Privacy Policy

This Privacy Policy ("Policy") describes how Pondok969 ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of users ("you", "your", "User") who access and use the services available atpondok969.cam and any associated mobile-optimised interfaces or applications (collectively, "the Platform").

Pondok969 is a Malaysia-focused online casino and sports betting platform. As a responsible operator, we recognise that the privacy and security of your personal information is a matter of fundamental importance. We are committed to handling your data with transparency, integrity, and in compliance with applicable data protection principles under the international licensing framework under which we operate.

By registering an account on the Platform, making a deposit, or using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that relates to an identified or identifiable natural person, including but not limited to name, date of birth, email address, phone number, residential address, payment details, and device identifiers.
• "Processing" — any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is pondok969.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller under a contractual arrangement and in accordance with the Data Controller's instructions.
• "Consent" — any freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their personal data for a stated purpose.
• "KYC" — Know Your Customer — the identity verification and documentation process required for account management and withdrawal processing.
• "Cookies" — small text files stored on your device by the Platform to enable certain functions and to gather usage analytics.

The Data Controller responsible for your personal data in connection with your use of the Platform is the operator of pondok969.cam, operating under international online gaming licensing. All requests relating to your personal data should be directed to our customer support team, contact details for which are provided in Clause 16 of this Policy.

Where we engage third-party service providers to process data on our behalf (such as payment processors, identity verification services, and analytics providers), those parties act as Data Processors under written agreements that restrict their use of your data to the purposes instructed by pondok969 and require them to maintain appropriate security measures.

Pondok969 collects various categories of personal data in connection with account registration, ongoing account management, identity verification, financial transactions, and your use of the Platform's services. The categories of data collected are summarised in the table below:

We collect your personal data through the following channels:

• Directly from you — when you complete the account registration form, submit KYC documents, make deposits or withdrawals, contact our support team, or respond to any survey or promotional activity on the Platform.
• Automatically — via cookies, pixel tags, and server-side logging tools that capture technical and usage data as you navigate and interact with the Platform. See Clause 9 for our full Cookies policy.
• From third-party providers — including identity verification services used during KYC processing, payment gateways (such as FPX, DuitNow, and e-wallet providers), fraud detection services, and analytics platforms. All such third parties are contractually bound to provide data only for lawful, specified purposes.
• Publicly available sources — in limited circumstances for fraud prevention or AML screening purposes, we may consult publicly available databases or sanctions lists.

We process your personal data only for defined, legitimate, and proportionate purposes. We do not process personal data in ways that are incompatible with those purposes. The key purposes for which we process your data are as follows:

• Account creation and management — to register your account, verify your identity, and maintain your account in good standing.
• Service delivery — to provide access to games, sports betting markets, live dealer tables, and all other Platform features you use.
• Financial transaction processing — to process deposits via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, and cryptocurrency channels, and to process withdrawal payments to your verified accounts.
• KYC and age verification — to verify that you are aged 21 or above and to meet anti-money-laundering (AML) obligations. This is a mandatory legal requirement and cannot be waived.
• Fraud prevention and security — to detect, prevent, and investigate suspicious activity, unauthorised access, account takeover, and financial fraud.
• Responsible gaming monitoring — to monitor account activity for behavioural patterns consistent with problem gambling and to administer any responsible gaming tools you have activated.
• Legal and regulatory compliance — to comply with the requirements of our international gaming licence, applicable AML obligations, and any lawful requests from competent authorities.
• Customer support — to respond to your queries, complaints, and technical issues via live chat and email.
• Marketing communications — where you have given explicit consent, to send you promotional offers, bonus notifications, and relevant Platform updates. You may withdraw consent at any time.
• Platform improvement — to analyse usage patterns, identify technical issues, and improve the performance and content of the Platform for all users.

Each processing activity is conducted one or more of the following legal bases:

• Contractual necessity — processing required to perform our obligations under the Terms & Conditions you have accepted, including account management, game provision, and payment processing.
• Legal obligation — processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and licensing obligations.
• Legitimate interests — processing conducted to pursue our legitimate business interests (such as fraud prevention, security monitoring, and platform analytics) where those interests are not overridden by your fundamental rights and freedoms.
• Consent — processing for marketing communications and non-essential cookies, carried out only where you have provided explicit and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Pondok969 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only in the limited circumstances described below:

• Payment processors and banking partners — financial institutions, e-wallet providers (including Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX), and cryptocurrency payment infrastructure providers that process your deposit and withdrawal transactions.
• Identity verification providers — third-party KYC service providers who assist in verifying your identity documents and conducting age verification checks.
• Fraud detection and AML screening services — providers of risk management, fraud analytics, and sanctions screening tools used to protect the integrity of the Platform.
• Game content providers — licensed international game studios that power the games available on the Platform may receive certain session data for the purpose of game functioning and fair-play verification. No personally identifiable data beyond what is technically necessary is shared.
• IT and infrastructure providers — cloud hosting, content delivery, and security infrastructure providers that process data on our behalf under strict contractual data processing agreements.
• Legal and regulatory authorities — where we are required by law, court order, or instruction from a competent regulatory authority to disclose data, we will comply. We will, where permissible by law, notify affected users of such disclosures.

