used to remember your language preference, display settings, and recent activity to improve your experience on return visits.
• Analytics cookies — used to collect aggregated and anonymised data about how members use the Platform, enabling improvements to navigation, content, and performance.

You can manage cookie preferences through your browser settings. Blocking all cookies may impair certain features of the Platform, including login functionality. pluang88 does not use third-party advertising cookies or deploy tracking pixels for the benefit of external advertisers.

7. Data Retention

pluang88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where deletion is subject to a legal hold or ongoing dispute, data will be preserved until that hold is lifted.

8. Security

pluang88 applies industry-standard technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to:

• Encryption of data in transit using TLS 1.2 or higher
• Encryption of sensitive data at rest using AES-256 or equivalent
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Multi-factor authentication for internal systems that access personal data
• Regular vulnerability assessments and penetration testing of the Platform
• Incident response procedures for the detection, investigation, and notification of personal data breaches where required by applicable law

Notwithstanding these measures, no system is completely immune to security risks. Members are encouraged to use a strong, unique password for their pluang88 account and to report any suspected unauthorised access to the support team immediately.

9. Your Rights

As a data subject, you have the following rights in respect of your personal data held by pluang88. Requests may be submitted via the support contact information provided in Clause 12.

• Right of access — you may request a copy of the personal data pluang88 holds about you and information about how it is processed.
• Right of rectification — you may request that inaccurate or incomplete personal data be corrected or updated.
• Right of erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no overriding legal obligation requires its retention.
• Right to restrict processing — you may request that processing of your personal data be restricted in certain circumstances, such as during the resolution of an accuracy dispute.
• Right to data portability — where processing is based on your consent or performance of a contract and is carried out by automated means, you may request a structured, machine-readable copy of the data you have provided.
• Right to object — you may object to processing carried out on the basis of legitimate interest where you have grounds relating to your particular situation.
• Right to withdraw consent — where processing is based on consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

pluang88 will acknowledge all rights requests within five (5) business days and will endeavour to fulfil verified requests within thirty (30) calendar days. Identity verification may be required before processing a rights request to prevent unauthorised disclosure.

10. Children & Minors

The Platform is strictly restricted to individuals aged 21 years and above. pluang88 does not knowingly collect or process personal data relating to persons under the age of 21. Age verification is conducted as part of the KYC process and, where underage use is suspected, the relevant account will be suspended pending investigation.

If you believe that pluang88 has inadvertently collected personal data from a person under 21 years of age, please notify us immediately via the contact details in Clause 12 so that the data can be deleted and the account closed.

11. Policy Updates

pluang88 reviews this Privacy Policy at least annually and whenever material changes to our data processing practices occur. Where changes are substantive, we will post a prominent notice on the Platform and, where appropriate, notify registered members by email or in-platform message no fewer than seven (7) calendar days before the revised policy takes effect.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept the revised policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

12. Contact Us

For any questions, concerns, or formal rights requests relating to this Privacy Policy or the processing of your personal data by pluang88, please contact our support team via the live chat facility available 24 hours a day on the Platform. Agents are available in English, Bahasa Melayu, and Mandarin.

Written enquiries and formal data rights requests may also be submitted by email. The contact email address is provided below as plain text only and is not a clickable link:

[email protected]

Please include "Privacy Request" in the subject line of any written enquiry so that it can be directed to the appropriate team member promptly. pluang88 aims to acknowledge all written privacy enquiries within two (2) business days.