Privacy Policy
At palu88, we take the privacy and security of your personal data seriously. This Privacy Policy explains what information we collect when you use our platform, why we collect it, how we use and protect it, and the rights you hold over your own data. We encourage you to read this document in full before creating an account or using any of our services.
1 Introduction
This Privacy Policy ("Policy") is issued by palu88 ("we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data pertaining to users ("Member", "you", "your") of the palu88 platform accessible at palu88.click and all associated mobile interfaces, features, and services.
palu88 operates as an online gaming and sports betting platform serving the Malaysian market, with players located across Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and throughout Malaysia. As a platform handling financial transactions, identity verification, and gaming records, we recognise the sensitivity of the personal data entrusted to us and are committed to handling it with the highest standards of care, transparency, and security.
By registering an account on palu88, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read together with our Terms & Conditions, which govern the overall relationship between palu88 and its Members.
ℹ️ Age Requirement: palu88 does not knowingly collect personal data from individuals under the age of 21. All users must be aged 21 or above to register and use the platform. See Section 12 for our Children's Privacy provisions.
2 Definitions
Throughout this Policy, the following terms carry the meanings assigned to them below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | palu88, which determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | Any third party that processes personal data on behalf of palu88, such as payment service providers, KYC verification vendors, or cloud infrastructure providers. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose. |
| "Sensitive Data" | Categories of personal data that warrant heightened protection, including identity document details, financial account information, and biometric data used for identity verification. |
| "Cookies" | Small text files placed on a user's device by a website to store session information, preferences, and analytical data. |
3 Data We Collect
palu88 collects personal data across several categories, depending on the nature of your interaction with the Platform. The categories of personal data we collect include:
3.1 Identity & Contact Data
- Full legal name as it appears on your government-issued identity document.
- Date of birth (to verify the 21+ age requirement).
- Malaysian identity card number (NRIC) or passport number for non-Malaysian residents.
- Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Shah Alam).
- Email address and mobile phone number.
3.2 Financial Data
- Bank account details, e-wallet identifiers (e.g., Touch 'n Go eWallet, Boost, GrabPay), or card information provided for deposit and withdrawal processing.
- Transaction history including deposit amounts, withdrawal amounts, and timestamps.
- Source of funds documentation submitted in compliance with anti-money laundering obligations.
3.3 Account & Gaming Data
- Account username, login credentials (stored in hashed form), and security settings.
- Complete gaming history including games played, wagers placed, game outcomes, and balance movements.
- Bonus claims, wagering activity related to promotional offers, and VIP tier status.
- Responsible gambling settings including deposit limits, loss limits, and any self-exclusion requests.
3.4 Technical & Usage Data
- IP address and approximate geolocation data.
- Device type, operating system version, browser type and version.
- Session duration, pages visited, features used, and navigation patterns on the Platform.
- Error logs and crash reports generated during your use of the Platform.
3.5 Communications Data
- Content of communications exchanged with our customer support team via live chat or email.
- Marketing communication preferences and opt-in or opt-out records.
- Feedback, reviews, or survey responses voluntarily submitted.
4 Collection Methods
palu88 collects personal data through the following channels and mechanisms:
- Account Registration: Information you provide directly when completing the registration form on palu88.
- KYC Verification: Documents and information submitted in response to identity verification requests.
- Payment Processing: Data transmitted through your chosen payment method (DuitNow, FPX, Maybank2u, Touch 'n Go eWallet, CIMB Clicks, etc.) during deposit or withdrawal transactions.
- Platform Interaction: Data generated automatically as you navigate, play games, and engage with features on the Platform.
- Support Channels: Data you provide when contacting our support team via live chat.
- Cookies and Tracking Technologies: Data collected through session and analytical cookies as described in Section 10 of this Policy.
- Third-Party Verification Services: Data returned by identity and address verification providers used to fulfil our KYC and compliance obligations.
5 Data Processing
palu88 processes your personal data for the following specific purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and securing your palu88 account, including authentication, password management, and two-factor authentication. |
| Identity & Age Verification | Confirming that you meet the 21+ age requirement and verifying your identity as required under our KYC and compliance obligations. |
| Payment Processing | Facilitating deposits and withdrawals via your chosen Malaysian payment method, including Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, and others. |
| Gaming Services | Delivering the games, sports betting markets, live dealer tables, and other entertainment features that constitute the palu88 service. |
| Regulatory Compliance | Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) obligations under applicable regulations. |
| Responsible Gambling | Operating deposit limit, loss limit, self-exclusion, and responsible gaming monitoring tools to protect player welfare. |
| Customer Support | Responding to enquiries, complaints, and account-related issues submitted through our live chat and email support channels. |
| Platform Improvement | Analysing aggregated usage data to improve the performance, features, and user experience of the palu88 platform. |
| Marketing Communications | Sending promotional offers, bonus announcements, and relevant updates to Members who have opted in to receive marketing communications from palu88. |
| Fraud Prevention | Detecting, investigating, and preventing fraudulent activity, account abuse, and other prohibited conduct on the Platform. |
6 Legal Basis for Processing
palu88 processes personal data on the following legal bases, depending on the purpose of the processing:
- Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions entered into with you as a Member, including account management, payment processing, and service delivery.
