Introduction
pg168 ("we", "us", "our", "the Platform") is committed to protecting the privacy of all individuals who access and use the services available at https://pg168.click ("the Website"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by pg168.
This Privacy Policy applies to all personal data collected through: the pg168 Website and mobile-optimised platform; account registration and identity verification processes; deposits, withdrawals, and financial transactions; use of our gaming, betting, and lottery services; customer support communications; and participation in promotions, loyalty programmes, and other marketing activities.
By registering an account with pg168 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should not use the Platform.
Malaysian Players: pg168 collects and processes personal data in accordance with internationally recognised data protection principles. While Malaysia's Personal Data Protection Act 2010 (PDPA) applies to data processors operating within Malaysia, pg168 operates under international licensing. Regardless of jurisdiction, we apply robust data protection standards to all player data as a matter of principle and good governance.
Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
- "Personal Data" means any information relating to an identified or identifiable natural person. This includes your name, email address, date of birth, phone number, financial information, IP address, and device identifiers.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
- "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, pg168 is the Data Controller.
- "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller pursuant to written instructions.
- "Consent" means freely given, specific, informed, and unambiguous agreement to the processing of Personal Data for one or more specific purposes.
- "KYC" (Know Your Customer) means the identity and age verification process pg168 applies to all registered accounts prior to processing withdrawals, as required under our licensing obligations.
- "Cookies" means small text files placed on your device by a website server, used to store information about your interaction with the Platform.
- "Third Party" means any natural or legal person other than you, pg168, or pg168's authorised processors who are acting under direct instruction from pg168.
Data Controller
pg168 is the Data Controller for all personal data collected through the Platform. As Data Controller, pg168 is responsible for determining how and why your personal data is processed, and for ensuring that such processing is conducted lawfully, fairly, and transparently.
pg168 operates under international online gaming licensing. All personal data processing activities are conducted in accordance with the data protection obligations imposed by our licensing framework and the internationally recognised data protection principles set out in instruments such as the General Data Protection Regulation (GDPR), which we use as a benchmark standard for all player data, regardless of the player's location.
Where pg168 engages third-party Data Processors — such as payment service providers, identity verification providers, or analytics platforms — those processors are contractually bound to process personal data only in accordance with pg168's written instructions and are prohibited from using player data for their own independent purposes.
Data We Collect
pg168 collects personal data in the following categories, depending on how you interact with the Platform:
4.1 Data You Provide Directly
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, gender | Registration & KYC verification |
| Contact Data | Email address, phone number, city of residence | Registration & account updates |
| Financial Data | Payment method details, transaction history, wallet identifiers | Deposits, withdrawals & KYC |
| Verification Documents | NRIC/Passport copy, utility bill, bank statement | KYC verification process |
| Communications Data | Support chat transcripts, email correspondence | Customer support interactions |
| Preference Data | Marketing preferences, language settings, responsible gambling limits | Account settings & profile updates |
4.2 Data Collected Automatically
When you access and use the pg168 Platform, we automatically collect the following technical and usage data:
- Device and Technical Data: IP address, browser type and version, operating system, device type (mobile/desktop), screen resolution, and time zone.
- Usage Data: Pages visited, features used, games played, betting history, session duration, click patterns, and error logs.
- Location Data: Approximate geographic location derived from your IP address, used for fraud prevention and regulatory compliance purposes.
- Cookie and Tracking Data: Information collected through cookies and similar tracking technologies as described in Section 9 of this Policy.
Payment Method Note: When you deposit via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or cryptocurrency (USDT TRC20), your payment credentials are processed directly by our licensed payment partners. pg168 retains only the transaction reference, amount, date, and method — not full card numbers, wallet PINs, or online banking credentials.
How We Use Your Data
pg168 uses your personal data for the following specific purposes. Each purpose is linked to a legal basis for processing, as set out in Section 6:
5.1 Account Management & Service Delivery
We use your Identity Data, Contact Data, and Financial Data to create and maintain your account, process deposits and withdrawals, settle bets and game results, administer bonus offers, and provide all Services available through the pg168 Platform.
5.2 Identity Verification (KYC)
We use your Identity Data and Verification Documents to verify your age (minimum 21 years), confirm your identity, and comply with our anti-money laundering (AML) and Know Your Customer obligations under our international licensing requirements. KYC verification is mandatory before any withdrawal is processed.
5.3 Fraud Prevention & Security
We use Device and Technical Data, Location Data, and Usage Data to detect and prevent fraudulent activity, suspicious betting patterns, multi-accounting, and other prohibited conduct as defined in our Terms and Conditions. This processing is essential to protecting both our platform integrity and the interests of legitimate players.
