pphoki is committed to protecting your personal data. This Privacy Policy explains what information we collect when you use our platform, how we use it, who we share it with, and what rights you hold as a data subject. Please read it carefully alongside our Terms & Conditions.
This Privacy Policy ("Policy") is issued by pphoki ("we", "us", "our", "the Platform"), the operator of the online casino and sports betting platform accessible at https://pphoki.casa and its associated subdomains and mobile interfaces (collectively, "the Platform"). This Policy sets out how pphoki collects, processes, stores, shares, and protects personal data relating to users ("you", "User", "Player") who register an account or otherwise interact with the Platform.
pphoki is committed to handling your personal data responsibly and in accordance with applicable data protection principles. Our platform serves players including those located across Malaysia — in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond — and we recognise our obligation to treat user data with the highest standard of care regardless of where our players are located.
By registering an account, making a deposit, or otherwise using the Platform in any capacity, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Policy, please do not use the Platform and contact us to close any existing account.
This Privacy Policy forms part of the overall agreement between you and pphoki. It should be read together with our Terms & Conditions and Responsible Gambling Policy. In the event of any conflict between this Policy and the Terms & Conditions on matters of data handling, this Policy shall prevail.
For the purposes of this Privacy Policy, the following terms carry the meanings described below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could be used to identify a natural person, directly or indirectly — including name, identification number, email address, IP address, or device identifiers. |
| "Processing" | Any operation performed on Personal Data — including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | pphoki, which determines the purposes and means of processing your Personal Data. |
| "Data Processor" | A third party that processes Personal Data on behalf of pphoki in accordance with pphoki's instructions and this Policy. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of your Personal Data for a stated purpose. |
| "KYC Data" | Identity verification documents submitted for Know Your Customer purposes — including copies of government-issued identification and proof of address. |
| "Cookies" | Small data files placed on your device by the Platform to support functionality, session management, analytics, and personalisation. |
pphoki collects Personal Data through several channels, including account registration, KYC verification, Platform usage, payment processing, customer support interactions, and technical systems. The categories of data collected include:
pphoki processes your Personal Data for specific, legitimate purposes. We do not process data beyond what is necessary to fulfil those stated purposes. The primary purposes for which we process your data are as follows:
| Purpose | Description |
|---|---|
| Account Management | Creating and maintaining your pphoki account, authenticating your identity at login, and managing your account settings and preferences. |
| KYC & Compliance | Verifying your identity and age (21+) in accordance with gaming licensing obligations and anti-money-laundering regulations. |
| Payment Processing | Processing deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and bank transfers, and processing withdrawal requests to your verified payment methods. |
| Game & Platform Delivery | Enabling access to casino games, live dealer tables, sports betting markets, and all other Platform features. |
| Fraud & Security | Detecting and preventing fraudulent activity, duplicate account registration, money laundering, collusion, and other prohibited conduct as defined in our Terms & Conditions. |
| Responsible Gambling | Monitoring gaming behaviour to identify at-risk play patterns, enforcing self-exclusions and deposit limits, and fulfilling operator obligations under our gaming licence. |
| Customer Support | Responding to support queries, complaints, and account-related requests received via Live Chat, email, or WhatsApp. |
| Platform Analytics | Aggregated, anonymised analysis of Platform usage to improve features, fix technical issues, and optimise the user experience. |
| Marketing Communications | Sending promotional offers, bonus notifications, and Platform updates where you have provided valid consent and not opted out. You may withdraw consent at any time. |
| Legal Obligations | Complying with requests from regulatory authorities, gaming commissions, law enforcement, or courts of competent jurisdiction. |
pphoki processes your Personal Data on the following legal grounds, depending on the nature of the processing activity:
Where processing is based on your consent, you may withdraw that consent at any time by updating your account communication preferences or contacting our support team. Withdrawing consent does not affect the legality of any processing carried out prior to the withdrawal.
pphoki does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share your data only in the following limited and controlled circumstances:
Your financial data is shared with licensed payment processors to facilitate deposit and withdrawal transactions. This includes providers supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and USDT TRC20 transactions. These processors operate under their own privacy policies and are contractually bound to handle your data securely and only for the specific purpose of payment processing.
To fulfil our identity verification obligations, pphoki may share KYC Data with licensed identity verification service providers. These partners process your documents solely for the purpose of verifying your identity on our behalf and are bound by strict confidentiality agreements.
Game session data (including wager amounts and session identifiers) is shared with our licensed third-party game studios solely for the purpose of delivering gameplay and ensuring game integrity. These studios receive only the minimum data necessary and are prohibited from using it for any independent marketing or commercial purpose.
pphoki will disclose Personal Data to gaming regulators, law enforcement agencies, anti-money-laundering bodies, or courts where required to do so by applicable law or by order of a competent authority. We will notify you of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or part of pphoki's business, your Personal Data may be transferred to the successor entity, subject to equivalent data protection commitments. You will be informed of any such transfer in advance where practicable.
pphoki does not share your Personal Data with external third parties for their own marketing or advertising purposes. Any promotional communications you receive will originate from pphoki directly and only where you have consented to receive them.
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function correctly, improve efficiency, and provide information to website operators. pphoki uses cookies and similar tracking technologies (such as web beacons and local storage) on the Platform.
