1. Introduction and Scope of This Policy
Welcome to the poma88 Privacy Policy. This document is published as part of poma88's commitment to transparency in managing the personal data of our platform users. This Policy applies to all users who access poma88.net, our official mobile app, and any services provided by poma88.
By registering as a member or simply browsing our platform, you agree that poma88 may process your personal data in the manner described in this document. We encourage you to read this policy carefully and contact us if any part is unclear.
2. Types of Personal Data We Collect
Poma88 collects various categories of information to enable us to provide a safe, efficient, and reliable service to all members. The data collected includes:
2.1 Registration Information
- Full name as shown on official identification documents
- National ID number (MyKad) or passport number
- Email address and mobile phone number
- Date of birth for age verification
- Chosen username and password
2.2 Financial Information
- Bank account details for deposit and withdrawal purposes
- E-wallet number (Touch 'n Go eWallet, Boost, GrabPay, etc.)
- Deposit and withdrawal transaction history
- Bonus and promotion claim records
2.3 Platform Usage Data
- IP address and device information used
- Login session data including time and location
- Game history and wagering activity
- Game preferences and account settings
- Communication logs with the customer support team
2.4 KYC Verification Data
- Uploaded copies of identification documents
- Selfie photo for biometric verification
- Proof of residential address such as a utility bill or bank statement
- Source of income information if required under compliance obligations
KYC Note: The KYC (Know Your Customer) process is a mandatory requirement in the online gambling industry to prevent fraud and money laundering. All submitted documents are stored with full encryption and will not be shared without valid consent or legal requirement.
3. How We Use Your Data
The personal data you provide is used solely for purposes related to the delivery of poma88 services and compliance with applicable laws. The following are the primary purposes for which your data is used:
| Purpose of Use | Legal Basis | Retention Period |
|---|---|---|
| Account management and identity verification | Contract performance | For the duration of the active account + 5 years |
| Processing deposits and withdrawals | Contract performance | 7 years (tax requirements) |
| Fraud prevention and security | Legitimate interests | 5 years after last activity |
| Age verification and KYC compliance | Legal obligations | For the duration of the active account + 5 years |
| Customer support communications | Contract performance | 3 years |
| Relevant marketing and promotions | Your consent | Until you withdraw your consent |
| Platform analytics and product improvement | Legitimate interests | 2 years (anonymised data) |
4. Data Sharing with Third Parties
Poma88 does not sell or rent your personal data to any party. However, in certain situations, we may need to share your information with trusted third parties for platform operational purposes:
- Payment providers: Local Malaysian banks, FPX, TNG eWallet, Boost, GrabPay, and other approved payment processors to securely process your financial transactions.
- Game providers: Game development companies that provide slot content, Live Casino, and Fish Shooting Games are required to receive minimum session data for game functionality.
- Regulatory authorities: The licensing regulatory body of poma88 and lawful law enforcement agencies when required by law.
- Analytics providers: Website traffic analytics tools that receive only anonymised data to help us improve the user experience.
- Identity verification service providers: An accredited third-party KYC verification platform to verify your identity documents.
All third parties we work with are bound by strict data protection agreements and may only use your data for the specific permitted purposes.
5. Data Security and Protection
Poma88 implements multiple layers of security to ensure your personal data is always protected against unauthorised access, disclosure, alteration, or destruction.
256-bit SSL Encryption: All data transmitted between your browser and poma88 servers is protected by 256-bit SSL encryption — the same security standard used by major banking institutions in Malaysia.
5.1 Technical Security Measures
- Encryption of sensitive data using AES-256 algorithm in the database
- Strict internal access controls — poma88 staff can only access data based on their job requirements
- 24/7 monitoring of suspicious activity across systems
- Two-factor authentication (2FA) for system admin access
- Periodic data backups at secure server locations
- Regular penetration testing by independent security teams
5.2 Incident Response Procedures
In the event of any data breach affecting your personal information, poma88 is committed to notifying you within 72 hours of confirming the incident, in line with industry best practices and our compliance obligations.
6. Cookies and Tracking Technologies
Poma88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
6.1 Types of Cookies Used
- Necessary Cookies (Essential Cookies): Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
- Performance Cookies: Collects anonymous information about website usage to help us improve platform performance and speed.
- Functional Cookies: Saves your preferences such as language, display settings, and game preferences so you do not need to reset them every time you log in.
- Marketing Cookies: Helps us understand relevant promotions and content for you. This type of cookie is only activated with your consent.
You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of the poma88 platform.
7. Your Rights as a Data Subject
As a poma88 platform user, you have the following rights regarding your personal data under applicable data protection laws:
Right of Access
You may request a copy of all personal data we hold about you at any time through our customer support.
Right to Rectification
If your data is inaccurate or outdated, you have the right to request an immediate correction through your account settings.
Right to Erasure
You may request deletion of your personal data, subject to legal record-keeping obligations that we are required to comply with.
Right to Withdraw Consent
You may withdraw consent for marketing communications at any time without affecting your account usage.
Right to Data Portability
You have the right to receive your data in a structured, machine-readable format for transfer to another platform if desired.
Right to Object to Processing
You may object to the processing of your data for direct marketing purposes and we will honour that request promptly.
To exercise any of the above rights, please contact the poma88 customer support team via Live Chat or email [email protected]. We will process your request within 14 business days.
8. Cross-Border Data Transfers
In certain operational situations, your personal data may be processed or stored on servers located outside Malaysia, particularly in relation to cloud services and international game providers. poma88 ensures that all such data transfers are protected by data transfer agreements that comply with international data protection standards equivalent to or higher than Malaysia's PDPA.
9. Children's Privacy
The poma88 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has registered an account with poma88, please contact us immediately and we will act swiftly to close the account and delete all related data.
10. Changes to This Privacy Policy
Poma88 reserves the right to update this Privacy Policy from time to time in accordance with changes in law, technology, or our operational practices. Any material changes will be communicated to you via your registered email or a prominent notice on the poma88 website at least 14 days before the changes take effect. Continued use of the platform after the effective date of such changes constitutes your acceptance of the latest version of the Privacy Policy.
11. Contact Our Data Protection Officer
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may contact the poma88 Data Protection Officer (DPO) through the following channels:
- Email: [email protected]
- Live Chat: Available 24 hours a day, 7 days a week on the poma88 platform
- Response time: We are committed to responding to all privacy enquiries within 5 business days