payung44 Privacy Policy — How We Handle Your Data

1.Data We Collect

payung44 collects personal data that is necessary to operate a licensed online gaming platform in compliance with applicable know-your-customer (KYC), anti-money laundering (AML), and responsible gaming obligations. The categories of personal data we collect include:

2.How We Collect Your Data

payung44 collects personal data through the following means:

• Direct collection: Data you provide during account registration, KYC document submission, deposit and withdrawal requests, and customer support interactions.
• Automated collection: Technical data collected automatically when you access the payung44 platform, including IP addresses, device information, browser data, and session activity logs.
• Third-party sources: Identity verification data from KYC service providers; fraud risk scores from payment processing partners; responsible gaming data from self-exclusion registers where applicable.
• Cookies and tracking technologies: Information collected via cookies and similar technologies as described in Section 7 of this Policy.

3.How We Use Your Data

3.1  payung44 processes your personal data only for purposes that are lawful, specific, and proportionate. The primary purposes for which we process Member data are:

• Account creation, verification, and ongoing management
• Processing deposits, withdrawals, and MYR wallet transactions via Touch n Go eWallet, Boost, FPX, and bank transfer
• Complying with KYC and AML obligations under applicable gaming regulations
• Delivering and improving payung44 gaming services, including the Sportsbook, Casino, and Slots product lines
• Preventing fraud, account abuse, and multi-accounting
• Providing customer support and resolving disputes
• Enforcing the payung44 Terms and Conditions and this Privacy Policy
• Administering responsible gaming tools including deposit limits and self-exclusion
• Sending service communications such as account security alerts, OTP messages, and transaction confirmations
• Sending promotional communications where you have opted in to receive them

3.2  payung44 does not use Member personal data to make solely automated decisions that produce legal or similarly significant effects without human review. Automated fraud detection systems flag accounts for manual review by compliance staff.

4.Data Sharing & Third Parties

4.1  payung44 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. Data sharing is limited to the following categories of recipients:

• Payment service providers: Financial institutions and e-wallet operators (including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and FPX gateway operators) for the purpose of processing deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party KYC service providers who verify the identity and age of Members on payung44's behalf. These providers are contractually bound to process data only for this purpose.
• Gaming content providers: Licensed game studios and platform providers whose games are accessible through payung44. Data shared is limited to technical session data required to deliver the game service; full financial or identity data is not shared with content providers.
• Regulatory and law enforcement authorities: payung44 will disclose Member data to regulatory bodies, gaming authorities, and law enforcement agencies where required by law, court order, or regulatory directive. payung44 will, where legally permitted, notify the affected Member of such disclosure.
• Fraud prevention and security services: Third-party fraud detection and cybersecurity providers who assist in identifying and preventing account abuse, money laundering, and other prohibited conduct.

4.2  Where payung44 shares data with third-party processors, it does so under contractual arrangements that require those parties to implement appropriate data protection measures consistent with this Policy.

5.Data Retention

5.1  payung44 retains Member personal data for as long as necessary to fulfil the purposes described in this Policy, and for such additional periods as are required by applicable regulatory obligations. Specific retention periods include:

• Active account data: Retained for the duration of the Member's account and for a period of five (5) years following account closure, in compliance with standard AML record-keeping requirements.
• Transaction records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• KYC documentation: Identity and age verification documents are retained for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Customer support records: Live chat transcripts and support correspondence are retained for three (3) years from the date of the interaction.
• Marketing data: Retained only for the period during which consent is active; deleted or anonymised within 90 days of consent withdrawal.

5.2  Upon expiry of the applicable retention period, payung44 will securely delete or anonymise your personal data in accordance with its internal data disposal procedures.

6.Data Security

6.1  payung44 implements industry-standard technical and organisational security measures to protect Member personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your browser or device and the payung44 platform
• Encryption of sensitive data at rest, including financial credentials and KYC documentation
• Access controls limiting staff access to personal data on a need-to-know basis
• Two-factor authentication (2FA) availability for all Member accounts
• Regular security audits and penetration testing of platform infrastructure
• Incident response procedures for data breach detection, containment, and notification

6.2  In the event of a personal data breach that poses a risk to the rights and freedoms of affected Members, payung44 will notify affected Members and relevant regulatory authorities within the timeframe required by applicable law.

7.Cookies & Tracking Technologies

7.1  payung44 uses cookies and similar technologies (including local storage, session tokens, and browser fingerprinting) on the payung44 platform. These technologies serve the following purposes:

• Essential cookies: Required for the platform to function. These include session authentication cookies, CSRF protection tokens, and load balancing identifiers. These cannot be disabled without impairing your ability to use payung44.
• Analytics cookies: Used to understand how Members interact with the payung44 platform — which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is aggregated and anonymised.
• Fraud prevention cookies: Device fingerprinting and risk assessment cookies used to detect multi-accounting, bot activity, and suspicious login patterns.
• Preference cookies: Cookies that remember your display preferences, language settings, and last-viewed game categories.

7.2  Most browsers allow you to control cookies through their settings. Disabling non-essential cookies will not prevent you from accessing the payung44 platform, but may affect certain personalisation features.

8.Your Data Rights

8.1  Subject to applicable data protection law and payung44's regulatory obligations, you have the following rights in relation to your personal data held by payung44:

• Right of access: You may request a copy of the personal data that payung44 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You can update most account information directly through your payung44 account settings.
• Right to erasure: You may request deletion of your personal data in certain circumstances. Note that payung44 is required by law to retain certain data (including transaction records and KYC documentation) for defined periods regardless of erasure requests.
• Right to restrict processing: You may request that payung44 restrict the processing of your data in certain circumstances, such as while a dispute is being resolved.
• Right to data portability: Where technically feasible and legally required, you may request a machine-readable copy of personal data you have provided to payung44.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

8.2  To exercise any of the above rights, contact the payung44 data protection team at [email protected]. Requests will be acknowledged within 5 business days and fulfilled within 30 days.

9.Minors & Age Verification

9.1  The payung44 platform is strictly restricted to individuals aged 21 years and above. payung44 does not knowingly collect or process personal data of individuals under the age of 21. Age verification is a mandatory component of the payung44 KYC process.

9.2  If payung44 discovers that personal data has been collected from an individual who is under 21 years of age, that data will be immediately deleted, the associated account will be terminated, and any deposits will be returned to the originating payment method after completing applicable verification steps.

9.3  If you believe that a minor may have registered on the payung44 platform, please contact payung44 support immediately so that the matter can be investigated and resolved promptly.

10.Changes to This Policy

10.1  payung44 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform operations. Where a change materially affects how we process your personal data, we will notify registered Members via the email address or mobile number on file at least 14 days before the change takes effect.

10.2  The date of the most recent revision is displayed at the top of this Policy. Your continued use of the payung44 platform following the effective date of any revision constitutes acceptance of the revised Policy.

11.Contact & Data Queries

For any queries, complaints, or requests relating to this Privacy Policy or the processing of your personal data, please contact the payung44 data protection team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 on the payung44 website
• Response Time: Data protection queries are addressed within 5 business days

If you are not satisfied with payung44's response to a data protection query, you may escalate the matter to the relevant data protection or gaming regulatory authority in your jurisdiction.