5.4 Customer Support
We use your Contact Data and Communications Data to respond to enquiries submitted via live chat, WhatsApp, or email in English, Bahasa Melayu, or Mandarin; to investigate and resolve complaints; and to improve our support processes.
5.5 Responsible Gambling
We use your Usage Data and account history to monitor for signs of problem gambling behaviour, to enforce self-imposed deposit limits and self-exclusion periods, and to provide relevant responsible gambling information and referrals where appropriate. This processing reflects our core commitment to player wellbeing.
5.6 Marketing Communications
Where you have provided explicit consent, we may use your Contact Data and Preference Data to send promotional communications about new games, seasonal offers (including Hari Raya, Chinese New Year, and other festive promotions relevant to Malaysian players), VIP tier updates, and platform news. You may withdraw marketing consent at any time by updating your account settings or contacting Customer Support.
5.7 Legal & Regulatory Compliance
We retain and process certain categories of personal data as required by our licensing authority, applicable anti-money laundering regulations, and any lawful requests from competent authorities. This may include retaining financial transaction records for specified minimum periods.
Legal Basis for Processing
pg168 processes your personal data on the following legal bases:
- Performance of a Contract: Processing necessary to provide you with the Services you have requested — account creation, deposits, withdrawals, game access, and customer support.
- Legal Obligation: Processing required to comply with KYC/AML obligations, licensing requirements, and any applicable regulatory or legal duties.
- Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and general improvement of the Services, where such interests are not overridden by your privacy rights.
- Consent: Processing for direct marketing communications, certain non-essential cookies, and any other processing activities for which we specifically request your agreement. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Data Sharing & Disclosure
pg168 does not sell, rent, or trade your personal data to any third party for independent commercial use. We share personal data with third parties only in the circumstances described below:
7.1 Authorised Service Providers
We share personal data with carefully selected third-party service providers who assist us in operating the Platform. These include: licensed payment processing partners (for deposit and withdrawal transactions); identity verification and KYC service providers; fraud detection and analytics platforms; cloud hosting and infrastructure providers; customer support software providers; and email delivery services. All service providers are bound by Data Processing Agreements that prohibit use of your data for any purpose other than delivering the contracted service.
7.2 Licensed Game Studios
Game studios supplying content to the pg168 Platform may receive limited technical data (such as session tokens or game identifiers) necessary for game functionality and audit purposes. They do not receive your personally identifiable information for marketing or profiling purposes.
7.3 Regulatory & Legal Disclosure
We may disclose personal data to regulatory authorities, law enforcement agencies, or licensing bodies where we are required to do so by law, court order, or pursuant to our licensing obligations. Such disclosures will be limited to the minimum data required to fulfil the legal obligation.
7.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of pg168's business, personal data may be transferred to a successor entity as part of the transaction. You will be notified of any such transfer and any changes to this Privacy Policy that result from it.
We do not sell your data. pg168 does not sell, rent, or otherwise provide your personal data to advertising networks, data brokers, or any third party for independent commercial gain. Your data is used exclusively to operate and improve the Services you use.
Data Retention
pg168 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following principles and minimum retention periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML/KYC compliance, licensing obligations |
| Financial Transaction Records | Minimum 5 years from transaction date | Financial regulation & audit requirements |
| KYC Verification Documents | Duration of account + 5 years post-closure | Regulatory and anti-fraud obligations |
| Customer Support Records | 3 years from last interaction | Dispute resolution & service quality |
| Marketing Preferences | Until consent is withdrawn | Consent-based processing |
| Technical & Usage Logs | Up to 24 months | Security monitoring & fraud detection |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to a specific individual. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregated statistical analysis.
Cookies & Tracking Technologies
pg168 uses cookies and similar tracking technologies (including web beacons and local storage) to operate the Platform, recognise returning users, analyse usage patterns, and deliver a personalised experience. This section explains the types of cookies we use and how you can manage your preferences.
9.1 Managing Cookie Preferences
You may manage non-essential cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is placed. Please note that disabling certain cookies may affect the functionality of the Platform. Detailed instructions for managing cookies can be found in your browser's help documentation.
Data Security
pg168 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- Encryption in Transit: All data transmitted between your device and the pg168 Platform is encrypted using TLS (Transport Layer Security) with industry-standard 256-bit encryption.
- Encryption at Rest: Sensitive personal data, including identity documents and financial records, is stored in encrypted form on secured servers.
- Access Controls: Access to personal data within pg168's systems is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
- Penetration Testing: The Platform undergoes regular security assessments to identify and remediate potential vulnerabilities.