- Consent: Processing for purposes where you have given explicit, informed consent — principally marketing communications. Consent may be withdrawn at any time without detriment to your continued use of the Platform.
- Legal Obligation: Processing necessary to comply with applicable legal requirements, including AML/KYC obligations, record-keeping mandates, and cooperation with regulatory and law enforcement authorities.
- Legitimate Interests: Processing undertaken in pursuit of palu88's legitimate business interests, including fraud prevention, platform security, and product improvement — where such interests do not override your fundamental rights.
7 Data Sharing
palu88 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited and necessary circumstances:
- Payment Service Providers: We share necessary financial data with payment processors facilitating your transactions, including networks and platforms behind Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Visa, Mastercard, and cryptocurrency payment gateways.
- KYC & Identity Verification Vendors: We share identity document data with third-party verification specialists used to fulfil our age verification and KYC obligations.
- Game Content Providers: Aggregated, non-identifiable gaming session data may be shared with licensed game studios to facilitate RNG certification, game auditing, and jackpot validation processes.
- Cloud & Infrastructure Providers: Personal data is stored on secure, encrypted cloud infrastructure. Our hosting and infrastructure partners process data solely as data processors under contractual terms that bind them to our data protection standards.
- Regulatory & Law Enforcement Bodies: We may disclose personal data to relevant authorities where required by applicable law, court order, or regulatory direction — including disclosures related to AML investigations.
- Professional Advisors: Personal data may be shared with legal, accounting, or auditing advisors under strict confidentiality obligations where necessary to protect palu88's legal interests.
Data Processor Obligations: All third parties that process personal data on behalf of palu88 are required to maintain appropriate technical and organisational measures to protect that data, and are prohibited from using it for any purpose other than the specific service they provide to palu88.
8 Data Retention
palu88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to overriding legal, regulatory, or compliance requirements that may mandate longer retention periods.
- Active Account Data: Retained for the full duration of your account's active status, plus a minimum period of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations.
- Transaction Records: Financial transaction records are retained for a minimum of seven (7) years from the date of the transaction, in accordance with regulatory requirements applicable to financial services platforms.
- KYC Documentation: Identity verification documents are retained for a minimum of five (5) years after the end of the business relationship, and for up to seven (7) years where required by applicable AML regulations.
- Support Communications: Live chat and email support transcripts are retained for up to three (3) years from the date of the interaction.
- Marketing Data: Opt-in marketing preferences and associated contact data are retained until you withdraw consent or for a maximum of three (3) years of inactivity, whichever is earlier.
- Technical Logs: Server logs, session data, and error reports are retained for up to twelve (12) months for security and debugging purposes.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in a manner that prevents reconstruction of any identifiable information.
9 Data Security
palu88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our primary security measures include:
- 256-Bit SSL/TLS Encryption: All data in transit between your device and palu88's servers is encrypted using industry-standard 256-bit SSL/TLS protocols, ensuring that your personal and financial data cannot be intercepted.
- Data Encryption at Rest: Sensitive personal data stored in our databases is encrypted using AES-256 encryption at the database and file-system level.
- Two-Factor Authentication (2FA): All Member accounts support optional 2FA, and we strongly recommend its activation. Administrative access to palu88's internal systems requires mandatory 2FA.
- Access Controls: Personal data is accessible only to palu88 personnel with a genuine operational need. Role-based access controls and audit logging ensure that all internal data access is tracked and authorised.
- Regular Security Audits: palu88 conducts periodic security assessments, vulnerability scans, and penetration testing to identify and remediate potential weaknesses in our systems.
- Incident Response: We maintain a documented data breach response plan. In the event of a confirmed breach that poses a risk to your rights or freedoms, we will notify affected Members within a reasonable period consistent with applicable regulatory guidance.
Your Role in Security: While palu88 employs robust technical safeguards, the security of your account also depends on you. Please use a strong, unique password, enable 2FA, never share your login credentials, and contact support immediately if you suspect your account has been compromised.
10 Cookies & Tracking Technologies
palu88 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session integrity, and analyse usage patterns to improve our services. By using the Platform, you consent to the use of cookies as described in this section.
| Cookie Type | Purpose | Retention |
|---|---|---|
| Required for login session management, security tokens, and core Platform functionality. Cannot be disabled without breaking the Platform. | Session / up to 30 days | |
| Aggregated, anonymised data on page visits, feature usage, and session duration — used to improve Platform performance and user experience. | Up to 12 months | |
| Remembers your preferences such as language settings, game lobby layout, and responsible gambling tool configurations. | Up to 6 months |
You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in and using core Platform features. Disabling analytics or functional cookies will not affect your ability to play games or make transactions, but may result in a less personalised experience.
