pussy8 Privacy Policy

1. Introduction

This Privacy Policy describes how pussy8 ("we", "us", "our"), the operator of the online gaming platform accessible at https://pussy8.app, collects, processes, stores, and protects the personal data of individuals ("you", "your") who access or use the pussy8 Platform and related services.

We are committed to handling your personal data responsibly and in accordance with applicable data protection legislation, including the principles underlying Malaysia's Personal Data Protection Act 2010 (PDPA). This Policy applies to all personal data collected through the pussy8 website, mobile application, and any associated communication channels.

By registering for a pussy8 account, using the Platform, or communicating with our support team, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, you should not access or use the pussy8 Platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together govern your relationship with pussy8.

2. Data We Collect

pussy8 collects personal data in the following categories:

Registration and Identity Data: Full legal name, date of birth, Malaysian National Identity Card (MyKad) number or passport number (for KYC verification), email address, Malaysian mobile telephone number, and residential address.

Financial Data: Bank account details (for FPX transfers), e-wallet identifiers (Touch n Go eWallet, Boost), payment card details (processed via PCI-DSS-compliant payment processors — pussy8 does not store full card numbers), deposit and withdrawal transaction history, and MYR wallet balance records.

Gaming Activity Data: Bet history, game session data, win/loss records, bonus redemption history, and platform usage patterns across all pussy8 products (sportsbook, live casino, slots, e-sports).

Technical Data: IP address, device identifiers, operating system, browser type and version, referring URLs, and session timestamps collected automatically when you access the Platform.

Communications Data: Records of your interactions with pussy8 customer support, including live chat transcripts, email correspondence, and any documents you provide for KYC or dispute resolution purposes.

Responsible Gaming Data: Self-exclusion elections, deposit and loss limit settings, session timer configurations, and cooling-off period records — maintained to fulfil our responsible gaming obligations.

3. How We Use Your Data

pussy8 uses collected personal data for the following purposes:

• Account creation and management: Registering your Account, verifying your identity, maintaining your MYR wallet, and providing access to all pussy8 Platform products.
• Age and identity verification: Confirming that you meet the 21+ minimum age requirement and complying with Know Your Customer (KYC) obligations imposed by our licensing conditions.
• Transaction processing: Processing deposits and withdrawals through your selected MYR payment methods (TnG eWallet, Boost, FPX, Visa/Mastercard) and maintaining accurate financial records.
• Regulatory compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming obligations under our international gaming authority licensing conditions.
• Platform improvement and personalisation: Analysing aggregated usage patterns to improve the pussy8 Platform, personalise game recommendations, and optimise the user experience for Malaysian players.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to your registered email or mobile number, where you have consented to receive such communications. You may opt out at any time.
• Fraud prevention and security: Detecting and preventing fraudulent activity, account takeovers, money laundering, and any activity that violates our Terms and Conditions.
• Responsible gaming enforcement: Applying and monitoring self-exclusion elections, deposit limits, and other responsible gaming tools you have activated, and identifying indicators of potential problem gambling.
• Dispute resolution: Maintaining records necessary to investigate and resolve disputes about bets, transactions, or account actions.

4. Legal Basis for Processing

pussy8 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your Account, process transactions, and deliver the pussy8 gaming services you have requested.
• Legal obligation: Processing required to comply with applicable laws, including AML/CTF legislation, gaming licensing conditions, KYC requirements, and any legal process or government authority request.
• Legitimate interests: Processing for fraud prevention, platform security, service improvement, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where your prior consent has been obtained. You may withdraw consent for marketing at any time without affecting the lawfulness of prior processing.

5. Data Sharing

pussy8 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary:

• Payment processors: Your financial data is shared with PCI-DSS-compliant payment service providers to process deposits and withdrawals. These providers are contractually bound to use data solely for payment processing.
• Game providers: Anonymised or pseudonymised session identifiers are shared with game content providers (e.g., Pragmatic Play, Evolution Gaming) solely to enable game delivery. Full identity data is not shared with game providers.
• KYC and AML service providers: Identity verification data may be processed by third-party KYC service providers under data processing agreements that bind them to strict confidentiality and data security obligations.
• Regulatory authorities: pussy8 will disclose personal data to gaming regulators, law enforcement agencies, and courts where legally required to do so, without prior notice to you where prohibited by law.
• Business transfers: In the event of a merger, acquisition, or sale of assets involving pussy8, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party data processors engaged by pussy8 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with pussy8's documented instructions.