You may manage non-essential cookie preferences through your browser settings or the Platform's cookie consent interface. Most modern browsers allow you to block or delete cookies entirely. Note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions.
pphoki retains your Personal Data only for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable law and regulatory obligations. The following retention principles apply:
When the retention period for any category of Personal Data expires, pphoki will securely delete or irreversibly anonymise that data in accordance with industry-standard data destruction procedures.
pphoki implements a layered approach to data security, combining technical, organisational, and procedural safeguards designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:
While pphoki maintains robust security measures on the Platform side, you are responsible for the security of your account credentials. Never share your password or one-time codes with anyone — including persons claiming to be pphoki staff. pphoki will never ask for your full password via Live Chat or email.
Subject to applicable data protection law and regulatory restrictions (including those arising from our anti-money-laundering obligations), you hold the following rights in relation to your Personal Data held by pphoki:
Request a copy of the Personal Data we hold about you, along with information about how it is processed.
Request correction of inaccurate or incomplete Personal Data held in your account records.
Request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Request temporary restriction of processing in specific circumstances — for example, while the accuracy of data is being contested.
Request a structured, machine-readable copy of Personal Data you have provided to us, where technically feasible.
Object to processing based on legitimate interests, including direct marketing communications. You may opt out of marketing at any time.
To exercise any of the above rights, please submit a written request to our support team via Live Chat or to [email protected], including your registered username and a description of the specific right you wish to exercise. pphoki will acknowledge your request within five (5) business days and respond substantively within thirty (30) days. Complex or high-volume requests may require an extension, which we will communicate to you in advance.
Please note that certain rights may be limited or restricted in circumstances where data retention is required by law — for example, where AML record-keeping obligations require us to retain KYC and transaction data beyond account closure.
pphoki is strictly prohibited for use by persons under the age of 21 (twenty-one) years. We do not knowingly collect or process Personal Data from individuals under the age of 21. If we discover or are notified that an account belongs to an underage individual, we will immediately close the account, delete associated Personal Data (subject to legal retention obligations), and, where appropriate, report the matter to relevant authorities.
As part of our KYC process, pphoki verifies the age of all registered players prior to any withdrawal being processed. Parents and guardians who believe a minor may have registered on the Platform should contact our support team immediately via Live Chat or at [email protected] so that we can take prompt action to close the account and remove the associated data.
pphoki operates across multiple jurisdictions and may transfer your Personal Data to third-party processors located outside of Malaysia in the course of operating the Platform. Such transfers may occur in connection with payment processing, identity verification, and game delivery services.
When transferring Personal Data internationally, pphoki implements appropriate safeguards to ensure that your data receives an equivalent level of protection to that which it receives within Malaysia. These safeguards may include contractual arrangements with data processors, standard contractual clauses, or reliance on adequacy decisions where applicable.
All international data processors engaged by pphoki are subject to due diligence assessments and are contractually prohibited from processing your data for any purpose other than delivering their designated service to pphoki.
The Platform may include references to third-party payment providers — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX banking partners — whose services are governed by their own privacy policies and terms of use. When you interact with these payment services, you are doing so under the terms and conditions of those respective providers.
pphoki is not responsible for the privacy practices of third-party payment processors, game studios, or any other third-party service providers. We recommend that you review the privacy policies of any third-party services you use in connection with the Platform.
To the extent that game studios receive session data for the purpose of delivering gameplay, they act as Data Processors bound by pphoki's data processing agreements and are prohibited from using that data independently.
pphoki reserves the right to update, modify, or replace this Privacy Policy at any time. Material changes to how we collect, use, or share your Personal Data will be communicated to registered Players via email notification or a prominent notice displayed on the Platform, with reasonable advance notice prior to the changes taking effect.
The "Last Updated" date displayed at the top of this Policy reflects the most recent revision. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, please cease use of the Platform and request account closure before the changes take effect.
We encourage all registered Players to review this Policy periodically — alongside the Terms & Conditions and Responsible Gambling Policy — to remain informed of their rights and of how pphoki handles their Personal Data.
For material changes that significantly affect your rights or how we use your data, pphoki will provide at least fourteen (14) days' advance notice by email to your registered address before the changes take effect.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way pphoki handles your Personal Data, please contact us through any of the following channels. Our support team — available in Bahasa Melayu, Mandarin Chinese, and English — is trained to handle data-related enquiries and will escalate privacy matters to the appropriate internal team.
For formal data subject access requests, erasure requests, or complaints relating to pphoki's data handling practices, please submit your request in writing via email to [email protected] with the subject line "Data Privacy Request — [Your Username]". We will acknowledge your request within five (5) business days.
Our technical and operational commitment to your privacy.
Every page, every login, every transaction on pphoki is protected by industry-standard 256-bit SSL encryption. No data travels between your device and our servers without full encryption in transit.
pphoki does not sell, rent, or trade your personal information to any third party for their own commercial purposes. Full stop. Your data is used only to operate your account and comply with applicable law.
Identity documents submitted for KYC verification are encrypted at rest, accessible only to authorised compliance staff, and retained strictly in accordance with regulatory requirements — never longer than necessary.
Full financial instrument numbers are never stored on pphoki's systems. Transactions via Touch 'n Go eWallet, Boost, DuitNow, and FPX are processed by licensed payment providers under their own security frameworks.
Access, correct, delete, or restrict your Personal Data at any time by contacting our support team. Marketing preferences can be updated directly from your account settings without needing to contact support.
pphoki's data security infrastructure is subject to regular independent audits and penetration testing to identify and remediate vulnerabilities before they can be exploited. Security is never treated as a set-and-forget function.
Our support team is available 24/7 to address any concerns about how pphoki handles your personal data. You can also explore our FAQ or return to the homepage.