Privacy Policy

Privacy Policy p88 – We Safeguard Your Data as a Sacred Trust

At p88, your privacy is not just a legal obligation — it is a responsibility we take seriously every day. Find out exactly how we collect, use and protect your personal information as a valued member of our platform.

Last updated: 1 January 2026
256-bit SSL Bank-Grade Encryption
No Data Sales Your data is never sold to third parties
Full Control You can request access to or deletion of your data
PDPA Compliance Compliant with Malaysian law

Important Note: This Privacy Policy outlines p88's commitment to protecting your personal information. By using the p88 platform, you agree to the practices described in this document. Please read it carefully.

1

Introduction

P88 is a dedicated online casino entertainment platform committed to delivering a safe, fair, and enjoyable gaming experience for all members in Malaysia. As a platform trusted by over 150,000 active members, we understand that your trust depends not only on the quality of games we offer, but also on how we handle your personal information.

This Privacy Policy is designed to clearly and transparently explain how p88 collects, stores, uses, discloses and protects your personal data when you use our website, mobile app and services. This document applies to all users of the p88 platform, including registered members, website visitors and anyone who interacts with our services.

P88 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international data protection standards. We are committed to ensuring your information is always handled with full integrity, transparency, and accountability. Every decision involving your data is guided by the data minimisation principle — we only collect what is truly necessary to deliver the best service to you.

p88 never sells, rents, or trades your personal data to any third party for marketing purposes without your explicit consent.

2

Data We Collect

P88 collects your personal information through several methods — directly when you register or use our platform, automatically through tracking technologies, and in certain situations from trusted third-party sources. Below is a summary of the data categories we collect and their purposes:

Data Categories Type of Information Primary Purpose
Identity Information Full name, date of birth, identity card or passport number Identity verification, KYC, fraud prevention
Contact Information Email address, mobile number, residential address Account communications, transaction verification
Financial Information Bank account numbers, digital wallet details, transaction records Deposit and withdrawal processing
Technical Data IP address, device type, web browser, operating system Security, fraud detection, platform improvements
Usage Data Login records, game history, wagering habits Responsible gaming compliance, experience personalisation
Communication Data Live Chat conversation records, support emails, feedback Customer service improvements

All data we collect is based on legitimate operational requirements. You are not obligated to provide all information; however, without certain details — particularly those related to identity verification — we may not be able to deliver our services to you in full.

The KYC (Know Your Customer) process is an industry-standard requirement that protects you from unauthorised use of your identity by others. Submitted documents are stored with encryption and can only be accessed by authorised personnel.

3

How We Use Your Data

P88 uses your personal data only for lawful, reasonable purposes that are directly related to the provision of our services. We never use your data for purposes not disclosed to you at the time of collection.

The detailed purposes for which your data is used are as follows:

  • Account management: Processing registrations, verifying your identity, managing logins, and keeping your account secure at all times.
  • Financial transaction processing: Facilitating deposits, verifying withdrawals, detecting suspicious financial activity, and providing transaction statements.
  • Legal and regulatory compliance: Meeting KYC obligations, reporting suspicious transactions to the relevant authorities under anti-money laundering (AML) laws, and maintaining records required by regulatory bodies.
  • Service communications: Sending important account-related notifications such as transaction confirmations, password resets, security alerts, and policy updates.
  • Marketing (with your consent): Sending information about relevant promotions, bonuses, and special offers. You may opt out of marketing communications at any time via your account settings or by contacting us.
  • Responsible gaming: Monitoring your wagering activity to identify signs of problem gambling and providing appropriate self-exclusion tools when needed.
  • Platform improvements: Analysing aggregated and anonymised usage data to understand user behaviour, identify technical issues, and continuously improve our service quality.
  • Fraud prevention: Detecting and investigating suspicious activity, including hacking attempts, multi-account usage, and bonus system exploitation.

p88 does not use any fully automated decision-making systems that could have a significant impact on your legal rights without involving human review in the process.

