Privacy Policy

1. Introduction

PPX ("we", "us", "our") operates the online gaming platform accessible at https://ppx.lat. This Privacy Policy ("Policy") describes how PPX collects, uses, stores, protects, and discloses personal data relating to individuals ("you", "Player", "User") who access or use our platform, including all associated services, features, and content.

This Policy applies to all personal data processed in connection with your use of PPX — whether you are a registered player, a prospective user browsing the platform, or an individual who contacts our support team. By using the PPX platform, you acknowledge that you have read and understood this Policy.

PPX is committed to handling all personal data responsibly, in accordance with applicable data protection laws. We process data only for legitimate purposes, retain it no longer than necessary, and apply appropriate technical and organisational safeguards at all times.

2. Definitions

The following terms carry specific meanings throughout this Privacy Policy:

3. Personal Data We Collect

PPX collects Personal Data through several channels — directly from you when you register or interact with the platform, automatically as you use our services, and occasionally from third-party verification partners. The categories of Personal Data we collect include:

3.1 Registration & Identity Data

3.2 Financial & Transaction Data

Financial data collected in connection with payment processing (via Maybank, CIMB, Public Bank, Touch'n Go eWallet, DuitNow, FPX, or other channels) is handled in accordance with the relevant payment provider's own security standards. PPX does not store full card numbers on our systems.

3.3 Usage & Technical Data

3.4 Communications Data

When you contact our support team — whether via live chat, email at[email protected], or WhatsApp — we retain records of that communication, including the content of messages, timestamps, and any attachments, for a period consistent with this Policy's retention provisions.

4. How We Use Your Personal Data

PPX processes Personal Data only for purposes that are legitimate, proportionate, and clearly communicated. The specific purposes for which we use your data include:

PPX does not use your Personal Data to build marketing profiles for external advertisers or to target you with advertising on third-party platforms without your prior explicit consent.

5. Legal Basis for Processing

Every processing activity conducted by PPX is grounded in at least one lawful basis. The primary legal bases we rely on are:

• Contractual Necessity: Processing your registration data, transaction history, and KYC information is necessary to perform our contract with you — i.e., to provide you with access to the PPX platform and process your deposits and withdrawals.
• Legal Obligation: Certain processing activities — particularly those related to identity verification, anti-money laundering checks, and record-keeping — are required by applicable law.
• Legitimate Interests: PPX processes usage and technical data on the basis of legitimate interests, including platform security, fraud prevention, and service improvement. We ensure that our legitimate interests do not override your fundamental rights and freedoms.
• Consent: Where we rely on consent — for example, for optional marketing communications — you may withdraw your consent at any time by contacting our support team or adjusting your account preferences, without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

PPX does not sell your Personal Data. We may share your data with carefully selected third parties only in the circumstances described below:

• Payment Processors: Where necessary to process deposits or withdrawals, we share transaction-relevant data with authorised payment providers — including banks such as Maybank, CIMB, and Public Bank, and e-wallet services such as Touch 'n Go eWallet, Boost, and DuitNow. These processors are contractually bound to maintain equivalent data security standards.
• Identity Verification Providers: Third-party KYC and age verification services may receive identity documents submitted during account registration. These providers act as Data Processors under our instructions and may not use the data for their own purposes.
• Game Technology Providers: Game providers whose titles appear on the PPX platform may receive session and gameplay data required to operate their software. This data does not include your full identity unless specifically required for a game feature you have opted into.
• Legal & Regulatory Authorities: PPX will disclose Personal Data to competent authorities — including law enforcement agencies and financial regulators — where required to do so by law or a valid legal process, without prior notice to the affected player where legally mandated.
• Fraud Prevention Networks: In cases of suspected fraud or money laundering, relevant data may be shared with industry fraud prevention bodies for the purpose of protecting the integrity of the wider financial and gaming ecosystem.

7. Data Retention

PPX retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. Our general retention approach is as follows:

• Active Account Data: Retained for the duration of your account relationship with PPX, plus a period of up to five (5) years following account closure, to meet anti-money laundering and fraud prevention obligations.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years in line with standard financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for the duration of the account and for up to five (5) years post-closure, or longer where legally required.
• Support Communications: Records of support interactions are retained for up to three (3) years to facilitate dispute resolution and service quality review.
• Usage & Technical Logs: Session and technical data are retained for up to twelve (12) months for security monitoring and platform analytics purposes.

Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in manner that prevents re-identification.

8. Security Measures

PPX employs a multi-layered approach to data security, combining technical controls with organisational policies and staff training. Our security measures include:

• Transport Encryption: All data exchanged between your device and PPX servers is encrypted using TLS 1.2 or higher (256-bit SSL), ensuring that your credentials, payment data, and personal information cannot be intercepted in transit.
• Access Control: Access to personal data within PPX is restricted on a strict need-to-know basis. Staff access is controlled via role-based permissions, and all access events are logged and audited.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) for their accounts. PPX supports 2FA as an additional layer of login security.
• Infrastructure Security: Our platform operates on enterprise-grade server infrastructure with continuous monitoring, automated intrusion detection, and regular penetration testing by qualified security professionals.
• Data Minimisation: We collect and retain only the Personal Data that is genuinely necessary for the stated purposes, reducing the overall risk profile of our data holdings.

While PPX takes all reasonable steps to protect your Personal Data, no digital platform can guarantee absolute security. Players are responsible for keeping their own login credentials confidential and for taking appropriate precautions on their personal devices.

9. Cookies & Tracking Technologies

PPX uses cookies and similar tracking technologies to ensure the platform functions correctly and to help us understand how it is being used. The types of cookies we deploy are:

• Essential Cookies: Required for the platform to function. These include session management cookies that keep you logged in across pages, and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing your ability to use the platform.
• Analytics Cookies: Used to collect aggregated, anonymised data on how players navigate the platform — for example, which pages are visited most frequently and where users encounter friction. This data helps us improve the PPX experience over time.
• Preference Cookies: Store your platform settings and preferences, such as language selection and notification preferences, so you do not need to re-configure them on each visit.
• Security Cookies: Help detect fraudulent login attempts and suspicious behaviour patterns, contributing to the overall security posture of the platform.

PPX does not use third-party advertising or cross-site tracking cookies. You can control or delete cookies through your browser settings; however, disabling essential cookies may significantly affect your ability to use certain platform features.

10. Your Data Rights

As a data subject whose Personal Data is processed by PPX, you are entitled to exercise the following rights. Requests should be submitted via our support channels, and PPX will respond within 30 days of receipt:

To exercise any of the above rights, please contact us at [email protected] or via our24/7 live chat. We may need to verify your identity before processing a request. If you are dissatisfied with our response, you have the right to escalate your complaint to a relevant data protection authority.

11. Minors and Age Restrictions

The PPX platform is strictly for individuals aged21 years and above. We do not knowingly collect, process, or retain the Personal Data of anyone under 21 years of age. Age verification is a mandatory step during account registration.

If PPX becomes aware that Personal Data has been collected from a person under the age of 21 without verified parental or guardian consent, we will take immediate steps to delete that data and close the associated account. All deposited funds in such cases will be returned via the original payment method where possible.

Parents or guardians who believe that a minor may have accessed or registered on PPX should contact us immediately at [email protected] so that we can take appropriate action without delay.

12. International Data Transfers

PPX primarily processes and stores data within secure infrastructure serving the Malaysian market. In some circumstances — for example, where a third-party service provider operates servers in a different jurisdiction — your Personal Data may be transferred to or processed in a country outside Malaysia.

Where such transfers occur, PPX takes appropriate steps to ensure that your Personal Data receives an equivalent level of protection, including by:

• Ensuring the recipient country offers an adequate level of data protection as recognised by applicable law.
• Implementing contractual clauses that require the recipient to maintain data protection standards consistent with this Policy.
• Conducting due diligence on all third-party processors to assess their security posture and data handling practices before onboarding.

13. Amendments to This Policy

PPX reserves the right to update, revise, or amend this Privacy Policy at any time. Where material change is made to how we process your Personal Data, we will provide advance notice via:

• An email notification to the address registered on your account, where the change is significant; and/or
• A prominent notice displayed on the PPX platform homepage and relevant pages.

The "Last Updated" date displayed at the top of this page reflects the most recent revision. Your continued use of the PPX platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment, you must discontinue use and request account closure through our support channels.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how your Personal Data is being handled, please reach out to our Data Support team through any of the following channels:

We aim to respond to all privacy-related requests within 30 calendar days of receipt. Where a request is particularly complex, we may extend this period by a further 30 days and will notify you accordingly.