PERSONAL DATA PROTECTION

Privacy Policy PG168 — Our Commitment to Your Data Security

At pg168, your privacy is not merely a legal obligation — it is a core value we uphold. This document details how we collect, use, store, and protect your personal information.

Last Updated: 1 January 2026

How We Protect Your Privacy

Six key pillars of personal data protection on the pg168 platform

🔐
256-bit SSL Encryption

All data transmitted between your device and pg168 servers is protected by industry-standard 256-bit SSL encryption. This ensures sensitive information such as passwords and payment details cannot be intercepted by third parties during transmission.

🏦
Secure Fund Segregation

Your financial information is handled in strict accordance with PCI-DSS standards. Your card or bank account details are not stored directly on pg168 servers — we use certified payment gateways to ensure the security of your transactions.

📋
Malaysia PDPA Compliance

All data handling operations at pg168 comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We only collect data that is strictly necessary, retain it for the legally required period, and dispose of it securely when it is no longer needed.

🚫
No Sale of Data to Third Parties

Pg168 has never and will never sell, rent, or trade your personal data to any third party for marketing purposes. Your information belongs to you — we only use it for purposes you have agreed to.

🛡️
Strict Internal Access Controls

Access to user personal data within pg168 is strictly limited based on the "need-to-know" principle. Only authorised personnel who have completed privacy training are permitted to access sensitive user information.

⚡
Rapid Incident Response

In the event of any data security breach involving user personal information, pg168 is committed to notifying affected users within 72 hours of becoming aware of the incident, in line with international best practices.

This Privacy Policy outlines pg168's commitment to protecting your personal data in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia. By using the pg168 platform, you agree to the terms stated in this policy.

1 Scope and Purpose of This Policy

This Privacy Policy applies to all users accessing the pg168 platform through our official website at pg168.ml or via the pg168 mobile app, available for download on Android and iOS devices. It covers all types of personal data collected when you register, use our services, contact the support team, or interact with our platform in any way.

The main purpose of this policy is to ensure you clearly understand:

  • What personal information we collect from you and why.
  • How the information is used, stored, and protected.
  • Who your information may be shared with and under what circumstances.
  • Your rights regarding your personal data and how to exercise them.

Pg168 acts as the data controller for all personal information you provide to us. This means we are responsible for ensuring your data is handled in a manner that complies with the law and respects your privacy rights.

2 Types of Personal Data We Collect

Pg168 collects various types of personal information depending on how you interact with our platform. Below is a detailed summary of the data types we collect:

Data Category Examples of Information Collection Method
Identity Data Full name, date of birth, IC/passport number, gender Account Registration & KYC Process
Contact Data Email address, phone number, residential address Registration & Profile Update
Financial Data Bank name, account number, transaction records Deposit & withdrawal of funds
Technical Data IP address, device type, browser, operating system Automatically during use
Usage Data Games played, play time, wagering Automatically via platform systems
Communication Data Support chat logs, emails, feedback Interactions with the support team

Pg168 only collects data that is strictly necessary for the stated purposes. We do not collect sensitive data such as your medical information, political views, or religious affiliations.

3 How We Use Your Personal Data

The personal data we collect is used solely for legitimate and transparent purposes. The following are the primary purposes for which your data is used on the pg168 platform:

  • Identity Verification and KYC: Verifying that you meet the age and eligibility requirements to use the platform, and ensuring compliance with anti-money laundering (AML) requirements.
  • Account Management: Creating, maintaining, and managing your account, including processing logins, profile settings, and security preferences.
  • Transaction processing: Handling deposits, withdrawals, and all financial activities in your account securely and efficiently.
  • Service Delivery: Enabling you to seamlessly access all games, promotions, and features on the pg168 platform.
  • Customer support: Providing technical assistance and responding to your enquiries via live chat, email, or other support channels.
  • Marketing communications: Sending you information about the latest promotions, bonuses, and offers — only if you have given consent to receive such communications.
  • Fraud prevention: Detecting and preventing fraudulent activity, money laundering, or unlawful use of the platform.
  • Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate assistance.
  • Platform improvements: Analysing usage data in aggregate and anonymised form to improve user experience and platform performance.

4 Legal Basis for Data Processing

In compliance with PDPA 2010, pg168 processes your personal data on the following legal bases:

  • Consent: When you register an account and agree to our Terms & Conditions and Privacy Policy. You may withdraw consent at any time, though this may affect your ability to continue using the platform.
  • Contract fulfilment: Processing required to fulfil our contractual obligations to you, including payment processing and service delivery.
  • Legal obligation: Processing required to comply with applicable Malaysian law, including KYC and AML requirements.
  • Legitimate interests: Processing for fraud prevention, platform security, and service improvement purposes that does not override your privacy rights.

