Privacy Policy

Data Protection & Privacy
pragmatic Players

Pragmatic takes every aspect of your personal data security seriously. This privacy policy transparently explains how we collect, use, store, and protect your information as a registered player.

Updated: 1 January 2026  |  Effective immediately
🔐
Our Privacy Commitment
256-bit SSL encryption for all data
Data is not sold to third parties
Player data access & deletion rights
Data protection law compliance
Cookie controls & user privacy preferences

Six Pillars Privacy Protection We

Pragmatic builds a multi-layered privacy protection system to ensure your personal data remains safe and in your control at all times.

🔒
Highest-Level Encryption

All data transmitted between your device and pragmatic's servers is protected using 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia. None of your sensitive data travels in plain text.

🛡️
Data Not Sold

Pragmatic has never and will never sell, rent, or transfer your personal data to any third party for marketing or commercial purposes. Your data belongs entirely to you.

👁️
Full Transparency

We clearly explain the types of data collected, the purpose of collection, and the retention period. There is no hidden data collection — you know exactly what we store and why.

⚙️
Control in Your Hands

Through your account settings, you can access, update, export, or request deletion of your personal data at any time. You have full control over your own information.

🍪
Transparent Cookie Management

We use cookies solely to enhance the user experience and for internal analytics. You can manage your cookie preferences at any time through your browser settings without affecting the core functionality of the platform.

📋
Legal Compliance

Pragmatic's privacy policy is built in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, ensuring your rights as a user are always protected.

This Privacy Policy describes the data collection and handling practices of pragmatic ("we", "Platform"). By using pragmatic's services, you agree to the terms set out in this policy. If you do not agree, please stop using the platform and contact us to request account deletion.


1 Personal Data We Collect

In operating a secure and compliant gaming platform, pragmatic collects several categories of personal data from registered players. We only collect data that is genuinely necessary to deliver quality services and meet our legal obligations.

1.1 Personal Identification Data

This includes your full name as per official documents, date of birth, MyKad or passport number, gender and nationality. This data is collected during the registration and KYC verification process to ensure every account is legitimate and belongs to an eligible individual.

1.2 Contact Data

We store your active Malaysian mobile number, email address, and current residential address. Contact data is used for two-factor authentication, transaction notifications, promotional alerts (with your consent), and customer support communications.

1.3 Financial Data

To process deposits and withdrawals, we store bank account information (bank name, account number), registered digital wallet details (Touch 'n Go, Boost), and transaction records. Important: pragmatic does not directly store credit or debit card information — all card transactions are processed through a PCI-DSS certified payment gateway.

1.4 Platform Usage Data

We record your game history, betting activity, wins and losses, and bonus activity. This data is used to maintain accurate records, resolve disputes, and ensure compliance with bonus wagering requirements.

1.5 Technical Data

Automatically, our system records your IP address, browser and device type, operating system, login session information, and cookie data. This technical data helps us detect suspicious login attempts and protect your account from unauthorized access.

Pragmatic never collects biometric data, health data, or other sensitive information unrelated to the operation of the gaming platform.


2 How We Collect Data

Your data is collected through transparent and controlled channels — not through hidden or deceptive means.

Collection Sources Data Type Collection Time
Registration Form Name, email, phone number, date of birth During account registration
KYC Process Identification documents, address, IC/Passport number Before the first withdrawal
Financial Transactions Bank details, deposit/withdrawal records Every transaction
Gaming Activity Betting history, wins, bonus usage During a gaming session
Cookies & Tracking Technologies IP, device, session, site preferences While browsing the platform
Support Contact Conversation records, complaints, requests While contacting support

3 How Your Data Is Used

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for any purpose other than those stated below without obtaining your consent first.

3.1 Service Provision

The primary purpose of data collection is to create and manage your account, accurately process deposits and withdrawals, ensure the security of financial transactions, and provide access to all games and features on the pragmatic platform.

3.2 Legal & Regulatory Compliance

As a responsibly operated gaming platform, we are legally required to verify player identities (KYC), identify and report suspicious money laundering activities (AML), and comply with any lawful requests from the authorities.

3.3 Platform Security

Technical data and gaming activity are used to detect fraud, protect accounts from unauthorised access, identify multi-account usage, and ensure game integrity so that all players are treated fairly.

3.4 Service Improvement

We analyse usage data in aggregate (not at an individual level) to understand platform usage patterns, improve the user experience, enhance technical performance, and develop new features better suited to the needs of Malaysian players.

3.5 Marketing Communications

We only send marketing communications — such as promotional updates and exclusive offers — to players who have given explicit consent to receive such communications. You may withdraw this consent at any time via your account settings.


4 Third-Party Data Sharing

Pragmatic does not sell or transfer your personal data to third parties for their commercial purposes. However, there are limited situations where data sharing is necessary for platform operations:

4.1 Trusted Service Providers

We share necessary data with selected service providers that support platform operations, including payment gateway providers (FPX, DuitNow, e-wallets) to process transactions, cloud service providers that store data with full encryption, licensed game software providers that deliver game content, and customer support platforms to manage enquiries.

All these service providers are bound by strict confidentiality agreements and may only use your data for the specific purposes defined in those agreements.

4.2 Legal Requirements

Pragmatic may disclose personal data if required by a valid court order, an official request from a law enforcement agency, or the requirements of a regulatory body in the course of a legitimate investigation. In such situations, we will disclose only the minimum data necessary.

Pragmatic does not share your personal data with advertising companies, data brokers, third-party analytics firms, or any other commercial entity for their own marketing purposes.


