possy888 Privacy Policy

01Introduction

possy888 ("possy888", "we", "us", "our") operates the online gaming platform accessible at possy888.net and is the data controller in respect of the personal data processed under this Privacy Policy.

This Privacy Policy applies to all individuals who access or use the possy888 platform, including registered Members, prospective Members who begin but do not complete the registration process, and visitors who access publicly available content on possy888.net without registering an account.

possy888 processes personal data in accordance with applicable data protection and privacy laws and in accordance with international gaming authority compliance requirements. This policy is designed to be transparent about our data practices so that you can make informed decisions about your engagement with the possy888 platform.

02Personal Data We Collect

possy888 collects personal data that is necessary to provide our gaming services, comply with regulatory requirements, and maintain the security and integrity of the platform. The categories of personal data we collect include:

1. Identity Data: Full legal name, date of birth, nationality, and copies of government-issued identification documents (e.g., MyKad, passport) submitted during identity verification.
2. Contact Data: Email address, Malaysian mobile phone number, and residential or mailing address (including city, e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya).
3. Account Data: Username, encrypted password, account registration date, Member tier, and account preferences.
4. Financial Data: Payment method details (e.g., Touch n Go eWallet account reference, Boost account reference, bank account details for Maybank, CIMB, Public Bank), deposit and withdrawal transaction history, and account balance records. Full payment card numbers are not stored by possy888.
5. Gaming Activity Data: Bet history, game session records, wagering activity, bonus usage, and responsible gaming tool settings.
6. Technical Data: IP address, device type, browser type and version, operating system, session duration, clickstream data, and login timestamps.
7. Communications Data: Records of communications between you and possy888 support, including live chat transcripts and email correspondence.

03How Data Is Collected

possy888 collects personal data through the following means:

• Direct submission: Data you provide during account registration, identity verification, deposit or withdrawal requests, completion of responsible gaming forms, or contact with support.
• Automated collection: Technical data collected automatically when you visit possy888.net or use the Platform, including via cookies, server logs, and analytics tools.
• Third-party sources: Identity verification and fraud screening data received from third-party KYC (Know Your Customer) service providers engaged by possy888 for compliance purposes; payment verification data received from payment processors and e-wallet providers.

04How We Use Your Personal Data

possy888 uses the personal data it collects for the following purposes:

1. Account management: To create, administer, and maintain your possy888 Member account, including authentication and security.
2. Service delivery: To provide access to gaming products, process deposits and withdrawals, credit bonuses, and settle wagers.
3. Identity verification and KYC compliance: To verify your identity, confirm your age (21+ requirement), and comply with anti-money laundering (AML) obligations applicable under international gaming authority regulations.
4. Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, multi-accounting, collusion, and other breaches of our Terms and Conditions.
5. Responsible gaming: To monitor gaming activity for indicators of problem gambling and to administer responsible gaming tools including deposit limits, loss limits, and self-exclusion requests.
6. Customer support: To respond to your enquiries, resolve disputes, and communicate account-related information.
7. Legal compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from competent authorities.
8. Platform improvement: To analyse aggregate usage data, identify technical issues, and improve the possy888 Platform's performance and user experience.
9. Marketing communications: To send you promotional offers, bonus notifications, and news about possy888 products and features, subject to your communication preferences. You may opt out at any time.

05Legal Basis for Processing

possy888 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the Member agreement between you and possy888, including account creation, payment processing, and service delivery.
• Legal obligation: Processing required to comply with AML regulations, KYC requirements, and directions from competent regulatory or law enforcement authorities.
• Legitimate interests: Processing necessary for possy888's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, such as receipt of optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

06Disclosure to Third Parties

possy888 does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. possy888 may disclose your personal data to the following categories of recipients where necessary:

• Payment processors and e-wallet providers (e.g., Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank) solely for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers engaged by possy888 to fulfil regulatory verification obligations.
• Game content providers and live studio operators whose games are accessible through the possy888 Platform — limited to data necessary for game session operation.
• Analytics and platform performance providers who process aggregate, anonymised technical data on possy888's behalf.
• Regulatory authorities, law enforcement, and gaming authorities where possy888 is required or permitted by law to disclose information.
• Professional advisers including legal counsel and auditors where disclosure is required for the conduct of possy888's business.

