Privacy Policy

This Privacy Policy ("Policy") describes how PBC88 ("we", "us", "our", "the Platform", "pbc88"), the operator of the online gaming platform accessible at pbc88.cam, collects, uses, stores, discloses, and protects personal data submitted by or collected from users ("you", "User", "Member") who access or use our services.

PBC88 is committed to protecting the privacy of all individuals who interact with our platform, including players registered in Malaysia and across other permitted jurisdictions. We process personal data in accordance with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia, and other relevant international data protection frameworks where applicable.

This Policy applies to all personal data we hold about you in connection with your use of the PBC88 website (pbc88.cam), mobile applications, customer support channels, and any other services operated under the PBC88 brand. It should be read together with our Terms & Conditions.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers.
• "Data Controller" means PBC88, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of PBC88 under a written agreement.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, alteration, retrieval, use, disclosure, transfer, and deletion.
• "Sensitive Personal Data" means data relating to identity document numbers, financial account details, health information, or any other category of data designated as sensitive under applicable law.
• "Cookies" means small text files placed on your device by the Platform to support its functionality, analytics, and user experience features.
• "KYC Data" means identity and address verification documents submitted as part of the Know Your Customer process required for withdrawal processing.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia, which governs the processing of personal data for commercial transactions in Malaysia.

PBC88 collects the following categories of personal data in the course of providing our services:

PBC88 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing the KYC process, making deposits or withdrawal requests, contacting customer support, or responding to surveys.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies embedded in our website and mobile applications.
• Payment processors: Transaction and payment verification data received from payment service providers including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Boost, GrabPay, and cryptocurrency processing services.
• Identity verification services: Confirmation data received from third-party KYC and anti-fraud verification providers used to validate the authenticity of identity documents submitted during account verification.
• Game providers: Gaming activity data received from third-party game studios and live casino operators whose games are made available on the Platform.
• Fraud and risk detection systems: Data generated by our automated security systems that monitor for suspicious activity, unusual transaction patterns, or potential terms violations.

PBC88 processes your personal data for the following purposes:

1. Account management: To create, maintain, and operate your player account, including authentication, account security, and profile management.
2. Service delivery: To provide access to casino games, sports betting markets, promotions, and all other features of the PBC88 Platform.
3. Payment processing: To process deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Boost, GrabPay, USDT, BTC, and other accepted payment methods.
4. Identity verification (KYC): To verify your identity, age (21+), and source of funds as required under anti-money laundering (AML) obligations and responsible gambling requirements.
5. Regulatory compliance: To fulfil obligations under applicable laws and regulations, including the PDPA, AML legislation, and gaming licensing conditions.
6. Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account abuse, money laundering, and other prohibited conduct.
7. Responsible gambling: To monitor gaming patterns, implement responsible gambling limits you have set, and intervene where we identify indicators of problem gambling behaviour.
8. Customer support: To respond to your enquiries, resolve complaints, and administer support tickets through our live chat, email, and other support channels.
9. Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where we have a legitimate interest to do so. You may opt out of marketing communications at any time.
10. Platform improvement: To analyse usage patterns, conduct analytics, and improve the features, performance, and security of the PBC88 Platform.

PBC88 processes personal data on one or more of the following legal grounds:

• Contractual necessity: Processing is necessary to perform the contract we have with you (your account agreement) — for example, to process your deposits, settle your bets, and pay out your winnings.
• Legal obligation: Processing is required to comply with our legal obligations — for example, KYC verification, AML screening, age verification, and regulatory reporting.
• Legitimate interests: Processing is necessary for our legitimate business interests, including fraud prevention, security monitoring, platform analytics, and responsible gambling oversight, provided these interests are not overridden by your rights and freedoms.
• Consent: Where required by law, we will seek your explicit consent before processing your data for specific purposes, such as sending direct marketing communications. You may withdraw consent at any time without detriment.

PBC88 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment service providers: Financial institutions and e-wallet operators (including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Boost, GrabPay) as necessary to process your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and fraud prevention services engaged to verify identity documents and screen against sanctions lists and PEP databases.
• Game providers: Third-party game studios and live casino operators whose software is integrated into the PBC88 Platform, to the extent necessary for game delivery and technical support.
• IT and cloud service providers: Infrastructure, hosting, database, and security service providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction, we may disclose personal data to relevant authorities including gaming regulators, financial intelligence units, or law enforcement agencies.
• Professional advisors: Legal, accounting, and audit professionals engaged by PBC88 in connection with the operation of our business, subject to professional confidentiality obligations.

