Ph90 Privacy Policy — Your Personal Data Protection

1 Introduction

Ph90 is Malaysia's leading online entertainment platform, operating under the domain ph90.bz. We understand that your trust is the most valuable asset we safeguard, and the privacy of your personal information is the foundation of that trust.

This Privacy Policy is designed to provide full clarity on how we handle your data — from the moment you first visit our website through every transaction and gaming session you conduct with us. We believe transparency is the best way to build lasting, trusted relationships with every ph90 member.

This policy applies to all users of the ph90 platform, including visitors without an account, registered members, and anyone who interacts with our services via the website, mobile app, or customer support channels. It forms part of the Terms and Conditions ph90 as a whole.

2 Information Collected

Ph90 collects various categories of information to enable us to deliver services that are safe, seamless, and of the highest quality to you. This collection is carried out transparently and only for legitimate purposes.

Information you provide directly:

• Registration information: Full name, mobile number, username, and password when registering a ph90 account.
• Identity verification (KYC): Copies of identity cards, passports, or other identity documents requested for identity verification and legal compliance purposes.
• Financial information: Details of the payment methods you use for deposits and withdrawals, including the associated bank account number or e-wallet number.
• Communications: Any messages, complaints, or feedback you send to our customer support team via live chat or email.

Automatically collected information:

• Device data: Device type, operating system, phone model, screen resolution, and unique device identifier.
• Network data: IP address, internet service provider (ISP) name, and IP-based geographic location (country and city only).
• Usage data: Pages visited, session duration, games played, total wagering, wins and losses, and general usage patterns on the platform.
• Cookie data: Information stored via cookies and similar tracking technologies to enhance user experience and platform analytics.

3 How We Use Your Data

Every piece of information we collect is used for a specific and legitimate purpose. ph90 does not use your data for purposes unrelated to the services we offer. Below is a detailed breakdown of how your data is used:

• Account management: Create and manage your account, process secure logins, and enable a personalised experience on the ph90 platform.
• Transaction processing: Process deposits, withdrawals, and all other financial transactions efficiently and securely in under 5 minutes for major payment methods.
• Verification and compliance: Conducting KYC procedures, preventing fraud, money laundering, and fulfilling applicable legal obligations.
• Customer support: Provide relevant and accurate assistance when you contact our support team, including complaint resolution and technical enquiries.
• Service communications: Send important notifications related to your account, policy updates, and promotional information you have agreed to receive.
• Platform improvements: Analyse usage patterns in aggregate (not individual data) to improve the performance, design, and new features of the ph90 platform.
• Security: Detect and prevent suspicious activity, including fraud attempts, unauthorised access, and platform abuse.

Ph90 will only use your data for other purposes if you have provided explicit consent, or where permitted or required by law.

4 Information Sharing

Ph90 does not sell, rent, or trade your personal information to outside parties. However, there are limited situations where we need to share your data with specific parties to enable our services to function properly:

• Technology service providers: Companies providing technical infrastructure, such as cloud hosting services, payment processing, and SMS delivery for two-factor authentication. All such providers are bound by strict confidentiality agreements.
• Game providers: Game software companies that produce slots, table games, and other products on the ph90 platform may receive the minimum wagering data required to operate the games. This data does not include your full personal information.
• Regulatory bodies and legal authorities: ph90 will disclose information when required by law, court order, or official investigation by a competent authority.
• Fraud protection: In situations where we have strong reason to believe that fraudulent activity or financial crime is taking place, we may share relevant information with fraud detection partners or the relevant authorities.

