Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how p200m ("we", "us", "our", "the Platform") collects, uses, processes, stores, and discloses the personal data of users ("you", "your", "User", "Player") who access or use the services available at p200m.buzz (the "Website") and any associated mobile-optimised interfaces.

p200m is committed to handling personal data responsibly, transparently, and in accordance with applicable international data protection standards. We have designed this Policy to be readable and substantive — not a document full of impenetrable legal boilerplate. We want our players, including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam, to genuinely understand how their data is handled.

By registering an account, making a deposit, or otherwise using the p200m platform, you acknowledge that you have read this Policy and consent to the data processing practices described herein. If you do not agree to this Policy, you must not use the platform. This Policy forms part of our overall Terms & Conditions.

Definitions

The following terms are used throughout this Policy with the meanings set out below:

Data We Collect

p200m collects the following categories of personal data from Users:

3.1 Registration & Identity Data

• Full legal name (as it appears on your identity document)
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Malaysian mobile phone number
• Chosen username and hashed password
• Residential address (Malaysian city/postcode)

3.2 Identity Verification (KYC) Data

• Scanned copy of Malaysian Identity Card (MyKad — front and back) or passport
• Proof of residential address (utility bill, bank statement)
• Proof of payment method ownership (where requested)
• Selfie photograph (where biometric verification is required)

3.3 Financial & Transaction Data

• Deposit and withdrawal history (amounts, dates, payment methods)
• Payment method identifiers (e.g., truncated bank account numbers, last 4 digits of card, Touch 'n Go eWallet account reference — we do not store full card numbers)
• Cryptocurrency wallet addresses used for deposits or withdrawals
• Wagering history (game type, stake amount, outcome, timestamp)

3.4 Technical & Usage Data

• IP address and geolocation (country/city level)
• Browser type and version
• Device type, operating system, and screen resolution
• Session duration, pages visited, and clickstream data
• Referring URL

3.5 Communication Data

• Records of live chat, email, and support ticket correspondence between you and the p200m support team
• Records of any complaints or formal disputes submitted
• Marketing communication preferences and opt-in/opt-out records

How Personal Data Is Collected

p200m collects personal data through the following mechanisms:

• Direct submission: Data you actively provide during account registration, the KYC process, deposit and withdrawal requests, and when contacting support.
• Automated collection: Technical and usage data collected automatically when you browse or interact with the platform, via server logs, cookies, and similar tracking technologies.
• Third-party sources: Identity verification data cross-referenced or provided by our KYC verification partner; fraud risk scores provided by our fraud prevention service provider; payment confirmation data from payment processors including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank.
• Publicly available sources: In limited circumstances related to fraud prevention or regulatory compliance, p200m may reference publicly available information (e.g., sanctions lists, politically exposed persons registers).

Lawful Basis for Processing

p200m processes personal data only where a valid lawful basis exists. The primary lawful bases applicable to our processing activities are:

How We Use Your Personal Data

p200m uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and securing your p200m account; processing login sessions; enabling password recovery.
• Identity verification: Confirming you are aged 21 or above; verifying the accuracy of the registration information you have provided; fulfilling our KYC obligations under our operating licence.
• Payment processing: Facilitating deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong, and other participating banks), cryptocurrency wallets, and card payments; processing withdrawal requests to the payment method registered to your account.
• Service delivery: Enabling access to casino games, sportsbook markets (including Liga Super Malaysia, EPL, and UFC), live dealer games, and all other platform features.
• Fraud prevention and security: Detecting and preventing unauthorised account access, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• Responsible gambling: Monitoring player activity for indicators of problem gambling; processing requests for deposit limits, self-exclusion, and cooling-off periods; enforcing self-exclusion where requested.
• Customer support: Responding to enquiries, complaints, and disputes submitted via live chat, email, or our ticketing system.
• Marketing (where consented): Sending promotional emails, bonus offers, and platform updates to Users who have opted in to receive such communications.
• Legal and regulatory compliance: Responding to lawful requests from regulatory authorities; maintaining records as required by applicable laws and our operating licence conditions.
• Platform improvement: Analysing aggregated usage data to understand how players interact with p200m and to make informed decisions about new features and improvements.

Data Sharing & Third-Party Disclosure

p200m does not sell, rent, or trade your personal data. We share personal data with third parties only in the following circumstances and only to the extent strictly necessary:

7.1 Payment Processors

Personal data necessary to initiate and confirm deposit and withdrawal transactions is shared with the relevant payment service providers, including operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank integrations, Visa/Mastercard acquirers, and cryptocurrency payment gateways. These providers are contractually prohibited from using your data for any purpose other than processing the transaction.

7.2 KYC & Identity Verification

Identity documents and biometric verification data submitted during KYC are processed by our contracted identity verification service provider. All such providers are bound by strict data processing agreements and are prohibited from retaining your documents beyond the verification period or using them for any other purpose.

