Puma888 Privacy Policy

Puma888 ("we", "us", "our") operates the online gaming and sports betting platform accessible at puma888.cam ("the Platform"). This Privacy Policy applies to all users of the Platform, including registered account holders and visitors who browse the Website without registering.

We recognise the importance of privacy to our users, particularly Malaysian players who entrust us with sensitive personal and financial information as part of the gaming experience. This policy sets out, in clear and plain terms, our data handling practices in connection with the operation of the Platform.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gambling Policy. By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

In this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers such as IP addresses.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. In respect of data collected through the Platform, the Data Controller is Puma888.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller under contractual instruction (e.g., payment processors, KYC verification providers).
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
• "KYC" — Know Your Customer — identity and address verification procedures required to comply with anti-money laundering and fraud prevention obligations.
• "Cookies" — small text files placed on a user's device by the Platform to record browsing activity, preferences, and session data.
• "User" / "You" — any individual who accesses the Platform, whether as a registered account holder or unregistered visitor.

Puma888 collects personal data that is necessary to provide the Platform's services and fulfil our legal obligations. The categories of personal data we collect are set out in the table below:

We do not collect or process sensitive special-category data such as racial or ethnic origin, religious beliefs, or health information, except where directly required by our responsible gambling obligations (for example, recording self-exclusion requests).

Puma888 collects personal data through the following channels:

4.1 Direct Collection

Data provided directly by you when you register for an account, complete KYC verification, make a deposit or withdrawal, contact our support team, participate in promotions, or configure your account settings (including responsible gambling preferences such as deposit limits and self-exclusion requests).

4.2 Automated Collection

Technical and usage data collected automatically as you interact with the Platform, including through cookies, server logs, session tracking, and payment gateway transaction records. This data is collected whether you are a registered user or an unregistered visitor browsing the Website.

4.3 Third-Party Sources

Identity and fraud risk data received from KYC verification service providers, payment processors (including Malaysian payment networks such as DuitNow, FPX, and e-wallet operators), fraud prevention databases, and publicly available regulatory watch-lists where applicable for anti-money laundering purposes.

Puma888 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your Puma888 account, including account security, password resets, and communication of material changes to our Terms or policies.
• Payment Processing: Facilitating your deposits and withdrawal requests through Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and USDT TRC20. All financial data is processed using encrypted channels.
• KYC and Regulatory Compliance: Verifying your identity, confirming your age (21+), and fulfilling our anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, multiple account abuse, bonus misuse, and other platform integrity violations.
• Service Personalisation: Tailoring your Platform experience, including game recommendations, VIP tier communications, and bonus offers, based on your usage patterns and stated preferences.
• Responsible Gambling: Monitoring usage patterns to identify potential problem gambling behaviours and, where applicable, applying responsible gambling tools such as deposit limits, session reminders, and self-exclusion periods in accordance with your requests.
• Customer Support: Responding to your enquiries, resolving disputes, and improving the quality of our support service.
• Marketing Communications: Sending you promotional communications about Puma888 offers, bonuses, and new features where you have provided consent to receive such communications. You may withdraw consent at any time.
• Legal and Regulatory Obligations: Complying with applicable laws, regulations, and lawful requests from regulatory or law enforcement authorities.

Puma888 processes your personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and Puma888 (i.e., providing the gaming services you have registered to use, processing your deposits and withdrawals).
• Legal Obligation: Processing required to comply with our legal and regulatory obligations, including KYC verification, AML/CTF reporting, and age verification requirements.
• Legitimate Interests: Processing necessary for Puma888's legitimate business interests, including fraud prevention, platform security, service improvement, and VIP programme administration — where these interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — principally in respect of marketing communications and certain non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Puma888 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may, however, share personal data with the following categories of recipients in the course of operating the Platform:

