Your privacy matters to us. This policy explains exactly what personal data POA88 collects, how we use it, and the rights you hold over your information.
This Privacy Policy ("Policy") describes how POA88 (referred to as "POA88", "we", "us", or "our") collects, uses, stores, and protects the personal information of users ("you", "your", "User") who access and use the services available at poa88.lat and any associated mobile interfaces or applications (collectively, the "Platform").
POA88 is committed to handling your personal data with transparency, care, and in full accordance with applicable data protection principles. By registering an account, depositing funds, or otherwise using the POA88 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
This Policy should be read alongside our Terms & Conditions, which govern your use of the platform more broadly. In the event of any inconsistency between this Policy and the Terms & Conditions on a matter relating specifically to data privacy, this Policy shall take precedence.
For the purposes of this Privacy Policy, the following definitions apply:
POA88 collects personal data through multiple touchpoints across the platform. The categories of data we collect, and the circumstances in which we collect them, are described below.
When you create a POA88 account, we collect the information you provide during registration, including: your full legal name, date of birth, email address, Malaysian mobile phone number, and selected username. This data is required to establish and maintain your account.
To comply with our age verification and anti-fraud obligations, we may request copies of government-issued identity documents (such as your Malaysian MyKad or passport), proof of residential address (such as a utility bill or bank statement issued within 90 days), and proof of payment method ownership. This data is processed solely for verification purposes and is stored securely in accordance with Section 9.
We collect details of all deposits, withdrawals, and wagers conducted through your POA88 account, including payment method identifiers (e.g., masked bank account numbers, e-wallet IDs), transaction amounts in MYR, timestamps, and transaction status. We do not store full card numbers or sensitive payment authentication credentials on our servers — these are handled by our PCI-DSS compliant payment processors.
We automatically collect information about how you use the platform, including: pages visited, games played, session duration, wager histories, feature interactions, and navigation patterns. This data helps us improve the platform experience and identify irregular usage that may indicate fraud or problem gambling behaviour.
We collect technical information from the device you use to access POA88, including: IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URLs. This data is used for security monitoring, fraud prevention, and platform optimisation.
When you contact our support team via live chat or email ([email protected]), we record the content of that communication, along with metadata such as the date and time of contact and your account details. This data is retained for quality assurance, dispute resolution, and regulatory compliance purposes.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, email, phone, date of birth | Account creation & management |
| KYC / Identity Data | MyKad, passport, proof of address | Age & identity verification |
| Financial Data | Transaction history, payment method IDs | Payment processing & anti-fraud |
| Usage Data | Games played, session logs, wager history | Platform improvement & responsible gambling |
| Device / Technical Data | IP address, browser, OS, device ID | Security & fraud prevention |
| Communications Data | Support chat transcripts, email content | Support quality & dispute resolution |
POA88 processes personal data for the following purposes:
POA88 processes your personal data under one or more of the following legal bases:
POA88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with third parties only in the following circumstances:
We engage trusted third-party service providers to assist us in operating the platform. These include payment processors (for handling MYR deposits and withdrawals via DuitNow, FPX, Touch 'n Go, etc.), KYC verification providers, game software studios, fraud detection services, and customer support infrastructure providers. All such providers are contractually bound to process personal data only on our instruction and to implement appropriate security measures.
We may disclose personal data to regulatory authorities, law enforcement agencies, courts, or other government bodies where we are required to do so by law, court order, or regulatory direction. We will notify you of any such disclosure where permitted to do so by applicable law.
In the event of a merger, acquisition, or sale of all or part of POA88's business, your personal data may be transferred as part of that transaction. We will notify affected users prior to any such transfer and will ensure that the receiving entity is bound by equivalent data protection obligations.
We may share aggregated, anonymised, or de-identified data that cannot reasonably be used to identify any individual — for example, platform usage statistics — with business partners, analytics providers, or in public reporting. Such data is not considered personal data under this Policy.
POA88 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the platform. They allow the platform to remember your preferences, maintain your login session, and analyse usage patterns.
You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will impair the functionality of the platform and may prevent you from logging in or completing transactions. We recommend consulting your browser's help documentation for guidance on managing cookies.
