PP96 Privacy Policy — Data Protection Malaysian Members' Privacy

Introduction & Scope of This Policy

This Privacy Policy ("Policy") describes how PP96 collects, uses, stores, and protects personal data in the operation of its online Sports Betting and casino platform at pp96.click ("Platform"). This Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and forms part of the agreement between you and PP96 when you use our Platform.

PP96 is the data controller responsible for all personal information collected through this Platform. We are committed to processing your personal data lawfully, fairly and transparently — solely for the purposes stated in this Policy and nothing beyond that. We take the security of our members' data just as seriously as we take the security of their financial transactions.

This Policy applies to all users of the PP96 Platform, including visitors browsing the website without a registered account, prospective members in the process of registering, registered members actively using PP96's services, and former members whose information we retain in accordance with applicable legal or legitimate business requirements.

Types of Personal Data We Collect

2.1 Data You Provide Directly

PP96 collects information that you voluntarily provide when interacting with our Platform, including:

• Registration Data: Full name (as per Malaysian identity card), Malaysian mobile number, email address and date of birth.
• Identity Verification Data (KYC): A copy of your MyKad or passport when requested for identity verification and legal compliance purposes.
• Account Information: Username, password (stored in encrypted form), language preference and account settings.
• Communications: Records of interactions with our customer support team via live chat or email, including enquiries and complaints.

2.2 Automatically Collected Data

When you use the PP96 Platform, we automatically collect certain technical information needed to keep the platform running correctly and securely:

• Device & Technical Data: IP address, web browser type and version, device operating system, screen resolution, and device identifier.
• Usage Data: Pages visited, time spent on site, links clicked, searches made within the Platform and login session records.
• Betting Data: A complete record of all bets placed, games played, amounts wagered, wins and losses, and the time and date of each transaction.
• Financial Transaction Data: Deposit and withdrawal records include the payment method used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX), transaction amounts, and timestamps. Note: PP96 does not store your full account number or e-wallet password.

How PP96 Uses Your Data

PP96 uses members' personal data only for legitimate, clearly stated purposes. The following are the primary purposes for which we use the data we collect:

3.1 Service Provision

The primary purpose of processing your data is to enable us to deliver PP96's Platform services to you. This includes processing your account registration, verifying your identity to facilitate deposits and withdrawals, processing bets and winnings, providing effective customer support, and sending important account-related notifications such as deposit confirmations and security alerts.

3.2 Security & Fraud Prevention

PP96 uses technical and behavioural data to detect and prevent fraudulent activity, money laundering, unauthorised bonus abuse, and other security threats. This monitoring is necessary to protect all PP96 members and the overall integrity of the Platform. Our monitoring systems operate automatically and around the clock.

3.3 Legal Compliance

Some of your data is retained and processed to fulfil PP96's legal obligations in Malaysia, including anti-money laundering (AML) requirements, Know Your Customer (KYC) procedures and reporting to the relevant authorities when required by law.

3.4 Responsible Gaming

PP96 uses your betting activity records to monitor for signs of problem gambling and to provide effective responsible gaming tools. This includes detecting high-risk betting patterns that may warrant intervention, as well as enforcing the limits you have set within your own account.

3.5 Marketing (With Consent)

With your consent, PP96 may send you marketing communications about promotions, bonuses, and new offers. You may withdraw this consent at any time through your account settings or by using the unsubscribe link in any promotional email. Withdrawal of consent does not affect the validity of any processing carried out prior to that withdrawal.

Sharing Data With Third Parties

PP96 does not sell, rent or trade members' personal data to third parties. However, there are limited situations where PP96 may need to share data with certain parties for legitimate business operational purposes:

4.1 Trusted Service Providers

PP96 works with selected third-party service providers to handle the technical aspects of our operations. These include payment processors supporting DuitNow, FPX, and local Malaysian e-wallet methods; Live Casino providers such as Evolution Gaming and Pragmatic Play Live for game delivery; cloud service providers storing data in secure, audited environments; and third-party identity verification services for KYC. All providers are bound by strict confidentiality agreements and are only permitted to process your data for the specific purposes defined by PP96.

4.2 Legal Requirements

PP96 may be required to disclose members' personal data to legal authorities, law enforcement agencies or regulatory bodies when mandated by Malaysian law, a valid court order, or an official investigation involving financial crime, money laundering or fraud. In such situations, PP96 will endeavour to notify the member concerned if legally permitted to do so.

4.3 Business Transfer

In the event of a merger, acquisition or transfer of PP96's assets to another entity, member data may be transferred as part of the business assets. In such circumstances, the new entity will be bound by this Privacy Policy or an equivalent policy that provides the same or greater level of protection to members.

