Personal Data Protection

Pondok88 Privacy Policy – Our Commitment to Your Data Security

Effective Date: 1 January 2026  |  Version 2.4

Your privacy is our priority. This document clearly explains the types of data we collect, why we need it, how we protect it, and your rights as a pondok88 player. We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

How Pondok88 Protects Your Data

Six layers of data protection we implement to safeguard every player's privacy.

256-bit SSL Encryption

All communications between your browser and pondok88's servers are encrypted using TLS 1.3 protocol with 256-bit encryption. This means every piece of data you transmit — including login credentials, payment details, and personal data — cannot be intercepted or read by any third party in transit.

Secure Data Storage

Pondok88 player data is stored on servers protected by encryption at rest. Passwords are stored in hashed form using the bcrypt algorithm and cannot be decrypted even by the Pondok88 technical team itself. Internal access to player data is strictly limited according to the principle of least privilege.

Data Minimization Principle

Pondok88 only collects information that is strictly necessary for the stated purposes. We do not collect excessive data that is irrelevant to the services you use. Every type of data we collect has a clear justification and a defined retention period.

Strict Access Control

Access to players' personal data within the Pondok88 organisation is restricted to staff who require it to perform their duties. All access is logged and audited. Staff who handle personal data are required to sign legally binding confidentiality agreements.

Malaysia PDPA Compliance

Pondok88 operates in full compliance with the Malaysia Personal Data Protection Act 2010. We have a formally appointed Data Protection Officer and conduct regular compliance reviews to ensure all our data management practices remain in line with current legal requirements.

No Third-Party Data Sales

Pondok88 has never sold, rented, or commercialised players' personal data to any third party for marketing purposes, and never will. Your data belongs to you, and we are committed to managing it responsibly and within the boundaries of the consent you have provided.

Important Note: This Privacy Policy applies to all Pondok88 players in Malaysia. By using our platform, you agree to the data collection and usage practices described in this policy. Please read it carefully.

1Data We Collect

In the course of using the Pondok88 platform, we collect several categories of personal data as follows:

Identity & Contact Data:

  • Full name as shown on official identification documents
  • Date of birth for age verification
  • Active mobile phone number
  • Valid email address
  • Current residential address (required for KYC verification)

Financial Data:

  • Payment method details (bank account numbers, e-wallet numbers)
  • Transaction history records for deposits and withdrawals
  • Wagering history and gaming activity

Technical Data:

  • IP address and IP-based location information
  • Device type, operating system, and browser used
  • Platform activity logs and session data
  • Cookie and similar tracking technology data

2Data Collection Purpose

We collect your personal data for the following legitimate purposes:

  • Account Management: Creating and maintaining your account, verifying your identity, and ensuring login security.
  • Transaction Processing: Processing deposits, withdrawals, and bonus payments accurately and securely.
  • Regulatory Compliance: Fulfilling KYC (Know Your Customer) obligations, anti-money laundering (AML) compliance, and reporting requirements to relevant authorities.
  • Customer Support: Providing technical support and resolving complaints efficiently.
  • Platform Security: Detecting and preventing fraud, account abuse, and security threats.
  • Service Improvement: Analysing usage patterns to improve the overall player experience.
  • Marketing Communications: Sending relevant promotional information and offers, subject to your consent.

3Legal Basis for Data Processing

Pondok88 only processes your personal data on valid legal grounds. Depending on the purpose of processing, the applicable basis is:

Processing Purpose Legal Basis
Account management & login Performance of a contract
Financial transaction processing Performance of a contract
KYC & AML Compliance Legal obligations
Fraud prevention & security Legitimate interests
Marketing communications Your consent
Analytics & platform improvement Legitimate interests

4Data Sharing With Third Parties

Pondok88 does not sell players' personal data. We share data only in the following limited circumstances:

  • Service Providers: Payment providers, game providers, and technical infrastructure providers involved in platform operations. All third parties are bound by strict data protection agreements.
  • Legal Requirements: Government authorities, enforcement bodies, or courts when pondok88 is required by law to disclose such information.
  • Fraud Prevention: Industry bodies and fraud cross-check services to detect and prevent illegal activity.

Pondok88 does not share your personal data with advertisers, data brokers, or any party not directly involved in the operation of our services without your explicit consent.

5Cookies & Tracking Technologies

Pondok88 uses cookies and similar technologies to enhance your experience on our platform. There are several types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
  • Performance Cookies: Helps us understand how players use the platform so we can improve speed and usability.
  • Functional Cookies: Saving your personal preferences such as language and display settings for ease of use.
  • Analytics Cookies: Collecting anonymised usage data to help us understand overall platform usage patterns.

You can manage cookie settings through your browser preferences. Please note that disabling essential cookies may affect the functionality of the Pondok88 platform.

