Pusyy Privacy Policy — Data Protection Your Privacy

Pusyy ("we", "Platform", "pusyy.app") is fully committed to protecting the privacy and personal data of every member who uses our platform. This Privacy Policy is drafted in accordance with Malaysia Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

This document transparently and clearly explains how we collect your information during registration and platform use, the purposes for which it is used, who it may be shared with, and the security measures we take to keep your data protected at all times.

This Privacy Policy applies to all information collected through the pusyy.app website, the pusyy mobile app, customer support channels, and any communications related to our services. We encourage you to review this document periodically as it may be updated from time to time.

Pusyy collects your personal data through various means — directly when you register and interact with the platform, and automatically through technologies used in our services. The following are the categories of data we collect:

We only collect data that strictly necessary to provide our services. We do not collect sensitive data such as health information, religious beliefs, or political views unless required by applicable law.

Pusyy uses collected personal data solely for legitimate and stated purposes. We will not use your data for any other purpose without obtaining your consent first. The following are the primary purposes for which your data is used:

• Account management — securely create, verify, and maintain your member account.
• Transaction processing — process deposits, withdrawals, and all financial activities accurately and promptly.
• Identity verification (KYC) — compliant with anti-money laundering (AML) and financial protection legal requirements.
• Service communications — send transaction notifications, account updates, security information, and relevant promotions.
• Service improvement — analyze usage patterns to improve the platform experience and personalize content.
• Fraud prevention — detect and investigate any suspicious activity to protect you and the platform.
• Legal compliance — fulfill reporting and oversight obligations to the relevant authorities.
• Customer Support — resolve complaints, inquiries, and technical issues efficiently.

Pusyy does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, under certain circumstances, we may share necessary information with the following parties:

• Payment processing providers — FPX, DuitNow, Touch 'n Go eWallet, GrabPay, ShopeePay, and other payment gateways required to process your transactions securely.
• Gaming service providers — licensed game software providers that supply casino, bingo, and live game content on our platform.
• Technology service providers — cloud computing, cybersecurity, and identity verification companies that help us operate the platform.
• Enforcement and regulatory authorities — Malaysian or international government authorities when required by law or court order.
• Independent auditors — the game fairness audit and compliance body that verifies the integrity of our operations.

All third parties we work with are required to comply with strict data protection policies and may only use your information for purposes specified in their service agreement with pusyy. We periodically reassess our partners to ensure data protection standards are upheld.

Pusyy invests seriously in data security infrastructure to ensure your personal information is always protected from unauthorized access, disclosure, alteration, or loss. The key security measures we employ are:

• 256-bit SSL encryption — all data transmitted between your device and pusyy servers is encrypted using the highest industry security standards.
• Encryption of data at rest — sensitive data such as passwords and financial information is encrypted using strong hashing and encryption algorithms within our database.
• Two-factor authentication (2FA) — an additional security layer available to all member accounts to prevent unauthorized access.
• Real-time monitoring — a 24/7 threat detection system that automatically identifies and blocks any unauthorized intrusion attempts.
• Internal access controls — only authorized personnel may access members' personal data, and every access is logged for audit purposes.
• Protected server infrastructure — our servers are housed in certified data centers with multi-layered physical and digital protection.
• Regular security testing — penetration testing and security audits are conducted regularly by independent experts.

Pusyy uses cookies and similar tracking technologies to enhance the user experience, understand how our platform is used, and deliver more relevant content. The following are the types of cookies we use:

• Essential cookies — required for core platform functions such as login sessions and security. Cannot be disabled as the platform will not function without them.
• Performance cookies — collect anonymous information about how visitors use the website, such as the most frequently visited pages and time spent. This data is used to improve platform performance.
• Functional cookies — enables the platform to remember your preferences such as language, display settings, and game preferences for a more personalized experience.
• Analytics cookies — used for internal analytics purposes to understand usage patterns and improve our services overall.

You can control or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and experience of the pusyy platform.

Under Malaysia's PDPA and our commitment to data protection best practices, you have the following rights regarding the personal data we hold:

To exercise any of the above rights, contact the pusyy support team via live chat or email at [email protected]. We will process your request within 14 working days from the date of receipt.

Pusyy only retains your personal data for as long as necessary to fulfill the purpose for which it was collected or to comply with applicable legal requirements. The following are general guidelines for our data retention periods:

• Active account data — retained for the duration your account is active and for 5 years after account closure for legal compliance purposes.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's financial reporting legal requirements.
• KYC Documents — retained for 5 years after the business relationship ends, in line with AML requirements.
• Support communication logs — retained for 2 years for reference and dispute resolution purposes.
• Technical data and access logs — retained for 12 months for security and system audit purposes.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-identified.

As a platform operating under an official licence and complying with anti-money laundering (AML) laws, pusyy is required to carry out the process Know Your Customer (KYC) for all members before the first withdrawal is processed.

Pusyy's KYC process is simple, secure, and designed to protect you:

• Upload a valid photo of your ID card or passport (front and back).
• Submit recent proof of address (e.g., bank statement or utility bill within the last 3 months).
• Phone number verification via OTP.
• In certain cases, a selfie with your identification document may be required.

All uploaded documents are transmitted through encrypted connections and stored in a protected environment. These documents will not be shared to any party except law enforcement bodies authorized by law.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our privacy team is ready to assist.

• Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom corner of the pusyy platform
• Response time: Within 3 to 5 working days for privacy-related requests

If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia or the relevant data protection authority in your country.