7.3 Fraud Prevention & Compliance

Where legally required or where we have a legitimate interest in preventing financial crime, p200m may share limited data with fraud prevention networks, credit reference agencies, and regulatory bodies. This may include sharing data with international sanctions screening services to ensure compliance with applicable anti-money laundering requirements.

7.4 Group Companies & Technology Providers

Data may be processed by affiliated group companies and cloud infrastructure providers that support the technical operation of the p200m platform. All such entities process data under strict contractual obligations consistent with this Policy.

7.5 Legal Requirements

p200m may disclose personal data where required to do so by law, court order, or the lawful direction of a competent regulatory authority. We will, where legally permissible, notify affected Users of such requests.

Cookies & Tracking Technologies

p200m uses cookies and similar tracking technologies on the Website. The categories of cookies we use are:

• Strictly necessary cookies: Required for the platform to function correctly. These include session cookies that maintain your login state and security tokens. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences, such as language settings, preferred payment method, and display settings. These persist between sessions.
• Analytics cookies: Used to understand how Users interact with the platform — which pages are visited most frequently, where players navigate, and how session length correlates with game type. Data collected is aggregated and anonymised where possible.
• Marketing cookies (with consent only): Used to measure the effectiveness of our promotional campaigns and, where you have consented, to deliver relevant advertisements. These cookies may be set by third-party ad networks under data processing agreements with p200m.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may impair the functionality of the p200m platform. Most modern browsers allow you to view, block, and delete cookies stored on your device.

Data Retention

p200m retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable law and our operating licence conditions. The following indicative retention periods apply:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

Data Security

p200m implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These include:

• TLS 1.3 encryption for all data in transit between your browser/device and our servers;
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records;
• Access control policies ensuring that only authorised personnel with a legitimate business need can access personal data — and only to the extent required by their role;
• Two-factor authentication (2FA) enforced for all internal staff systems;
• Regular security audits and penetration testing conducted by independent third-party security specialists;
• Intrusion detection systems and real-time monitoring of our infrastructure for anomalous activity;
• A documented data breach response procedure in place, including notification obligations.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, p200m will notify affected Users as soon as reasonably practicable and in accordance with applicable notification requirements.

Your Data Rights

You have the following rights in respect of the personal data p200m holds about you. To exercise any of these rights, please contact us at the details provided in Section 15:

To submit a data rights request, email us at [email protected] with the subject line "Data Rights Request — [Your Account ID]". We will verify your identity before processing any request. We respond to all verified requests within 30 calendar days. Complex requests may require up to 90 days; we will notify you of any extension within the initial 30-day period.

Minors & Age Policy

p200m's platform is strictly intended for persons aged 21 years or older. We do not knowingly collect, process, or retain the personal data of individuals under the age of 21.

Age verification is a mandatory step in our registration process and is enforced through our KYC procedures. Any account found to be held by a person under the age of 21 will be immediately closed, all balances forfeited, and the incident reported to our compliance team.

If you are a parent or guardian and believe that a minor has created an account on p200m and provided personal data, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action, including immediate account closure and erasure of any personal data associated with the account.

Cross-Border Data Transfers

p200m's platform infrastructure, third-party service providers, and data storage may involve the transfer of personal data to countries outside of Malaysia. Where such transfers occur, p200m takes appropriate steps to ensure that adequate data protection safeguards are in place, including:

• Contractual clauses in data processing agreements with all third-party processors located outside Malaysia, imposing data protection obligations equivalent to those described in this Policy;
• Transfers only to jurisdictions with adequate data protection regimes or with appropriate safeguards in place;
• Use of cloud infrastructure providers that maintain certified security standards (such as ISO 27001 or SOC 2 Type II) and operate under data residency commitments where available.

By using the p200m platform, you acknowledge and consent to the transfer of your personal data as described in this section, where necessary to deliver the services you have requested.

Changes to This Policy

p200m reserves the right to update or amend this Privacy Policy at any time. We will notify registered Users of material changes via the email address associated with their account and/or by displaying a prominent notice on the Website prior to the change taking effect.

We recommend that you review this Policy periodically. The "Effective Date" displayed at the top of this document indicates when the current version came into force. Where changes are non-material (such as minor clarifications or formatting corrections), we may update the Policy without specific notification.

Continued use of the p200m platform following notification of a material change constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the platform and may request account closure.

Contact Us & Data Protection

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data p200m holds about you, please contact us through the following channels:

• Email (Data Rights Requests): [email protected] — Subject line: "Privacy Request — [Your Account ID]"
• General Support Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the p200m Website
• Response Commitment: All privacy-related enquiries acknowledged within 24 hours; substantive response within 30 calendar days

p200m takes all privacy complaints seriously. If you are not satisfied with our response to your privacy concern, you have the right to escalate the matter to the relevant supervisory authority in the jurisdiction applicable to your situation.