- Payment Security: Financial transactions are processed through PCI DSS-compliant payment partners. pg168 does not store full payment card numbers or online banking credentials.
- Two-Factor Authentication: Players are encouraged to enable two-factor authentication on their pg168 accounts for additional protection.
While pg168 takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system is completely secure. If you have reason to believe that your account has been compromised, please contact Customer Support immediately.
Your Data Rights
Subject to applicable law and the limitations imposed by our legal and regulatory obligations, you hold the following rights in relation to your personal data held by pg168. To exercise any of these rights, please contact our Data Protection team at the details provided in Section 15.
Right of Access
You may request a copy of the personal data we hold about you. We will respond to access requests within 30 days of receipt.
Right to Rectification
You may request correction of inaccurate or incomplete personal data. Basic account information can be updated directly in your account settings.
Right to Erasure
You may request deletion of your personal data where we no longer have a lawful basis to retain it. This right is subject to our legal retention obligations.
Right to Restriction
You may request that we restrict processing of your data in certain circumstances, such as while a dispute regarding data accuracy is being investigated.
Right to Portability
You may request your personal data in a structured, machine-readable format where technically feasible and where processing is based on consent or contract.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes. Marketing objections will be actioned immediately upon receipt.
How to Submit a Data Rights Request: Contact our support team via live chat or email at support@pg168.click with the subject line "Data Rights Request". Please include your registered username and a description of the right you wish to exercise. We will verify your identity before processing the request and respond within 30 calendar days.
Children & Minors
The pg168 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Registration by underage individuals is prohibited under our Terms and Conditions and our licensing obligations.
If pg168 discovers or has reasonable grounds to suspect that a registered account belongs to a person under 21 years of age, the account will be immediately suspended pending investigation. All funds held in the account will be reviewed and handled in accordance with our licensing obligations and the circumstances of the case.
If you are a parent or guardian and believe that a minor in your care has registered with pg168 without authorisation, please contact our Customer Support team immediately so that we can investigate and take appropriate action. We treat all such reports with urgency.
Third-Party Links & Services
The pg168 Platform may contain references to or integration with third-party services — including payment processing platforms such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, and cryptocurrency wallets. These services operate under their own privacy policies and data protection practices, which are independent of pg168.
pg168 has no control over and accepts no responsibility for the privacy practices of any third-party service. We encourage you to review the privacy policies of any third-party platforms you use in connection with your pg168 account. pg168's Privacy Policy applies only to data collected and processed by pg168 directly.
Policy Amendments
pg168 reserves the right to update or amend this Privacy Policy at any time. We will notify registered players of material changes by posting an updated version of the Policy on this page with a revised effective date and, where appropriate, by sending a notification to your registered email address.
We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after any amendments have been posted constitutes your acceptance of the updated Policy. If you do not agree with the changes, you should discontinue use of the Platform and close your account.
The version number and effective date at the top of this page always reflect the most current version of this Policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact pg168 through the following channels:
- Data Enquiries Email: support@pg168.click (plain text — not a clickable link)
- Live Chat: Available 24/7 through the Platform — request to speak with our Data Protection team
- Support Languages: English, Bahasa Melayu, Mandarin Chinese
- Subject Line for Data Requests: "Privacy Policy Enquiry" or "Data Rights Request"
- Response Time: Within 3–5 minutes via live chat; within 24 hours via email for general queries; within 30 days for formal data rights requests
For questions specifically relating to responsible gambling, self-exclusion, or account restrictions, please visit our Responsible Gambling page.
For general terms of service questions, please refer to our Terms & Conditions page.
Six Ways We Protect Your Privacy
Concrete data protection practices applied to every pg168 player account, every day.
256-Bit Encryption
All data in transit between your device and our servers is protected by TLS encryption. Sensitive stored data including identity documents and financial records is encrypted at rest.
We Never Sell Your Data
Your personal data is never sold, rented, or traded to advertising networks, data brokers, or third parties for their independent commercial use. Full stop.
Your Rights, Respected
Access, rectify, delete, or export your data at any time. Data rights requests are processed within 30 calendar days. No bureaucratic runaround — just a clear response.
Payment Data Minimisation
pg168 never stores full payment credentials. When you pay via Touch 'n Go, Maybank, or USDT, your credentials go directly to our PCI-compliant payment partners, not to us.
Clear Retention Limits
We keep your data only as long as legally required or operationally necessary. After retention periods expire, data is securely deleted or anonymised.
Trusted Processors Only
Every third party with access to player data is bound by a Data Processing Agreement restricting use to the contracted purpose. No exceptions, no side agreements.