PGKing Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how PGKing ("PGKing", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("Users", "you", "your") who access and use the PGKing website, mobile-optimised platform, games, sports betting services, live casino products, and all related services (collectively, the "Platform").

PGKing is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles, including those reflected in the European Union General Data Protection Regulation (GDPR) and equivalent frameworks. While Malaysia's Personal Data Protection Act 2010 (PDPA) primarily governs commercial data processing activities conducted within Malaysia, PGKing applies robust data protection standards as a matter of operating principle across all user interactions.

By creating a PGKing account or accessing any part of the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how we process your personal data as described in this Policy, you should not create an account or use the Platform.

Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, directly or indirectly, including by reference to an identifier such as a name, identification number, location data, or online identifier.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, PGKing.
• "Data Processor" means any third party that processes Personal Data on behalf of PGKing under a data processing agreement.
• "Sensitive Personal Data" means Personal Data that warrants heightened protection, including identity document numbers and payment instrument details.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their Personal Data for a stated purpose.
• "Data Subject" means the individual to whom the Personal Data relates — in this context, a registered PGKing User.

Data Controller

PGKing acts as the Data Controller in respect of the Personal Data collected through the Platform. As Data Controller, PGKing is responsible for determining the purposes for which, and the manner in which, Personal Data is processed.

PGKing is operated under an internationally recognised gaming licence. Questions relating to data controller identity, data processing purposes, or the exercise of data subject rights should be directed to [email protected].

Data We Collect

PGKing collects Personal Data across several categories, depending on the nature of your interaction with the Platform.

When you create a PGKing account, we collect: full legal name, date of birth, residential address (including city — for example, Kuala Lumpur, Petaling Jaya, or Penang), email address, and mobile phone number. This data is required to create and maintain your account.

To comply with our licensing obligations and applicable anti-money laundering requirements, we collect copies of government-issued identity documents (Malaysian MyKad, driving licence, or passport), proof of address documents, and selfie verification photographs. This data is processed as part of our KYC procedure and is retained for the minimum period required by applicable regulations.

We collect records of all deposits, withdrawals, and betting transactions conducted through your account, including payment method identifiers (e.g., masked bank account references, e-wallet account IDs for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or cryptocurrency wallet addresses). We do not store full card numbers or bank login credentials.

We automatically collect certain technical data when you access the Platform: IP address, device type and operating system, browser type and version, session timestamps, pages visited, and clickstream data. This data helps us maintain platform security, detect fraud, and improve the user experience.

When you contact PGKing support via live chat, email, or any other channel, we retain records of those communications for quality assurance, dispute resolution, and fraud prevention purposes.

Any additional information you voluntarily provide — such as preferred language, feedback responses, or survey participation — is collected and processed in accordance with this Policy.

Lawful Basis for Processing

PGKing processes Personal Data only where a lawful basis exists. The applicable bases are as follows:

How We Use Your Data

PGKing uses the Personal Data we collect for the following purposes:

• To create, verify, and maintain your PGKing account and to authenticate your identity upon login.
• To process deposits, withdrawals, and betting transactions in Malaysian Ringgit (MYR) via your selected payment method.
• To conduct identity verification (KYC) in compliance with our international licensing obligations.
• To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• To comply with applicable anti-money laundering (AML) obligations, including monitoring of transaction patterns and reporting to relevant authorities where legally required.
• To provide customer support via live chat, email, and other channels in English, Bahasa Melayu, and Mandarin.
• To send transactional communications, including account confirmations, deposit receipts, withdrawal confirmations, and security alerts.
• To send promotional communications and personalised bonus offers where you have given explicit consent to receive such communications.
• To operate and improve our responsible gambling programme, including the monitoring of deposit patterns and betting behaviour for the purpose of identifying players who may benefit from responsible gambling interventions.
• To improve the Platform's functionality, performance, and user experience through aggregated analytics data.
• To maintain records as required by our licensing obligations and applicable law.

Data Sharing & Disclosure

PGKing does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share Personal Data only in the following limited circumstances:

• Payment Processors: We share necessary financial data with approved payment service providers — including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking partners such as Maybank, CIMB, Public Bank, and Hong Leong Bank — solely to facilitate deposit and withdrawal transactions. Each processor is bound by a data processing agreement and applicable financial privacy regulations.
• KYC & Identity Verification Partners: Identity documents and verification selfies are shared with third-party KYC service providers for the purpose of completing the identity verification process. These providers are contractually bound to process data only for this specified purpose.
• Fraud Prevention & Security Services: Anonymised or pseudonymised device and behavioural data may be shared with fraud detection service providers to protect the integrity of the Platform and all user accounts.
• Game Content Providers: Where you play games provided by third-party studios integrated into PGKing, limited session and gameplay data may be transmitted to those providers for the purpose of game operation and RNG auditing. Such providers are prohibited from using this data for independent profiling purposes.
• Legal & Regulatory Authorities: PGKing will disclose Personal Data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or regulatory directive. We will endeavour to notify Users of any such disclosure where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving PGKing, Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

Data Retention

PGKing retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or our licensing obligations.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

International Data Transfers

As PGKing operates under an international gaming licence and utilises third-party service providers located in various jurisdictions, your Personal Data may be transferred to and processed in countries outside of Malaysia. Such countries may not have data protection laws equivalent to those applicable in Malaysia.

