pgkuda Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how pgkuda ("we", "us", "our" or "the Platform") collects, uses, stores, discloses and protects the personal data of individuals ("you", "your" or "the User") who access or use the services available at pgkuda.lat. The Policy applies to all users, including visitors who browse without registering, persons who create an Account, and registered players who deposit, wager or otherwise engage with Platform Services.

pgkuda is committed to handling personal data responsibly, in accordance with applicable privacy legislation and the principles of transparency, purpose limitation and data minimisation. We collect only what is necessary for the purposes described in this Policy and retain it only for as long as those purposes require or applicable law demands.

By using the Platform, you acknowledge that you have read, understood and accepted the practices described in this Policy. If you do not accept this Policy, you should not register an Account or continue to use the Platform. This Policy should be read alongside the pgkuda Terms and Conditions, which govern the legal relationship between you and the Platform in respect of all other matters.

Definitions

In this Policy the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, either on its own or in combination with other available information.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure and deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, pgkuda acts as Data Controller in respect of User data.
• "KYC" means Know Your Customer procedures, including identity, age and payment ownership verification required to comply with applicable regulations and Platform rules.
• "Cookies" means small text files stored on a User's device by a web browser to remember preferences, maintain session state and support analytics.
• "Third-Party Processor" means an external organisation engaged by pgkuda to process Personal Data on our behalf under a binding data processing agreement.
• "Marketing Communications" means promotional messages, bonus notifications, newsletters and offers sent by pgkuda to Users who have consented to receive them.

Personal Data We Collect

pgkuda collects Personal Data through several channels depending on how you interact with the Platform. The categories of data we may process include:

pgkuda does not intentionally collect sensitive categories of Personal Data such as racial or ethnic origin, religious beliefs or medical history. If such data is incidentally included in a communication or document you submit, it will be deleted or redacted as soon as reasonably practicable.

Lawful Basis and Purposes of Processing

pgkuda processes Personal Data only where there is a recognised lawful basis for doing so. The primary bases we rely upon and the corresponding purposes are set out below:

• Contractual Necessity: We process Identity, Contact and Payment Data to create and manage your Account, process MYR deposits and withdrawals, administer bonuses and resolve account queries.
• Legal Obligation: KYC verification and transaction monitoring are required to comply with applicable anti-money laundering, age verification and regulatory obligations.
• Legitimate Interests: Usage Data is processed to maintain Platform security, detect and prevent fraud, improve service quality and conduct internal analytics. We balance these interests against your right to privacy and apply appropriate safeguards.
• Consent: Marketing Communications are sent only where you have given a clear, freely obtained and specific consent. You may withdraw this consent at any time without penalty to your account status or ability to use the Platform.

pgkuda will not use your Personal Data for any purpose that is incompatible with those stated above without providing separate notice and, where required, obtaining fresh consent.

Cookies and Tracking Technologies

pgkuda uses cookies and similar technologies to operate the Platform, maintain session continuity and gather aggregated usage statistics. The main categories of cookies used are:

• Strictly Necessary Cookies: These are required for the Platform to function correctly, including maintaining your logged-in state and remembering responsible gambling limits you have set. These cannot be disabled without impairing the Platform experience.
• Analytics Cookies: Used to understand how visitors navigate the Platform, which pages attract the most visits and where technical issues may occur. Data collected by analytics cookies is aggregated and does not personally identify individual users.
• Functionality Cookies: Remember preferences such as display settings and communication language to improve your experience on subsequent visits.
• Marketing Cookies: Placed only with your consent and used to deliver relevant promotional communications. These cookies may track your activity across sessions to assess campaign performance.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may limit the functionality available to you on the Platform. For detailed instructions, refer to the help documentation provided by your specific browser.

Data Sharing and Third-Party Processors

pgkuda does not sell, rent or trade your Personal Data to third-party marketing organisations. We may share your data with external parties only in the following circumstances and only to the extent necessary for the relevant purpose:

• Payment Processors: MYR payment service providers including those facilitating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, RHB and Hong Leong transfers require transaction and identity data to process deposits and withdrawals securely.
• Identity Verification Providers: Third-party KYC and age verification services process Identity and Verification Document data under binding data processing agreements to assist pgkuda in meeting its age and identity check obligations.
• Fraud Prevention and Security: Shared data may be used by fraud detection services to identify suspicious patterns. pgkuda retains responsibility for ensuring that any processor applies equivalent security standards.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order or formal regulatory request, pgkuda may be obliged to disclose Personal Data to competent authorities. Such disclosures will be limited to what is legally required.
• Technology and Infrastructure Partners: Platform hosting, database management and security monitoring services may involve processors who access Personal Data as part of their contracted service delivery. All such processors are bound by data processing agreements and are prohibited from using the data for their own purposes.