All third-party service providers engaged by possy888 are subject to contractual obligations requiring them to process personal data only on possy888's documented instructions and to implement appropriate data security measures.

07Data Retention

possy888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following considerations:

• Account data and gaming activity records are retained for the duration of your active possy888 membership and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Identity verification documents are retained for the period required by applicable regulatory obligations, typically five (5) years from the date of last transaction or account closure.
• Customer support communications are retained for a period of three (3) years following resolution of the relevant matter.
• Technical and usage data collected through cookies and analytics tools is retained for shorter periods in accordance with our cookie management practices.

Where personal data is no longer required for any lawful purpose, possy888 will securely delete or anonymise it in accordance with our data destruction procedures.

08Data Security

possy888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. Security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and possy888.net.
• Encryption of sensitive data fields (including passwords) at rest using industry-standard hashing and encryption algorithms.
• Access controls limiting internal access to personal data to authorised personnel with a legitimate business need.
• Regular security assessments and vulnerability testing of the possy888 Platform and supporting infrastructure.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

Notwithstanding the above, no data transmission over the internet or electronic storage system is unconditionally secure. possy888 cannot guarantee absolute security but is committed to implementing and maintaining reasonable security standards at all times.

09Cookies & Tracking Technologies

possy888 uses cookies and similar tracking technologies to operate the Platform, authenticate Members, remember user preferences, and analyse Platform usage. The categories of cookies used by possy888 include:

• Strictly necessary cookies: Required for the Platform to function, including session management, login authentication, and security features. These cannot be disabled without impacting core Platform functionality.
• Functional cookies: Used to remember your preferences such as language, display settings, and responsible gaming configurations.
• Analytics cookies: Used to collect aggregate, anonymised data about how visitors use possy888.net, enabling possy888 to improve Platform performance and user experience.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect your experience on the possy888 Platform.

10Your Data Protection Rights

Subject to applicable law and regulatory obligations, you have the following rights in respect of your personal data held by possy888:

1. Right of access: You may request a copy of the personal data possy888 holds about you.
2. Right to rectification: You may request correction of inaccurate or incomplete personal data.
3. Right to erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to possy888's legal obligations to retain certain records.
4. Right to restrict processing: You may request that possy888 restrict processing of your personal data in certain circumstances.
5. Right to data portability: You may request a machine-readable copy of personal data you have provided to possy888, where processing is based on consent or contract and is carried out by automated means.
6. Right to object: You may object to processing of your personal data where possy888 relies on legitimate interests as the legal basis, and to direct marketing at any time.
7. Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact possy888 support at [email protected]. possy888 will respond to verified requests within 30 days. possy888 may request proof of identity before processing a data rights request.

11Protection of Minors

The possy888 Platform is strictly intended for individuals aged 21 years and above. possy888 does not knowingly collect personal data from individuals under the age of 21. If possy888 becomes aware that personal data has been submitted by an individual under the minimum age, the relevant account will be immediately suspended, the data will be deleted, and any funds associated with the account will be withheld pending review.

If you believe that an individual under the age of 21 has registered a possy888 account, please contact [email protected] immediately so that appropriate action can be taken.

12International Data Transfers

possy888 may process or store personal data on servers or through service providers located outside Malaysia. Where personal data is transferred internationally, possy888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that afforded under applicable data protection law, including through contractual data processing agreements with relevant service providers.

13Changes to This Privacy Policy

possy888 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or Platform features. Material changes will be communicated to registered Members via email or a prominent notice on possy888.net prior to the effective date of the change. The "Last Updated" date at the top of this document will be revised on each update. Continued use of the possy888 Platform following notification of changes constitutes your acceptance of the revised Privacy Policy.

14Contact & Data Enquiries

For any questions, requests, or complaints relating to this Privacy Policy or possy888's data processing practices, please contact our data team:

Email: [email protected]
Live Chat: Available 24/7 via the possy888 Platform

possy888 will acknowledge privacy-related enquiries within 48 hours and provide a substantive response within 30 days, or within a shorter period where required by applicable law.