5 Data Sharing With Third Parties

Pg168 does not sell or rent your personal data to third parties. However, under certain limited and controlled circumstances, we may share your data with the following parties:

  • Payment service providers: Trusted payment gateways used to securely process your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
  • Technology service providers: Companies providing hosting infrastructure, cybersecurity, and platform analytics — only for data required for their specific functions.
  • Game providers: Game studios and software providers that require minimum data to deliver a seamless gaming experience.
  • Legal authorities: Government agencies or law enforcement bodies when required by Malaysian law or a valid court order.
  • Auditors and professional advisors: Within the limited scope required for compliance audits, legal advice, or insurance purposes.

Every third party that receives pg168 user data required to sign a data processing agreement that binds them to the same or higher protection standards that we uphold.

6 Data Retention Period

Pg168 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable Malaysian law. The following is a guide to our retention periods:

  • Active account data: Retained for as long as your account remains active on the pg168 platform.
  • Financial transaction data: Retained for 7 years after the transaction occurs, in line with Malaysia's accounting and anti-money laundering legal requirements.
  • KYC records and identity verification: Retained for 5 years after account closure or the date of the last transaction.
  • Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
  • Technical data (access logs): Retained for 90 days for security and fraud detection purposes.

Once the retention period expires, your data will be securely disposed of using methods that ensure it cannot be recovered or accessed again.

7 Data Security Measures

Pg168 continuously invests in security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures we implement include:

  • Data Encryption in Transit: All communications between your device and our platform are secured with TLS 1.3 protocol and 256-bit SSL encryption.
  • Data Encryption at Rest: Sensitive data stored in our databases is encrypted using AES-256 standards.
  • Two-Factor Authentication (2FA): Additional protection for user accounts via OTP codes sent to the registered phone number.
  • 24/7 security monitoring: A real-time threat detection system that monitors suspicious activity around the clock.
  • Periodic penetration testing: Security audits and penetration testing by independent third parties conducted periodically to identify and address vulnerabilities.
  • Role-based access controls: Staff may only access data relevant to their role, with all access logged and monitored.

While we take every reasonable step to protect your data, no system is completely immune to attack. You also play an important role in your account's security — ensure your password is strong and never shared with anyone.

8 Your Rights as a Data Subject

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by pg168:

👁️
Right of Access

You have the right to request a copy of the personal data we hold about you and to know how it is used.

✏️
Right to Rectification

You may request that we correct any inaccurate or incomplete personal data we hold about you.

🗑️
Right to Erasure

Under certain circumstances, you may request the deletion of your personal data, subject to our legal obligations.

⛔
Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time.

📦
Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

🔕
Right to Withdraw Consent

You may withdraw consent for data processing at any time, without affecting the validity of prior processing.

To exercise any of the above rights, please contact the pg168 support team via live chat or email. We will process your request within 30 working days from the date of receipt.

9 Use of Cookies

The pg168 platform uses cookies and similar tracking technologies to enhance your browsing experience and ensure the platform functions properly. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential cookies: Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled.
  • Performance cookies: Helping us understand how users interact with the platform for improvement purposes. Data collected is anonymised.
  • Functional cookies: Saving your preferences such as language, display settings, and login information for your convenience.
  • Analytics cookies: Used to analyse traffic and usage patterns to help us better understand user needs.

You can control and manage cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the pg168 platform.

10 Links to Third-Party Websites

The pg168 platform may contain links to third-party websites or services for user convenience. Please note that this Privacy Policy applies to the pg168 platform only and does not cover the privacy practices of any third-party websites.

Pg168 is not responsible for the content, privacy policies, or practices of any third-party websites. We encourage you to read the privacy policy of any website you visit after leaving our platform.

11 Child Protection

The pg168 platform is an adult service that not intended for individuals under the age of 18. We do not knowingly collect personal data from children or minors below the stipulated age.

If we find that we have inadvertently collected personal data from someone under 18 years of age, we will take immediate steps to delete that data and terminate the relevant account. If you believe we may hold personal data belonging to a minor, please contact us immediately.

12 How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the pg168 Data Privacy Officer (DPO) via:

  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform.
  • Email: Send your enquiries to [email protected] — we will respond within 3 business days.

For complaints that cannot be resolved internally, you have the right to refer the matter to Department of Personal Data Protection, Ministry of Communications and Digital Malaysia.

This Privacy Policy may be updated from time to time to reflect changes in law, industry practices, or our operations. Any material changes will be communicated to you via platform notification or email before taking effect.

🔐🛡️✅

Play Safe and Confident at PG168

Your privacy and security are our top priority. Register a pg168 account today and enjoy a fully protected gaming experience powered by the latest encryption technology.

Bahasa Melayu