4

Data Sharing with Third Parties

P88 understands how sensitive your personal data is. Our core principle is straightforward: we do not share your data unless it is strictly necessary to deliver our services, or when required by law. Below is a list of parties who may receive your data and under what circumstances:

  • Payment service providers: Local banks, FPX, DuitNow, Touch 'n Go, Boost and GrabPay receive the transaction information necessary to process your deposits and withdrawals. They are bound by strict confidentiality agreements with p88.
  • Game software providers: Companies such as Pragmatic Play, Evolution Gaming, and others may receive user IDs and session data to ensure games function correctly. They do not receive your full identity information.
  • Cloud service providers: Your data is stored on secure cloud servers under strict data processing agreements. All providers comply with ISO 27001 security standards.
  • Authorities and law enforcement agencies: p88 will disclose required information when mandated by a court order, police investigation, or legitimate request from a regulatory authority. We will notify you of such disclosures unless prohibited by law.
  • Independent audit body: External auditors may access certain data during compliance audits and RNG certification processes. All such access is subject to legally binding confidentiality agreements.

P88 never shares your data with third-party advertisers, data analytics companies, or any other commercial entity without your explicit consent. Every data sharing agreement we sign with third parties contains data protection clauses that bind them to the same security standards we uphold internally.

5

Data Security

Protecting your personal data from unauthorised access, loss, or breaches is p88's highest technical priority. We continuously invest in robust security infrastructure and follow digital banking industry best practices.

Security measures we have implemented include:

  • 256-bit SSL Encryption for all data transmitted between your device and p88's servers — the same standard used by leading financial institutions and banks.
  • Encryption of data at rest (AES-256) for all sensitive information stored in our databases, including financial details and KYC documents.
  • Two-factor authentication (2FA) available to all member accounts to add an extra layer of protection beyond passwords.
  • 24/7 security monitoring by our IT security team, which detects and responds to any threats or suspicious activity in real time.
  • Regular penetration testing by independent security experts to identify and close any system vulnerabilities before they can be exploited.
  • Role-based access control (RBAC) ensuring only authorised personnel can access specific data based solely on their job requirements.
  • Comprehensive audit logs recording all access to sensitive data for accountability purposes and investigation in the event of an incident.

While we implement strict security controls, no digital system can guarantee 100% absolute security. You also have a role to play — use strong passwords, do not share your login credentials, and report any suspicious activity to us immediately.

6

Cookies & Tracking Technologies

P88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

Types of cookies we use:

  • Essential cookies: Required for core platform functions such as maintaining your login session and ensuring transaction security. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies: Collecting data on how you use our website — pages visited, time spent, and any errors encountered — to help us improve the platform.
  • Functional cookies: Remembering your preferences such as language, display settings, and login details to make your experience more comfortable and personalised.
  • Analytics cookies: Used internally to understand aggregate platform usage patterns. This data is processed anonymously and does not identify any specific individual.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of the p88 platform.

7

Your Rights Over Personal Data

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal information held by p88. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to request and receive a copy of all personal data we hold about you. This request will be processed within 14 business days.

Right to Rectification

If any of your personal information is inaccurate, incomplete or outdated, you have the right to request a correction. We will update your records within 7 business days.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal retention requirements. Financial data may need to be retained for the minimum period prescribed by law.

Right to Object to Processing

You have the right to object to the processing of your data for direct marketing purposes or in situations where processing is based on our legitimate interests. Your request will be acted upon promptly.

Right to Data Portability

You may request your personal data in a structured, machine-readable format (such as CSV or JSON) for transfer to another service provider of your choice.

Right to Restriction of Processing

In certain situations, such as disputes over data accuracy or complaint investigations, you may request that we restrict the processing of your data while the issue is being resolved.

To exercise any of the above rights, you may contact our Data Protection Officer by email at [email protected] or via Live Chat within your account. Please include your full name, account number, and request details to expedite the process.

8

Children's Data Protection

P88 is an entertainment platform exclusively for individuals aged 18 years and above. We do not intentionally collect or process any personal information from individuals under the age of 18.