International Data Transfers

pgkuda may store or process Personal Data in countries outside Malaysia where our technology infrastructure, Third-Party Processors or operational teams are located. Where such transfers occur, pgkuda takes appropriate measures to ensure that your data receives a standard of protection equivalent to that applied within Malaysia.

These measures may include standard contractual clauses, data processing agreements with enforceable data protection obligations, and transfers only to jurisdictions or processors that maintain recognised security and privacy standards. If you have questions about the safeguards applied to international transfers of your data, please contact pgkuda support in writing.

Data Retention

pgkuda retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. In general, the following retention principles apply:

• Account and Identity Data is retained for the duration of your active Account and for a defined period following closure, as required by applicable anti-money laundering and financial record-keeping obligations.
• Transaction records, including MYR deposit and withdrawal histories, are retained for the period required by applicable financial regulations.
• KYC verification documents are retained for the period mandated by applicable law following account closure or the relevant transaction.
• Usage and analytics data may be aggregated and anonymised, in which case it may be retained indefinitely for statistical and service improvement purposes.
• Marketing preference records are retained for as long as your consent remains in force and for a reasonable period thereafter to demonstrate compliance.

When Personal Data is no longer required, pgkuda will securely delete or anonymise it in accordance with established data destruction procedures.

Your Rights as a Data Subject

Subject to applicable law and any overriding legal obligations on pgkuda, you hold the following rights in relation to your Personal Data:

• Right of Access: You may request a copy of the Personal Data that pgkuda holds about you, together with information about how it is being used.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure: In certain circumstances you may request that pgkuda delete your Personal Data. This right is subject to any overriding legal obligations that require us to retain data for a defined period.
• Right to Restrict Processing: You may request that the Processing of your Personal Data be restricted while accuracy or lawfulness is being assessed.
• Right to Object: Where Processing is based on legitimate interests, you may object, and pgkuda will consider whether those interests are overridden by your right to privacy.
• Right to Withdraw Consent: Where Processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of Processing carried out before the withdrawal.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that Personal Data provided directly to pgkuda be returned to you in a structured, commonly used and machine-readable format.

To exercise any of the above rights, please contact pgkuda support using the website email address displayed in the footer of this page. We will acknowledge your request promptly and aim to respond within the timeframe required by applicable law. Where identity verification is necessary before processing a rights request, we will advise you of the information required.

Data Security

pgkuda implements technical and organisational measures designed to protect Personal Data against accidental loss, unauthorised access, disclosure, alteration or destruction. These measures include but are not limited to:

• SSL/TLS encryption for data transmitted between your device and the Platform.
• Restricted access controls ensuring that Personal Data is accessible only to personnel with a legitimate operational need.
• Secure storage infrastructure with regular security reviews and vulnerability assessments.
• Staff training on data protection obligations and information security practices.
• Incident response procedures to identify, contain and report data security events in accordance with applicable obligations.

While pgkuda takes data security seriously, no system is entirely immune to risk. You are responsible for maintaining the security of your Account credentials, including your password and any one-time codes. You should notify pgkuda support immediately if you believe your Account has been compromised. Never share your password, PIN or security code with any person.

Children and Underage Users

pgkuda is strictly an adult platform intended for eligible players aged 21 and above. We do not knowingly collect Personal Data from persons under the age of 21. If we discover that an Account has been created by or on behalf of a person under 21, we will immediately close the Account, void all transactions and securely delete the associated Personal Data to the extent permitted by law.

We encourage parents and guardians to use parental control software to prevent underage individuals from accessing gambling websites. If you believe that a minor may have registered an Account on the Platform, please contact pgkuda support immediately with relevant details so that we can investigate and act without delay.

Changes to This Privacy Policy

pgkuda may update this Privacy Policy from time to time to reflect changes in data practices, applicable law or Platform operations. When we make material changes, we will update the revision date shown on this page and, where appropriate, provide notice to registered Account holders through their registered email address or through a prominent notice on the Platform.

Continued use of the Platform following the publication of a revised Privacy Policy constitutes acceptance of the updated practices. We recommend reviewing this page periodically, particularly before submitting any new Personal Data or using a new Platform feature for the first time.

Contact Us

If you have questions, concerns or requests relating to this Privacy Policy or the way pgkuda handles your Personal Data, please contact our support team. The website email address for privacy-related correspondence is displayed in the footer of this page. All privacy correspondence will be handled in English and acknowledged in a timely manner.

When submitting a rights request or a privacy concern, please provide sufficient information to allow us to identify your Account and understand the nature of your query. pgkuda will not charge a fee for handling genuine privacy requests, though we reserve the right to charge a reasonable administrative fee where requests are manifestly unfounded or excessive.

This Privacy Policy was last reviewed and updated in 2026.