PBC88 may transfer personal data to recipients located outside of Malaysia in connection with the operation of our Platform, including to cloud infrastructure providers and game platform operators whose servers may be located in jurisdictions outside Malaysia.

Where we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place to protect your data to a standard consistent with Malaysian data protection law and applicable international frameworks. These safeguards may include:

• Standard contractual clauses approved under applicable data protection legislation;
• Transfers to countries recognised as providing an adequate level of data protection;
• Binding corporate rules or equivalent intra-group data transfer mechanisms; or
• Other transfer mechanisms as permitted under applicable law.

If you wish to obtain further information about the safeguards we apply to international data transfers, please contact our support team.

PBC88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention guidelines apply:

• Account and identity data: Retained for the duration of your account relationship with PBC88 and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of the transaction, as required under financial record-keeping obligations.
• KYC documents: Retained for the duration of your account and for a minimum of five (5) years after account closure, or such longer period as required by applicable AML legislation.
• Customer support communications: Retained for a minimum of two (2) years from the date of the communication, or longer if related to an ongoing dispute or investigation.
• Marketing preferences and consent records: Retained from the date of consent until withdrawal of consent, and for a reasonable period thereafter as evidence of the consent.
• Technical and usage logs: Typically retained for a period of twelve (12) months from the date of collection, unless required for longer for security or fraud investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data disposal procedures.

PBC88 uses cookies and similar tracking technologies on our website and mobile applications to support platform functionality, enhance your user experience, and gather analytics data. The following categories of cookies may be placed on your device:

• Strictly necessary cookies: Essential for the operation of the Platform, including session authentication, security tokens, and language preferences. These cookies cannot be disabled without affecting Platform functionality.
• Functional cookies: Enable the Platform to remember your preferences and settings, such as your preferred language and game lobby view, to provide a more personalised experience.
• Analytics cookies: Collect aggregated, anonymised data about how users interact with the Platform — including pages visited, session duration, and feature usage — to help us improve the Platform's performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity, including session hijacking, CSRF attacks, and bot access.

PBC88 does not use third-party advertising or behavioural targeting cookies. You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect your ability to access or use some features of the Platform.

Subject to applicable law and certain limited exceptions, you have the following rights in relation to your personal data held by PBC88. To exercise any of these rights, please contact our support team using the details in Section 15.

We will respond to all valid rights requests within 30 calendar days of receipt, or within such other timeframe as required by applicable law. Where a request is particularly complex or numerous, we may extend this period by a further 60 days with prior notification.

PBC88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption at rest for stored sensitive data including payment details, identity documents, and KYC records;
• Role-based access controls ensuring that only authorised personnel can access personal data, strictly on a need-to-know basis;
• Two-factor authentication (2FA) for all staff accessing systems containing personal data, and as an option for Members on their accounts;
• Regular penetration testing and vulnerability assessments of our Platform infrastructure;
• Network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time;
• Secure data disposal procedures for the deletion of personal data at the end of applicable retention periods.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, PBC88 will notify you without undue delay through our standard communication channels, in accordance with applicable notification obligations.

PBC88 strictly serves individuals aged 21 years and above only. Our Platform is not directed at, and we do not knowingly collect personal data from, individuals under the age of 21.

If we become aware that we have collected personal data from a person under the age of 21 without valid parental or guardian consent, we will take immediate steps to delete that data from our records and close the associated account. All account balances associated with a minor's account will be handled in accordance with applicable law.

Parents and guardians who believe that a minor under their care may have registered an account on PBC88 should contact our support team immediately at [email protected] so that appropriate action can be taken without delay.

PBC88 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The revised Policy will be published on this page with an updated "Last Updated" date.

Where amendments are material to your rights or to the way we process your personal data, PBC88 will take reasonable steps to notify you in advance, such as via a notification on the Platform interface or to your registered email address. It is your responsibility to review this Policy periodically to stay informed of any changes.

Your continued use of the PBC88 Platform following the posting of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way PBC88 processes your personal data — including if you wish to exercise any of the data rights described in Section 11 — please contact our support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the PBC88 Platform. Our agents are available in English, Bahasa Melayu, and Chinese. Average response time is under 5 minutes.
• Email: [email protected] — Data-related requests submitted by email are typically acknowledged within 24 hours and resolved within 30 calendar days.

When submitting a data rights request, please include your registered account username, the nature of your request, and sufficient information to verify your identity. We may ask for additional verification before processing requests that involve disclosure or deletion of personal data.

For matters related to responsible gambling, self-exclusion, or deposit limit requests, please visit our Responsible Gambling page, which contains dedicated guidance and contact information for those matters.