6. Cookies & Tracking Technologies

The pussy8 Platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and analyse Platform usage. The categories of cookies we deploy are:

• Essential cookies: Strictly necessary for Platform operation, including session authentication, security tokens, and responsible gaming tool enforcement. These cannot be disabled without impairing Platform functionality.
• Performance cookies: Collect anonymised data on how players navigate the Platform (e.g., most visited game categories, session duration) to enable performance optimisation. No personally identifiable information is collected by performance cookies.
• Functional cookies: Remember your Platform preferences such as language settings, preferred game lobby view, and notification preferences.

You may configure your browser to decline non-essential cookies. Note that disabling certain cookies may affect the functionality of Platform features that depend on stored preferences. pussy8 does not deploy advertising or third-party retargeting cookies on its Platform.

7. Data Retention

pussy8 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. Our principal retention periods are as follows:

• Account and identity data: Retained for the duration of your Account plus a minimum of five (5) years following Account closure, in compliance with AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with applicable financial record-keeping requirements.
• Gaming activity data: Retained for a minimum of three (3) years following the relevant gaming session, for dispute resolution and regulatory audit purposes.
• Marketing communications data: Retained until you withdraw consent or for a maximum of three (3) years of Account inactivity, whichever is earlier.
• Support interaction records: Retained for three (3) years following the date of the interaction.
• Self-exclusion records: Retained indefinitely to prevent circumvention of self-exclusion through re-registration.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

8. Data Security

pussy8 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pussy8 servers.
• AES-256 encryption for sensitive personal data stored in our databases.
• Multi-factor authentication for all internal system access by pussy8 personnel.
• Regular independent penetration testing and vulnerability assessments.
• Strict role-based access controls limiting employee access to personal data to those with a documented operational need.
• Continuous automated security monitoring and intrusion detection across all Platform infrastructure.

In the event of a personal data breach that poses a risk to your rights and freedoms, pussy8 will notify affected Players and relevant regulatory authorities in accordance with applicable notification obligations and timelines.

Notwithstanding the above, no data transmission over the internet or storage system can be guaranteed as completely secure. You bear responsibility for maintaining the security of your Account credentials and for notifying pussy8 immediately of any suspected unauthorised access.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by pussy8:

• Right of access: You may request a copy of the personal data pussy8 holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data. For most Account details, self-service correction is available within Account Settings.
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the original purpose and no overriding legal obligation requires its retention. Note that AML and gaming licensing obligations will prevent deletion of certain records.
• Right to restrict processing: You may request that pussy8 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability: You may request a copy of your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, please contact the pussy8 support team via live chat or email at [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 days. Identity verification may be required before we process data rights requests.

10. Children's Privacy

The pussy8 Platform is strictly for adults aged 21 years and older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is conducted at the point of Account registration.

If we become aware that personal data has been collected from a person under 21, we will immediately close the associated Account, void any transactions, and permanently delete all collected personal data relating to that individual. If you believe that an underage person has accessed pussy8, please contact our support team immediately at [email protected].

11. International Data Transfers

pussy8's platform infrastructure and certain data processors may be located outside Malaysia. When your personal data is transferred to or accessed from jurisdictions outside Malaysia, pussy8 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under Malaysian data protection principles.

Safeguards applied to international transfers include: contractual data processing agreements incorporating standard data protection clauses, transfer to jurisdictions recognised as providing adequate data protection, and technical controls restricting data access on a need-to-know basis.

12. Third-Party Links

The pussy8 Platform does not contain links to external third-party websites. All navigation and content links within the Platform direct to pages within the pussy8 domain. This Privacy Policy applies exclusively to data collected through the pussy8 Platform and does not extend to any third-party services accessed independently by Players.

13. Changes to This Privacy Policy

pussy8 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. The "Last updated" date at the top of this page indicates the date of the most recent revision.

For material changes to this Policy, pussy8 will notify registered Players via the email address on file at least seven (7) days before the amended Policy takes effect. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

We encourage you to review this Policy periodically to stay informed about how pussy8 protects your personal data.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by pussy8, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the support widget within your logged-in pussy8 Account dashboard.

For data rights requests (access, rectification, erasure, etc.), please use the subject line "Data Rights Request" in your email or live chat message and provide your registered Account email address for identification purposes.

pussy8 takes all privacy enquiries seriously and aims to provide a substantive response to all data-related queries within 30 days of receipt.