• Payment Processors: Malaysian payment network operators (DuitNow, FPX), e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), and banking partners (Maybank, CIMB, Public Bank, Hong Leong) receive transaction data strictly necessary to process your deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party providers engaged to verify your identity and age as part of our mandatory KYC process. These providers operate under strict data processing agreements.
• Game Content Providers: Third-party game studios and sports data providers may receive anonymised session identifiers necessary to deliver live casino games and sports betting markets. No directly identifiable personal data is shared with game providers beyond what is necessary for game delivery.
• Fraud Prevention and Security Services: Providers of fraud detection, cybersecurity, and platform integrity services that assist us in identifying and responding to security threats.
• Legal and Regulatory Authorities: Government agencies, law enforcement bodies, and regulatory authorities where disclosure is required by applicable law, court order, or regulatory requirement. Puma888 will notify you of such disclosures where legally permitted to do so.
• Professional Advisers: Legal, financial, and compliance advisers engaged in connection with the operation of the Platform, who are bound by professional confidentiality obligations.

All third-party processors engaged by Puma888 are required to process personal data only in accordance with our documented instructions and to implement appropriate technical and organisational security measures.

Puma888 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your registered account. If your account is closed, certain data categories are retained for the periods set out below.
• Financial Transaction Records: Retained for a minimum of 7 years following the last transaction, in compliance with applicable anti-money laundering record-keeping requirements.
• KYC Documentation: Retained for a minimum of 5 years following account closure, or longer where required by applicable regulatory obligations.
• Communications and Support Records: Retained for up to 3 years following the resolution of the relevant support interaction or dispute.
• Marketing Preferences and Consent Records: Retained for the duration of your account, and for up to 2 years following account closure to evidence consent history.
• Technical and Log Data: Retained for up to 12 months, unless required for an ongoing fraud investigation or legal proceeding.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to an individual user.

Puma888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Puma888 Platform is encrypted using industry-standard TLS protocols. Your payment details and account credentials are never transmitted in plain text.
• Data Encryption at Rest: Sensitive personal data, including KYC documents and financial records, is encrypted when stored on our servers.
• Access Controls: Personal data is accessible only to Puma888 personnel and authorised processors with a legitimate operational need. Access is governed by role-based permissions and subject to audit logging.
• Intrusion Detection and Monitoring: Our infrastructure is subject to continuous security monitoring, penetration testing, and vulnerability assessments to identify and address security risks proactively.
• Incident Response: Puma888 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected users promptly in accordance with applicable requirements.

Puma888 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core functionality such as session authentication, account security, and payment processing flows. These cookies cannot be disabled without impairing Platform functionality.

10.2 Functional Cookies

Cookies that remember your preferences, language settings, and game history to provide a more personalised Platform experience. Disabling these cookies may limit personalisation features.

10.3 Analytics Cookies

Aggregated, anonymised data collected to help us understand how users interact with the Platform — which pages are most visited, where users encounter difficulties, and how overall usage patterns evolve. This data is used solely for service improvement and is not linked to individual user identities.

10.4 Managing Cookies

You may manage non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will impair your ability to use the Platform. For specific instructions on managing cookies in your browser, please refer to your browser's help documentation.

Subject to applicable law, you hold the following rights in relation to the personal data that Puma888 processes about you. To exercise any of these rights, please contact our support team at the details provided in Section 15.

Puma888 will respond to all data rights requests within a reasonable timeframe. We may need to verify your identity before processing a request. Some rights are subject to exceptions where our legal obligations require continued processing (e.g., AML record retention).

The Puma888 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from minors. Age verification is a mandatory component of our account registration and KYC process.

If Puma888 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe your child has registered for a Puma888 account, please contact us immediately.

In the course of operating the Platform and engaging third-party processors (including game content providers, KYC verification services, and technical infrastructure providers), your personal data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, Puma888 takes appropriate steps to ensure that your personal data is protected to a standard equivalent to that required under applicable Malaysian privacy legislation.

Safeguards for international transfers may include contractual data processing agreements incorporating appropriate data transfer protections, ensuring that recipient third parties are subject to privacy laws or data protection frameworks that provide an adequate level of protection for your personal data.

Puma888 reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform operations. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via email or an in-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data. Your continued use of the Platform following the posting of an updated Privacy Policy constitutes your acknowledgement of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how Puma888 processes your personal data, please contact our support team. We are committed to responding to all data-related enquiries promptly and transparently.

For information about our overall service terms, please refer to our Terms and Conditions. For responsible gambling tools and support resources, please visit our Responsible Gambling page.