Privacy Policy

1. Who We Are and How to Contact Us

ppclub is the operator of the online gambling platform accessible at ppclub.app ("the Platform"). In the context of this Privacy Policy, ppclub acts as the data controller in respect of the personal data of its members and prospective members.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data ppclub holds about you, you may contact our Data Support team via:

• Live Chat: Available 24/7 within the Platform — the fastest channel for data-related queries.
• Email: [email protected]

Please note that email addresses above are displayed as plain text only and are not clickable hyperlinks.

2. Personal Data We Collect

ppclub collects personal data in the following categories:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, nationality, government-issued ID number	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration & account updates
Financial Data	Bank account details, e-wallet identifiers (Touch 'n Go, Boost), transaction history	Deposits & withdrawals
Technical Data	IP address, device type, operating system, browser type, session identifiers	Each Platform session
Usage Data	Pages visited, games played, bets placed, session duration, feature interactions	Each Platform session
Communications Data	Live chat transcripts, email correspondence, support ticket records	When you contact support
Responsible Gaming Data	Self-exclusion status, deposit limits set, cooling-off periods	When you use RG tools

ppclub does not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, or health data) unless expressly required for responsible gaming compliance purposes (for example, where a member discloses a gambling problem as part of a self-exclusion request). Where such data is collected, it is processed with heightened care and restricted access.

3. How We Use Your Personal Data

ppclub uses the personal data we collect for the following purposes:

• Account administration: Creating and managing your ppclub account, processing logins, and maintaining account security;
• Identity and age verification: Verifying that you are at least 21 years of age and that your identity matches the details you have provided, as required by our licensing obligations;
• Transaction processing: Processing deposits, withdrawals, and refunds using your registered MYR payment methods including Touch 'n Go eWallet, Boost, DuitNow, FPX, and Malaysian bank transfers;
• Fraud prevention and anti-money laundering: Detecting, investigating, and preventing fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct;
• Customer support: Responding to your queries, complaints, and support requests;
• Responsible gaming: Administering deposit limits, self-exclusion, cooling-off periods, and other player protection tools you have activated;
• Legal and regulatory compliance: Complying with applicable laws, regulations, and requests from regulatory authorities or law enforcement;
• Platform improvement: Analysing usage data in aggregated, anonymised form to improve the Platform's design, features, and performance;
• Direct marketing: Sending you promotional communications about ppclub products, bonuses, and events — but only where you have consented to receive such communications or where we have a legitimate interest to do so. You may opt out of marketing communications at any time.

4. Legal Basis for Processing Personal Data

ppclub processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and ppclub — including account creation, bet settlement, deposits, and withdrawals;
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations;
• Legitimate interests: Processing carried out for purposes such as fraud detection, Platform security, and improving our services — where such interests are not overridden by your rights and interests;
• Consent: Processing for marketing communications and optional analytics, where you have given explicit consent. You may withdraw your consent at any time by contacting our support team.

5. Sharing Your Personal Data

ppclub does not sell your personal data to third parties. We may share your personal data with the following categories of recipient, strictly for the purposes outlined in this Policy:

• Payment processors and banking partners: Including Touch 'n Go, Boost, DuitNow, and Malaysian banks — for the purpose of processing your deposits and withdrawals. These parties act as independent data controllers in respect of their own processing;
• Identity verification providers: Third-party KYC and age verification service providers engaged to verify your identity and age as part of our registration and withdrawal processes;
• Game content providers: Licensed game studios (such as Pragmatic Play, NetEnt, and Play'n GO) receive the minimum data necessary to deliver game sessions to you. They do not receive your financial or full identity data;
• Fraud prevention and security providers: Specialist third-party services engaged to detect and prevent fraud, money laundering, and security threats;
• Regulatory authorities and law enforcement: Where we are legally required or permitted to disclose your data in connection with a regulatory inquiry, court order, or law enforcement request;
• Professional advisers: Lawyers, auditors, and insurers, where necessary in connection with legal proceedings, regulatory compliance, or business operations.

All third parties engaged by ppclub are required to process personal data in accordance with applicable data protection law and are prohibited from using your data for their own unrelated purposes.

6. Cookies and Tracking Technologies

ppclub uses cookies and similar tracking technologies on its Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly — including session management, login persistence (where "Remember me" is selected), and security features. These cannot be disabled without impairing Platform functionality;
• Analytics cookies: Used to collect aggregated, anonymised data about how members use the Platform, which helps us improve its design and performance. Analytics data does not identify individual users;
• Preference cookies: Store your Platform preferences (such as language or display settings) to personalise your experience across sessions.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to log in and use the Platform normally. ppclub does not use third-party advertising cookies or cross-site tracking technologies.

7. Data Retention

ppclub retains your personal data for as long as is necessary for the purposes described in this Policy, subject to the following specific retention periods:

• Account data: Retained for the duration of your ppclub account plus a minimum of five (5) years following account closure, in accordance with our regulatory and AML obligations;
• Transaction records: Retained for a minimum of seven (7) years from the date of each transaction;
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification;
• Support communications: Retained for two (2) years from the date of each interaction;
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter for compliance purposes.

When personal data is no longer required and the applicable retention period has expired, ppclub will securely delete or anonymise the data in accordance with industry standard data destruction procedures.

8. Data Security

ppclub implements a comprehensive suite of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption for all data in transit between your device and ppclub's servers;
• Encryption at rest for sensitive data stored in ppclub's databases;
• Role-based access controls limiting data access to authorised personnel with a documented business need;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Intrusion detection and monitoring systems operating 24/7;
• Formal data breach response procedures, including notification obligations to affected members and relevant authorities within 72 hours of breach discovery.

While ppclub takes all reasonable steps to protect your data, no internet transmission or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your ppclub login credentials.

9. Your Rights in Respect of Your Personal Data

Subject to applicable law, you have the following rights in respect of the personal data ppclub holds about you:

• Right of access: You may request a copy of the personal data ppclub holds about you at any time;
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to restriction: You may request that we restrict our processing of your data in certain circumstances;
• Right to data portability: You may request that we provide your data in a structured, commonly used, machine-readable format;
• Right to object: You may object to processing based on legitimate interests and to direct marketing at any time;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact ppclub's support team via live chat or by emailing [email protected]. ppclub will respond to all data rights requests within thirty (30) days of receipt.

10. Children's Privacy

The ppclub Platform is strictly prohibited for use by persons under 21 years of age. ppclub does not knowingly collect personal data from any individual under 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered a ppclub account, please contact our support team immediately.

11. Links to Third-Party Platforms

The ppclub Platform may contain references to third-party game providers or payment services. ppclub is not responsible for the privacy practices of any third-party platform or service. We encourage you to review the privacy policies of any third-party services you interact with through the Platform.

12. Amendments to This Privacy Policy

ppclub may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory guidance. When material changes are made, we will notify registered members by email at least seven (7) days before the changes take effect. The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

13. Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a complaint about ppclub's handling of your personal data, please contact us via:

• Live Chat: Available 24/7 within the Platform — average response time under 2 minutes.
• Email: [email protected]

If you are not satisfied with ppclub's response to your complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.