Privacy Policy PGKing

Pgking ("we", "our platform") is an online casino and Sports Betting platform operating exclusively for Malaysian users. We understand that your personal data is a trust placed in us, and we do not take that responsibility lightly.

This Privacy Policy is drawn up in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia and international best practices in data protection. It applies to all users who visit, register for or use any pgking service — whether through our website, mobile app or any other platform we operate.

By registering a pgking account or continuing to use our platform, you consent to the collection and processing of your personal data as described in this policy. We encourage you to read this document in full and reach out to us if you have any questions.

Pgking only collects data that is strictly necessary to provide a secure, legally compliant and high-quality service. The following are the categories of data we collect:

We do not collect any data classified as "sensitive data" under Malaysia's PDPA unless strictly necessary for identity verification and compliance with anti-money laundering (AML) laws.

Every piece of data we collect has a specific and legitimate purpose. pgking uses your personal data for the following:

• Account management — registration, identity verification, password reset and profile updates.
• Financial transaction processing — deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX (Maybank2u, CIMB Clicks), as well as withdrawal processing to your Malaysian bank account or e-wallet.
• Provision of gaming services — slots, live casino, baccarat, roulette, Malaysia Super League Sports Betting, BWF badminton, e-sports and all other games on the pgking platform.
• Security & fraud prevention — detecting suspicious activity, preventing account abuse, and meeting AML (Anti-Money Laundering) requirements.
• Product improvement — analysing usage patterns to improve platform design, performance and the overall user experience.
• Service communications — sending account-related notifications, transaction updates, security alerts and important policy changes.
• Customer support — resolving complaints, answering enquiries, and providing technical support in Bahasa Malaysia 24/7.
• Legal compliance — fulfilling obligations under Malaysia's PDPA, KYC requirements, and reporting to authorities where required by law.

Pgking does not share, sell, or disclose your personal data to third parties except in the following situations permitted under Malaysia's PDPA:

• Approved service providers — payment processors (Touch 'n Go, GrabPay, DuitNow and FPX gateways), licensed game providers (Pragmatic Play, Evolution Gaming and others) and cloud service providers that help us operate the platform. All third parties are bound by strict confidentiality agreements and may only use your data for purposes specified by pgking.
• Legal requirements — when required by a court order, law enforcement directive or regulatory authority with lawful jurisdiction.
• Rights & security protection — to detect, prevent or address fraud, security threats or illegal activity involving the pgking platform.
• Business transfer — in the event of a merger, acquisition or asset sale, user data may be transferred as part of the business assets, with appropriate notice given to users.

Pgking continuously invests in cutting-edge security infrastructure to ensure your personal data remains protected at all times. Our security measures include:

• SSL/TLS 256-bit Encryption for all communications between your device and pgking's servers — on par with the standards used by Malaysian banking institutions.
• Data encryption at rest (at-rest encryption) for all sensitive data stored in our databases.
• Two-Factor Authentication (2FA) available to all accounts — we encourage every member to enable it.
• 24/7 threat monitoring by our cybersecurity team, who monitor for unusual activity in real time.
• Independent security audit conducted every six months by an independent third-party security firm.
• Internal access controls strict access controls — pgking staff may only access the data necessary to perform their specific job duties.
• Incident response plan comprehensive incident response plan — in the event of a data breach, we will notify affected users within 72 hours.

Pgking uses cookies and similar tracking technologies to enhance the functionality and usability of the platform. Cookies are small files stored on your device that allow a website to remember your preferences.

Below are the types of cookies we use and your preference settings:

You can manage your cookie settings at any time through your web browser settings. Please note that blocking essential cookies may affect the functionality of the pgking platform.

All financial transactions at pgking — including deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u and CIMB Clicks, as well as withdrawals to Malaysian bank accounts — are processed through a secure, PCI-DSS-certified payment gateway.

PGKing does not store credit or debit card numbers in plain text. Payment information is fully encrypted and stored by recognised payment processors — not directly within pgking's systems.

• Records of all transactions (deposits, withdrawals, winnings, bonuses) are retained for a minimum period of 7 years as required under Malaysian law governing financial records and AML compliance.
• Registered bank account numbers and e-wallet numbers are used solely for payment processing and account ownership verification purposes.
• You can request a full transaction statement at any time via the "History" section in your pgking account.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and pgking's policies, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the pgking Data Privacy Officer at support@pgking.ws. Requests will be verified and processed in accordance with applicable legal requirements.

Pgking retains your personal data for as long as necessary for the purposes outlined in this policy, or as required by applicable law:

Once the specified retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you.

Pgking reserves the right to update or amend this Privacy Policy from time to time to reflect changes in business operations, legal requirements or current industry practices.

You will be notified of any material changes through:

• An email to the address registered to your pgking account, at least 14 days prior changes take effect.
• In-app or pgking website notification upon your next login.
• A clearly labelled "Updated" notice on this page showing the date of the latest changes.

Continued use of the pgking platform after a policy change takes effect will be considered acceptance of the updated policy. If you do not agree, you have the right to close your account before that date.

If you have any questions, concerns, or complaints regarding how pgking handles your personal data, please contact our Data Privacy Officer (DPO) through the following channels:

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia Personal Data Protection Commissioner through official channels designated by the Malaysia Ministry of Communications & Digital.