Plinko Malaysia Privacy Policy – Data Protection & Player Privacy

Plinko Malaysia ("Plinko", "we", "our platform") respects the privacy of every player and is committed to protecting your personal data. This Privacy Policy explains in detail how we collect, process, store, share, and safeguard your personal information when you use the platform plinko-bangla.com and all our related services.

This policy is prepared in accordance with Personal Data Protection Act (PDPA) 2010 Malaysia and forms part of the overall agreement between you and Plinko. By using our platform, you acknowledge that you have read and understood this Privacy Policy.

If you have any questions about how we handle your data, you may contact our Privacy Officer using the details provided in Section 12 of this document.

Plinko collects various types of personal data depending on how you interact with our platform. The following are the categories of data we collect:

We do not collect sensitive data such as health information, religious beliefs, or political affiliations unless you voluntarily provide it in the context of customer support.

Your data is collected through several key channels:

Plinko uses your data only for legitimate, stated purposes. These include:

• Account Management: Creating, verifying, and managing your player account, including security settings and responsible gaming limits.
• Payment Processing: Securely processing deposits and withdrawals through licensed local Malaysian payment providers.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multi-account abuse, and other security threats.
• Legal Compliance: Comply with legal obligations under PDPA 2010 and applicable anti-money laundering (AML) regulations.
• Customer Support: Handling complaints and enquiries, and providing technical assistance to players.
• Platform Improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve the Plinko user experience.
• Service Communications: Sending important notifications relating to your account, security, and policy updates via email or SMS.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and recommend appropriate limit-setting tools.

Plinko does not sell your personal data to any party. However, in the course of delivering our services, your data may be shared with the following parties within strictly limited and controlled circumstances:

• Malaysian Payment Providers: Digital wallet platforms such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, and ShopeePay, as well as banks supporting FPX (Maybank2u, CIMB Clicks) — only the transaction information necessary to process your payment is used.
• Gaming Technology Providers: Casino and sports software providers that supply games on the Plinko platform — only a player ID without a name, not full identity information.
• Security & Verification Services: Licensed KYC (Know Your Customer) companies that assist us in verifying player identities in accordance with legal requirements.
• Malaysian Authority: Where required by law or court order, Plinko will comply with requests from legitimate law enforcement agencies.

All third parties that receive your data are required to comply with strict data protection standards and may only use your data for the purposes specified in their agreement with Plinko.

Plinko retains your personal data for as long as your account is active and for the period required thereafter in accordance with legal and operational obligations:

• Active Account Data: For as long as your account remains active on the Plinko platform.
• Financial Records & Transactions: Minimum 7 years after the transaction date, in line with Malaysian legal requirements on financial records and anti-money laundering.
• KYC Data (Identity Verification): Minimum 5 years after account closure or the date of last verification.
• Support Communication Logs: 3 years from the date of last interaction.
• Technical & Security Log Data: 12 months for standard logs, longer if related to an active investigation.

Once the retention period expires, your data will be securely deleted or anonymised (converted into a form that can no longer identify you) using approved data disposal procedures.

Plinko employs a combination of technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse:

• 256-bit SSL/TLS Encryption: All data communications between your device and Plinko's servers are encrypted.
• Two-Factor Authentication (2FA): Available to all player accounts as an additional layer of security during login.
• Strict Access Controls: Only authorised personnel with a specific operational need may access player data. All access is logged and audited.
• Regular Security Audits: Plinko conducts regular penetration testing and security audits carried out by independent parties.
• Real-Time Threat Scanning: A 24/7 monitoring system that automatically detects and responds to cybersecurity threats.
• Secure Data Backup: Data is regularly backed up to a separate location that is protected by the same security controls.

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by Plinko:

To exercise any of the above rights, please contact our Privacy Officer at privacy@plinko-bangla.com including your full name, account number, and details of your request. Plinko will process the request within 14 business days.

Plinko uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymised information on how players use the platform to help us identify and resolve technical issues.
• Optional Cookies: Saves your preferences such as language and display settings for a more personalised experience.
• Security Cookies: Used to detect suspicious activity and cyberattacks, and to protect your account from unauthorised access.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the Plinko platform. Plinko does not use third-party cookies for advertising purposes.

In certain circumstances, your personal data may be processed or stored outside Malaysia — particularly where technical service providers operating globally are involved. Plinko ensures, however, that:

• All cross-border data transfers are conducted in accordance with the provisions of Malaysia's PDPA 2010.
• The recipient country or region provides a level of data protection equivalent to or higher than that of Malaysia.
• Legally binding data protection agreements are established with all third parties that receive your data from outside Malaysia.
• Sensitive financial data belonging to Malaysian players is processed and stored on servers that comply with PCI-DSS security standards.

Plinko reserves the right to update this Privacy Policy from time to time to reflect changes in law, technology, or our operational practices. When significant changes are made:

• The "Last Updated" date at the top of this document will be revised accordingly.
• A notice will be displayed on the Plinko platform login page for at least 7 days before the changes take effect.
• For significant changes (such as changes to how data is shared), we will notify you via your registered email address.

Continued use of the plinko platform after any changes to the Privacy Policy take effect will be considered acceptance of those changes. If you disagree with the changes, you have the right to close your account and request data deletion in accordance with the procedure outlined in Section 8.

For any enquiries, complaints, or requests relating to your personal data at Plinko, you may reach our appointed Privacy Officer via: