This Privacy Policy ("Policy") is published by Puma88 ("the Company", "we", "us", "our"), the operator of the online gaming platform accessible at https://puma88.click ("the Platform"). This Policy describes how Puma88 collects, uses, discloses, stores, and protects the personal data of individuals ("Players", "Users", "you") who access or use the Platform.
Puma88 operates the Platform as a responsible online gaming operator serving players across Malaysia, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions. We take our obligations with respect to personal data seriously and are committed to handling all personal information in a lawful, fair, and transparent manner.
By registering an account on the Platform, accessing our services, or providing personal information to Puma88, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and may request account closure through our support team.
This Policy should be read alongside our Terms & Conditions, which together form the complete legal framework governing your relationship with Puma88.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
Any information relating to an identified or identifiable natural person — including name, identification number, contact details, payment information, IP address, device identifiers, and gaming activity data — that directly or indirectly identifies you as an individual.
The entity that determines the purposes and means of processing personal data. For data collected through the Puma88 Platform, the Data Controller is Puma88.
A third party that processes personal data on behalf of Puma88 in accordance with Puma88's instructions and applicable data protection obligations, such as payment processors or KYC verification providers.
Any operation performed on personal data — including collection, recording, storage, adaptation, retrieval, disclosure, erasure, and destruction — whether or not carried out by automated means.
A freely given, specific, informed, and unambiguous indication of your wishes by which you agree to personal data relating to you being processed. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Categories of personal data warranting enhanced protection, such as data relating to financial health, government-issued identification numbers, and payment card details. Puma88 processes such data only where strictly necessary and in accordance with enhanced security measures.
Puma88 is the Data Controller responsible for the personal data processed in connection with the Platform and its services. As Data Controller, Puma88 determines the purposes for which personal data is collected and the manner in which it is processed.
Where Puma88 engages third-party Data Processors — such as payment gateway providers, identity verification services, or technical infrastructure partners — it does so under written agreements that impose data protection obligations equivalent to or stricter than those applicable to Puma88 directly. Puma88 remains responsible for ensuring that any such third parties handle your data in accordance with this Policy.
Data Controller Contact: All data-related enquiries, subject access requests, and complaints may be directed to our support team via live chat on the Platform or by email at [email protected]. We aim to acknowledge all data-related requests within 5 business days.
Puma88 collects personal data across several categories. The table below summarises the types of personal data collected and the primary purpose for which each category is processed:
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, MyKad or passport number | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, mobile number, residential address (city, state — e.g., Kuala Lumpur, Penang) | Account communications, transaction notifications, support |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), MYR transaction records | Processing deposits and withdrawals via FPX, DuitNow, Maybank, CIMB, Public Bank |
| Technical Data | IP address, browser type, device identifier, operating system, session timestamps | Platform security, fraud prevention, technical optimisation |
| Usage Data | Pages visited, games played, session duration, betting patterns, game preferences | Platform improvement, personalisation, responsible gambling monitoring |
| KYC Documents | MyKad scan, driving licence, passport, proof of address (utility bill), selfie with ID | Identity verification, regulatory compliance, withdrawal approval |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Customer support, dispute resolution, service improvement |
Puma88 does not intentionally collect sensitive personal data beyond the categories listed above. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, or biometric data unless expressly required by applicable law or your specific consent is obtained.
Personal data is collected through the following channels and methods:
- Direct Provision by You: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or responding to surveys and promotional communications.
- Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, browser fingerprint, device identifiers, session data, and navigation behaviour, via cookies, web beacons, and server log files.
- Third-Party Sources: Data received from identity verification providers, payment processors (including FPX, DuitNow, e-wallet operators), fraud prevention services, and public or regulatory databases, where applicable and lawful.
- Inferred Data: Data derived from your interaction patterns on the Platform, such as game preferences, preferred payment method, and session frequency, used for responsible gambling monitoring and platform personalisation.
Puma88 processes your personal data for the following stated purposes. We do not process personal data for purposes incompatible with those listed without first obtaining your consent or establishing a separate lawful basis.
Creating, maintaining, and operating your Puma88 account; processing game activity; managing your MYR balance; and providing access to all Platform features and gaming products.
Verifying your identity, age (21+ requirement), and eligibility to use the Platform; fulfilling anti-money laundering (AML) and counter-terrorism financing (CTF) obligations; and conducting enhanced due diligence where required.
Processing MYR deposits and withdrawals through verified Malaysian payment channels including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, RHB, and cryptocurrency networks (BTC, ETH, USDT, BNB).
Detecting, investigating, and preventing fraudulent activity, bonus abuse, account compromise, collusion, and other prohibited conduct; maintaining the integrity and security of the Platform.
Monitoring gaming behaviour patterns to identify indicators of problem gambling; administering self-exclusion and deposit limit tools; fulfilling responsible gambling obligations. This processing is carried out in the interest of player welfare.
Responding to your support queries, complaints, and account enquiries; sending transactional communications (deposit confirmations, withdrawal notifications, account alerts); and, where you have opted in, marketing communications relating to Puma88 promotions.
Analysing aggregate and individual usage data to improve Platform performance, user experience, game selection, and customer support quality. Analytics data is used in anonymised or pseudonymised form wherever possible.
Puma88 processes personal data only where a valid legal basis exists. The following legal bases apply to our processing activities:
- Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions — including operating your account, processing transactions, and delivering gaming services.
- Legal Obligation: Processing required to comply with applicable laws and regulatory requirements — including KYC identity verification, AML obligations, and age verification (21+).
- Legitimate Interests: Processing necessary for Puma88's legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided these interests are not overridden by your data protection rights.
- Consent: Processing for purposes where you have provided explicit consent — principally optional marketing communications. You may withdraw consent at any time without affecting prior processing.
Puma88 does not sell, rent, or commercially trade personal data to any third party. Personal data may be shared with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
- Payment Service Providers: Malaysian payment processors including FPX operators, DuitNow network participants, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, RHB, and cryptocurrency payment processors — solely for the purpose of executing deposit and withdrawal transactions.
- KYC & Identity Verification Providers: Third-party identity verification specialists engaged to verify your age, identity, and address in connection with KYC obligations. These providers act as Data Processors under written agreement with Puma88.
- Technology & Infrastructure Providers: Cloud hosting, cybersecurity, and platform infrastructure providers engaged to operate and maintain the technical environment of the Platform. All such providers operate under contractual data protection obligations.
- Regulatory & Law Enforcement Authorities: Where Puma88 is legally required to disclose data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction — for example, in connection with AML investigations, regulatory audits, or court orders.
- Business Transfers: In the event of a merger, acquisition, or transfer of all or substantially all of Puma88's business assets, personal data may be transferred to the acquiring entity, subject to equivalent data protection standards applying.
No Commercial Data Sales: Puma88 does not and will not sell your personal data to data brokers, advertising networks, or any other commercial third party.
Puma88 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small data file stored on your device when you visit a website. Cookies do not contain personally identifiable information by themselves, but may be combined with other data we hold about you.
The following categories of cookies are used on the Platform:
Essential for the operation of the Platform, including maintaining your session when logged in, storing authentication tokens, and enabling core platform functionality. These cookies cannot be disabled without impairing Platform operation.
Used to remember your preferences and settings — such as preferred game categories, language, and display options — to enhance your user experience across sessions.
Used to collect aggregate, anonymised data about how users interact with the Platform — including pages visited, session duration, game preferences, and navigation paths — to help us understand usage patterns and improve the Platform experience.
Used to support fraud prevention and security measures, including detecting suspicious login patterns, unusual transaction behaviour, and potential account compromise indicators.
You may configure your browser to block or delete cookies, though doing so may affect the functionality of certain Platform features. For strictly necessary cookies, disabling them is likely to impair your ability to use the Platform normally. Puma88 does not use third-party advertising or behavioural targeting cookies.
Puma88 retains personal data for as long as is necessary for the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:
- Active Accounts: Personal data associated with an active account is retained for the duration of the account relationship plus a post-closure period as required by applicable AML and gaming regulatory obligations.
- Transaction Records: Financial transaction records, including deposit and withdrawal history in MYR, are retained for a minimum of 7 years from the date of the transaction in accordance with anti-money laundering regulatory requirements.
- KYC Documents: Identity verification documents are retained for a minimum of 5 years following account closure, or longer where required by applicable regulation or ongoing investigation.
- Support Communications: Customer support records, including chat transcripts and email correspondence, are retained for up to 3 years following resolution of the relevant interaction.
- Marketing Data: Marketing preference data and opt-in records are retained until you withdraw consent or for a maximum of 3 years following your last interaction with a marketing communication, whichever is sooner.
Upon expiry of the applicable retention period, personal data is securely deleted, destroyed, or permanently anonymised so that it can no longer be attributed to any individual.
Puma88 implements a comprehensive set of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:
- 256-bit TLS/SSL encryption for all data in transit between your device and the Platform.
- AES-256 encryption for sensitive personal and financial data stored at rest.
- Multi-factor authentication requirements for access to administrative systems and sensitive data.
- Role-based access controls ensuring employees only access personal data necessary for their specific role.
- Regular penetration testing and independent security audits of Platform infrastructure.
- Intrusion detection systems and 24/7 security monitoring for anomalous activity.
- Documented incident response procedures for managing and reporting personal data breaches.
Notwithstanding these measures, no method of electronic data transmission or storage is entirely impervious to risk. Puma88 cannot guarantee absolute security but commits to maintaining security standards consistent with current best practice in the online gaming industry and to promptly addressing any security vulnerabilities identified.
As a data subject, you hold specific rights in relation to your personal data held by Puma88. We are committed to facilitating the exercise of these rights in a timely and transparent manner.
Request a copy of all personal data Puma88 holds about you, along with information on how it is processed.
Request correction of inaccurate or incomplete personal data held about you.
Request deletion of personal data where it is no longer necessary, subject to overriding legal obligations.
Request that processing of your data be temporarily suspended while accuracy or lawfulness is under dispute.
Request a machine-readable copy of personal data you have provided, for transfer to another service provider.
Object to processing based on legitimate interests or for direct marketing purposes. Marketing opt-outs take immediate effect.
To exercise any of the above rights, please contact our support team via live chat or email. We will acknowledge your request within 5 business days and respond substantively within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 60 days with written notice.
Please note that certain rights are subject to exceptions. For example, we may be required to retain certain data by law regardless of an erasure request, or we may be unable to provide access to data that would disclose confidential commercial information or the personal data of another individual.
The Puma88 Platform is strictly intended for adults aged 21 years and above. Puma88 does not knowingly collect or process personal data from any individual under the age of 21. Age verification is conducted as part of the account registration and KYC process to enforce this restriction.
In the event that Puma88 discovers that personal data has been collected from an individual under the age of 21 — whether through misrepresentation of age or otherwise — all such data will be immediately deleted, the account will be closed, and any funds deposited may be returned via the original payment method or forfeited, depending on the circumstances, in accordance with our Terms & Conditions.
If you believe that a minor has created a Puma88 account or that your child's data may have been inadvertently collected, please contact our support team immediately at [email protected]. We take all such reports seriously and will act promptly.
The Puma88 Platform may integrate third-party services — including payment gateways, identity verification tools, and analytics providers — to deliver its full functionality. Where such integrations involve the transfer of personal data to third parties, Puma88 ensures that appropriate contractual protections are in place.
Puma88 is not responsible for the privacy practices of third-party services that operate outside the boundaries of the Platform and are not engaged as Data Processors by Puma88. This Policy does not apply to any website, service, or platform to which you may navigate from a Puma88 communication or Platform page.
Where personal data is transferred to payment processors handling MYR transactions — including Maybank, CIMB, Public Bank, Hong Leong, RHB via FPX and DuitNow, as well as e-wallet operators Touch 'n Go, Boost, and GrabPay — such transfers are made solely to facilitate your requested transactions and are governed by the respective payment provider's own privacy and security policies.
Puma88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this document indicates when the current version was published.
Where changes are material — meaning they significantly affect your rights or the way we process your personal data — Puma88 will endeavour to provide advance notice by publishing a notification on the Platform or by sending an email to your registered address. Continued use of the Platform following the publication of a revised Policy constitutes acceptance of the updated terms.
We recommend that you review this Policy periodically to remain informed of how Puma88 handles your personal data. Previous versions of this Policy are not publicly archived but may be requested by contacting our support team.
For all privacy-related enquiries, subject access requests, data correction or deletion requests, complaints, or any question concerning this Privacy Policy, please contact the Puma88 data team through the following channels:
Available directly on the Puma88 Platform. Recommended for time-sensitive privacy matters and account-specific data queries.
For formal data subject requests, written complaints, and detailed privacy enquiries: [email protected]. Please include "Privacy Request" in the subject line and provide your registered account email address to enable verification.
Puma88 acknowledges all privacy-related requests within 5 business days. Complex requests — such as subject access requests involving large volumes of data — will receive a substantive response within 30 calendar days of verified receipt. If you are dissatisfied with our response, you retain the right to escalate your complaint to the relevant supervisory authority in your jurisdiction.