POA88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention guidelines apply:
Where personal data is no longer required for any legitimate purpose and no legal retention obligation applies, it will be securely deleted or irreversibly anonymised.
POA88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
While we take every reasonable precaution to protect your data, no method of electronic transmission or storage is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, POA88 will notify affected users without undue delay and will cooperate fully with any applicable regulatory investigation.
As a user of the POA88 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us via the channels listed in Section 14.
You have the right to request a copy of the personal data POA88 holds about you. We will respond to such requests within 30 days.
If any of your personal data is inaccurate or incomplete, you have the right to request correction. Some data fields can be updated directly in your account settings.
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
You may request that we restrict how we use your data in certain circumstances — for example, if you contest its accuracy while we verify it.
Where processing is based on your consent or a contract, you may request your personal data in a structured, machine-readable format for transfer to another service.
You have the right to object to processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time via your account settings.
POA88 will respond to all data rights requests within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 60 days and will notify you accordingly. We may need to verify your identity before processing any request. There is no charge for exercising your rights under normal circumstances.
The POA88 platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from anyone under this age. Our registration process includes automated age verification steps, and all accounts are subject to manual KYC review that confirms date of birth through government-issued documentation.
If POA88 becomes aware that personal data has been collected from an individual under the age of 21, we will take the following steps immediately: suspend the account, void all wagers placed, return any real-money balance minus bonus funds to the payment method used for deposit, and permanently delete all personal data associated with the account within 30 days.
If you have reason to believe that a minor has registered on our platform, please notify us immediately at [email protected] or via live chat. We take this matter extremely seriously.
The POA88 platform integrates with various third-party services to deliver its full functionality. These include payment gateway providers (processing MYR transactions via Touch 'n Go, Boost, GrabPay, DuitNow, FPX, and Malaysian bank partners), game content providers (delivering casino and live dealer games), and KYC verification partners.
Each of these third parties operates under its own privacy policy and data handling procedures. While POA88 selects partners who meet high standards of data security and contractually requires them to process data only as instructed, we are not responsible for the privacy practices of third-party entities operating independently of our instructions.
This Privacy Policy does not cover any websites, services, or resources that may be linked to or referenced within the platform. Users who access any third-party service do so at their own risk and are encouraged to review the applicable privacy policies of those services separately.
POA88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable law. Where changes are material — meaning they substantially affect how we use your personal data or your rights over that data — we will provide at least 14 days' advance notice via email to your registered address or via a prominent notice on the platform.
The "Last Updated" date displayed at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the POA88 platform following any update constitutes your acknowledgement of the revised Policy. If you do not agree with any changes, you have the right to close your account by contacting our support team.
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the POA88 Data Privacy team using the following channels:
POA88 takes all privacy enquiries seriously and will acknowledge receipt of any formal data rights request within two (2) business days.
Six principles that define how POA88 handles your personal data every day.
Your personal information is not for sale. POA88 does not share, license, or sell your data to any third party for commercial or marketing purposes outside of delivering our own services to you.
Every piece of data transmitted between your device and POA88 is protected by industry-standard 256-bit SSL/TLS encryption. Sensitive stored data — including KYC documents and financial records — is encrypted at rest.
Access, correct, export, or request deletion of your personal data at any time. POA88 processes all data rights requests within 30 days and makes it straightforward to exercise your rights without unnecessary friction.
We retain personal data only for as long as legally required or operationally necessary. Transaction records and KYC documents are held for a minimum of five years to meet financial compliance obligations, then securely deleted.
POA88 enforces the 21+ age requirement through automated checks and manual KYC review. Any account found to belong to a person under 21 is immediately suspended and all associated personal data is scheduled for deletion within 30 days.
When we make material changes to this Privacy Policy, we give you at least 14 days' advance notice by email or platform notification — not a quiet update buried in a changelog. You always know what's changing before it changes.
Our support team is available around the clock to address any privacy-related questions or data requests. You can also explore our FAQ for quick answers.
🔞 21+ only. Please gamble responsibly. Visit our Responsible Gambling page for support tools and self-exclusion options.