Privacy Policy — pepsi888

1. Introduction

pepsi888 ("we", "us", "our", or the "Company") operates the online gaming platform accessible at pepsi888.cam (the "Platform"). We are committed to protecting the privacy and personal data of all users ("you", "your", or "Player") who access or use the Platform.

This Privacy Policy describes the types of personal information we collect, the purposes for which we use that information, the parties with whom we may share it, and the rights available to you in relation to your personal data. This Policy applies to all data processing activities carried out by pepsi888 in connection with the Platform, including account registration, deposit and withdrawal processing, customer support interactions, and participation in promotions.

By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein to the extent that such consent is required by applicable law. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

• "Personal Data" means any information that identifies or can be used to identify you as an individual, directly or indirectly, including but not limited to your name, identification number, email address, phone number, IP address, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means pepsi888, the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means any third party that Processes Personal Data on behalf of pepsi888 under a data processing agreement, such as payment gateway providers and KYC verification service providers.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by a Player to the Processing of their Personal Data for a stated purpose.
• "Legitimate Interest" means a lawful basis for Processing Personal Data where pepsi888 has a genuine and proportionate business interest that is not overridden by the Player's privacy rights.
• "Sensitive Personal Data" means Personal Data revealing racial or ethnic origin, religious beliefs, political opinions, health data, biometric data, or similar categories that warrant heightened protection under applicable law.

3. Personal Data We Collect

pepsi888 collects the following categories of Personal Data in the course of operating the Platform:

3.1 Registration & Identity Data

• Full legal name (as appearing on government-issued identification)
• Date of birth (to verify that you are aged 21 or above)
• Gender (optional, for personalisation)
• Malaysian MyKad number, passport number, or other national identification number
• Residential address, including postcode and state within Malaysia
• Email address
• Mobile phone number
• Username and encrypted password

3.2 KYC Verification Data

• Scanned or photographed copies of government-issued photo identity documents (MyKad, passport, driving licence)
• Proof of residential address documentation
• Proof of payment method ownership (partial card images, e-wallet screenshots)
• Selfie or liveness-check images where enhanced verification is required

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and transaction references
• Payment method type (e.g., Maybank2u, Touch 'n Go eWallet, DuitNow, FPX, cryptocurrency wallet address)
• Account balance history and wagering records
• Bonus and promotion redemption history

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type and version
• Session timestamps and duration
• Pages and game titles accessed
• In-game activity logs (game outcomes are retained for dispute resolution)
• Click-stream and navigation data

3.5 Communications Data

• Content of live chat conversations with support agents
• Email correspondence records
• Records of complaints, disputes, and their resolution
• Feedback and survey responses (where submitted voluntarily)

3.6 Responsible Gambling Data

• Deposit limits, loss limits, and session time limits set by you
• Self-exclusion records and duration
• Records of responsible gambling tool activations and modifications

4. How We Collect Your Data

pepsi888 collects Personal Data through the following means:

• Direct Provision: Information you provide when registering an account, completing KYC verification, making deposits, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically via cookies, web beacons, log files, and similar tracking technologies when you access the Platform.
• Third-Party Sources: Identity verification data received from our KYC service providers; payment confirmation data from our payment processing partners including Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX operators; fraud risk signals from anti-fraud service providers.
• Public Sources: Publicly available information used for anti-money laundering screening (e.g., sanctions lists, politically exposed persons registers) where legally required.

5. Purposes of Processing & Legal Basis

The following table summarises the primary purposes for which pepsi888 Processes your Personal Data and the applicable legal basis for each:

6. Data Sharing & Disclosure

pepsi888 does not sell or rent your Personal Data to third parties. We may share your Personal Data with the following categories of recipients only to the extent necessary and on the basis of appropriate safeguards:

6.1 Service Providers & Data Processors

We engage third-party service providers who Process Personal Data on our behalf under written data processing agreements. These include:

• KYC and identity verification providers
• Payment gateway operators (including those facilitating Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency transactions)
• Cloud hosting and infrastructure providers
• Fraud detection and anti-money laundering screening services
• Customer support platform providers
• Analytics and platform performance monitoring services

6.2 Legal & Regulatory Disclosures

pepsi888 may disclose Personal Data to competent governmental authorities, regulators, law enforcement agencies, or courts where required by applicable law, court order, or where disclosure is necessary to protect the legal rights of pepsi888 or to prevent fraud, money laundering, or other criminal activity.

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructure, or sale of all or part of pepsi888's business, Personal Data held by pepsi888 may be transferred to the acquiring entity as part of that transaction, subject to the same protections as described in this Policy.

7. Data Retention

pepsi888 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, as described in this Policy, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and KYC Data: Retained for the duration of your active Account, plus a minimum of five (5) years following Account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction Data: Retained for a minimum of seven (7) years following the date of each transaction, in line with financial record-keeping obligations under applicable Malaysian law.
• Communications Data: Customer support records retained for three (3) years following the resolution of the relevant interaction.
• Technical & Usage Data: Aggregated analytics data retained for up to twenty-four (24) months. Individual session logs retained for twelve (12) months.
• Responsible Gambling Data: Self-exclusion records and limit settings retained for a minimum of five (5) years after Account closure to prevent re-registration during exclusion periods.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

8. International Data Transfers

The pepsi888 Platform operates with infrastructure and service providers that may be located outside of Malaysia. Where Personal Data is transferred to jurisdictions outside Malaysia, pepsi888 takes appropriate steps to ensure that adequate protections are in place to safeguard your data, including the use of contractual data protection clauses with recipients and restricting transfers to jurisdictions with adequate data protection frameworks.

