Privacy Policy PG Soft – Our Full Commitment to Protecting the Personal Data of Malaysian Players

PG Soft collects several categories of personal data from our Malaysian players. Understanding what data we collect allows you to make more informed decisions about your use of our platform. The following are the categories of data we collect:

PG Soft collects your personal data through several channels. It is important that you understand how each of these channels operates:

• Account Registration: When you register a PG Soft account, you provide us directly with basic information such as your name, email, phone number and date of birth.
• Identity Verification: During the KYC (Know Your Customer) process, you may be required to submit a copy of your identification card or other supporting documents to verify your identity.
• Financial Transactions: When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, or any other method, the related transaction details are recorded securely.
• Platform Usage: Our system automatically records your activity on the platform, including games played, betting times and winning records.
• Cookies and Tracking Technologies: The PG Soft website uses cookies and similar technologies to enhance the user experience and better understand platform usage patterns.
• Customer Support: When you contact our support team, the information you provide during that interaction is stored for record-keeping and service improvement purposes.

PG Soft uses your personal data only for legitimate and relevant purposes. The following are the primary purposes for which your data is used on the PG Soft Malaysia platform:

• Account Management: To create, verify, manage and protect your PG Soft player account.
• Transaction Processing: Processing MYR deposits via Touch 'n Go, GrabPay, DuitNow, and FPX, and handling withdrawal requests accurately and promptly.
• Service Delivery: Providing access to all PG Soft games, including Live Casino, Sports Betting, E-Sports, baccarat, and blackjack.
• Identity Verification & Fraud Prevention: Verifying player identity to maintain platform security and prevent fraud, money laundering and other illegal activities.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may benefit from support or responsible gaming tools.
• Service Communications: Sending important notifications about your account, changes to our terms, promotions you have subscribed to, and relevant technical information.
• Legal Compliance: Fulfilling legal obligations, including financial reporting requirements, transaction record retention, and cooperation with authorised authorities.

PG Soft does not sell, rent or trade your personal data to any third party for their own marketing or commercial purposes. However, there are limited situations in which we may share your data:

• Payment Service Providers: Transaction information required to process your payments is shared with payment service providers such as Touch 'n Go, GrabPay, DuitNow, and FPX-registered banks in Malaysia.
• Gaming Platform Provider: Limited technical data is shared with registered game providers to ensure a seamless gaming experience across all Live Casino tables and other games.
• Identity Verification Services: During the KYC process, certain identity verification data may be shared with registered and accredited identity verification service providers.
• Legal Requirements: PG Soft will disclose your personal data when required by Malaysian law, court order, or directive from a competent authority.
• Legitimate Interests Protection: In specific cases where there is a threat to the security or legitimate interests of PG Soft or other users, relevant data may be disclosed to the appropriate parties.

The security of your personal data is PG Soft's highest priority. We continually invest in our security infrastructure to ensure your data remains protected against cyber threats and unauthorised access at all times.

• 256-bit SSL Encryption: All communications between your browser or app and PG Soft's servers are encrypted using 256-bit SSL — the same standard used by Maybank2u and CIMB Clicks Malaysia.
• Stored Data Encryption: Sensitive data stored in our databases, including financial information and identification numbers, is encrypted using industry-standard encryption algorithms.
• Role-Based Access Control: Only PG Soft staff with specific authorisation may access player personal data, and all access is logged and monitored.
• Regular Security Audits: PG Soft's security systems undergo regular independent penetration testing and security audits to identify and address vulnerabilities.
• Incident Response Plan: PG Soft has a comprehensive incident response procedure in place. In the event of a data breach, we will notify affected players within 72 hours, in line with industry best practices.

PG Soft retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law.

• Active Account Data: For as long as your account remains active with PG Soft, personal data associated with your account will be retained and used to deliver our services.
• Financial Transaction Records: Records of all deposit and withdrawal transactions in RM are retained for seven (7) years from the transaction date, in line with Malaysian financial legal requirements.
• Identity Verification Data (KYC): Identity verification documents and records are retained for the duration of the active account period plus five (5) years after account closure.
• After Account Closure: Upon account closure, your personal data will be anonymised or deleted within 90 days, except for data that must be retained to fulfil legal obligations.
• Deletion Request: You may request the deletion of your data by contacting our Privacy Officer. Requests will be processed within 30 days, subject to any applicable legal retention requirements.

As a Malaysian player, you have specific rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA 2010). PG Soft is committed to making it easy for you to exercise these rights.

The PG Soft website uses cookies and similar tracking technologies to enhance the user experience and understand how players interact with our platform. The following are the types of cookies we use:

You can manage cookie settings through your web browser. However, disabling essential cookies may affect certain features on the PG Soft platform.

In certain circumstances, your personal data may be transferred to servers located outside Malaysia, particularly for backup purposes or when using cloud infrastructure services that process data across multiple locations.

• PG Soft ensures that any cross-border data transfers are carried out with adequate safeguards in compliance with Malaysia's PDPA 2010 requirements.
• Data recipients outside Malaysia are required to provide a level of data protection that is equivalent to or higher than that prescribed under Malaysian law.
• The majority of our Malaysian players' data is stored on servers located in the Asia Pacific region to ensure optimal platform performance and low latency.

PG Soft reserves the right to update and amend this privacy policy at any time to reflect changes in our privacy practices, legal requirements, or technological developments.

• You will be notified of any material changes via email or in-platform notification at least 14 days before the changes take effect.
• The "Updated" date at the top of this page will be revised whenever changes are made to this privacy policy.
• Continued use of the PG Soft platform after a policy change takes effect will be considered as your acceptance of the revised policy.
• We recommend that you check this page periodically to stay informed of the latest way we handle your personal data.

PG Soft has appointed a Data Protection Officer responsible for ensuring compliance with PDPA 2010 and handling all privacy-related enquiries from Malaysian players.