Privacy Policy

1Introduction

This Privacy Policy (hereinafter "this Policy" or "the Policy") sets out how putrijp (hereinafter "we", "our", "us", or "the Platform") collects, uses, stores, discloses, and otherwise processes personal data relating to users of the putrijp website at https://putrijp.cam and any associated services, mobile applications, or features (collectively, "the Services").

putrijp is committed to protecting the privacy and personal data of all Members and visitors in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and any subsidiary legislation or guidelines issued thereunder. This Policy explains your rights as a data subject and how you may exercise them.

This Policy applies to all users of the Platform including registered Members, prospective Members who visit the website without registering, and third parties whose personal data may be processed in connection with account operations (e.g., joint account holders, payment method owners). The Policy is effective from 1 January 2026.

2Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that relates directly or indirectly to an identified or identifiable natural person, as defined in the PDPA 2010.
• "Data Subject" means the individual to whom Personal Data relates.
• "Data Processor" means any person or entity that processes Personal Data on behalf of putrijp pursuant to a contractual arrangement.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, and deletion.
• "Sensitive Personal Data" means personal data as defined under Section 4 of the PDPA 2010, including but not limited to financial information and data relating to identity documents.
• "Member" means any individual who has registered an account on the putrijp Platform.
• "Cookies" means small text files stored on your device by a web browser at the request of a website, used to identify your browser, store preferences, and gather analytical data.
• "KYC" means Know Your Customer — the identity verification process required for regulatory and anti-money laundering compliance.

3Personal Data We Collect

putrijp collects personal data from you directly when you interact with the Platform, as well as automatically through your use of our Services. The categories of personal data we collect include:

We do not intentionally collect or process Special Categories of personal data (such as biometric data, health data, or criminal records) unless specifically required by applicable law or regulation.

4How We Use Your Personal Data

putrijp uses personal data collected from Members and visitors for the following purposes:

1. Account Registration and Management: To create, verify, and maintain your Member account, including authentication and account security.
2. Identity Verification (KYC): To comply with anti-money laundering (AML) obligations and verify that Members meet the minimum age requirement of 21 years.
3. Payment Processing: To facilitate deposits and withdrawals via approved payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels.
4. Service Delivery: To provide access to the games, sports betting markets, live dealer tables, and all other features available on the Platform.
5. Customer Support: To respond to queries, resolve complaints, and assist with account-related matters.
6. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, unauthorised account access, and other Prohibited Activities.
7. Regulatory Compliance: To comply with applicable laws, regulations, and official requests from competent authorities.
8. Responsible Gambling: To monitor gameplay patterns that may indicate problem gambling behaviour and to administer self-exclusion, deposit limits, and other responsible gambling tools.
9. Marketing and Communications: Where you have provided consent, to send promotional offers, bonus notifications, and platform updates relevant to your interests. You may withdraw consent at any time.
10. Platform Improvement: To analyse usage data for the purpose of improving platform performance, user experience, and game catalogue relevance.

5Lawful Basis for Processing

Under the PDPA 2010 and applicable data protection principles, putrijp relies on the following lawful bases for processing personal data:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a Member, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and cooperation with regulatory and law enforcement authorities.
• Legitimate Interests: Processing carried out in pursuit of our legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests do not override your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of direct marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6Disclosure of Personal Data

putrijp does not sell your personal data to third parties. We may share personal data with the following categories of recipients strictly on a need-to-know basis:

• Payment Service Providers: Banks and e-wallet operators (including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go, Boost, GrabPay, and FPX network operators) for the processing of deposits and withdrawals.
• Identity Verification Services: Third-party KYC and AML screening providers engaged to verify identity documents and screen against sanctions lists.
• Technology and Infrastructure Providers: Cloud hosting, data storage, and platform maintenance providers bound by contractual data processing agreements.
• Game Content Providers: Third-party game studios that provide games accessible through our Platform may receive anonymised session data for technical operation purposes.
• Regulatory and Legal Authorities: Government agencies, law enforcement bodies, courts, and regulators where disclosure is required or permitted by applicable law.
• Professional Advisers: Legal counsel, auditors, and accountants where disclosure is necessary for the provision of professional services.