Where Personal Data is transferred internationally, PGKing ensures that appropriate safeguards are in place, including contractual obligations on the recipient that provide at least an equivalent level of data protection to that applicable under this Policy. These safeguards may include standard contractual clauses, binding corporate rules, or other recognised transfer mechanisms.

Cookies & Tracking Technologies

PGKing uses cookies and similar tracking technologies on the Platform. A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies allow the Platform to recognise your device and maintain session state across pages.

• Essential Cookies: These are strictly necessary for the operation of the Platform. They enable core functions such as user authentication, session management, and security verification. The Platform cannot function correctly without these cookies. They cannot be disabled without impacting your ability to use PGKing.
• Analytical / Performance Cookies: These cookies allow us to measure how Users interact with the Platform — including which pages are visited most frequently and where errors occur — so that we can improve performance and user experience. Data collected is aggregated and does not identify individual Users.
• Functional Cookies: These cookies remember preferences you have set, such as language selection or notification settings, to provide a more personalised experience on return visits.
• Marketing / Targeting Cookies: Only placed where you have consented. These cookies may be used to present you with relevant promotional offers. You may withdraw consent at any time via your browser settings.

You may manage or disable non-essential cookies at any time through your browser's settings. Please note that disabling certain cookies may affect the functionality of the Platform.

Your Rights as a Data Subject

Subject to applicable law and certain limited exceptions, you have the following rights in relation to your Personal Data held by PGKing:

• Right of Access: You have the right to request a copy of the Personal Data PGKing holds about you, together with information about how it is processed. We will respond to access requests within 30 days.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that erasure requests may be refused where retention is required by applicable law or regulatory obligation.
• Right to Restriction of Processing: You may request that PGKing restrict processing of your Personal Data in certain circumstances, for example while a correction request is under review.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive your Personal Data in a structured, machine-readable format and to have it transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, we will cease processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Subject Request". We will acknowledge your request within 5 business days and aim to respond substantively within 30 days.

Protection of Minors

PGKing strictly prohibits the use of its Platform by individuals under the age of 21. We do not knowingly collect, store, or process Personal Data belonging to minors. Account registration requires confirmation of age, and KYC verification procedures are in place to detect and prevent underage account creation.

If PGKing becomes aware that Personal Data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, all associated Personal Data will be deleted to the extent permitted by applicable law, and all funds associated with the account will be handled in accordance with our Terms & Conditions.

If you believe that a minor has created a PGKing account, please notify us immediately at [email protected].

Data Security

PGKing implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and PGKing's servers is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive Personal Data, including identity documents and financial data, is stored in encrypted form on restricted-access servers.
• Access Controls: Access to Personal Data is restricted to PGKing personnel and authorised third parties on a strict need-to-know basis. All access is logged and audited.
• Intrusion Detection: Continuous monitoring for suspicious access patterns, unauthorised login attempts, and anomalous account activity is maintained at the platform and network level.
• Security Audits: PGKing conducts periodic internal security reviews and engages third-party security professionals to assess and strengthen its data protection infrastructure.

Notwithstanding the above, no method of data transmission or storage is entirely secure. PGKing cannot guarantee absolute security but commits to promptly notifying affected Users of any data breach that presents a material risk to their rights and freedoms, in accordance with applicable notification obligations.

Third-Party Links & Integrations

The PGKing Platform may include integrations with third-party game content providers and payment service providers. PGKing does not control the privacy practices of these third parties and is not responsible for the content or privacy policies of any external service. Users are encouraged to review the privacy policies of any third-party service they interact with directly.

PGKing does not embed external social media widgets, third-party advertising networks, or affiliate tracking pixels that would transmit your Personal Data to unrelated third parties without your knowledge.

Policy Amendments

PGKing reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where a material change is made, PGKing will notify registered Users via the email address associated with their account or via a prominent notice on the Platform prior to the change taking effect.

The date of the most recent revision is displayed at the top of this Policy. We encourage all Users to review this Policy periodically. Continued use of the Platform following publication of an updated Policy constitutes acceptance of the updated terms.

Contact & Data Requests

For any queries, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data, please contact the PGKing privacy team using the following contact details. All requests will be acknowledged within 5 business days.

This Privacy Policy was last reviewed and updated on 1 January 2026. PGKing is committed to maintaining current, accurate, and accessible privacy documentation for all users.