Privacy Policy of pay168

This Privacy Policy ("Policy") issued by pay168 ("Company", "we", "us", "our"), the operator of the online gaming and sports betting platform athttps://pay168.cam and all associated subdomains, mobile applications and related digital services (collectively, the "Platform").

pay168 is committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered players, visitors and prospective users. This Policy sets out in plain language how we collect, process, store share and protect personal data, and what rights you have in relation to that data.

This Policy should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and pay168. By registering an account or accessing the Platform, you confirm that you have read and understood this Privacy Policy and consent to the data processing activities described herein.

We do not engage in the sale of personal data to third parties for commercial marketing purposes. Data collected by pay168 is used exclusively for the purposes outlined in this Policy.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, identification number, location data, online identifiers, or data specific to the physical, economic or social identity of that person.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means pay168, which determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of pay168 under contractual obligation and instruction.
• "Data Subject" means you — the individual whose personal data is being processed.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data for one or more specified purposes.
• "Cookies" means small text files placed on your device by the Platform or third-party services for the purpose of session management, analytics or personalisation.
• "KYC" means Know Your Customer — the identity and age verification process required under our licensing obligations and anti-money laundering compliance framework.

pay168 collects personal data from you directly and automatically through your use of the Platform. The categories of data we collect are described below.

3.1 Data You Provide Directly

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for age verification — we verify that all users are aged 21 or above).
• Residential address, including city and postcode.
• Email address and telephone number.
• Username and password (passwords are stored in hashed, non-reversible form).
• Payment method details — bank account numbers, e-wallet identifiers, cryptocurrency wallet addresses — as required to process deposits and withdrawals.
• KYC documentation including copies of identification cards (MyKad or passport) and proof of address.
• Communications you send to our support team via live chat, email or any other channel.

3.2 Data Collected Automatically

• IP address and approximate geographic location derived from network data.
• Device type, operating system, browser type and version.
• Session timestamps, login and logout records.
• Platform navigation data — pages visited, features used, time on page.
• Game activity records — bets placed, games played, outcomes session durations.
• Transaction records — deposits, withdrawals, bonus credits and wagering activity.
• Cookie identifiers and similar tracking technologies as described in Section 9.

3.3 Data Categories at Glance

pay168 processes your personal data one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between you and pay168 — including account creation, game delivery, payment processing, withdrawal execution and customer support.
• Legal Obligation: Processing required to comply with our licensing conditions, anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any applicable data protection laws.
• Legitimate Interests: Processing undertaken for purposes that are in pay168's legitimate business interests and that do not override your fundamental rights — including fraud prevention, platform security, responsible gambling monitoring, and business analytics.
• Consent: Where you have provided explicit consent for specific processing activities — such as the receipt of promotional communications — and which you may withdraw at any time without affecting the lawfulness of prior processing.

pay168 uses the personal data we collect for the following specific and documented purposes:

5.1 Account Management and Service Delivery

To create and maintain your account, verify your identity and age, process deposits and withdrawals, deliver game and betting services, and communicate account-related information to you.

5.2 Regulatory Compliance and AML

To satisfy our obligations under the licensing framework under which pay168 operates, including identity verification, transaction monitoring for suspicious activity, reporting obligations to our licensing authority, and compliance with applicable anti-money laundering and counter-terrorism financing requirements.

5.3 Fraud Prevention and Platform Security

To detect, investigate and prevent fraudulent transactions, account takeover attempts, bonus abuse, collusion in multi-player games, and other conduct prohibited under our Terms & Conditions. Security monitoring operates continuously across all accounts and transactions on the Platform.

5.4 Responsible Gambling

To monitor gameplay patterns for indicators of problem gambling behaviour, enforce deposit limits and loss limits set by the player, implement self-exclusion requests, and deliver targeted responsible gambling communications where appropriate. This monitoring is undertaken in the interest of player welfare and is not used for commercial profiling.

5.5 Customer Support

To respond to your queries, resolve complaints, investigate disputes and maintain records of our support interactions. Our support team serves players in English, Bahasa Melayu and Mandarin, reflecting Malaysia's multicultural user base.

5.6 Platform Improvement and Analytics

To understand how players navigate the Platform, which features are used most frequently, and where the user experience can be improved. Analytics data is aggregated and anonymised wherever possible.

5.7 Marketing Communications (Consent-Based Only)

Where you have provided explicit consent, to send you promotional offers, bonus notifications, VIP tier updates and Platform news by email or in-Platform notification. You may withdraw consent for marketing communications at any time without affecting your account status.

pay168 does not sell, rent or trade your personal data to third parties for their independent commercial purposes. We may share your data in the following strictly limited circumstances:

• Payment Processors: We share necessary financial data with payment service providers — including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong and cryptocurrency network operators — solely to execute your requested transactions.
• Identity Verification Providers: KYC documentation is shared with licensed identity verification service providers as required by our licensing obligations.
• Game Content Providers: Certain game providers may receive session data (player ID, stake amounts, game outcomes) necessary for game delivery and auditing purposes. These providers operate under data processing agreements with pay168.
• IT and Infrastructure Providers: Cloud hosting, content delivery and cybersecurity providers may process your data as data processors acting on our instructions, subject to contractual data protection obligations.
• Licensing Authority: We are required to share certain player and transaction data with our licensing authority upon request, as part of our regulatory compliance obligations.
• Law Enforcement: We will disclose personal data to law enforcement or regulatory authorities where required to do so by law, court order, or where we reasonably believe disclosure is necessary to prevent serious harm or criminal activity.