Data Security & Protection Measures

PP96 invests heavily in security infrastructure to protect members' personal data from unauthorised access, loss, alteration, or disclosure. The key security measures we have implemented are as follows:

• Data Encryption in Transit: All data transmitted between your browser and PP96's servers is encrypted using TLS 1.3 with 256-bit SSL certificates, ensuring that no third party can intercept or read your data in transit.
• Data Encryption at Rest: Sensitive data such as passwords is stored in a hashed form that cannot be reversed to its original state. Sensitive financial information is stored in encrypted format using current encryption standards.
• Internal Access Controls: Access to members' personal data within PP96's systems is restricted to staff who require it to carry out their duties only (the "need-to-know" principle). All access is logged and audited on a regular basis.
• Two-Factor Authentication: PP96 encourages the use of two-factor authentication (2FA) for member accounts and enforces it as mandatory for all internal staff access to systems containing sensitive data.
• 24/7 Security Monitoring: PP96's automated monitoring system detects unauthorised access attempts, suspicious login patterns, and other security threats in real time, around the clock.
• Regular Security Audits: PP96 conducts regular security audits through both our internal team and independent third parties to identify and address vulnerabilities before they can be exploited.

While PP96 takes all reasonable steps to protect your data, no system can guarantee absolute 100% security. In the event of a data breach affecting your information, PP96 will notify you and the relevant authorities within the timeframe required under Malaysia's PDPA.

Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. PP96 uses cookies and similar tracking technologies to keep the platform running smoothly and to improve your overall experience.

6.2 Types of Cookies We Use

• Essential Cookies: Required for core Platform functions such as maintaining your login session and remembering your language preference. These cookies cannot be disabled without affecting Platform functionality.
• Performance Cookies: We collect information on how you use the Platform (pages visited, time spent) to help us improve the user experience. This data is aggregated and does not personally identify you.
• Functional Cookies: Remembers your preferences and settings (such as display size and favourite game selections) to provide a more personalised experience during your visit.
• Security Cookies: Used to detect suspicious login attempts and protect your account from unauthorised access.

6.3 Cookie Controls

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the PP96 Platform. Continuing to use the Platform after reading this notice is considered your consent to the use of cookies as described.

Data Retention Periods

PP96 retains members' personal data for as long as necessary to fulfil the purposes stated in this Policy, or for as long as required under Malaysian law. The following are general guidelines for our data retention periods:

• Active Account Data: Retained for the duration your account is active and for a reasonable period after closure for dispute resolution and audit purposes.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of transaction, in line with Malaysia's anti-money laundering legal requirements.
• KYC (Identity Verification) Data: Retained for a minimum of 6 years after the business relationship ends, in accordance with legal compliance requirements.
• Support Communication Logs: Retained for 3 years for service quality and dispute resolution purposes.
• Marketing Data: Retained until you withdraw your marketing consent or close your account, whichever comes first.

Once the applicable retention period has lapsed, data will be securely deleted or anonymised so it can no longer be linked to you. Our data deletion process meets industry standards for irreversible data removal.

Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to the personal data held by PP96:

To exercise any of the above rights, please contact PP96's privacy team by email at support@pp96.click with the subject line "PDPA Rights Request", along with a copy of your identification for verification purposes. We are committed to responding to all requests within 21 business days.

Payment & KYC Process

9.1 Payment Information Security

PP96 processes payments via local Malaysian methods including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks). It is important to note that PP96 does not store your full e-wallet account number, password, or payment PIN. All payment processing is handled through industry-standard, secure third-party payment gateways. PP96 retains only transaction metadata records (method used, amount, timestamp, status) as required for account management and compliance purposes.

9.2 KYC (Know Your Customer) Process

PP96 is legally required to verify member identities through the KYC process before permitting withdrawals above certain thresholds or when relevant compliance obligations arise. This process may require you to submit a copy of your MyKad or passport, recent proof of address such as a utility bill or bank statement, and in certain cases, proof of the source of funds for large deposits.

KYC documents submitted are stored securely and accessed only by authorised personnel strictly for verification purposes. These documents are not shared with third parties except where required by law.

Children & Minors

The PP96 Platform is strictly for individuals aged 18 and above. PP96 does not knowingly collect or process personal data from children or individuals under the age of 18. If you are a parent or guardian who believes your child has registered a PP96 account, please contact us immediately at support@pp96.click and we will investigate and delete the relevant account and data within a reasonable timeframe.

PP96 applies age verification procedures during registration and reserves the right to request proof of age at any time. Any account found to belong to an underage individual will be terminated immediately, and all funds will be returned to the rightful account holder in accordance with established procedures.

Amendments to This Privacy Policy

PP96 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or new platform features involving data processing. All amendments will be published on this page with an updated effective date.

For material changes that significantly affect your privacy rights, PP96 will notify members via their registered email or through a prominent in-platform notice at least 14 days before the changes take effect. Continued use of the Platform after the effective date will be considered acceptance of the amended Policy.

Contact PP96's Privacy Officer

If you have any questions, concerns, or complaints regarding how PP96 handles your personal data, you may reach us through the following channels:

• Privacy Email: support@pp96.click (please include "Privacy Policy" or "PDPA" in the email subject line)
• Live Chat: Available 24/7 on the PP96 Platform — for privacy enquiries requiring an immediate response

PP96 takes every privacy complaint seriously. We will thoroughly investigate and provide a substantive response within 21 business days of receiving your complaint. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP), the regulatory body overseeing PDPA compliance.