Privacy Policy pgkuda — Our Commitment to Protecting Your Data

Introduction & Scope of Privacy Policy

This Privacy Policy clearly explains how pgkuda ("we", "Platform" or "pgkuda") collects, processes, stores, shares and protects your personal information when you use our platform — whether through our website, mobile app or other service channels.

Pgkuda is fully committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and applicable international data protection standards. We recognise that your trust in us depends greatly on how we handle your information, and we do not take this responsibility lightly.

By registering an account or using any pgkuda service, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please discontinue use of the platform and contact us to close your account.

Types of Personal Data We Collect

Pgkuda collects various categories of personal information from our users. We only collect data that is genuinely necessary for legitimate purposes — no excessive data collection beyond what is relevant to our services.

How pgkuda Uses Your Data

The data we collect is used exclusively for legitimate, specified purposes. pgkuda strictly adheres to the principle of purpose limitation — meaning we will not use your data for any purpose beyond what is stated here without first obtaining your consent.

In the context of responsible gaming, pgkuda uses your gameplay data (playing frequency, deposit amounts, session duration) internally to identify players who may need support. This is done solely to protect your well-being — not for marketing purposes.

Legal Basis for Data Processing

Pgkuda processes your personal data on one or more valid legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA 2010):

• Consent: When you register a pgkuda account and agree to this Privacy Policy, you grant consent for your data to be processed for the stated purposes.
• Contractual Necessity: We need to process your data to fulfil our contractual obligations to you — including processing deposits, withdrawals and bets.
• Legitimate Interest: pgkuda has a legitimate interest in preventing fraud, ensuring platform security, and improving service quality.
• Legal Obligation: pgkuda is required to comply with regulatory, anti-money laundering (AML) and know-your-customer (KYC) obligations under applicable law.

Data Sharing with Third Parties

Pgkuda does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, under certain circumstances, we may need to share your data with the following parties:

• Payment Processing Providers: Payment gateways such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and banks (Maybank, CIMB, etc.) to securely process your financial transactions.
• Game Providers: Providers such as Evolution Gaming, Pragmatic Play and others may receive minimal game session data necessary to operate the games.
• Identity Verification Providers: KYC/AML companies that assist us in verifying user identities and preventing fraud.
• Legal Authorities: Police, courts, regulators, or law enforcement bodies when required to do so by law or court order.
• IT Service Providers: Cloud infrastructure and security providers operating on behalf of pgkuda under strict confidentiality agreements.

Data Retention & Security Measures

6.1 Retention Period

Pgkuda retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or for a longer period where required by law:

• Active account data: Retained for the duration your account remains active and for a further period of 7 years after account closure (for AML and tax compliance purposes).
• Financial transaction records: Retained for 7 years in accordance with Malaysian legal requirements.
• Security logs: Retained for 2 years for incident investigation purposes.
• Customer support communication data: Retained for 3 years.

6.2 Technical Security Measures

Pgkuda implements a range of technical and organisational measures to protect your data from unauthorised access, loss, or destruction:

• 256-bit SSL Encryption for all data in transit between your device and pgkuda's servers.
• Data-at-rest encryption for all sensitive data stored in our databases.
• Two-factor authentication (2FA) available to all accounts.
• Role-based access control — only authorised personnel may access sensitive data, and only to the extent required for their duties.
• Regular security auditing by independent cybersecurity firms.
• Intrusion detection system (IDS/IPS) operating 24/7.

Cookies & Tracking Technologies

Pgkuda uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect the functionality of the pgkuda platform. Please note that we do not use third-party advertising cookies to track you across other websites.

International Data Transfers

In certain cases, your personal data may be transferred to and processed in countries outside Malaysia, particularly in connection with cloud infrastructure and international game providers. pgkuda ensures that all such data transfers are carried out with adequate safeguards, including:

• Data processing agreement with internationally recognised standard contractual clauses
• Third-party security assessments before any data sharing is permitted
• Additional technical controls include end-to-end encryption for sensitive data

Your Rights as a Data Subject

Under Malaysia's PDPA 2010 and international best practices, you have the following rights regarding your personal data held by pgkuda:

Children's Data & Minor Protection

Pgkuda strictly prohibits individuals under the age of 18 years old from using our platform in any capacity. We do not knowingly collect personal data from individuals under the age of 18.

Should we discover or be informed that we have inadvertently collected data from an underage individual, we will take immediate steps to:

• Immediate closure of the associated account
• Deleting all personal data associated with that individual
• Seizing and returning (where applicable) any funds in the account to the rightful guardian
• Reporting incidents to the relevant authorities where required

Changes to the Privacy Policy

Pgkuda reserves the right to modify or update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or technological developments. We are committed to notifying you of any significant changes in the following ways:

• Sending a notification to your registered email address at least 14 days before the changes take effect (for material changes)
• Displaying an in-platform notice on pgkuda when you log in after an update has been published
• Updating the "Last Updated" date at the top of this page

Previous versions of this Privacy Policy are available upon request from our privacy team via email. Your continued use of the pgkuda platform after any changes take effect constitutes your acceptance of the updated policy.

Contact pgkuda's Data Protection Officer (DPO)

Pgkuda has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with our privacy policy and handling all inquiries and complaints related to personal data.

If you wish to exercise any of your rights, have questions about this Privacy Policy, or would like to report a privacy concern, please contact us via:

• DPO Email: privacy@pgkuda.biz
• General Support Email: support@pgkuda.biz
• Live Chat: Available 24/7 within the pgkuda platform (in Bahasa Malaysia)

Pgkuda commits to responding to all privacy-related requests within 30 days calendar days from the date of receipt. In complex cases, this period may be extended to 60 days with prior notice to you.