Pondok969 uses cookies and similar tracking technologies (including pixel tags and local storage objects) to operate core Platform functions, enhance your experience, and gather analytics data that helps us improve the Platform. The categories of cookies we use are as follows:

• Strictly necessary cookies — essential for the Platform to function. These enable core features such as session management, login state, and security. They cannot be disabled without impairing the Platform's basic operation.
• Functional cookies — used to remember your preferences, such as game settings, language preferences, and UI customisation options, so they persist between sessions.
• Analytics cookies — used to collect aggregated and anonymised data about how users navigate and interact with the Platform. This data is used to improve usability and content. These cookies are activated only with your consent.
• Security cookies — used to identify and mitigate fraudulent activity, bot traffic, and session hijacking attempts.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may impact the functionality of the Platform and some features may become unavailable as a result.

We retain your personal data for as long as is necessary for the purposes for which it was collected, subject to any legal or regulatory retention obligations. The following general retention guidelines apply:

• Active account data — retained for the full duration of your account's active status and for period of at least five (5) years following account closure, in accordance with our licensing obligations.
• Financial transaction records — retained for a minimum of seven (7) years following the date of the transaction, in compliance with standard anti-money-laundering record-keeping requirements.
• KYC documents — retained for a minimum of five (5) years following account closure or the completion of the relevant KYC process.
• Customer support communications — retained for a period of three (3) years following the conclusion of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records — retained for a period of three (3) years from the date of consent, or until consent is withdrawn, whichever is earlier.

Upon the expiry of the applicable retention period, personal data will be securely deleted or anonymised in manner that prevents reconstruction of the original data. Where deletion is not immediately practicable for technical reasons, data will be restricted from active use pending deletion.

Pondok969 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the Platform, including all login sessions and financial transactions;
• Encrypted storage of sensitive personal data and financial records at rest, using industry-standard encryption protocols;
• Strict access controls ensuring that personal data is accessible only to Platform personnel with a legitimate operational need, on a role-based leastprivilege basis;
• Regular security vulnerability assessments and penetration testing conducted by qualified security professionals;
• Automated monitoring systems for detection of anomalous access patterns, brute-force attacks, and session anomalies;
• Two-factor authentication (2FA) available to all registered users as an optional additional security layer for account access.

In the event of a personal data breach that poses a material risk to affected users, pondok969 will notify affected users as soon as practicable and in accordance with the requirements of our licensing framework.

Subject to applicable law and the specific circumstances of your request, you have the following rights in relation to the personal data we hold about you:

To exercise any of the above rights, please contact our support team via live chat or email as detailed in Clause 16. We will respond to valid requests within 30 calendar days, subject to identity verification. In complex cases, this period may be extended by a further 60 days, and you will be notified accordingly.

As an internationally licensed online gaming platform serving users primarily in Malaysia, pondok969 may process and store personal data on servers and through service providers located outside of Malaysia. Some of our third-party Data Processors, including cloud infrastructure providers, identity verification services, and payment gateways, may be located in jurisdictions outside your country of residence.

Where personal data is transferred internationally, we take appropriate measures to ensure that such transfers are conducted lawfully and that your data receives an adequate level of protection. These measures may include contractual data processing agreements incorporating standard data protection clauses, or reliance on the adequate protection level recognised for the destination jurisdiction.

By registering an account and using the Platform, you acknowledge and consent to the transfer of your personal data to international locations as described in this clause, subject to the protections outlined in this Policy.

The Platform is strictly intended for adults aged21 years and above.Pondok969 does not knowingly collect, process, or retain personal data of any person below the age of 21. Our KYC process is specifically designed to identify and prevent underage registration.

If we become aware that personal data has been collected from an individual below the minimum age, we will immediately suspend the associated account, void any transactions, and permanently delete the relevant personal data unless retention is required for legal or investigative purposes.

Pondok969 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, business operations, or applicable regulatory requirements. The "Last Updated" date displayed at the top of this page will be revised to reflect the date of any material change.

Where changes are material in nature — for example, where we introduce a new category of data collection or a new purpose for processing — we will provide advance notice to registered users by posting a prominent notification on the Platform and, where reasonably practicable, by sending a notification to the email address associated with your account.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which pondok969 handles your personal data, please contact us in the first instance via the24/7 live chat facility available on the Platform. This is the fastest route for general queries and account-related requests.

For formal written privacy requests — including subject access requests, erasure requests, and data portability requests — please contact us via email. Note that email is provided as a plain text contact method only:

Where you are not satisfied with our response to a privacy concern, you have the right to escalate the matter through the relevant complaints or supervisory process available under our licensing framework. Details of the applicable escalation pathway will be provided upon request.