11 User Rights
Subject to applicable law and the conditions described below, palu88 Members hold the following rights with respect to their personal data:
You have the right to request a copy of the personal data palu88 holds about you and to be informed of how it is being used. Access requests are processed within 30 days of receipt.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update most account information directly through your account settings.
You may request deletion of your personal data in certain circumstances. Note that legal retention obligations — particularly AML and KYC record-keeping — may prevent full erasure for defined periods after account closure.
You may request that palu88 restrict the processing of your personal data in specific circumstances, such as while a correction or objection request is under review.
Where processing is based on your consent or a contract, you may request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
You may object to processing of your personal data for direct marketing purposes at any time by contacting our support team or using the unsubscribe mechanism in any marketing communication.
To exercise any of the above rights, please contact palu88 via our 24/7 live chat or by email at [email protected]. We will verify your identity before processing any data subject request. Requests are handled within thirty (30) calendar days of receipt unless extended by applicable law.
12 Children's Privacy
palu88 is strictly an adult platform. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. All registration applicants are required to confirm their date of birth and, where requested, to provide proof of age documentation.
If palu88 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any balance in a minor's account will be returned to the source payment method after verification.
Parent or Guardian Notice: If you believe a minor under your care has registered an account on palu88, please contact our support team immediately at [email protected]. We will investigate and close the account promptly. We encourage parents and guardians to use parental control software to prevent minors from accessing online gambling platforms.
13 International Data Transfers
palu88 operates with infrastructure and service providers located in multiple jurisdictions. As a result, personal data collected from Malaysian Members may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, palu88 takes appropriate steps to ensure that the receiving party maintains data protection standards that are at least equivalent to those described in this Policy.
Safeguards employed for international data transfers include contractual clauses binding recipient parties to defined data protection obligations, and the selection of vendors that maintain internationally recognised security certifications.
By using palu88 and providing your personal data, you acknowledge and consent to the potential transfer of your data to servers or processors located outside Malaysia, subject to the protections described in this section.
14 Policy Amendments
palu88 reserves the right to update, revise, or replace this Privacy Policy at any time. Where a material change is made to the way we collect or process your personal data, we will provide advance notice via the Platform or by email to your registered address before the change takes effect.
The effective date shown at the top of this Policy indicates the version currently in force. Continued use of the Platform following notification of a material change constitutes your acceptance of the updated Policy. If you do not agree to a material change, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.
Recommendation: We encourage you to revisit this Privacy Policy periodically. Staying informed about how your personal data is handled is an important part of protecting your privacy online.
15 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way palu88 processes your personal data, please reach out through the following channels:
- 24/7 Live Chat: Available directly on the palu88 platform at all times. Our support agents can assist with data access requests, marketing opt-outs, and general privacy enquiries.
- Email: [email protected] — for formal data subject requests, complaints, or detailed privacy enquiries. Please include "Privacy Request" in your subject line to ensure prompt routing.
palu88 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days. Where a request is complex or requires extended investigation, we will notify you of the expected timeline. You also have the right to raise a complaint with a relevant supervisory authority if you believe your personal data has been processed unlawfully.
Our Privacy Commitments
Six concrete ways palu88 protects your personal data and upholds your privacy rights as a Malaysian player.
Every data exchange between your device and palu88's servers — including login credentials, financial data, and personal details — is protected by industry-standard 256-bit SSL/TLS encryption. Your data cannot be intercepted in transit.
palu88 does not sell, rent, or trade your personal data to any third party for commercial gain. Your data is shared only with operational partners who need it to provide a specific, defined service — and always under binding contractual protections.
You hold meaningful rights over your personal data — access, correction, erasure, portability, and objection. palu88 processes all data subject requests within 30 calendar days via our live chat or email support team.
We do not hold your data indefinitely. Retention periods are defined by purpose — from 12-month technical logs to 7-year financial records required by AML regulations. After the applicable period, data is securely deleted or anonymised.
Marketing communications from palu88 are opt-in only. You can withdraw consent and stop receiving promotional emails or messages at any time — through account settings or by contacting our support team — with no impact on your account or gameplay.
Our systems undergo periodic security assessments including vulnerability scanning and penetration testing. We maintain an active incident response programme so that if a breach occurs, affected Members are notified promptly and remediation is swift.
Your Privacy is Protected. Your Experience Awaits.
Now that you understand how palu88 handles your personal data, join over 850,000 Malaysian players enjoying a safe, fair, and secure gaming experience. For players aged 21 and above only.