6Data Retention & Deletion

Pondok88 does not retain your personal data longer than necessary. Retention periods depend on the type of data and the purpose of processing:

  • Active Account Data: Retained for the duration your account remains active and in use.
  • Financial Transaction Data: Retained for 7 years after a transaction occurs in line with Malaysian financial law requirements.
  • KYC Data: Retained for 5 years after account termination in accordance with AML regulatory requirements.
  • Platform Activity Logs: Retained for 12 months for security and dispute resolution purposes.
  • Marketing Data: Deleted within 30 days after you withdraw your marketing consent.

Once the retention period expires, your data will be securely deleted or anonymized in accordance with approved data deletion procedures so that it can no longer be linked to your identity.

7International Data Transfers

As an online platform, some of pondok88's service providers may operate outside Malaysia. When your personal data is transferred overseas, we ensure equivalent protection through:

  • Data processing agreements (Data Processing Agreements) that comply with international data protection standards.
  • Limiting data transfers only to countries or entities with adequate levels of data protection.
  • Use of approved standard contractual clauses for the protection of cross-border data transfers.

8Your Rights as a Data Subject

Under Malaysia's PDPA, you have the following rights regarding your personal data held by Pondok88:

Your Rights Under Malaysia's PDPA

Pondok88 respects and facilitates the exercise of your data protection rights.

Right of Access

You have the right to obtain a copy of the personal data we hold about you. Data access requests will be processed within 21 business days.

Right to Rectification

You may request corrections to inaccurate or incomplete personal data via your account settings or by contacting our support team.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data. Such requests are subject to applicable legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing any justification.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider where applicable.

Right to Restriction of Processing

In certain circumstances, you may request that we restrict the processing of your data while a complaint or review is pending.

To exercise any of the rights above, contact pondok88's Data Protection Officer by email at [email protected] or via our customer support live chat. We will respond to all valid requests within 21 working days from the date of receipt.

9. Data Security Measures

Pondok88 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or accidental destruction.

The technical measures we implement include data encryption in transit and at rest, two-factor authentication (2FA) for administrative access, firewalls and intrusion detection systems, regular security vulnerability scans, and annual penetration testing by independent third parties.

On the organisational side, we conduct regular privacy awareness training for all staff, restrict data access on a need-to-know basis, maintain clear data incident response procedures, and carry out privacy risk assessments for any new systems or processes involving personal data.

While we implement robust security measures, no system can guarantee absolute 100% security. You also play an important role by keeping your password confidential and enabling two-factor authentication on your pondok88 account.

10. Contact Us About Privacy

If you have any questions, concerns, or complaints about how Pondok88 handles your personal data, or if you wish to exercise any of your data protection rights, please contact our Data Protection Officer through the following channels:

Privacy Email: [email protected]
For all privacy-related inquiries and data rights requests. Response time: 3 working days.

Live Chat Support: Available 24/7
For general privacy inquiries and guidance on exercising your rights. Immediate response in under 3 minutes.

If you are not satisfied with how we handled your privacy complaint after our internal process is complete, you have the right to refer the complaint to the Personal Data Protection Commissioner of Malaysia.

This Privacy Policy may be updated from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes via platform notifications or email.

FAQ – pondok88 Privacy Policy

Answers to the questions players ask most about privacy and data protection at Pondok88.

No. pondok88 does not sell or share players' personal data with any third party for external advertising or marketing purposes. We only use your data to send pondok88's own marketing communications, and only if you have given your consent. You can opt out of marketing emails at any time through the notification settings in your account.

To request a copy of your personal data (known as a Subject Access Request or SAR), send an email to [email protected] with the subject line "Data Access Request" along with your account number and full name. We will verify your identity before processing the request. A copy of your data will be provided within 21 working days in a readable format. No fee is charged for the first data access request within any 12-month period.

When you close your Pondok88 account, your active account data will be deactivated immediately. However, certain data must be retained for periods required by law — for example, financial transaction records are kept for 7 years and KYC records for 5 years. These are mandatory requirements under Malaysian financial and anti-money laundering laws, not a choice made by Pondok88. Once the mandatory retention period expires, your data will be securely and permanently deleted.

If you suspect your Pondok88 account has been accessed without your authorisation, take the following steps immediately: first, contact Pondok88 customer support via live chat to temporarily freeze your account. Second, change your account password and the email address linked to it. Third, enable two-factor authentication (2FA) if you have not already done so. Pondok88 will conduct an internal investigation and update you on developments within 48 hours.

Yes, pondok88 uses automated systems for certain functions such as payment verification, fraud detection, and AML compliance. These automated decisions are made to protect you and the integrity of the platform. If an automated decision negatively affects your account — such as a temporary suspension — you have the right to request a review by a human staff member. Contact our support team and state that you wish to challenge an automated decision.

Your Privacy Is Protected. Play With Peace of Mind at pondok88.

Pondok88 takes our responsibility to protect your personal data seriously. Register an account today and enjoy a safe, transparent, and trusted gaming experience alongside more than 500,000 other Malaysian players.

Bahasa Melayu