pay168 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our applicable legal and licensing obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship plus a minimum of five (5) years following account closure, as required by anti-money laundering and licensing regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification, or longer where required by our licensing authority.
• Customer support communications: Retained for three (3) years from the date of the last interaction, to enable dispute resolution and quality assurance.
• Technical and usage logs: Retained for twelve (12) months in active systems, with anonymised aggregate data retained indefinitely for analytics purposes.
• Marketing consent records: Retained for the duration of your consent plus two (2) years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to system architecture, data will be isolated from further processing until deletion can be completed.

pay168 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Transport Encryption: All data transmitted between your device and the pay168 Platform is encrypted using TLS 1.2 or higher (256-bit SSL), ensuring that data cannot be intercepted in transit.
• Data-at-Rest Encryption: Sensitive personal data stored in our databases is encrypted using AES-256, an industry-standard symmetric encryption algorithm.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All internal access is logged, monitored and subject to regular audit.
• Password Security: User passwords are never stored in plaintext. We use industry-standard cryptographic hashing with salting to protect all password data.
• Intrusion Detection: Continuous network and application monitoring systems are in place to detect and respond to potential security incidents in real time.
• Penetration Testing: The Platform undergoes periodic security assessments, including third-party penetration testing, to identify and remediate vulnerabilities.
• Data Breach Response: pay168 maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected users and our licensing authority within the timeframes required by applicable law.

The pay168 Platform uses cookies and similar technologies to provide a functional, secure and personalised user experience. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They manage your authenticated session, store your currency and language preferences, and maintain the integrity of your account during your visit. These cookies cannot be disabled without impairing your ability to use the Platform.

9.2 Performance and Analytics Cookies

These cookies collect anonymised or pseudonymised information about how visitors use the Platform — including which pages are visited most frequently, where users spend the most time, and which features generate errors. This data is used exclusively to improve Platform performance and user experience.

9.3 Functionality Cookies

These cookies allow the Platform to remember choices you have made — such as your preferred language, last-visited game category, and responsible gambling settings — to provide a more personalised experience on return visits.

9.4 Security Cookies

Used for fraud prevention and security purposes, including detecting suspicious login patterns, CSRF protection, and verifying that requests to the Platform originate from your authenticated session.

Most web browsers allow you to control cookie settings, including blocking or deleting cookies. Note that disabling cookies may affect the functionality of the Platform, particularly features that require an active session. Instructions for managing cookies are available in your browser's help documentation.

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by pay168. To exercise any of these rights, please contact our support team using the details in Section 15.

We will respond to all valid data subject requests within thirty (30) calendar days of receipt. Where requests are complex or numerous, we may extend this period by a further sixty (60) days with prior notification. We may require proof of identity before processing any request to protect against unauthorised access to your data.

The pay168 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory component of our account registration and KYC process.

Where we discover that personal data has been provided by or on behalf of a person under the age of 21, we will immediately suspend the relevant account, securely delete all associated personal data, and forfeit any balance in accordance with our Terms & Conditions. Any suspected cases of underage access will be reported to our licensing authority.

As an internationally licensed platform serving players across multiple markets including Malaysia, pay168 may transfer your personal data to servers, processors and service providers located outside of Malaysia. Such transfers may occur to countries that have data protection frameworks different from those applicable in Malaysia.

Where personal data is transferred internationally, pay168 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by relevant data protection authorities.
• Transfers to countries that have been assessed as providing an adequate level of data protection.
• Binding corporate rules governing intra-group transfers.
• Other legally recognised transfer mechanisms under applicable data protection law.

You may request details of the specific safeguards in place for any particular international transfer by contacting our Data Protection contact using the details in Section 15.

The pay168 Platform integrates third-party services necessary to deliver our gaming and betting offerings. These include game content providers, live dealer studios, payment processors and technical infrastructure providers. Each third-party service provider operates under a data processing agreement that requires them to handle your data in accordance with applicable data protection standards.

pay168 does not control and is not responsible for the privacy practices of any external websites that may be linked to from our Platform, should such links appear. We recommend that you review the privacy policies of any third-party websites you visit independently.

The Platform does not display third-party advertising from unaffiliated brands. No advertising networks or data management platforms receive player behavioural data from pay168 for advertising targeting purposes.

pay168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The effective date of the current version is displayed at the top of this document.

Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — we will notify you by email to your registered address at least fourteen (14) days before the amended Policy takes effect. For minor or administrative changes, notification will be provided by updating the effective date on this page.

Your continued use of the Platform after the effective date of any amended Policy constitutes your acknowledgement of the updated terms. If you do not accept the amended Policy, please cease using the Platform and contact our support team to close your account in accordance with the account closure procedure in our Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or need to report a privacy concern, please contact our Data Protection team through any of the following channels:

• Live Chat: Available24 hours a day, 7 days a week via the Platform. This is the fastest route for all privacy enquiries. Average response time is 3–5 minutes.
• Email: [email protected] — please include "Privacy Request" in the subject line for faster routing to our Data Protection team. (This email address is for correspondence only and is not a clickable link.)
• Languages Supported: English, Bahasa Melayu, Mandarin.

We are committed to resolving all privacy concerns promptly and professionally. If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority under applicable data protection law.