pg368 | Privacy Policy – How We Protect Your Personal Data

Our Privacy Commitment

6 Ways pg368 Protects Your Personal Data

We don't just comply with the law – we go above and beyond to ensure your privacy is fully protected.

256-bit SSL Encryption

All data transmitted between your device and the pg368 servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banks. Your information remains unreadable even if intercepted in transit.

Bank-Grade Security

Data Minimisation – Only What Is Necessary

pg368 only collects data that is strictly necessary for platform operations. We do not gather irrelevant information, and every piece of data we retain has a clear, legitimate purpose in line with the principle of data minimisation.

Data Minimization

Not Sold to Third Parties

Your personal data has never been, and will never be, sold to any third party for marketing or commercial purposes. We share data only in the limited situations outlined in this policy, and exclusively with licensed partners.

No Data Selling

Secure & Purpose-Limited Storage

Your data is stored on secure servers with strict access controls. We use multi-layered backup systems and advanced firewalls. Data that is no longer needed is disposed of securely in accordance with our procedures.

Secure Storage

Data Breach Notification

In the event of any security incident involving your data, pg368 is committed to notifying affected members within 72 hours of the incident being identified, in line with industry best practices.

72-Hour Notification

Full Control in Your Hands

pg368 members have the right to access, correct, transfer, and delete their personal data. You may submit a request through our customer support team, and we will process it within 30 business days.

Your Data, Your Control

Contents

1. Introduction
2. Data Collected
3. Purpose of Use
4. Data Sharing
5. Data Security
6. Retention Period
7. Your Rights
8. Cookie Policy
9. Minors
10. Contact Us

Version 2.5
1 January 2026

1Introduction & Scope of This Privacy Policy

Welcome to the pg368 Privacy Policy. This document explains in detail how we – pg368, operator of Malaysia's leading online sports betting and casino platform – collect, use, disclose, and protect your personal information.

This policy applies to all registered members, users browsing our website, and any individual who interacts with pg368 services in any capacity. By registering an account or continuing to use our platform, you agree to the practices described in this policy.

Note: This Privacy Policy should be read together with Terms & Conditions us. In the event of any conflict, this Privacy Policy shall govern all matters relating to personal data.

2Types of Personal Data We Collect

Pg368 collects various types of information depending on how you use our platform. Here is a detailed breakdown:

Data Category	Example Information	How It Is Collected
Identity Information	Full name, date of birth, MyKad number	Registration & KYC
Contact Information	Phone number, email address	Account registration
Financial Information	EWallet details (TnG, GrabPay, DuitNow), bank account numbers	Deposit/withdrawal transactions
Transaction Data	Deposit, withdrawal, and betting history	Platform activity
Technical Data	IP address, device type, browser, access time	Automated system logs
Usage Data	Games played, session duration, login frequency	Platform monitoring

Data Minimization Principle: We only collect information that is strictly necessary. You will not be asked to provide unrequested details in the pg368 registration form.

3Purposes for Using Your Personal Data

Every piece of data we collect has a clear and legitimate purpose. pg368 uses your information for the following:

Account Management: Creating and maintaining your member account, processing logins, and verifying your identity
Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX Maybank2u, CIMB Clicks, and other supported methods
Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and unauthorised access
Legal Compliance: Meeting KYC, AML (anti-money laundering) compliance obligations and other legal requirements
Service Improvement: Analyzing usage patterns to improve the platform and user experience
Communications: Sending important notifications, promotional information (if you have consented) and platform updates
Responsible Gaming: Monitoring betting patterns to identify players who may need support

Marketing: We only send marketing communications if you have given your consent. You may withdraw this consent at any time by contacting our support team.

