Pg168 is committed to protecting the privacy and personal data of every player. This policy transparently explains how we collect, use, store, and protect your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Privacy is more than a document — it is a core value we practise every day in every aspect of the pg168 platform.
All data transmitted between your device and pg168 servers is protected with 256-bit SSL encryption — the same security standard used by leading Malaysian banking institutions. Your data never travels in plain text.
The pg168 identity verification (KYC) process is conducted through a secure digital system. Documents such as MyKad are stored in a fully encrypted server environment accessible only to authorised personnel.
Pg168 never sells, rents, or trades players' personal data to any third party for marketing or commercial purposes. Your data is used solely to operate the platform's services and fulfil legal obligations.
Access to player personal data within pg168's internal systems is strictly limited on a need-to-know basis. Every access is recorded in audit logs that are securely stored and regularly reviewed by our security team.
You have full control over marketing communications from pg168. Choose to receive or opt out of promotional notifications, update emails, and platform messages at any time directly through your account settings — no hassle required.
All data processing operations at pg168 are designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). Players have the right to access, correct, and request deletion of their personal data at any time.
Pg168 collects various types of information from platform users to ensure that the services provided are safe, trusted, and compliant with legal requirements. This data collection is divided into three main categories:
Information you provide directly:
Information collected automatically:
We only collect information that is strictly necessary to operate the platform's services and fulfil our legal obligations. Any additional data collection will require your prior consent.
Every piece of data collected by pg168 is used for clear and legitimate purposes. pg168 does not process personal data for any purpose other than those stated below without obtaining additional consent from you:
Pg168 adopts a responsible data analytics approach. Aggregated data that cannot identify any individual may be used for internal reporting and system improvements without any time restriction.
| Purpose of Use | Legal Basis | Data Involved |
|---|---|---|
| KYC verification | Legal obligations | MyKad, selfie, date of birth |
| Payment processing | Contract performance | Bank details, transaction records |
| Account security | Legitimate interests | IP, session logs, device data |
| Marketing communications | Player Consent | Email, phone number |
| Customer Support | Contract performance | Communication history, account data |
Pg168 takes a highly cautious approach to sharing players' personal data. We do not sell or rent your data to any party. Data sharing only occurs in the following limited situations:
All third parties handling pg168 player data are required to sign strict data protection agreements and adhere to our privacy policy. Any breach by a third party will be reported to the relevant authorities.
Pg168 continuously invests in the latest security infrastructure to ensure player personal data is always protected at the highest level. The following are the security layers we have in place:
While no security system is entirely perfect, pg168 is committed to taking all reasonable measures to protect your data from unauthorised access, disclosure, alteration, or destruction.
Pg168 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform usage patterns. The following are the types of cookies we use:
You can manage cookie settings through your browser. Please note that blocking essential cookies may affect certain pg168 platform features. For more information on managing cookies, refer to your browser's documentation.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by pg168. We fully respect and support the exercise of these rights:
Request a copy of your personal data we hold at any time. We will respond to requests within 21 business days.
Request correction of inaccurate or incomplete personal data in your pg168 records.
Request deletion of your personal data, subject to record retention obligations required under Malaysian law.
Withdraw consent for data processing at any time — including opting out of marketing communications.
Request your personal data in a machine-readable format for transfer to another service provider if needed.
Object to the processing of your personal data for specific purposes, including direct marketing and automated profiling.
To exercise any of the above rights, contact the pg168 data protection team via email at [email protected] including your account number and the type of request. All requests will be processed within 21 business days.
Pg168 takes child protection extremely seriously. This platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.
In the course of its operations, pg168 may need to transfer player personal data to servers located outside Malaysia — specifically for cloud computing and technical infrastructure supporting our platform.
All international data transfers are conducted with robust protective measures:
Pg168 will always ensure that Malaysian players' personal data is protected in accordance with PDPA standards, regardless of where the data is physically stored.
Pg168 retains players' personal data only for as long as necessary to fulfil the purpose of collection or to meet applicable legal obligations. Our general retention schedule is as follows:
| Data Categories | Retention Period | Reason |
|---|---|---|
| Financial & Transaction Records | Minimum 7 years | Malaysian financial law compliance |
| KYC documents (MyKad, selfie) | Active account period + 5 years | Anti-money laundering (AML) requirements |
| Session logs & game activity | 2 years | Platform security and dispute resolution |
| Support Communication Records | 3 years | Reference and Service Quality Assurance |
| Marketing data (with consent) | Until consent is withdrawn | Based on the player's active consent |
Once the specified retention period has elapsed, data will be securely deleted or anonymised so it can no longer be linked to any individual.
Pg168 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements in how we protect player data.
When significant changes are made to this Privacy Policy, pg168 will:
Continued use of the pg168 platform after any Privacy Policy changes take effect constitutes acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account and request deletion of your personal data.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how pg168 handles your personal data, please contact our Data Protection Officer:
If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or any other relevant authority as appropriate.
Answers to the most frequently asked questions by Malaysia players about privacy and data security at pg168.
Your personal data is protected with bank-grade encryption, full PDPA compliance, and a strict no-data-sale policy. Register now and enjoy a safe, transparent, and enjoyable gaming experience.