If we find that a child's personal data has been collected without proper age verification, we will take immediate action to delete the information and close the account in question. Parents or guardians who suspect their child has registered on our platform are encouraged to contact us immediately via our 24/7 customer support.

p88 employs a multi-layered age verification system during the registration process to prevent underage access. This includes date of birth checks, identity document verification, and ongoing monitoring.

9

International Data Storage & Transfer

Your personal data is stored on servers located in certified, secure data centres. In the course of our operations, your data may be transferred to, stored in or processed in other countries that may have different data protection laws from Malaysia.

When international data transfers occur, p88 ensures:

  • The recipient country provides a level of data protection adequate to or equivalent with Malaysia's standards
  • Legally binding data processing agreements signed with all receiving parties
  • Appropriate safeguard mechanisms are implemented, including internationally recognised standard contractual clauses
  • End-to-end encryption is applied in transit for all sensitive data

Regarding retention periods, p88 applies a data retention policy aligned with operational and legal requirements:

  • Active account data: Retained for the duration of your active membership
  • Financial transaction data: Retained for a minimum of 7 years in accordance with Malaysia's financial legal requirements
  • Support communication data: Retained for 3 years for reference and service improvement purposes
  • Technical log data: Retained for 12 months for security and audit purposes
  • Closed accounts: Basic data retained for 5 years after closure for AML compliance
10

Contact Us & Policy Amendments

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to contact us directly. Our team is ready to assist and committed to addressing every enquiry seriously and in a timely manner.

Ways to contact us:

  • 24/7 Live Chat: The fastest way — directly via the chat icon in the corner of the p88 website or app
  • Privacy Email: [email protected] (response within 24–48 business hours)
  • General Support Email: [email protected] for general enquiries

P88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in law, industry practices, or our operations. Any significant amendments will be communicated to you via in-account notification or email at least 14 days before taking effect.

The last updated date is always displayed at the top of this document. Continued use of the p88 platform following any amendments constitutes your acceptance of the updated Privacy Policy. If you disagree with any amendment, you have the right to close your account before it takes effect.

p88 conducts an internal Privacy Policy review every six months to ensure it remains aligned with the latest legal developments and best practices in data protection.

Our Commitment

P88's Six Pillars of Data Protection

Not just a promise on paper — these are standards we implement technically and operationally every day.

Bank-Grade Encryption

Every bit of data travelling between your device and p88's servers is protected by 256-bit SSL encryption — the same standard used by Maybank, CIMB, and leading financial institutions. Your data at rest is also encrypted using AES-256, which is practically unbreakable with current technology.

Multi-Layer Identity Verification

Our KYC process is more than a formality — it is your first line of defence against identity fraud. Verification documents are stored in an environment fully isolated from day-to-day operational data, with access strictly limited to authorised personnel only.

Data Minimisation Principle

P88 only collects information that is genuinely necessary to deliver our services to you. No excess data, no silent data collection. Every data field we request has a clear operational justification that we can explain to you at any time.

Strict Access Controls

Not all p88 staff can view your data. Our role-based access control (RBAC) system ensures each employee can only access the data required for their specific job duties. Every access is automatically logged and audited for full accountability.

Regular Security Audits

P88 conducts independent penetration testing at least twice a year by certified cybersecurity firms. Any vulnerabilities discovered are addressed within 72 hours. Audit reports are also shared with our regulatory body as evidence of ongoing compliance.

Rapid Incident Response

In the event of any security incident involving your data, p88 is committed to notifying you within 72 hours. Our incident response team operates 24/7 and has tested protocols to contain, investigate and resolve any data breach swiftly and transparently.

Safe & Trusted Platform

Your Data is Safe with p88.
Join Us Today.

Over 150,000 members in Malaysia have trusted p88 as their online entertainment platform of choice — not only for its wide range of games, but because they know their data is in responsible hands.

No registration fees 256-bit SSL 24/7 Support Fast withdrawals
🛡️
Your Privacy, Our Priority
Every technical and operational measure we implement is designed with one primary goal: keeping your data safe at all times.
256-bit
SSL Encryption
24/7
Secure Monitoring
PDPA
Legal Compliance
Bahasa Melayu