7International Data Transfers

In certain circumstances, personal data processed by putrijp may be transferred to, stored, or processed in jurisdictions outside Malaysia. This may occur where our technology infrastructure, game content providers, or third-party service providers operate outside Malaysia.

Where such transfers take place, putrijp ensures that adequate safeguards are in place to protect personal data to a standard equivalent to that required under the PDPA 2010. These safeguards may include:

• Contractual clauses with data recipients that impose equivalent data protection obligations;
• Processing only in jurisdictions that have been assessed to provide an adequate level of personal data protection;
• Application of technical and organisational security measures commensurate with the sensitivity of the data.

By using the Platform and accepting this Privacy Policy, you acknowledge and consent to such international transfers where necessary for the provision of our Services.

8Cookies & Tracking Technologies

putrijp uses cookies and similar tracking technologies (such as pixel tags and local storage objects) to operate the Platform, enhance user experience, and collect analytical data. The categories of cookies used are as follows:

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the Platform. Analytical and marketing cookies may be declined without impacting core Services.

9Data Retention

putrijp retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account Data: Retained for the duration of your active membership and for a minimum of five (5) years following account closure, as required for AML and regulatory compliance.
• Transaction and Financial Data: Retained for a minimum of seven (7) years from the date of each transaction in accordance with financial recordkeeping obligations.
• KYC and Verification Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Support Communications: Retained for three (3) years from the date of the last communication, unless a longer period is required for dispute resolution.
• Technical and Usage Data: Retained for up to two (2) years for platform analytics and security monitoring purposes.

Following the expiry of the applicable retention period, personal data is securely destroyed or permanently anonymised such that it can no longer be attributed to an identified individual.

10Security Measures

putrijp implements technical, organisational, and administrative security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS 1.3) and 256-bit SSL encryption for all data transmitted between your device and our servers;
• AES-256 encryption for sensitive data stored in our databases;
• Strict access controls ensuring that personal data is accessible only to authorised personnel with a legitimate business need;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Multi-factor authentication requirements for privileged system access;
• Comprehensive staff training on data protection obligations and security best practices;
• Incident response procedures for the prompt identification, containment, and reporting of personal data breaches.

11Minors

The putrijp Platform is strictly for use by individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data relating to persons under the age of 21.

If we become aware that we have collected personal data from an individual under the age of 21, we will immediately close the relevant account, void all associated transactions, and securely delete the personal data concerned in accordance with applicable data protection requirements.

If you are a parent or guardian and believe that a minor under your care has registered an account on the Platform, please contact us immediately at the details provided in Section 14 of this Policy.

12Your Data Subject Rights

Under the PDPA 2010 and applicable data protection principles, you have the following rights in relation to your personal data held by putrijp:

To exercise any of the rights above, please submit a written request to our Data Protection contact as detailed in Section 14 of this Policy. We will respond to all valid requests within thirty (30) calendar days. Complex requests may require an extension of up to an additional thirty (30) days, in which case you will be notified promptly.

13Amendments to This Policy

putrijp reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the Services we provide. All amendments will be published on this page with an updated effective date.

Where amendments are material, we will provide advance notice to registered Members via email or a prominent notice on the Platform, allowing a reasonable period for review before the amended Policy takes effect. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

We recommend that you review this Policy periodically to stay informed of how we handle your personal data. If you disagree with any amendment, you should cease using the Platform and contact us to exercise your data subject rights.

14Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by putrijp, please contact our Data Protection team using the details below:

For account-related data queries including access requests, correction requests, and deletion requests, please include your registered email address and a description of your request. We may require identity verification before processing your request.

For responsible gambling matters, please visit our Responsible Gambling page or include "Responsible Gambling" in the subject line of your email to our support team.