By using the Platform, you acknowledge that your Personal Data may be transferred to and stored in countries outside Malaysia, including countries whose data protection laws may differ from those in Malaysia. Where such transfers occur, they will be conducted in accordance with this Privacy Policy and applicable legal requirements.

9. Cookies & Tracking Technologies

pepsi888 uses cookies and similar tracking technologies to operate the Platform securely, maintain your session, and gather anonymised analytics data to improve Platform performance. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session cookies that maintain your login state, security tokens that protect against cross-site request forgery, and cookies required to route your requests to the correct server infrastructure. No consent is required for these cookies.

9.2 Analytics Cookies

We use anonymised analytics cookies to understand how players navigate the Platform, which pages receive the most visits, and where technical errors occur. This data helps us improve the Platform experience. Analytics cookies do not identify you personally and are aggregated before analysis.

9.3 Preference Cookies

Preference cookies remember your settings such as language preference, display theme, and notification preferences so that your experience remains consistent across sessions. These cookies can be cleared via your browser settings without affecting the core functionality of the Platform.

9.4 Managing Cookies

Most web browsers allow you to control cookies through their settings. You may disable non-essential cookies through your browser's privacy settings. Please note that disabling certain cookies may affect the functionality of the Platform. pepsi888 does not use advertising cookies or participate in cross-site behavioural advertising networks.

10. Data Security

pepsi888 implements a multi-layered security architecture to protect your Personal Data from unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: All data transmitted between your device and the Platform is encrypted using 256-bit SSL/TLS protocols. Data at rest is encrypted using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to authorised pepsi888 personnel and service providers on a strict need-to-know basis. All staff with access to Personal Data are subject to confidentiality obligations.
• Authentication: Two-factor authentication (2FA) is available to all Players and is mandatory for internal staff accessing administrative systems.
• Infrastructure Security: Our Platform infrastructure is hosted in data centres with physical access controls, fire suppression, redundant power, and 24/7 monitoring.
• Penetration Testing: pepsi888 conducts regular vulnerability assessments and penetration tests to identify and remediate security weaknesses proactively.
• Incident Response: We maintain a documented data breach response procedure. In the event of a security incident affecting your Personal Data, we will notify you and the relevant authorities as required by applicable law.

Despite these measures, no method of internet transmission or data storage is completely secure. pepsi888 cannot guarantee absolute security and encourages you to take your own precautions, including using a strong unique password and enabling 2FA on your Account.

11. Your Rights as a Data Subject

Subject to applicable law, you have the following rights in relation to your Personal Data held by pepsi888. To exercise any of these rights, please contact us using the details in Section 15.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you and to receive information about how we process it.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your Personal Data. This right does not apply where we are required to retain your data by law (e.g., for AML compliance) or where retention is necessary to defend legal claims.
• Right to Restrict Processing: You have the right to request that we limit the way we process your Personal Data in certain circumstances, for example while a correction request is pending.
• Right to Data Portability: Where Processing is based on your consent or performance of a contract and is carried out by automated means, you may request that we provide your Personal Data in a structured, machine-readable format.
• Right to Withdraw Consent: Where Processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of Processing carried out prior to withdrawal.
• Right to Object: You have the right to object to Processing carried out on the basis of Legitimate Interest, including profiling, where your individual circumstances justify such an objection.

Malaysian users may also exercise rights under the Personal Data Protection Act 2010 (PDPA), including the right to access and correct personal data held by data processors in Malaysia. Requests submitted under the PDPA will be processed within the timeframes stipulated by that legislation.

We will respond to all valid data subject requests within 30 calendar days of receipt. Requests may be extended by an additional 30 days in complex cases; we will inform you if such an extension is required.

12. Children's Privacy

The pepsi888 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from any person under the age of 21. If we become aware that Personal Data has been collected from an individual under 21, we will immediately suspend the associated Account and delete the Personal Data concerned.

If you are a parent or guardian and believe that your child has registered on the Platform or provided Personal Data to pepsi888, please contact us immediately at [email protected] so we can investigate and take appropriate action.

13. Third-Party Links & Services

The pepsi888 Platform may contain references to or integrations with third-party services, including payment gateway interfaces operated by Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX operators. When you interact with these third-party services, you are subject to their own privacy policies in addition to this Policy. pepsi888 is not responsible for the data practices of third-party services that operate independently of the Platform.

We do not embed third-party social media tracking widgets or advertising pixels on the Platform.

14. Amendments to This Privacy Policy

pepsi888 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to you via the email address associated with your Account and/or via a prominent notice on the Platform.

The revised Policy will take effect on the date specified in the notice. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the amended terms. If you do not agree with the revised Policy, you must close your Account prior to the effective date.

We encourage you to review this Privacy Policy periodically to stay informed of how we handle your Personal Data. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way pepsi888 handles your Personal Data, please contact our Data Privacy team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the chat widget on the Platform
• Subject Line for Privacy Requests: Please use "Privacy Request — [Your Account Username]" when emailing so that our team can prioritise and route your request appropriately.
• Response Time: We aim to acknowledge all privacy requests within 5 business days and to respond fully within 30 calendar days (Malaysia Standard Time, UTC+8).

For questions about ourTerms & Conditions, responsible gambling tools, or account management, please also refer to our FAQ page.