4Data Sharing With Third Parties

Pg368 does not sell your personal data with any party. However, we may share information in the following limited situations:

Payment Providers: Transaction information is shared with legitimate payment processors (such as licensed eWallet operators) solely for the purpose of processing your transactions
Game Providers: Minimal session data is shared with game providers such as PG Soft, Pragmatic Play, Evolution Gaming, and JILI solely for the purpose of running games
Authorities: We will disclose information to the authorities if required by law or a valid court order
Fraud Prevention: Minimal information may be shared with licensed fraud prevention agencies to protect other members

Guarantee: All third-party partners working with pg368 are required to comply with our security and privacy standards. They are not permitted to use your data for any purpose other than those specified.

5Security & Data Protection

Data security is a top priority at pg368. We implement multiple layers of technical and organizational protection:

256-bit SSL/TLS encryption for all data in transit
AES-256 encryption for sensitive data stored in the database
Role-based access control (RBAC) – only staff who require it may access specific data
Round-the-clock security monitoring by our dedicated information security team
Regular penetration testing conducted by independent security firms
Multi-site data backups at separate locations for disaster recovery
Two-factor authentication (2FA) for internal administrative access

While we take every reasonable precaution, no security system is 100% foolproof. You also play an important role — make sure your password is strong and never share your login credentials with anyone.

6Data Retention Period

Pg368 retains your data only for as long as necessary to fulfil the purposes stated in this policy:

Data Type	Retention Period
Active account information	Throughout the active account period + 5 years after closure
Financial transaction records	7 years (AML/legal requirements)
Platform activity logs	2 years
Support communication records	3 years
Non-essential cookie data	30 days – 2 years depending on type
KYC Documents	5 years after account closure

7Your Rights as a PG368 Member

As a pg368 member, you have the following rights regarding your personal data. To exercise any of these rights, please contact us at support@pg368.click.

Right of Access

Request a copy of the personal data we hold about you. We will process your request within 30 business days.

Right to Rectification

Request correction of any inaccurate or incomplete data in your account.

Right to Erasure

Request the deletion of your data ("right to be forgotten"), subject to any legal obligations we are required to fulfil.

Right to Data Portability

Request your data in a structured, machine-readable format for transfer to another platform.

Right to Restrict Processing

Request that we restrict the processing of your data under certain permitted circumstances.

Right to Object to Marketing

Withdraw consent to receive marketing communications at any time, free of charge.

8Cookie & Tracking Technology Policy

The pg368 website uses cookies and similar tracking technologies to enhance your experience and ensure smooth platform operation.

Essential Cookies: Required for core platform functions such as login sessions and security. Cannot be disabled.
Performance Cookies: Collects anonymised data on how you use the website to help us improve our services.
Functional Cookies: Remembers your preferences such as language and display settings for a more personalised experience.
Analytics Cookies: Helping us understand traffic and usage patterns for platform improvements.

You can manage cookies through your browser settings. However, disabling essential cookies may affect the functionality of the pg368 platform. Session cookies are automatically deleted when you close your browser.

9Child Protection

Pg368 strictly does not target, collect, or process personal data of individuals under the age of 18. Should we discover that a minor's data has been collected without our knowledge, we will promptly delete that data and close the account in question.

Parental Advisory: If you suspect your child under 18 has registered a pg368 account, please contact us immediately at support@pg368.click for prompt action.

10Contact Us & Policy Updates

If you have any questions, concerns, or wish to exercise your data rights, please contact the pg368 Privacy Officer:

Email: support@pg368.click
Live Chat: Available 24/7 via the pg368 platform
Response Time: We aim to respond to all privacy enquiries within 5 business days

Pg368 reserves the right to amend this Privacy Policy from time to time. Material changes will be communicated via in-platform notifications or email. Continued use of the platform after any amendment takes effect constitutes acceptance of the updated policy.

Document Information

Version 2.5 · Effective: 1 January 2026

Terms & Conditions Responsible Gaming

Privacy Policy PG368 – We Protect Your Data as We Would Our Own

6 Ways pg368 Protects Your Personal Data

How Your Data Flows Through the PG368 Platform

Register with PG368 – A Platform You Can Trust