5 Data Storage & Security Measures

5.1 Retention Period

We retain your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Generally, active account records are kept for the duration of the active account plus 7 years after account closure to meet financial regulatory requirements. Technical log data is typically retained for 90 days.

5.2 Technical Security

Pragmatic implements multiple layers of technical security to protect your data:

  • Data encryption in transit using TLS 1.3 and 256-bit SSL
  • Data encryption at rest using AES-256
  • Two-factor authentication (2FA) for account login
  • 24/7 security monitoring by a dedicated cybersecurity team
  • Regular penetration testing by independent security experts
  • Role-based access control — only authorised staff may access sensitive data
  • Encrypted data backups at geographically separate locations

5.3 Incident Response

In the event of any data breach that may affect your personal information, pragmatic is committed to notifying you within 72 hours of becoming aware of the incident, in line with international data protection best practices. We will explain the nature of the breach, the data potentially involved, and the steps being taken.


6 Your Rights as a Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and data protection best practices, you hold the following rights regarding the personal data we maintain:


7 Cookie Policy

Cookies are small text files stored on your device when you visit the pragmatic platform. We use cookies to improve platform functionality and security, not to track your activity outside our platform.

7.1 Types of Cookies Used

Essential Cookies: Required for core platform functions such as maintaining your login session, remembering language preferences, and ensuring security. These cookies cannot be disabled without affecting platform functionality.

Performance Cookies: Collects aggregate information about how players use the platform — such as the most frequently visited pages and error messages encountered — to help us improve platform performance. All such information is anonymised.

Functional Cookies: Remembers your preferences such as display settings and game preferences to deliver a more personalised experience.

7.2 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please refer to your browser's help guide for specific instructions. Note that blocking all cookies may affect your experience on the pragmatic platform.


8 Child Privacy

The pragmatic platform is exclusively for individuals aged 18 and above. We do not intentionally collect any personal data from minors. If we discover that data belonging to a minor has been collected, we will promptly delete that data and close the account in question.

If you are a parent or guardian and believe your child has registered on our platform, please contact our support team immediately via live chat so we can take the appropriate action.


9 Links to Third-Party Platforms

The pragmatic platform uses third-party services required for operations, such as licensed game providers and payment gateways. While we select these third-party partners carefully and ensure they comply with high data security standards, pragmatic is not responsible for the privacy practices of those third parties. We encourage you to read the privacy policy of the relevant service provider if you wish to understand their data practices in greater detail.


10 Privacy Policy Updates

Pragmatic reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments. Whenever the Privacy Policy is updated, the "Updated" date at the top of this page will be changed to reflect the most recent update.

For updates involving significant changes to how we use your data, we will notify you via in-platform notifications or your registered email. We encourage you to review this Privacy Policy periodically to stay informed on how we protect your information. Continued use of the pragmatic platform after any update constitutes acceptance of the new terms.

For any inquiries regarding this Privacy Policy or to exercise your rights in relation to your personal data, please contact our Data Protection Officer via live chat or the support email listed at the bottom of this page.

Relevant Player Rights Personal Data

As a pragmatic player, you hold the following rights, which can be exercised at any time by contacting our team.

Right of Access

You have the right to receive a copy of the personal data we hold about you. Requests will be processed within 14 business days.

Right to Rectification

If your data is inaccurate or outdated, you have the right to request a correction via your account settings or customer support.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing a reason.

Right to Data Portability

You have the right to receive your data in a machine-readable format and transfer it to another service provider if needed.

Right to Restrict Processing

In certain situations, you may request that we restrict the processing of your data while a dispute is being resolved.

Frequently Asked Questions About Data Privacy

Answers to the most frequently asked questions about data protection and privacy on the pragmatic platform.

Not at all. pragmatic has never and will never sell, rent, or transfer your personal data to any advertiser, data broker, or commercial third party. Your data is only shared with operational service providers bound by strict confidentiality agreements, or when required by law.

To request a copy of your personal data or account deletion, contact our support team via the live chat in the platform. Clearly state the type of request you are making. Data access requests will be processed within 14 business days, while deletion requests will be processed within 30 business days, subject to legal retention requirements.

When your account is closed, we will immediately deactivate your access. Your personal data will be retained for the period required under Malaysia's financial and anti-money laundering laws — typically 7 years — before being permanently deleted. This is a legal requirement, not solely a pragmatic decision.

No. pragmatic does not store credit or debit card information directly on our servers. All card payments are processed by registered payment gateways that comply with PCI-DSS security standards. We only store bank account numbers for the purpose of processing withdrawals via FPX and DuitNow.

Yes, you can opt out of marketing communications at any time. Click the "Unsubscribe" link found at the bottom of any of our promotional emails, or update your communication preferences through your account settings under the "Notifications" section. Please note that important transactional emails such as deposit confirmations and security notifications cannot be disabled as they are essential to your account security.

pragmatic employs several layers of security: two-factor authentication (2FA) via SMS or an authenticator app, real-time monitoring of unusual login activity, instant notifications for logins from new devices or locations, login attempt limits to prevent brute-force attacks, and password encryption using the bcrypt algorithm. We recommend enabling 2FA and using a strong, unique password for your pragmatic account.

Register an Account & Enjoy Full Data Protection

Now that you understand our Privacy Policy, you can play with greater confidence. pragmatic ensures every aspect of your personal data is protected with the latest encryption technology. Register today and enjoy a safe, fair, and responsible gaming experience.

Your Data, Your Control
Access, update, or delete your personal data at any time through your account settings.
Secure & Encrypted Transactions
All deposits and withdrawals are processed through PCI-DSS compliant payment gateways.
24/7 Privacy Support
Our team is ready to assist with any enquiries regarding your privacy and data security.
Bahasa Melayu