5 Data Security

Ph90 continuously invests in the most advanced security infrastructure to keep your data protected at all times. Our security approach is layered and comprehensive:

• Encryption in transit: All communications between your browser and ph90's servers are encrypted using TLS 1.3 with 256-bit SSL encryption — making interception by unauthorized parties virtually impossible.
• Stored data encryption: Sensitive information stored in the ph90 database, including passwords and financial details, is encrypted using robust industry-standard encryption algorithms. Passwords are never stored in plain text.
• Two-factor authentication (2FA): ph90 supports and encourages the use of two-factor authentication as an additional layer of security for every member account.
• Continuous monitoring: The ph90 security team monitors all system activity 24 hours a day, 7 days a week to detect any anomalies or suspicious breach attempts.
• Regular security testing: ph90 conducts regular penetration testing and security audits by independent third parties to ensure there are no vulnerabilities in our systems.
• Internal access controls: Access to user data within the ph90 organisation is strictly limited on a "need-to-know" basis. Employees who access user data without authorisation are subject to serious disciplinary action.

While we take all reasonable precautions, no security system is completely perfect. You also play an important role in your account's security — always use a strong, unique password and never share your login credentials with anyone.

6 Cookies & Tracking Technologies

Ph90 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use:

• Essential cookies: Required for core platform functions such as maintaining your login session and processing transactions. These cookies cannot be disabled without affecting core platform functionality.
• Performance cookies: Gather information about how you use the platform — which pages are visited most frequently, errors encountered, and so on — to help us improve our services.
• Functional cookies: Allow the platform to remember your preferences such as preferred language, username (for the "remember me" function), and other display settings.
• Analytics cookies: Used to understand overall platform usage patterns in aggregate. This data helps us make data-driven decisions for continuous improvement.

You can manage or disable cookies through your browser settings. Please note, however, that disabling certain cookies may affect the functionality and user experience of the ph90 platform.

7 Data Storage & Deletion

Ph90 retains your personal information only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by applicable law.

• Active account data: For as long as your account remains active and in good standing, ph90 will retain your personal data to ensure smooth and uninterrupted service.
• Data after account closure: After your account is closed, ph90 will retain certain records (including transaction records and verification logs) for a minimum of 7 years to comply with anti-money laundering laws and applicable financial regulations.
• KYC data: Identity verification documents are retained for the period required by law, typically 5 to 7 years after the business relationship ends.
• Communication logs: Customer support records and related communications are retained for 3 years for reference and dispute resolution purposes.

Once the specified retention period has expired, your data will be securely deleted or anonymized using methods that ensure it cannot be recovered.

If you wish to request deletion of your data before the end of the specified retention period, you may contact our support team. Please note that some data may not be fully deleted if its retention is required by law.

8 Your Privacy Rights

As a ph90 member and data subject under Malaysia's PDPA, you have clear and enforceable privacy rights. ph90 is committed to respecting and facilitating the exercise of these rights:

Ph90 will process all privacy rights requests within 30 business days from the date of receipt. In complex cases, this period may be extended to up to 60 days with advance notice to you.

9 Children's Privacy

The ph90 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal information from anyone under the age of 18.

If we discover that personal information of an underage child has been collected without proper age verification, we will take immediate steps to delete that information and close the associated account. If you believe your child or any minor has registered on our platform, please contact our support team immediately.

10 Privacy Policy Changes

Ph90 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, updated legal requirements, or improvements in the security technology we adopt.

When significant changes occur, ph90 will notify you via a prominent notice on the platform's homepage or through an in-account notification. The "Last Updated" date at the top of this Privacy Policy will be updated to reflect the date of the latest revision.

Continued use of the ph90 platform after any Privacy Policy changes take effect will be considered your acceptance of the latest version of the policy. If you disagree with the changes made, you have the right to close your account and stop using the platform.

We encourage you to review this Privacy Policy periodically to ensure you are always aware of the latest way we manage your personal data. Version history of the Privacy Policy is available upon request through our customer support channels.

11 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how ph90 handles your personal data, our privacy team is ready to assist you.

You can reach us via:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the ph90 platform.
• Email: [email protected] (reply within 1–2 business days)
• FAQ Page: Visit our FAQ page for answers to frequently asked questions about privacy.

When contacting us regarding privacy, please clearly state your username or account number (if applicable), the type of request you are making, and any relevant supporting information so we can process your request more quickly and accurately.